{"report_id":"f212c2a7-fd9e-4037-8ab6-b62deef248a3","version":0,"status":"done","tags":[],"date":"2026-09-22T10:17:52Z","url":{"schema":"http","addr":"thinkingoutsidethebucket.com/","fqdn":"thinkingoutsidethebucket.com","domain":"thinkingoutsidethebucket.com","tld":"com"},"ip":{"addr":"104.21.1.3","port":0,"asn":13335,"as":"Cloudflare, Inc.","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"thinkingoutsidethebucket.com/","fqdn":"thinkingoutsidethebucket.com","domain":"thinkingoutsidethebucket.com","tld":"com"},"title":"Les Rencontres Économiques - 3-4-5 juillet 2025","dom":{"size":352004,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (12112)","md5":"f1ff56e0943d3807977b4c838ca2b432","sha1":"094a47ebdbd9c9caae5971f47e77a89f470e555e","sha256":"9bc7de7a6c40f527a2460ce7a74a2d5f60d9ace953e588762360ca81b034d544","sha512":"f39d4c42f1cd0572fc20941f04f8c775834402d04431c55a8da9fdca4d12a9905a3817da4bd8cca45d0cabd43022174356054445f1ea2c2ffed03033ef9bd32b","ssdeep":"3072:72LgkBgZ6TiIgsJSOVCiBa2zdxWTDLZv2+io+60IROitOmxGqPzrEl5pFDo+iY+t:2gIk6W7lmvE","tlshash":"cd741213e761513efd27666a27bc969c62797d42dc10abe5f91f20708bd3efe10a2024","dom_hash":"domhash292953eaf691875a466aaf6dd40295cf","first_seen":"2026-06-13T08:37:31.312089Z","last_seen":"2026-09-22T10:17:56.825566Z","times_seen":14,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"thinkingoutsidethebucket.com/","fqdn":"thinkingoutsidethebucket.com","domain":"thinkingoutsidethebucket.com","tld":"com"},"ip":{"addr":"104.21.1.3","port":0,"asn":13335,"as":"Cloudflare, Inc.","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-10-27T10:17:52Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":4}},"detection":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"thinkingoutsidethebucket.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"thinkingoutsidethebucket.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"thinkingoutsidethebucket.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"thinkingoutsidethebucket.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null},"summary":[{"fqdn":"thinkingoutsidethebucket.com","ip":{"addr":"172.67.186.110","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":164,"request_count":41,"received_data":986798,"sent_data":22910,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"WPML:4.7.2","description":"WPML plugin makes it possible to build and run fully multilingual WordPress sites.","website":"https://wpml.org/","common_platform_enumeration":"","icon":"WPML.svg","categories":["WordPress plugins","Translation"]},{"name":"Yoast SEO:24.8","description":"Yoast SEO is a search engine optimisation plugin for WordPress and other platforms.","website":"https://yoast.com/wordpress/plugins/seo/","common_platform_enumeration":"","icon":"Yoast SEO.png","categories":["SEO","WordPress plugins"]},{"name":"WordPress:6.7.2","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"Google Tag Manager","description":"Google Tag Manager is a tag management system (TMS) that allows you to quickly and easily update measurement codes and related code fragments collectively known as tags on your website or mobile app.","website":"https://www.google.com/tagmanager","common_platform_enumeration":"","icon":"Google Tag Manager.svg","categories":["Tag managers"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}]},{"fqdn":"www.lesrencontreseconomiques.fr","ip":{"addr":"51.75.198.185","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"domain_registered":"2010-03-18","domain_rank":2665262,"first_seen":"2025-08-20T19:49:16.8472Z","last_seen":"2026-09-22T09:54:19.521609Z","alert_count":0,"request_count":5,"received_data":32253,"sent_data":3087,"comment":"","tags":null,"fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"thinkingoutsidethebucket.com/","fqdn":"thinkingoutsidethebucket.com","domain":"thinkingoutsidethebucket.com","tld":"com"},"ip":{"addr":"172.67.186.110","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"e46459d16fc3059f49d0919bb7d08e7c","sha1":"13e73ce7af41556268d13223ab5f8d577d72434e","sha256":"2afe963c4f48c51c6ba5f7bf45ad538cb62be6cc1d8fab1326da5b211a5849de","sha512":"56040bbe89a8a9c1e9090541da86e63fce4824e5a0a4e33e329964893593480d348ca5ea2b336da1def83a8c4436f7bc1baa2b67ebed455b219dd30e91e9015c","ssdeep":"","tlshash":"e6d02236d31024b1541ba2a2e15ab280acb0209a7412b802c80880cecb88a21b8b7c87","size":195,"data":"","first_seen":"2026-06-13T08:37:31.354641Z","last_seen":"2026-09-22T10:17:56.857952Z","times_seen":15,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"thinkingoutsidethebucket.com/lander/black_hole_sun_goal_point/icon.css","fqdn":"thinkingoutsidethebucket.com","domain":"thinkingoutsidethebucket.com","tld":"com"},"ip":{"addr":"172.67.186.110","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thinkingoutsidethebucket.com/","date":"2026-09-22T10:17:22.945Z","timestamp":1790072242945,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thinkingoutsidethebucket.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 17 Aug 2026 16:20:47 GMT","end":"Sun, 15 Nov 2026 17:20:45 GMT"},"fingerprint":{"sha1":"31:D1:4C:C2:43:2B:3F:80:20:E9:8E:B1:74:AE:EE:22:C8:77:BD:D9","sha256":"12:37:00:91:E3:0C:F6:E7:15:A3:22:15:85:8C:7B:62:3B:E2:F6:3D:C1:3B:B7:44:F4:ED:A8:2D:12:BF:A9:9D"}}},"request":{"raw":"GET /lander/black_hole_sun_goal_point/icon.css HTTP/1.1\r\nHost: thinkingoutsidethebucket.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://thinkingoutsidethebucket.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 22 Sep 2026 10:17:23 GMT\r\ncontent-type: text/css\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QRYB77iHUg8GR91Og2KkOK%2FrFbOPa7lL8XcGiHETPlf%2FdM44fm8Tsb4ucX%2BjPHQDnUSHCLupgqkPA3JU4JRIKJayMpjna%2BFSThauIadICD79MIcxYI6F362qlaL2LlEkOBN5VR3cs3rso0eUhWgH\"}]}\r\nlast-modified: Thu, 04 Jun 2026 08:54:48 GMT\r\npriority: u=2,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Wed, 30 Sep 2026 21:33:31 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\netag: W/\"6a213d58-1ea\"\r\nage: 132231\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a3f08f3e6ff656c3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":490,"size_decoded":1057,"mime_type":"text/css","magic":"ASCII text","md5":"f9688757a48eb4eb40e1b2ea6dbac5d3","sha1":"6faeb30e3f35a1822bcf3ecef80ac8313bc04b42","sha256":"27899dd44ce1ad3c6c90b043f20f84913a8e3fd27744fd08b9b622aa198e13c9","sha512":"c4c68e868ee4dd3006cebc4b19b71320bae6ddf3549be2c7e9904b042b4b8461d4ee8f3f2b6569dbf622037156a831c966769ef17a49b7c98789a7b83e76b533","ssdeep":"","tlshash":"17f02e187d99594555210c15334f3f251e1c501ba406c8fd4b521d0cddfb97b53d670f","first_seen":"2023-04-24T14:38:56Z","last_seen":"2026-09-22T10:17:56.82666Z","times_seen":35,"resource_available":true,"data":null}},"time_used":68,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":68,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"thinkingoutsidethebucket.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"thinkingoutsidethebucket.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"thinkingoutsidethebucket.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"thinkingoutsidethebucket.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thinkingoutsidethebucket.com/lander/black_hole_sun_goal_point/css-1.css","fqdn":"thinkingoutsidethebucket.com","domain":"thinkingoutsidethebucket.com","tld":"com"},"ip":{"addr":"172.67.186.110","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thinkingoutsidethebucket.com/","date":"2026-09-22T10:17:23.183Z","timestamp":1790072243183,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thinkingoutsidethebucket.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 17 Aug 2026 16:20:47 GMT","end":"Sun, 15 Nov 2026 17:20:45 GMT"},"fingerprint":{"sha1":"31:D1:4C:C2:43:2B:3F:80:20:E9:8E:B1:74:AE:EE:22:C8:77:BD:D9","sha256":"12:37:00:91:E3:0C:F6:E7:15:A3:22:15:85:8C:7B:62:3B:E2:F6:3D:C1:3B:B7:44:F4:ED:A8:2D:12:BF:A9:9D"}}},"request":{"raw":"GET /lander/black_hole_sun_goal_point/css-1.css HTTP/1.1\r\nHost: thinkingoutsidethebucket.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://thinkingoutsidethebucket.com/lander/black_hole_sun_goal_point/style-variation.css\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 22 Sep 2026 10:17:23 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 04 Jun 2026 08:54:48 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BMiq9OqzVivGGnHXcBWx2Ck8DMyuHWQitV0GDZBnFavY3Oofrzy1q6caRPUZs67kNFC7JSsAfFSy7W2Jfpxml3b8FAnnwpvp%2FkRIONOdRUoVNXr5YKstlIZKPUJkT2lahC4qvvdEZcer0AIqLTcZ\"}]}\r\npriority: u=2,i=?0\r\netag: W/\"6a213d58-6dd8\"\r\nexpires: Wed, 30 Sep 2026 21:33:31 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nvary: accept-encoding\r\nage: 132231\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3f08f3fe86456c3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":28120,"size_decoded":2678,"mime_type":"text/css","magic":"ASCII text, with very long lines (1572)","md5":"83e66cdfac115f99452547416204728f","sha1":"9be103b7975cef1750fd85eeb9c31bdf41d76a5d","sha256":"3d36833ca729e5ee0eabc82ad13f75569a2c208ecc6899970613f70f0cb99c5e","sha512":"932a4b6dd2006a061e0e17481b58876d4ffc5df7de3131e47c3dfa2e7a399beed9315ae22116ecfc83849f2f57962735c2680c5fb725cd825c09af4cd85b90f8","ssdeep":"192:fnP8hPS9cq4WbqGIwV4Gs+pSnK1QPXEcqJWbqGIwV4jl+YUnM/ePNCcqDWbqGIw8:PzJqY49uUqY4wM2qY4ZHlqY41SAqY4f","tlshash":"56c2f990002b2400a3574ce5638e7f35ee5ea261a148d1792ffd875beedbca063b535d","first_seen":"2026-06-13T08:37:31.326457Z","last_seen":"2026-09-22T10:17:56.827506Z","times_seen":20,"resource_available":true,"data":null}},"time_used":53,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":53,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"thinkingoutsidethebucket.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"thinkingoutsidethebucket.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"thinkingoutsidethebucket.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"thinkingoutsidethebucket.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thinkingoutsidethebucket.com/lander/black_hole_sun_goal_point/6xKydSBYKcSV-LCoeQqfX1RYOo3i54rwlxdu.woff2","fqdn":"thinkingoutsidethebucket.com","domain":"thinkingoutsidethebucket.com","tld":"com"},"ip":{"addr":"172.67.186.110","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://thinkingoutsidethebucket.com/","date":"2026-09-22T10:17:23.293Z","timestamp":1790072243293,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thinkingoutsidethebucket.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 17 Aug 2026 16:20:47 GMT","end":"Sun, 15 Nov 2026 17:20:45 GMT"},"fingerprint":{"sha1":"31:D1:4C:C2:43:2B:3F:80:20:E9:8E:B1:74:AE:EE:22:C8:77:BD:D9","sha256":"12:37:00:91:E3:0C:F6:E7:15:A3:22:15:85:8C:7B:62:3B:E2:F6:3D:C1:3B:B7:44:F4:ED:A8:2D:12:BF:A9:9D"}}},"request":{"raw":"GET /lander/black_hole_sun_goal_point/6xKydSBYKcSV-LCoeQqfX1RYOo3i54rwlxdu.woff2 HTTP/1.1\r\nHost: thinkingoutsidethebucket.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://thinkingoutsidethebucket.com/lander/black_hole_sun_goal_point/css2.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 22 Sep 2026 10:17:23 GMT\r\ncontent-type: font/woff2\r\nserver-timing: cfExtPri\r\nlast-modified: Thu, 04 Jun 2026 08:54:48 GMT\r\npriority: u=3,i=?0\r\netag: \"6a213d58-39e8\"\r\nexpires: Fri, 02 Oct 2026 09:44:47 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 1955\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RdlNZQYDxqHyXnAkoxQrFTbuwaVU6%2BCFngbAUO92ySGGHl%2FX9eexudTRa5gbh4LPcLIkz%2BfHrh82Og9AF7BI%2Fp6nvzfseq8qPcEbpk%2Bft1V85%2Fup8HyUFBZiFGoct0XdBx10srDOlFgfN%2FjFYADj\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3f08f40987456c3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 14824\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14824,"size_decoded":15622,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 14824, version 1.0","md5":"48598bad30f08e1c3eb3d0e69b420bd5","sha1":"28c2cf160273c2062f909a875c4b4c0541ee2f84","sha256":"ca57b79a870bbf54700730858603a70d79743779c1b059922ec401bfddc5adc9","sha512":"0033327198bd448927a53eada9aed51ed4f8da3c8619eda3b10948f437213f20270c233f7fd403c8c192a05caeed6905a02d8c62ec22b3885a6a7d6c018f737c","ssdeep":"384:9FhwoaJnaNM4+g4PQPq2ORxaT108SURx1qA3VyI6UvrkBxLA0THRTe:ZKaNMQ4oPG4T1FLXzFyZU92Hs","tlshash":"ce62bff3943fd789e6824a58d4ce8ea6c99e04fb0124299cbf731de4e4095d7d28a063","first_seen":"2023-06-07T00:07:48Z","last_seen":"2026-09-23T02:06:38.395397Z","times_seen":13137,"resource_available":false,"data":null}},"time_used":85,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":85,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"thinkingoutsidethebucket.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"thinkingoutsidethebucket.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"thinkingoutsidethebucket.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"thinkingoutsidethebucket.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thinkingoutsidethebucket.com/lander/black_hole_sun_goal_point/6xKydSBYKcSV-LCoeQqfX1RYOo3ig4vwlxdu.woff2","fqdn":"thinkingoutsidethebucket.com","domain":"thinkingoutsidethebucket.com","tld":"com"},"ip":{"addr":"172.67.186.110","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://thinkingoutsidethebucket.com/","date":"2026-09-22T10:17:23.295Z","timestamp":1790072243295,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thinkingoutsidethebucket.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 17 Aug 2026 16:20:47 GMT","end":"Sun, 15 Nov 2026 17:20:45 GMT"},"fingerprint":{"sha1":"31:D1:4C:C2:43:2B:3F:80:20:E9:8E:B1:74:AE:EE:22:C8:77:BD:D9","sha256":"12:37:00:91:E3:0C:F6:E7:15:A3:22:15:85:8C:7B:62:3B:E2:F6:3D:C1:3B:B7:44:F4:ED:A8:2D:12:BF:A9:9D"}}},"request":{"raw":"GET /lander/black_hole_sun_goal_point/6xKydSBYKcSV-LCoeQqfX1RYOo3ig4vwlxdu.woff2 HTTP/1.1\r\nHost: thinkingoutsidethebucket.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://thinkingoutsidethebucket.com/lander/black_hole_sun_goal_point/css2.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 22 Sep 2026 10:17:23 GMT\r\ncontent-type: font/woff2\r\nserver-timing: cfExtPri\r\nlast-modified: Thu, 04 Jun 2026 08:54:48 GMT\r\npriority: u=3,i=?0\r\netag: \"6a213d58-3978\"\r\nexpires: Fri, 02 Oct 2026 09:44:49 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 1953\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BgXenWXZsaxBE%2FJrv6S6YwSwbzA7b6uidQNJGlt4WloN0iRyGGV4Dk8WeeC4XwkBqOcjs%2FZm795gPx%2F666pZ17rUEkCJnESkTfu3db7shNybrY4CNkgSKaud7LhS2PxF10kJv%2Fl1ZunE2TuO4E4a\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3f08f40987656c3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 14712\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14712,"size_decoded":15504,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 14712, version 1.0","md5":"3afeae0d768769f5e5f30ac9805c5b70","sha1":"3ada17c2b462db3e7a1fd85c3f4670dfe7704f4d","sha256":"0d0a6262c545e8bbc895116e5afb22579c468d7abb77e378f377d6fed57c1dce","sha512":"71c361ac0d7b72b222d4f087b46d1bea318ed6652c4d37ec3403f0b0616482b5040232e06f2fcf13109cdf6151dc209e882c0db40b2c6ace4e2e0292fcdcdab5","ssdeep":"384:J1xXvtvezpO6syafJ+CnNcxHGoY/7NazJq:dXvFysJfcqNqmFDNaM","tlshash":"5462c028919ebd49e05e8afc90d03417ee5dcfdaf82d64189354248aae1f3717e176b0","first_seen":"2023-06-06T21:00:07Z","last_seen":"2026-09-23T02:06:38.420535Z","times_seen":18643,"resource_available":false,"data":null}},"time_used":58,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":58,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"thinkingoutsidethebucket.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"thinkingoutsidethebucket.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"thinkingoutsidethebucket.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"thinkingoutsidethebucket.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thinkingoutsidethebucket.com/lander/black_hole_sun_goal_point/TK3IWkUHHAIjg75cFRf3bXL8LICs1_Fv40pKlN4NNSeSASz7FmlWHYg.woff2","fqdn":"thinkingoutsidethebucket.com","domain":"thinkingoutsidethebucket.com","tld":"com"},"ip":{"addr":"172.67.186.110","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://thinkingoutsidethebucket.com/","date":"2026-09-22T10:17:23.299Z","timestamp":1790072243299,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thinkingoutsidethebucket.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 17 Aug 2026 16:20:47 GMT","end":"Sun, 15 Nov 2026 17:20:45 GMT"},"fingerprint":{"sha1":"31:D1:4C:C2:43:2B:3F:80:20:E9:8E:B1:74:AE:EE:22:C8:77:BD:D9","sha256":"12:37:00:91:E3:0C:F6:E7:15:A3:22:15:85:8C:7B:62:3B:E2:F6:3D:C1:3B:B7:44:F4:ED:A8:2D:12:BF:A9:9D"}}},"request":{"raw":"GET /lander/black_hole_sun_goal_point/TK3IWkUHHAIjg75cFRf3bXL8LICs1_Fv40pKlN4NNSeSASz7FmlWHYg.woff2 HTTP/1.1\r\nHost: thinkingoutsidethebucket.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://thinkingoutsidethebucket.com/lander/black_hole_sun_goal_point/css2.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 22 Sep 2026 10:17:23 GMT\r\ncontent-type: font/woff2\r\nserver-timing: cfExtPri\r\nlast-modified: Thu, 04 Jun 2026 08:54:48 GMT\r\npriority: u=3,i=?0\r\netag: \"6a213d58-53c4\"\r\nexpires: Fri, 02 Oct 2026 09:44:38 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 1964\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KlEURfBbARIGgYOJa%2BZatZW4Lrplqx%2F%2BLvxLw4jrlCPVLI%2BrqAyC4i2uOdL8mPcioLmD3JGDqdc9cOSoeihXkx%2BQFm%2F%2F8W4YwE25jtEfhDQFMzHerS%2BU5tmv%2BxTcHxUiKebomldtIjRZAYIrgw4e\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3f08f40a87a56c3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 21444\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":21444,"size_decoded":22246,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 21444, version 1.0","md5":"ffd3d57638a7899d80bcc108713c271c","sha1":"d186409ee24fc3d1cc8194434dd707181ead20ec","sha256":"99027d866818f716d208569108a962ac72200197cae503efe5b6bf002bf4915b","sha512":"7305c344cd8f954929314f3b5c9b996638e57d5f142a327ddc9f42f592880ea30b5102c73ee0e296bb3c4fc21d9fce5d862a492b4bc1127ba2c79c4def527c62","ssdeep":"384:8cEHB0MPPblbQ3jOYVdSj2WvnrFnimhmA4sC1ad7RNwAwEMwdz12N/:LEv5QKYanrFtm8d7Rbwyo/","tlshash":"4ca2e089bf9393d84ccf3b6ca55dc6d5a6ae1ce132ae9732f51ab083158812c921634c","first_seen":"2023-08-18T03:32:07Z","last_seen":"2026-09-22T10:17:56.830055Z","times_seen":4228,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"thinkingoutsidethebucket.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"thinkingoutsidethebucket.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"thinkingoutsidethebucket.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"thinkingoutsidethebucket.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thinkingoutsidethebucket.com/lander/black_hole_sun_goal_point/style-lives.css","fqdn":"thinkingoutsidethebucket.com","domain":"thinkingoutsidethebucket.com","tld":"com"},"ip":{"addr":"172.67.186.110","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thinkingoutsidethebucket.com/","date":"2026-09-22T10:17:22.940Z","timestamp":1790072242940,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thinkingoutsidethebucket.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 17 Aug 2026 16:20:47 GMT","end":"Sun, 15 Nov 2026 17:20:45 GMT"},"fingerprint":{"sha1":"31:D1:4C:C2:43:2B:3F:80:20:E9:8E:B1:74:AE:EE:22:C8:77:BD:D9","sha256":"12:37:00:91:E3:0C:F6:E7:15:A3:22:15:85:8C:7B:62:3B:E2:F6:3D:C1:3B:B7:44:F4:ED:A8:2D:12:BF:A9:9D"}}},"request":{"raw":"GET /lander/black_hole_sun_goal_point/style-lives.css HTTP/1.1\r\nHost: thinkingoutsidethebucket.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://thinkingoutsidethebucket.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 22 Sep 2026 10:17:23 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 04 Jun 2026 08:54:48 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LI2R93bR52ODLP6yVOji4%2BcY23E7A7Wxv8cuGFSibSrnmNVZnmSYjwvQ9X0SshxFOZoEOE%2BZ5ok0E0%2BkPokOzeo5VQqqh3ChRacEvGVDK9HkILNwY0HEubmJrZM4XIPDGyjLIuf2%2B5umQ2S6%2Bxgb\"}]}\r\npriority: u=2,i=?0\r\netag: W/\"6a213d58-3014\"\r\nexpires: Wed, 30 Sep 2026 21:33:31 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nvary: accept-encoding\r\nage: 132231\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3f08f3e6ff256c3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12308,"size_decoded":3187,"mime_type":"text/css","magic":"ASCII text, with very long lines (12308), with no line terminators","md5":"68adb208682ea5467600683a633ffd3e","sha1":"3329486e159fc670c48105c52557b6dcca936adf","sha256":"188680c5680a4a2ea1ea113722ef2911ff754b841ffa9f8c3e98aeb0b1269dec","sha512":"b54801aea12b175a8124d582a7f9e28a3fbbef4e3e0be21c759f8edf66614ac1d6a8850049c80d3b34c37bf280b44e40e764cca8a07dd74d61b8000da836a16f","ssdeep":"96:+890OmZ9lRI+ihRWdADLV4AkfDCMJCZpnc3WkcxZTBdBjDNL2J9Nq:+89alWRNqAkfDCMgZpnc3Wkcx1tR2o","tlshash":"2d42a773741894e97327d023ebc833ac20a8d516b6b7a979e687e879d3c515f03712c9","first_seen":"2026-01-04T19:54:11.014783Z","last_seen":"2026-09-22T10:17:56.830826Z","times_seen":22,"resource_available":true,"data":null}},"time_used":72,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":72,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"thinkingoutsidethebucket.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"thinkingoutsidethebucket.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"thinkingoutsidethebucket.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"thinkingoutsidethebucket.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thinkingoutsidethebucket.com/lander/black_hole_sun_goal_point/header-x-grey.png","fqdn":"thinkingoutsidethebucket.com","domain":"thinkingoutsidethebucket.com","tld":"com"},"ip":{"addr":"172.67.186.110","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://thinkingoutsidethebucket.com/","date":"2026-09-22T10:17:23.133Z","timestamp":1790072243133,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thinkingoutsidethebucket.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 17 Aug 2026 16:20:47 GMT","end":"Sun, 15 Nov 2026 17:20:45 GMT"},"fingerprint":{"sha1":"31:D1:4C:C2:43:2B:3F:80:20:E9:8E:B1:74:AE:EE:22:C8:77:BD:D9","sha256":"12:37:00:91:E3:0C:F6:E7:15:A3:22:15:85:8C:7B:62:3B:E2:F6:3D:C1:3B:B7:44:F4:ED:A8:2D:12:BF:A9:9D"}}},"request":{"raw":"GET /lander/black_hole_sun_goal_point/header-x-grey.png HTTP/1.1\r\nHost: thinkingoutsidethebucket.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://thinkingoutsidethebucket.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 22 Sep 2026 10:17:23 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Thu, 04 Jun 2026 08:54:48 GMT\r\npriority: u=5,i\r\netag: \"6a213d58-2b5\"\r\nexpires: Wed, 30 Sep 2026 21:33:31 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 132231\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AduZUGmvEKOrYKa1hYryI1VMHFET0qMQzJCy7A7kldzki3VPh25Zm%2FuXPJn6dJ7tpgX0HTBzjH%2FY4r8AXIn5p%2Fl59SflQB8BXiuRr%2Fzz8QlRuSb5WwCU882zeiOLAKgqhdH11KMiQEPkJsNUvgF5\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3f08f3f982856c3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 693\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":693,"size_decoded":1480,"mime_type":"image/png","magic":"PNG image data, 22 x 22, 8-bit/color RGBA, non-interlaced","md5":"74681c73ae8fed5b93a0618f6aff60bc","sha1":"96279a09c6cc8eded1cd4d28615d228279c1878d","sha256":"8219f5ef5991d229d5d88a6a495f1d9b18bf49349118c531c284a75f2a83fc26","sha512":"24ea049e3fb6ad002ca8763a4820aee95238a9d5e837db6a30325d82209479bfa8743ac893773b27f4891d223de7b3a17bdaf8d0cf6f7b1abc37330a064b7c81","ssdeep":"","tlshash":"0b0144e12b615c358bac5c320b0a4a82414c92f8157597b266bdaa3538a14d3543c795","first_seen":"2026-01-04T19:54:11.09352Z","last_seen":"2026-09-22T10:17:56.831546Z","times_seen":22,"resource_available":false,"data":null}},"time_used":52,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":52,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"thinkingoutsidethebucket.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"thinkingoutsidethebucket.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"thinkingoutsidethebucket.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"thinkingoutsidethebucket.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thinkingoutsidethebucket.com/lander/black_hole_sun_goal_point/header-in-grey.png","fqdn":"thinkingoutsidethebucket.com","domain":"thinkingoutsidethebucket.com","tld":"com"},"ip":{"addr":"172.67.186.110","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://thinkingoutsidethebucket.com/","date":"2026-09-22T10:17:23.134Z","timestamp":1790072243134,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thinkingoutsidethebucket.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 17 Aug 2026 16:20:47 GMT","end":"Sun, 15 Nov 2026 17:20:45 GMT"},"fingerprint":{"sha1":"31:D1:4C:C2:43:2B:3F:80:20:E9:8E:B1:74:AE:EE:22:C8:77:BD:D9","sha256":"12:37:00:91:E3:0C:F6:E7:15:A3:22:15:85:8C:7B:62:3B:E2:F6:3D:C1:3B:B7:44:F4:ED:A8:2D:12:BF:A9:9D"}}},"request":{"raw":"GET /lander/black_hole_sun_goal_point/header-in-grey.png HTTP/1.1\r\nHost: thinkingoutsidethebucket.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://thinkingoutsidethebucket.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 22 Sep 2026 10:17:23 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Thu, 04 Jun 2026 08:54:48 GMT\r\npriority: u=5,i\r\netag: \"6a213d58-20a\"\r\nexpires: Wed, 30 Sep 2026 21:33:31 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 132231\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ENcCKM1nUIw42AbjlJjJ3zxORYwjNNLmvA8KnW8OiyeDfiI8yB49dFDes60BjHj7b7yMQfQYSkqeWzEthR7o7KHMxyDGRHzo9RN664olzMTSEGeVPfpThc65c%2ByKcqaNF5ELS71JW7kcwcrExiVa\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3f08f3f982c56c3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 522\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":522,"size_decoded":1303,"mime_type":"image/png","magic":"PNG image data, 22 x 22, 8-bit/color RGBA, non-interlaced","md5":"af59a20dbca0a17043a7fa959ab1816a","sha1":"5525bd7fca0c2542bcc7f757c3d660e6dce4496b","sha256":"717657b16fd0b28fa541da56e709aa572b362fa6e14240976fadabb7a6820f1c","sha512":"a79c82aa6475aa6e91964790484d3aa1f035065c97c09c1014097271c5d1175068e3f05683231ca14c8ed491cbe810ae2f924ecd0c05d436d03831a3f7b002e4","ssdeep":"","tlshash":"adf005c734b1541ce2cb1cb17467651ac51ac64b502a503e398e0e79d471a9b5b6d3d3","first_seen":"2026-01-04T19:54:11.041467Z","last_seen":"2026-09-22T10:17:56.832292Z","times_seen":22,"resource_available":false,"data":null}},"time_used":59,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":59,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"thinkingoutsidethebucket.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"thinkingoutsidethebucket.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"thinkingoutsidethebucket.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"thinkingoutsidethebucket.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thinkingoutsidethebucket.com/lander/black_hole_sun_goal_point/bandeau-partenaires-instit-668x132-1-490x97.png","fqdn":"thinkingoutsidethebucket.com","domain":"thinkingoutsidethebucket.com","tld":"com"},"ip":{"addr":"172.67.186.110","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://thinkingoutsidethebucket.com/","date":"2026-09-22T10:17:23.139Z","timestamp":1790072243139,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thinkingoutsidethebucket.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 17 Aug 2026 16:20:47 GMT","end":"Sun, 15 Nov 2026 17:20:45 GMT"},"fingerprint":{"sha1":"31:D1:4C:C2:43:2B:3F:80:20:E9:8E:B1:74:AE:EE:22:C8:77:BD:D9","sha256":"12:37:00:91:E3:0C:F6:E7:15:A3:22:15:85:8C:7B:62:3B:E2:F6:3D:C1:3B:B7:44:F4:ED:A8:2D:12:BF:A9:9D"}}},"request":{"raw":"GET /lander/black_hole_sun_goal_point/bandeau-partenaires-instit-668x132-1-490x97.png HTTP/1.1\r\nHost: thinkingoutsidethebucket.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://thinkingoutsidethebucket.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 22 Sep 2026 10:17:23 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Thu, 04 Jun 2026 08:54:48 GMT\r\npriority: u=5,i\r\netag: \"6a213d58-271e\"\r\nexpires: Wed, 30 Sep 2026 21:33:31 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 132232\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nyPBGh87QWDDV0MsXRSixJf9Ov%2B9KKTn%2FRhTxh173yCimIwdjhVZjW%2BEvGHxJEPVMnold7lBcoIfYvsOcz9aHazq9RROum%2FXC5GaKiW2MDJr4xr4l6tLiTnv9WwNhQRiegGAF9TjgZudNkbmX9xY\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3f08f3fa82e56c3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 10014\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10014,"size_decoded":10804,"mime_type":"image/png","magic":"PNG image data, 490 x 97, 8-bit colormap, non-interlaced","md5":"af8cbe987926e3e707221605cf43d2ef","sha1":"e278a1371da1749059f5387a831b231c17680aab","sha256":"c9db0a4923821f48381f1d109ccf2bc476274135eba2972caf6f2d423f14e736","sha512":"b6fc1307eaf0d725635ce7b129431e5764b7cdc79f3991ecb4f9b623865971345df5be1c308ac708d3798faab45a449f1dd9011a38b0faaf31b43ee0a43a467c","ssdeep":"192:J22X/nr4njJnFwxDloNoT5tkxhYm+VbLooInM3itgpUF7s:JfX/0njJFwRlLkxmm+xLoW3jz","tlshash":"3f22af6919302ca0d0dde03b72da6742b81713790074a6a0fc6f9ddbfbba2345a85dd2","first_seen":"2026-06-13T08:37:31.340145Z","last_seen":"2026-09-22T10:17:56.833165Z","times_seen":20,"resource_available":false,"data":null}},"time_used":91,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":91,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"thinkingoutsidethebucket.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"thinkingoutsidethebucket.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"thinkingoutsidethebucket.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"thinkingoutsidethebucket.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thinkingoutsidethebucket.com/lander/black_hole_sun_goal_point/new-cercle-2023.svg","fqdn":"thinkingoutsidethebucket.com","domain":"thinkingoutsidethebucket.com","tld":"com"},"ip":{"addr":"172.67.186.110","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://thinkingoutsidethebucket.com/","date":"2026-09-22T10:17:23.163Z","timestamp":1790072243163,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thinkingoutsidethebucket.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 17 Aug 2026 16:20:47 GMT","end":"Sun, 15 Nov 2026 17:20:45 GMT"},"fingerprint":{"sha1":"31:D1:4C:C2:43:2B:3F:80:20:E9:8E:B1:74:AE:EE:22:C8:77:BD:D9","sha256":"12:37:00:91:E3:0C:F6:E7:15:A3:22:15:85:8C:7B:62:3B:E2:F6:3D:C1:3B:B7:44:F4:ED:A8:2D:12:BF:A9:9D"}}},"request":{"raw":"GET /lander/black_hole_sun_goal_point/new-cercle-2023.svg HTTP/1.1\r\nHost: thinkingoutsidethebucket.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://thinkingoutsidethebucket.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 22 Sep 2026 10:17:23 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Fr4r6tgZCWEVsNLK8xOtukTaQKO7waa5wWKYUMl3XkZry861CXYn1o18ZZeBoM9HKCY79k8B183HpxQaFhxUArzJhG2NV9pm22pXAsNBWbBBEeih3Ttpf5w4OKKQI7ixTB59Wpc0C%2FjycRoySbin\"}]}\r\nlast-modified: Thu, 04 Jun 2026 08:54:48 GMT\r\npriority: u=5,i\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Wed, 30 Sep 2026 21:33:31 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\netag: W/\"6a213d58-1dda\"\r\nage: 132232\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a3f08f3fc85b56c3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7642,"size_decoded":3988,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"18642b5dd9ece78ac9aae8ccdc61eb15","sha1":"f66cbde9c45be853413f5650eeefb3293dd9878e","sha256":"efe08cd9a86891543a3f421e9a5754ff4f9d604ebc94184d03685b9907feebc6","sha512":"0a56a464bbd565f9620c271fedc96b24b13c6b3fd99cb6a3a14dbe60ac70edd54b31e79e08efc805f0f75eb1e95a78b49b4e611661dfd891630cd120daac08e7","ssdeep":"96:o+N/g5wkq6etwdWZZ/3IM2TjOStJY1Jfgs8FiwTUpWKq0pYz1G+h3CgNyOAvTek:i5M6ywWIMIte1l3SoWKq0pYz1G+RNyOe","tlshash":"2ff107dd6f1283e8ed0bf3f99f1648b825962dd87b104568c385ac53e22241dc852dc3","first_seen":"2026-01-04T19:54:11.047222Z","last_seen":"2026-09-22T10:17:56.83394Z","times_seen":22,"resource_available":false,"data":null}},"time_used":132,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":132,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"thinkingoutsidethebucket.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"thinkingoutsidethebucket.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"thinkingoutsidethebucket.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"thinkingoutsidethebucket.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thinkingoutsidethebucket.com/lander/black_hole_sun_goal_point/new-reaix-2023.svg","fqdn":"thinkingoutsidethebucket.com","domain":"thinkingoutsidethebucket.com","tld":"com"},"ip":{"addr":"172.67.186.110","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://thinkingoutsidethebucket.com/","date":"2026-09-22T10:17:23.168Z","timestamp":1790072243168,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thinkingoutsidethebucket.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 17 Aug 2026 16:20:47 GMT","end":"Sun, 15 Nov 2026 17:20:45 GMT"},"fingerprint":{"sha1":"31:D1:4C:C2:43:2B:3F:80:20:E9:8E:B1:74:AE:EE:22:C8:77:BD:D9","sha256":"12:37:00:91:E3:0C:F6:E7:15:A3:22:15:85:8C:7B:62:3B:E2:F6:3D:C1:3B:B7:44:F4:ED:A8:2D:12:BF:A9:9D"}}},"request":{"raw":"GET /lander/black_hole_sun_goal_point/new-reaix-2023.svg HTTP/1.1\r\nHost: thinkingoutsidethebucket.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://thinkingoutsidethebucket.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 22 Sep 2026 10:17:23 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=phQ4DJ35ObumkgTwM0RG3VPnDwfa52JLhTOzrnG7hj6pho%2FwJYBO8kcmubQ43NZNVpNAtTCkGjmJJZAyqvWMuWUdZxpDWQQzvRDmNSardiAN7oVpUhqDg6Bayfu3VEx8oVUsf4yH1DoYvOuduKI9\"}]}\r\nlast-modified: Thu, 04 Jun 2026 08:54:48 GMT\r\npriority: u=5,i\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Wed, 30 Sep 2026 21:33:31 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\netag: W/\"6a213d58-40c6\"\r\nage: 132231\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a3f08f3fd86256c3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16582,"size_decoded":7428,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"e3325499cc990fb2d187ee60a82c756c","sha1":"272d5aada57db54f65a8a8ee5e35b7b3249110d4","sha256":"4719752b2c687da4b3fc19b5119ef781fb2854ac67ef11bc1c2c760c94e25ddf","sha512":"29916ba0255c79bfb0a6f8d42b0f2ab472c256e38116cb03e063262759f6c05de1b41ffedda5d4deaa0566af37fa5c68a651651466812522640a3a85938d53ac","ssdeep":"384:ZegtQQGeQ2R6dFlcnabTqOACZ36W7xf8Pij0jzZ3hnYXOZMb3LF:ZYQG8KldRAs36MiZ31M","tlshash":"9772d6dd3b58c6f4ac0af3fa8f122475691be4f6afc082a4c3591d0b789185e5d49ec2","first_seen":"2026-01-04T19:54:11.043185Z","last_seen":"2026-09-22T10:17:56.834828Z","times_seen":22,"resource_available":false,"data":null}},"time_used":61,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":61,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"thinkingoutsidethebucket.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"thinkingoutsidethebucket.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"thinkingoutsidethebucket.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"thinkingoutsidethebucket.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thinkingoutsidethebucket.com/lander/black_hole_sun_goal_point/pictos-fa5.css","fqdn":"thinkingoutsidethebucket.com","domain":"thinkingoutsidethebucket.com","tld":"com"},"ip":{"addr":"172.67.186.110","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thinkingoutsidethebucket.com/","date":"2026-09-22T10:17:22.934Z","timestamp":1790072242934,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thinkingoutsidethebucket.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 17 Aug 2026 16:20:47 GMT","end":"Sun, 15 Nov 2026 17:20:45 GMT"},"fingerprint":{"sha1":"31:D1:4C:C2:43:2B:3F:80:20:E9:8E:B1:74:AE:EE:22:C8:77:BD:D9","sha256":"12:37:00:91:E3:0C:F6:E7:15:A3:22:15:85:8C:7B:62:3B:E2:F6:3D:C1:3B:B7:44:F4:ED:A8:2D:12:BF:A9:9D"}}},"request":{"raw":"GET /lander/black_hole_sun_goal_point/pictos-fa5.css HTTP/1.1\r\nHost: thinkingoutsidethebucket.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://thinkingoutsidethebucket.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 22 Sep 2026 10:17:22 GMT\r\ncontent-type: text/css\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Kx94q%2FOQdVozED8MABcPLpTPffojfZxKW30f6SynlDQHV2s%2Brt03vLedhs3br7RqUxJHgYQQqahwICLZiZqgwYwp37ttk8McaUY5U6UzI%2F5APNC4U6NYDtEsvFkGpWQPJeewmJhx2FRyRicgr5w%2B\"}]}\r\nlast-modified: Thu, 04 Jun 2026 08:54:48 GMT\r\npriority: u=2,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Wed, 30 Sep 2026 21:33:31 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\netag: W/\"6a213d58-d1\"\r\nage: 132231\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a3f08f3e5fec56c3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":209,"size_decoded":953,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"58135914cde6141bfbed2a8da5b7467c","sha1":"835e7286f3cf6b345fc4997f73eb8078d42383ce","sha256":"101b09232385473e6ca3109fb39af4bb4cd5c9671a48a3a8fab503cec17d793f","sha512":"2d6f1bb4e7977e6a859915e749707b586432588d0f06133a2a53241de7d507059e8ea1c76f2bb546a91edab0edb1099bad13ef88c848529247ec0803ba0be44b","ssdeep":"","tlshash":"10d0220400290410e0918c6738cfbf3d782d71120a258cbbd5128d3e9dc38a723a4f25","first_seen":"2026-06-13T08:37:31.323185Z","last_seen":"2026-09-22T10:17:56.836139Z","times_seen":20,"resource_available":true,"data":null}},"time_used":67,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":62,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"thinkingoutsidethebucket.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"thinkingoutsidethebucket.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"thinkingoutsidethebucket.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"thinkingoutsidethebucket.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thinkingoutsidethebucket.com/lander/black_hole_sun_goal_point/style.css","fqdn":"thinkingoutsidethebucket.com","domain":"thinkingoutsidethebucket.com","tld":"com"},"ip":{"addr":"172.67.186.110","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thinkingoutsidethebucket.com/","date":"2026-09-22T10:17:22.935Z","timestamp":1790072242935,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thinkingoutsidethebucket.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 17 Aug 2026 16:20:47 GMT","end":"Sun, 15 Nov 2026 17:20:45 GMT"},"fingerprint":{"sha1":"31:D1:4C:C2:43:2B:3F:80:20:E9:8E:B1:74:AE:EE:22:C8:77:BD:D9","sha256":"12:37:00:91:E3:0C:F6:E7:15:A3:22:15:85:8C:7B:62:3B:E2:F6:3D:C1:3B:B7:44:F4:ED:A8:2D:12:BF:A9:9D"}}},"request":{"raw":"GET /lander/black_hole_sun_goal_point/style.css HTTP/1.1\r\nHost: thinkingoutsidethebucket.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://thinkingoutsidethebucket.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 22 Sep 2026 10:17:22 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 04 Jun 2026 08:54:48 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=upH0vdZvqjRhG%2BAqP3GtjAJLEvRyT%2Fbl8pncB2IXHqn6UqlyMhIdWraDj0TkV1IOJpSmtYt69zZU4Z%2FfoZsxsto7xoMKZuQT32QXVhM4dcL0%2BbRDYhDGqqL7j4U5rXQ3hn1urBi%2Bnq1Pekqx1%2FQu\"}]}\r\npriority: u=2,i=?0\r\netag: W/\"6a213d58-21fe0\"\r\nexpires: Wed, 30 Sep 2026 21:33:31 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nvary: accept-encoding\r\nage: 132231\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3f08f3e5fed56c3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":139232,"size_decoded":20975,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (65526), with no line terminators","md5":"f2d17fd8fcf8a8fa2d28ef94299ba992","sha1":"a505f019e0d0c3eddbf4ac627059ddb62c73367e","sha256":"98840899c41ccf84657d63770159a1412065033fdd72c082fc846a091cab33cb","sha512":"ab8ae24f22e651b252f9eaeb5ce7c29d994d8b4cfc049f6885bcd462975ede1ffc8fecb45bac0aca5b9c2cbca6f95a98beb595474378ade90749b810b046d4cb","ssdeep":"768:sVhe6dg9dK3JQaYCyKYWwo5BFytrd9GFGQtjWKSFQIZw8wUwkwWwWwzwWwvwfwYj:6I9dK3JQaYCyvE5BFytrGl5GVTYtDGk","tlshash":"c9d3a622ad51b01d712b806af5c5b6c83338c113b6670bf5f9227836cdd6ade13a7789","first_seen":"2026-06-13T08:37:31.324092Z","last_seen":"2026-09-22T10:17:56.836882Z","times_seen":20,"resource_available":true,"data":null}},"time_used":70,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":66,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"thinkingoutsidethebucket.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"thinkingoutsidethebucket.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"thinkingoutsidethebucket.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"thinkingoutsidethebucket.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thinkingoutsidethebucket.com/lander/black_hole_sun_goal_point/header-insta-grey.png","fqdn":"thinkingoutsidethebucket.com","domain":"thinkingoutsidethebucket.com","tld":"com"},"ip":{"addr":"172.67.186.110","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://thinkingoutsidethebucket.com/","date":"2026-09-22T10:17:23.134Z","timestamp":1790072243134,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thinkingoutsidethebucket.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 17 Aug 2026 16:20:47 GMT","end":"Sun, 15 Nov 2026 17:20:45 GMT"},"fingerprint":{"sha1":"31:D1:4C:C2:43:2B:3F:80:20:E9:8E:B1:74:AE:EE:22:C8:77:BD:D9","sha256":"12:37:00:91:E3:0C:F6:E7:15:A3:22:15:85:8C:7B:62:3B:E2:F6:3D:C1:3B:B7:44:F4:ED:A8:2D:12:BF:A9:9D"}}},"request":{"raw":"GET /lander/black_hole_sun_goal_point/header-insta-grey.png HTTP/1.1\r\nHost: thinkingoutsidethebucket.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://thinkingoutsidethebucket.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 22 Sep 2026 10:17:23 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Thu, 04 Jun 2026 08:54:48 GMT\r\npriority: u=5,i\r\netag: \"6a213d58-241\"\r\nexpires: Wed, 30 Sep 2026 21:33:31 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 132232\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8qrmIHaECvughjhivtoOPGTRQ5H6Ext1klWjuvFcjLJ%2BWgoKWDp36%2F6FwFzxdAn2ub1mu1dUpLluItFU%2FW8mzacwUvil81igJ8j8ydtkq1oIj0o2TAMCTdx5tnXE2a0kEaHomYoie71byn7112yD\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3f08f3f982956c3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 577\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":577,"size_decoded":1362,"mime_type":"image/png","magic":"PNG image data, 22 x 22, 8-bit/color RGBA, non-interlaced","md5":"227cc72df7977ebdcbf1cdf3e6a367b4","sha1":"dbeb59d7218e8330da9b93e44afb0674aaf1ff6b","sha256":"dde27c3153e05b415d1fc00e97ea467c178aa6a3d581cad5c172933303b7f77b","sha512":"1ec7145ab08d4a3c6453cbdb51be55ff22b8ef1d41329101718e6a7adbdc7f5047fd7f3a0f10ca1a3c1c4397d0d41f78848ac6a788fc542b1158320c214d56c7","ssdeep":"","tlshash":"2ef096f9b3c28857829f9e400c0c0d86e433677807ea402c3f1fe00247b2e99d4a9a75","first_seen":"2026-01-04T19:54:11.025967Z","last_seen":"2026-09-22T10:17:56.837719Z","times_seen":22,"resource_available":false,"data":null}},"time_used":105,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":105,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"thinkingoutsidethebucket.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"thinkingoutsidethebucket.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"thinkingoutsidethebucket.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"thinkingoutsidethebucket.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thinkingoutsidethebucket.com/lander/black_hole_sun_goal_point/map-monde.png","fqdn":"thinkingoutsidethebucket.com","domain":"thinkingoutsidethebucket.com","tld":"com"},"ip":{"addr":"172.67.186.110","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://thinkingoutsidethebucket.com/","date":"2026-09-22T10:17:23.162Z","timestamp":1790072243162,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thinkingoutsidethebucket.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 17 Aug 2026 16:20:47 GMT","end":"Sun, 15 Nov 2026 17:20:45 GMT"},"fingerprint":{"sha1":"31:D1:4C:C2:43:2B:3F:80:20:E9:8E:B1:74:AE:EE:22:C8:77:BD:D9","sha256":"12:37:00:91:E3:0C:F6:E7:15:A3:22:15:85:8C:7B:62:3B:E2:F6:3D:C1:3B:B7:44:F4:ED:A8:2D:12:BF:A9:9D"}}},"request":{"raw":"GET /lander/black_hole_sun_goal_point/map-monde.png HTTP/1.1\r\nHost: thinkingoutsidethebucket.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://thinkingoutsidethebucket.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 22 Sep 2026 10:17:23 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Thu, 04 Jun 2026 08:54:48 GMT\r\npriority: u=5,i\r\netag: \"6a213d58-960a\"\r\nexpires: Wed, 30 Sep 2026 21:33:31 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 132232\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SOmi56Q2P%2BsAnY6szMBjogXRxU5CyYeLIkxwPx5DFq9X07KTyDxlKY8M8Tb8JlOhFagbPPEwXZQQKkaK0tz3cg4JpIM80xJu6OC5Zlo60qMC21pBmOZmukwBuDNWQsBKQMxgLGDUCGKCGJuRAZnY\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3f08f3fc85856c3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 38410\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":38410,"size_decoded":39194,"mime_type":"image/png","magic":"PNG image data, 1440 x 617, 8-bit/color RGBA, non-interlaced","md5":"6f38bbb9ac13e29ad35c2402ace0337b","sha1":"95bcc227e038ec20956cc338ba354baa5d91f493","sha256":"41789fd06da619f19f1c0f11ec25e6ef3e6fa610d68ada5fd1895d47ed98656c","sha512":"6974ab7953bc685d383e1e10b6a57af7b1e3f8af468b7b82d79785ed382d501784df100cc11fe0900b79be05b8116a496e205c5372438b1ffd8b3c3fc085e825","ssdeep":"768:ujDLKXzgv8tK33EF/HLl/ZMesjRnp2JB40dijfpzK0ZU6f2gGkDWSF910/n:ujDeDgvgK30F/rlRyRnS4ayzrfrDWSFq","tlshash":"0703f005539dec540bb1b16499b88f2f5cee965201cf24dfda23b9c4dc6e20e6b09762","first_seen":"2026-01-04T19:54:11.006617Z","last_seen":"2026-09-22T10:17:56.838717Z","times_seen":22,"resource_available":false,"data":null}},"time_used":64,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":52,"receive":12,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"thinkingoutsidethebucket.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"thinkingoutsidethebucket.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"thinkingoutsidethebucket.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"thinkingoutsidethebucket.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thinkingoutsidethebucket.com/lander/black_hole_sun_goal_point/footer-x-white.png","fqdn":"thinkingoutsidethebucket.com","domain":"thinkingoutsidethebucket.com","tld":"com"},"ip":{"addr":"172.67.186.110","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://thinkingoutsidethebucket.com/","date":"2026-09-22T10:17:23.165Z","timestamp":1790072243165,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thinkingoutsidethebucket.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 17 Aug 2026 16:20:47 GMT","end":"Sun, 15 Nov 2026 17:20:45 GMT"},"fingerprint":{"sha1":"31:D1:4C:C2:43:2B:3F:80:20:E9:8E:B1:74:AE:EE:22:C8:77:BD:D9","sha256":"12:37:00:91:E3:0C:F6:E7:15:A3:22:15:85:8C:7B:62:3B:E2:F6:3D:C1:3B:B7:44:F4:ED:A8:2D:12:BF:A9:9D"}}},"request":{"raw":"GET /lander/black_hole_sun_goal_point/footer-x-white.png HTTP/1.1\r\nHost: thinkingoutsidethebucket.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://thinkingoutsidethebucket.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 22 Sep 2026 10:17:23 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Thu, 04 Jun 2026 08:54:48 GMT\r\npriority: u=5,i\r\netag: \"6a213d58-1f8\"\r\nexpires: Wed, 30 Sep 2026 21:33:31 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 132232\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Myfoem0aS7I3%2FztEaDeW%2B1pIk%2BbSgt2HB7Kra8EAbiZo6QYPYvxYVlXvKkjJmKYbqEhRBjcyE%2BVujA%2FLwHShRxsEWgPzVotWoTXfKUaApxrmkPiYGYEnardmEG%2B4YCh8JO7RNpkBSyaUjRgg7anS\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3f08f3fc85d56c3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 504\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":504,"size_decoded":1295,"mime_type":"image/png","magic":"PNG image data, 30 x 30, 8-bit/color RGBA, non-interlaced","md5":"e86a40afc69f427c61cf869fc94213b7","sha1":"75de44b0e943483a73e3ee9dc9f908489882c72d","sha256":"a88fcd43aa344bd8363b279f0653cbe4ca5fe0da58e045689c2c3ca3c4a8ded5","sha512":"47f108d1a0a973f0ab00e5790b522816304a11d6915ddbc63d99252da262d38ebdbd01eb314adaa7d5fbfd48efb81d4a25f830867c3334b6e998d2a8edb68ba4","ssdeep":"","tlshash":"75f0059d51c6236ccb8d94d780ae701b551786a0d74462a0905a60fd6ce144a6472339","first_seen":"2026-01-04T19:54:11.11131Z","last_seen":"2026-09-22T10:17:56.839396Z","times_seen":22,"resource_available":false,"data":null}},"time_used":48,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":48,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"thinkingoutsidethebucket.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"thinkingoutsidethebucket.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"thinkingoutsidethebucket.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"thinkingoutsidethebucket.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thinkingoutsidethebucket.com/lander/black_hole_sun_goal_point/footer-insta-white.png","fqdn":"thinkingoutsidethebucket.com","domain":"thinkingoutsidethebucket.com","tld":"com"},"ip":{"addr":"172.67.186.110","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://thinkingoutsidethebucket.com/","date":"2026-09-22T10:17:23.166Z","timestamp":1790072243166,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thinkingoutsidethebucket.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 17 Aug 2026 16:20:47 GMT","end":"Sun, 15 Nov 2026 17:20:45 GMT"},"fingerprint":{"sha1":"31:D1:4C:C2:43:2B:3F:80:20:E9:8E:B1:74:AE:EE:22:C8:77:BD:D9","sha256":"12:37:00:91:E3:0C:F6:E7:15:A3:22:15:85:8C:7B:62:3B:E2:F6:3D:C1:3B:B7:44:F4:ED:A8:2D:12:BF:A9:9D"}}},"request":{"raw":"GET /lander/black_hole_sun_goal_point/footer-insta-white.png HTTP/1.1\r\nHost: thinkingoutsidethebucket.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://thinkingoutsidethebucket.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 22 Sep 2026 10:17:23 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Thu, 04 Jun 2026 08:54:48 GMT\r\npriority: u=5,i\r\netag: \"6a213d58-1d9\"\r\nexpires: Wed, 30 Sep 2026 21:33:31 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 132232\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rzUSqCePox0%2Fun3I7xtLYNatF%2F4S3bDF0XVQVY%2BPnhHfx%2FdmUBNRAm3VJrI1pK%2BO5%2BQPjPiSx7cFZ3uela7dP9Y%2B64T7vhU3nR5SeLqsjWRCeWT7uFH3iQ9fhMefW2T8ytKXxzPRrgoyFM3maiQy\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3f08f3fc85f56c3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 473\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":473,"size_decoded":1266,"mime_type":"image/png","magic":"PNG image data, 30 x 30, 8-bit/color RGBA, non-interlaced","md5":"6f4d8fadf3a1e5fd68c8da5dba734cf1","sha1":"b4e3016d7534868d4bc29b2a7a6c17c525b35507","sha256":"26acf3ffe9d7f502979c724beea9da0b030fbc08d93f74b4d6ad81dedc9d09ff","sha512":"026480b364ee44952c3166a505eab566d3924f32814a53cc262849ce9393da0d61f6f0f17deb998dbdfacea1aaef676ca9bba71df86dfdd59525832060f24da7","ssdeep":"","tlshash":"04f054511d72ed58c448cf24bf1b6682c633ccd000036a60ea543059061749d391c5f3","first_seen":"2026-01-04T19:54:11.04963Z","last_seen":"2026-09-22T10:17:56.839995Z","times_seen":22,"resource_available":false,"data":null}},"time_used":75,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":75,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"thinkingoutsidethebucket.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"thinkingoutsidethebucket.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"thinkingoutsidethebucket.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"thinkingoutsidethebucket.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thinkingoutsidethebucket.com/lander/black_hole_sun_goal_point/footer-in-white.png","fqdn":"thinkingoutsidethebucket.com","domain":"thinkingoutsidethebucket.com","tld":"com"},"ip":{"addr":"172.67.186.110","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://thinkingoutsidethebucket.com/","date":"2026-09-22T10:17:23.167Z","timestamp":1790072243167,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thinkingoutsidethebucket.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 17 Aug 2026 16:20:47 GMT","end":"Sun, 15 Nov 2026 17:20:45 GMT"},"fingerprint":{"sha1":"31:D1:4C:C2:43:2B:3F:80:20:E9:8E:B1:74:AE:EE:22:C8:77:BD:D9","sha256":"12:37:00:91:E3:0C:F6:E7:15:A3:22:15:85:8C:7B:62:3B:E2:F6:3D:C1:3B:B7:44:F4:ED:A8:2D:12:BF:A9:9D"}}},"request":{"raw":"GET /lander/black_hole_sun_goal_point/footer-in-white.png HTTP/1.1\r\nHost: thinkingoutsidethebucket.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://thinkingoutsidethebucket.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 22 Sep 2026 10:17:23 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Thu, 04 Jun 2026 08:54:48 GMT\r\npriority: u=5,i\r\netag: \"6a213d58-1bb\"\r\nexpires: Wed, 30 Sep 2026 21:33:31 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 132231\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=I3jGGOIIPNH2ufA9PsczR8Mv0M35Pyr5Xh1nuFXj62ofR%2BWZTVYpCR5D%2FOQi28vZu6P4VLTcY4z1SudDcFAdyVubFlMdu0OZq3eUXZuni3UQm4Y7QGPe%2FZxGC6%2BP79NdCBjWDyTeNEHwzTGLGdRr\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3f08f3fc86156c3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 443\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":443,"size_decoded":1230,"mime_type":"image/png","magic":"PNG image data, 30 x 30, 8-bit/color RGBA, non-interlaced","md5":"60abe17a69775e5fbab50e33d6a12e55","sha1":"581d29257cc0a8128294cda15e036cbaae45d68a","sha256":"c135a26ca025ac7672d90a609a3a4af25f8121519d22a17f36ccb91fb1e8657b","sha512":"0cec9a5e9463d1669140f9faa0c2ee1d038366b1c48e7884dac586c8c6c0e46ee0b73ce855224f0e673df956ca76dc1b6d822d30178896ee0d104f3c6b3e871b","ssdeep":"","tlshash":"30f0dca2e4821855e98925b42242082096d38218cbe86afcb0bfe011463568441b5004","first_seen":"2026-01-04T19:54:11.027458Z","last_seen":"2026-09-22T10:17:56.84063Z","times_seen":22,"resource_available":false,"data":null}},"time_used":62,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":62,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"thinkingoutsidethebucket.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"thinkingoutsidethebucket.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"thinkingoutsidethebucket.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"thinkingoutsidethebucket.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thinkingoutsidethebucket.com/lander/black_hole_sun_goal_point/css-2.css","fqdn":"thinkingoutsidethebucket.com","domain":"thinkingoutsidethebucket.com","tld":"com"},"ip":{"addr":"172.67.186.110","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thinkingoutsidethebucket.com/","date":"2026-09-22T10:17:23.184Z","timestamp":1790072243184,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thinkingoutsidethebucket.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 17 Aug 2026 16:20:47 GMT","end":"Sun, 15 Nov 2026 17:20:45 GMT"},"fingerprint":{"sha1":"31:D1:4C:C2:43:2B:3F:80:20:E9:8E:B1:74:AE:EE:22:C8:77:BD:D9","sha256":"12:37:00:91:E3:0C:F6:E7:15:A3:22:15:85:8C:7B:62:3B:E2:F6:3D:C1:3B:B7:44:F4:ED:A8:2D:12:BF:A9:9D"}}},"request":{"raw":"GET /lander/black_hole_sun_goal_point/css-2.css HTTP/1.1\r\nHost: thinkingoutsidethebucket.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://thinkingoutsidethebucket.com/lander/black_hole_sun_goal_point/style-variation.css\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 22 Sep 2026 10:17:23 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 04 Jun 2026 08:54:48 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rTNr%2B7YZNDiWaghmLVIW8zDCUKsx9%2BiCgb7PTolMVo2EjbJIU0qnNkgXC9vMGzKwtOzz7sq5dlMzQPH3xMEmAu1E0OuV4qYZbnh0UkEwWUVmpHtStsED%2BQRYhhkXNboQWVvOpiCxQhs0k0jCm2yc\"}]}\r\npriority: u=2,i=?0\r\netag: W/\"6a213d58-1191\"\r\nexpires: Wed, 30 Sep 2026 21:33:31 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nvary: accept-encoding\r\nage: 132231\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3f08f3fe86556c3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4497,"size_decoded":1322,"mime_type":"text/css","magic":"ASCII text","md5":"05005beb58ae08636ca9d06239f02e1d","sha1":"deebcc87856f8920fc40e2c79162e84a9f055e4f","sha256":"0a01fbadf9ab161ca6806b8448fb835387296e35b0a00d44200efb2c883398ba","sha512":"6d392a7886f7dd2bf5f124aec71d25b2d52f4d053c72a15d70dcf4f10a39f2618ea4e65c2ce95e22e237157cb825ab1ff710ada0412c9091263f17b8dd8ebe16","ssdeep":"96:vOEa/fOEafFZOGOEaUOEayJc+uKOEadNaOxMa/fOxMafFZOGOxMaUOxMayJc+uKe:4/oOR7aOj/SO/daEc/BO4earc","tlshash":"1f919990086a9400eb872cd673cf7f339d9db2407046d9396ffe04a8ac9ed6553a5b4d","first_seen":"2026-06-13T08:37:31.345701Z","last_seen":"2026-09-22T10:17:56.841253Z","times_seen":20,"resource_available":true,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"thinkingoutsidethebucket.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"thinkingoutsidethebucket.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"thinkingoutsidethebucket.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"thinkingoutsidethebucket.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thinkingoutsidethebucket.com/lander/black_hole_sun_goal_point/css2-1.css","fqdn":"thinkingoutsidethebucket.com","domain":"thinkingoutsidethebucket.com","tld":"com"},"ip":{"addr":"172.67.186.110","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thinkingoutsidethebucket.com/","date":"2026-09-22T10:17:23.186Z","timestamp":1790072243186,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thinkingoutsidethebucket.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 17 Aug 2026 16:20:47 GMT","end":"Sun, 15 Nov 2026 17:20:45 GMT"},"fingerprint":{"sha1":"31:D1:4C:C2:43:2B:3F:80:20:E9:8E:B1:74:AE:EE:22:C8:77:BD:D9","sha256":"12:37:00:91:E3:0C:F6:E7:15:A3:22:15:85:8C:7B:62:3B:E2:F6:3D:C1:3B:B7:44:F4:ED:A8:2D:12:BF:A9:9D"}}},"request":{"raw":"GET /lander/black_hole_sun_goal_point/css2-1.css HTTP/1.1\r\nHost: thinkingoutsidethebucket.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://thinkingoutsidethebucket.com/lander/black_hole_sun_goal_point/style.css\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 22 Sep 2026 10:17:23 GMT\r\ncontent-type: text/css\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uZnWMcBNQ7nU9oiVa8hlF5EmsuW1Cq%2Bs4Qn6i7TKHcXEECBX2wf3yLBjcZ7Unn%2BP15yrUC5%2FLsDdW9EJ0MzGfWwOnrr%2F6xvYFHUodBJWKPJDSmbMm9dbEXuROZgt6%2BMnnJL0YPb6HBIsLO0aH7m%2B\"}]}\r\nlast-modified: Thu, 04 Jun 2026 08:54:48 GMT\r\npriority: u=2,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Wed, 30 Sep 2026 21:33:31 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\netag: W/\"6a213d58-6eb\"\r\nage: 132231\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a3f08f3fe86756c3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1771,"size_decoded":1350,"mime_type":"text/css","magic":"ASCII text","md5":"30f82dc464c1d2cd9f248dd52d4db9d7","sha1":"b5ba4ca6a83f1f283001638f77ea11f4d9b9bf9e","sha256":"435348bd94b76c3617107b586b5d5e024775c725369051fb24e29a0579fff197","sha512":"b0dc800765f33239721552f4c5c631122d80bad9f5c3c6d4acf06e1974c5884975a7ad781091d6ec2a510493007213cf7196adc734cc84ee43b1cf27ec09d911","ssdeep":"","tlshash":"a931a880085a6100e7571cd927df3f26dd8eb6626490c6387ffd0868adeac651771f6c","first_seen":"2026-06-13T08:37:31.3428Z","last_seen":"2026-09-22T10:17:56.841975Z","times_seen":20,"resource_available":true,"data":null}},"time_used":64,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":64,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"thinkingoutsidethebucket.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"thinkingoutsidethebucket.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"thinkingoutsidethebucket.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"thinkingoutsidethebucket.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thinkingoutsidethebucket.com/lander/black_hole_sun_goal_point/6xK3dSBYKcSV-LCoeQqfX1RYOo3qOK7l.woff2","fqdn":"thinkingoutsidethebucket.com","domain":"thinkingoutsidethebucket.com","tld":"com"},"ip":{"addr":"172.67.186.110","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://thinkingoutsidethebucket.com/","date":"2026-09-22T10:17:23.292Z","timestamp":1790072243292,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thinkingoutsidethebucket.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 17 Aug 2026 16:20:47 GMT","end":"Sun, 15 Nov 2026 17:20:45 GMT"},"fingerprint":{"sha1":"31:D1:4C:C2:43:2B:3F:80:20:E9:8E:B1:74:AE:EE:22:C8:77:BD:D9","sha256":"12:37:00:91:E3:0C:F6:E7:15:A3:22:15:85:8C:7B:62:3B:E2:F6:3D:C1:3B:B7:44:F4:ED:A8:2D:12:BF:A9:9D"}}},"request":{"raw":"GET /lander/black_hole_sun_goal_point/6xK3dSBYKcSV-LCoeQqfX1RYOo3qOK7l.woff2 HTTP/1.1\r\nHost: thinkingoutsidethebucket.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://thinkingoutsidethebucket.com/lander/black_hole_sun_goal_point/css2.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 22 Sep 2026 10:17:23 GMT\r\ncontent-type: font/woff2\r\nserver-timing: cfExtPri\r\nlast-modified: Thu, 04 Jun 2026 08:54:48 GMT\r\npriority: u=3,i=?0\r\netag: \"6a213d58-3a2c\"\r\nexpires: Fri, 02 Oct 2026 09:44:44 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 1958\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=p9kXoX%2FTNm8%2F8odfUqol%2FEpIDj4ao6kxdze%2BD2hAAh1GV7g%2FeO7tMmwUvHqJjWqjO3xOU%2BXxqrs%2BVI0QpTE62wN3Egt6au97U9Y8Ico5gcFGiNIumuNCGwW3BdmAX5aVfNbrOrKYBO9kxGNL81Lq\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3f08f40987256c3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 14892\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14892,"size_decoded":15690,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 14892, version 1.0","md5":"9ec6deaf6bada919e20b98f9f7b718b1","sha1":"501d36403ad8205e4644532600019ecb10f5cb0a","sha256":"7b348b30ea1fe43857e68fc462c29e5c6e63c97666af75135c4396a272e54762","sha512":"03849431cef204a1584ffe6f23dbe86730afd076146ab3d1855b9c3402168a97faa8a529e69fae45ea24cff7110c2930cb4744162ba0ed95d95600f6e777b322","ssdeep":"384:LKrbeS3uuEGg7o6yDdWa/TQcNc+rAsmnsTJ39cUZi:LKneSe4/6yDFU6rAGJZE","tlshash":"b362b0ad670a1495c0f3aa30ce8fdc5463dc0726f2ace21abcf42b95ab566e64061457","first_seen":"2023-06-06T21:00:07Z","last_seen":"2026-09-23T02:06:38.424743Z","times_seen":32681,"resource_available":false,"data":null}},"time_used":53,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":53,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"thinkingoutsidethebucket.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"thinkingoutsidethebucket.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"thinkingoutsidethebucket.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"thinkingoutsidethebucket.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.lesrencontreseconomiques.fr/wp-content/uploads/2024/03/Laurent-LeCrabe_230709_REAIX_S41-2-224x290.jpg","fqdn":"www.lesrencontreseconomiques.fr","domain":"lesrencontreseconomiques.fr","tld":"fr"},"ip":{"addr":"51.75.198.185","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://thinkingoutsidethebucket.com/","date":"2026-09-22T10:17:23.388Z","timestamp":1790072243388,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lesrencontreseconomiques.fr","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 16 Aug 2026 20:27:53 GMT","end":"Sat, 14 Nov 2026 20:27:52 GMT"},"fingerprint":{"sha1":"07:1E:5E:A4:CD:D4:CA:67:BA:18:1A:90:51:A8:6B:DB:84:25:9C:11","sha256":"C0:41:C7:DC:0F:09:17:5C:6A:2B:4C:E5:80:F5:69:91:A5:BF:6E:FC:CD:6C:A1:07:46:61:FE:89:6D:21:8B:0E"}}},"request":{"raw":"GET /wp-content/uploads/2024/03/Laurent-LeCrabe_230709_REAIX_S41-2-224x290.jpg HTTP/1.1\r\nHost: www.lesrencontreseconomiques.fr\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://thinkingoutsidethebucket.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Tue, 22 Sep 2026 10:17:23 GMT\r\nServer: Apache\r\nLast-Modified: Fri, 28 Mar 2025 14:55:39 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 5210\r\nVary: Accept-Encoding\r\nCache-Control: max-age=180, public\r\nKeep-Alive: timeout=5, max=100\r\nConnection: Keep-Alive\r\nContent-Type: image/jpeg\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":5210,"size_decoded":5513,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"Compressed by jpeg-recompress\", comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82\", progressive, precision 8, 224x290, components 3","md5":"5e58515310c9a296e4af78fb191334e4","sha1":"11d902b7125a00599367a392c729b5f0e1163b40","sha256":"98d6be8879e84f4b487d47804c8c0efacaa93a98dcac0ef06f24e0167231f961","sha512":"6b6e41dbc57d63c726b0ec55eb9a82fc2b97d4ace74e846222240b6c96eb5356568e5f5f621ffc4a965d55669aa5e5bea9046740eb437f62ea019426438dd143","ssdeep":"96:FpSyPnLOp9ltwGPMAmp/VZ4JttZyPnKZ+XnWehmjWL2fLaaDPKK:Fpnwvjmb2fyPK2+akL","tlshash":"f7b19f9ddf55cc61f10f2a3ed29cbc2d6805ac019913d24d2badf50165fb6cc4ed1554","first_seen":"2026-06-13T08:37:31.315036Z","last_seen":"2026-09-22T10:17:56.843745Z","times_seen":14,"resource_available":false,"data":null}},"time_used":426,"timings":{"blocked":-1,"dns":60,"connect":30,"send":0,"wait":33,"receive":0,"ssl":300},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.lesrencontreseconomiques.fr/wp-content/uploads/2025/01/douglas-kennedy-224x290.jpg","fqdn":"www.lesrencontreseconomiques.fr","domain":"lesrencontreseconomiques.fr","tld":"fr"},"ip":{"addr":"51.75.198.185","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://thinkingoutsidethebucket.com/","date":"2026-09-22T10:17:23.389Z","timestamp":1790072243389,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lesrencontreseconomiques.fr","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 16 Aug 2026 20:27:53 GMT","end":"Sat, 14 Nov 2026 20:27:52 GMT"},"fingerprint":{"sha1":"07:1E:5E:A4:CD:D4:CA:67:BA:18:1A:90:51:A8:6B:DB:84:25:9C:11","sha256":"C0:41:C7:DC:0F:09:17:5C:6A:2B:4C:E5:80:F5:69:91:A5:BF:6E:FC:CD:6C:A1:07:46:61:FE:89:6D:21:8B:0E"}}},"request":{"raw":"GET /wp-content/uploads/2025/01/douglas-kennedy-224x290.jpg HTTP/1.1\r\nHost: www.lesrencontreseconomiques.fr\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://thinkingoutsidethebucket.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Tue, 22 Sep 2026 10:17:23 GMT\r\nServer: Apache\r\nLast-Modified: Fri, 28 Mar 2025 13:44:22 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 7052\r\nVary: Accept-Encoding\r\nCache-Control: max-age=180, public\r\nKeep-Alive: timeout=5, max=100\r\nConnection: Keep-Alive\r\nContent-Type: image/jpeg\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":7052,"size_decoded":7355,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"Compressed by jpeg-recompress\", comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82\", progressive, precision 8, 224x290, components 3","md5":"ac4a8185f3637ec81f8dc76480283d2d","sha1":"7596fc66e52aa25ccdd76a379eddad21778552d6","sha256":"7df108a5baf3d02eb1fcd6969676890e229c3a24400f2055ffdc324a21b28e01","sha512":"56eb409b2b468e21bef83d6c87d9f482312d454a10c3403319882b56a463370f43083bf840b21196dac528f2291f299b3847fcc1067d9f25beee7be1a6c0aa35","ssdeep":"192:WvLL5p1IaJ16lH9OY8ztsr2SOZoSEg7WShRnU1Bt:ev1kHYY8ZsrdO4g7Lhq1Bt","tlshash":"52e1b1f94d499174fdf78bb3ca705566bc34520f180dd8786e9855387eb30532868d0d","first_seen":"2026-06-13T08:37:31.334511Z","last_seen":"2026-09-22T10:17:56.844339Z","times_seen":14,"resource_available":false,"data":null}},"time_used":426,"timings":{"blocked":-1,"dns":59,"connect":30,"send":0,"wait":34,"receive":0,"ssl":302},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thinkingoutsidethebucket.com/lander/black_hole_sun_goal_point/new-cercle-blue-2023.svg","fqdn":"thinkingoutsidethebucket.com","domain":"thinkingoutsidethebucket.com","tld":"com"},"ip":{"addr":"172.67.186.110","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://thinkingoutsidethebucket.com/","date":"2026-09-22T10:17:23.130Z","timestamp":1790072243130,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thinkingoutsidethebucket.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 17 Aug 2026 16:20:47 GMT","end":"Sun, 15 Nov 2026 17:20:45 GMT"},"fingerprint":{"sha1":"31:D1:4C:C2:43:2B:3F:80:20:E9:8E:B1:74:AE:EE:22:C8:77:BD:D9","sha256":"12:37:00:91:E3:0C:F6:E7:15:A3:22:15:85:8C:7B:62:3B:E2:F6:3D:C1:3B:B7:44:F4:ED:A8:2D:12:BF:A9:9D"}}},"request":{"raw":"GET /lander/black_hole_sun_goal_point/new-cercle-blue-2023.svg HTTP/1.1\r\nHost: thinkingoutsidethebucket.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://thinkingoutsidethebucket.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 22 Sep 2026 10:17:23 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tj%2BV6CrlDN4dn36KSKqEBVYROPS0TVtAsR5RXddCFU30lvkfSAWgFcsrfwQTMiF3BrZuLgiB4y5L0hGRiJYBVPI1eJ4bdcoOnsIO6OQnhkGgva6xuBtg7sB544GpdefrHMeStlJDDzn9vhDZgQP3\"}]}\r\nlast-modified: Thu, 04 Jun 2026 08:54:48 GMT\r\npriority: u=5,i\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Wed, 30 Sep 2026 21:33:31 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\netag: W/\"6a213d58-1dc7\"\r\nage: 132231\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a3f08f3f982656c3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7623,"size_decoded":3983,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"b0d40cc7f02d1910a6b6e8ec6a258cf3","sha1":"e93fd7631a141f7b4587da7d829bcad7159942aa","sha256":"5904e602fbe72ee973b221d3bc81ec3ade618ad958acf84b9576900b3174f384","sha512":"96f49b7c1e15e2b2d2dc9615602278aff219708ce3156ff02d086b3f0d0f189f0b0500eb9d0858009d35e3fdba325f821fa5ef27aeef8d882b65495e1edd33f7","ssdeep":"192:IjTCYM7LO8v7TXxPh4mxlWPSAXdyZE5YE+oTc2nI2qFSx:eCYMfO8vXxZ4mxlWPS2tJcWaSx","tlshash":"a3f1b7e977d562f0fa06e7e486237250711b18fa3f62cba8c362adc6b85105e84c9cc1","first_seen":"2026-01-04T19:54:11.109715Z","last_seen":"2026-09-22T10:17:56.844937Z","times_seen":22,"resource_available":false,"data":null}},"time_used":73,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":73,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"thinkingoutsidethebucket.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"thinkingoutsidethebucket.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"thinkingoutsidethebucket.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"thinkingoutsidethebucket.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thinkingoutsidethebucket.com/lander/black_hole_sun_goal_point/flag-en.png","fqdn":"thinkingoutsidethebucket.com","domain":"thinkingoutsidethebucket.com","tld":"com"},"ip":{"addr":"172.67.186.110","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://thinkingoutsidethebucket.com/","date":"2026-09-22T10:17:23.135Z","timestamp":1790072243135,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thinkingoutsidethebucket.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 17 Aug 2026 16:20:47 GMT","end":"Sun, 15 Nov 2026 17:20:45 GMT"},"fingerprint":{"sha1":"31:D1:4C:C2:43:2B:3F:80:20:E9:8E:B1:74:AE:EE:22:C8:77:BD:D9","sha256":"12:37:00:91:E3:0C:F6:E7:15:A3:22:15:85:8C:7B:62:3B:E2:F6:3D:C1:3B:B7:44:F4:ED:A8:2D:12:BF:A9:9D"}}},"request":{"raw":"GET /lander/black_hole_sun_goal_point/flag-en.png HTTP/1.1\r\nHost: thinkingoutsidethebucket.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://thinkingoutsidethebucket.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 22 Sep 2026 10:17:23 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Thu, 04 Jun 2026 08:54:48 GMT\r\npriority: u=5,i\r\netag: \"6a213d58-2098\"\r\nexpires: Wed, 30 Sep 2026 21:33:31 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 132232\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nwGpSlYG%2Fb3hXqZ1C9SMUioi2YDF%2B6M6JlOLLTaGlG%2F3PYSCrVbbWsjl6jZxg%2Bm5J2L%2FxAtasVkL%2FbrXetSY9WFZceRu5NJ9CRnewyJ%2FUvt5swPQfmTpScD%2FZY0lpNpfIxyP4wg0%2B2YE43AqPEB1\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3f08f3f982d56c3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 8344\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8344,"size_decoded":9143,"mime_type":"image/png","magic":"PNG image data, 100 x 66, 8-bit/color RGBA, non-interlaced","md5":"fa6b6aa9d80370d48e835e1c3de923af","sha1":"bdf50a19c421e26506e0fdc9a5cb4d63875a4b68","sha256":"9ac2281bece17870da8b66971fed34a22d537c7118b83e3606b08eab916a3694","sha512":"f05d67659cfadf63c4b5c1b137a795574a577a3018f67cba41994802cfdd95b9507a3d01485085ba5b2b4671f821606f4dd3a3b284dfac7ee8c97b14d0c403b1","ssdeep":"192:z7Qhs5hCJSpJcEBdZTJbbKRwCZsj1UQQopBR3YyNeQFSqNXTM:zsG5hCJSpyEBv9bbNCZstvDZYPitTM","tlshash":"43029fd0dc045145b4a2c25119fbd55a3547ccc7e2c2a4e3ce4df85a64991f3913f5e7","first_seen":"2026-01-04T19:54:11.074271Z","last_seen":"2026-09-22T10:17:56.845527Z","times_seen":22,"resource_available":false,"data":null}},"time_used":84,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":84,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"thinkingoutsidethebucket.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"thinkingoutsidethebucket.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"thinkingoutsidethebucket.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"thinkingoutsidethebucket.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thinkingoutsidethebucket.com/lander/black_hole_sun_goal_point/vertical-separator.jpg","fqdn":"thinkingoutsidethebucket.com","domain":"thinkingoutsidethebucket.com","tld":"com"},"ip":{"addr":"172.67.186.110","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://thinkingoutsidethebucket.com/","date":"2026-09-22T10:17:23.274Z","timestamp":1790072243274,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thinkingoutsidethebucket.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 17 Aug 2026 16:20:47 GMT","end":"Sun, 15 Nov 2026 17:20:45 GMT"},"fingerprint":{"sha1":"31:D1:4C:C2:43:2B:3F:80:20:E9:8E:B1:74:AE:EE:22:C8:77:BD:D9","sha256":"12:37:00:91:E3:0C:F6:E7:15:A3:22:15:85:8C:7B:62:3B:E2:F6:3D:C1:3B:B7:44:F4:ED:A8:2D:12:BF:A9:9D"}}},"request":{"raw":"GET /lander/black_hole_sun_goal_point/vertical-separator.jpg HTTP/1.1\r\nHost: thinkingoutsidethebucket.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://thinkingoutsidethebucket.com/lander/black_hole_sun_goal_point/style.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 22 Sep 2026 10:17:23 GMT\r\ncontent-type: image/jpeg\r\nserver-timing: cfExtPri\r\nlast-modified: Thu, 04 Jun 2026 08:54:48 GMT\r\npriority: u=4,i\r\netag: \"6a213d58-4cf\"\r\nexpires: Wed, 30 Sep 2026 21:33:31 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 132231\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4Rxv1E5ZaCmAmh87GW1LB33FCJGYXQRK2a6JRS%2BHkPUTL%2FaxwSgOkw8eGwL54JcM6cOLzm6tXH%2BYQbhfJjv0aFjdPBq9%2FFkyWLM7rnEpzF59ej2d74TM3uyxidY8EyoTmRGulQTddeBdPsAbzCFj\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3f08f40887156c3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1231\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1231,"size_decoded":2020,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1x22, components 3","md5":"15bf43c9aa240a1d393b0ca64c022218","sha1":"89f7991935666bd75aaa703f246adb0edacc5edd","sha256":"e4e80e81ebc62d57a4ce6b55296b2ba625e2af20ee4d3b50af266675d5660611","sha512":"c395f96eca7581a6fedc1ae8aad4c6cf204b387b0ebee6267692a1825a6b0bcbdac4c3c3dbe6e0995f9a88a52d53867c7e2f8d82b2f7c3a939913f333a7e00b2","ssdeep":"","tlshash":"af21932ffd916f42d8c5f9b138f6a16f4e470580e981e64998fa981398200f8092a5cf","first_seen":"2026-01-04T19:54:11.077761Z","last_seen":"2026-09-22T10:17:56.846224Z","times_seen":22,"resource_available":false,"data":null}},"time_used":62,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":62,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"thinkingoutsidethebucket.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"thinkingoutsidethebucket.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"thinkingoutsidethebucket.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"thinkingoutsidethebucket.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thinkingoutsidethebucket.com/lander/black_hole_sun_goal_point/TK3IWkUHHAIjg75cFRf3bXL8LICs1_Fv40pKlN4NNSeSASz7FmlWHYg.woff2","fqdn":"thinkingoutsidethebucket.com","domain":"thinkingoutsidethebucket.com","tld":"com"},"ip":{"addr":"172.67.186.110","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://thinkingoutsidethebucket.com/","date":"2026-09-22T10:17:23.297Z","timestamp":1790072243297,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thinkingoutsidethebucket.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 17 Aug 2026 16:20:47 GMT","end":"Sun, 15 Nov 2026 17:20:45 GMT"},"fingerprint":{"sha1":"31:D1:4C:C2:43:2B:3F:80:20:E9:8E:B1:74:AE:EE:22:C8:77:BD:D9","sha256":"12:37:00:91:E3:0C:F6:E7:15:A3:22:15:85:8C:7B:62:3B:E2:F6:3D:C1:3B:B7:44:F4:ED:A8:2D:12:BF:A9:9D"}}},"request":{"raw":"GET /lander/black_hole_sun_goal_point/TK3IWkUHHAIjg75cFRf3bXL8LICs1_Fv40pKlN4NNSeSASz7FmlWHYg.woff2 HTTP/1.1\r\nHost: thinkingoutsidethebucket.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://thinkingoutsidethebucket.com/lander/black_hole_sun_goal_point/css2.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 22 Sep 2026 10:17:23 GMT\r\ncontent-type: font/woff2\r\nserver-timing: cfExtPri\r\nlast-modified: Thu, 04 Jun 2026 08:54:48 GMT\r\npriority: u=3,i=?0\r\netag: \"6a213d58-53c4\"\r\nexpires: Fri, 02 Oct 2026 09:44:38 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 1964\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ivThJXF7aRLWJW57Zyvs2eVEfr5tn%2BEGeXKfhSrySqKUOCJO7AClLJfTwD7%2F6PaYL5WwIG0h49OgR1rfxRvIERhWcNIK4GXyu%2Bxo13cEt%2B5bIWn30MD8Nis0xSMO%2FENQV8K%2FZCSOKl7T9gzjvADq\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3f08f40987856c3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 21444\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":21444,"size_decoded":22240,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 21444, version 1.0","md5":"ffd3d57638a7899d80bcc108713c271c","sha1":"d186409ee24fc3d1cc8194434dd707181ead20ec","sha256":"99027d866818f716d208569108a962ac72200197cae503efe5b6bf002bf4915b","sha512":"7305c344cd8f954929314f3b5c9b996638e57d5f142a327ddc9f42f592880ea30b5102c73ee0e296bb3c4fc21d9fce5d862a492b4bc1127ba2c79c4def527c62","ssdeep":"384:8cEHB0MPPblbQ3jOYVdSj2WvnrFnimhmA4sC1ad7RNwAwEMwdz12N/:LEv5QKYanrFtm8d7Rbwyo/","tlshash":"4ca2e089bf9393d84ccf3b6ca55dc6d5a6ae1ce132ae9732f51ab083158812c921634c","first_seen":"2023-08-18T03:32:07Z","last_seen":"2026-09-22T10:17:56.830055Z","times_seen":4228,"resource_available":false,"data":null}},"time_used":75,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":75,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"thinkingoutsidethebucket.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"thinkingoutsidethebucket.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"thinkingoutsidethebucket.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"thinkingoutsidethebucket.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thinkingoutsidethebucket.com/lander/black_hole_sun_goal_point/6xKydSBYKcSV-LCoeQqfX1RYOo3ik4zwlxdu.woff2","fqdn":"thinkingoutsidethebucket.com","domain":"thinkingoutsidethebucket.com","tld":"com"},"ip":{"addr":"172.67.186.110","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://thinkingoutsidethebucket.com/","date":"2026-09-22T10:17:23.298Z","timestamp":1790072243298,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thinkingoutsidethebucket.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 17 Aug 2026 16:20:47 GMT","end":"Sun, 15 Nov 2026 17:20:45 GMT"},"fingerprint":{"sha1":"31:D1:4C:C2:43:2B:3F:80:20:E9:8E:B1:74:AE:EE:22:C8:77:BD:D9","sha256":"12:37:00:91:E3:0C:F6:E7:15:A3:22:15:85:8C:7B:62:3B:E2:F6:3D:C1:3B:B7:44:F4:ED:A8:2D:12:BF:A9:9D"}}},"request":{"raw":"GET /lander/black_hole_sun_goal_point/6xKydSBYKcSV-LCoeQqfX1RYOo3ik4zwlxdu.woff2 HTTP/1.1\r\nHost: thinkingoutsidethebucket.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://thinkingoutsidethebucket.com/lander/black_hole_sun_goal_point/css2.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 22 Sep 2026 10:17:23 GMT\r\ncontent-type: font/woff2\r\nserver-timing: cfExtPri\r\nlast-modified: Thu, 04 Jun 2026 08:54:48 GMT\r\npriority: u=3,i=?0\r\netag: \"6a213d58-39bc\"\r\nexpires: Fri, 02 Oct 2026 09:44:41 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 1961\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Icr%2F0ykiHZPeXQWdH7ZadeP360uD9ZDQ22nE4cVklwygsiR%2F6SREubn%2BBdn4OWJVB4YQNspjC5C%2BuzNOObUtihnLHIzt8bDZEfZtb95BXXcpuh6Px5RRSpcxtgldY%2FgTxaIArMMnYLhEnOqufWg8\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3f08f40a87956c3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 14780\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14780,"size_decoded":15574,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 14780, version 1.0","md5":"8dae809192c44690275a3624133293e7","sha1":"969c98c4d7eb00386ebbd61a63288972d138ecb8","sha256":"c3de27b2cbd6deda629c9b442700cf54c0dda74e494b1c75a57d822068a047f8","sha512":"66dda9008b2e992e8efb994470338cb0f0a1a17a474ae2cf6aba12ca5f14a3e6f950446675a4ac5f28df65fb8878cc000de5767c1d107271b15826b83177b881","ssdeep":"384:y1eEXK7BfwOIT30DseNrOrBB3ZjaHg6vIXPSH:y1LXK9wjTGNFU3+gMIXPSH","tlshash":"e062d0741c09002bde66891fac3e4456fefcb8b08d29e2c17148d38769cb2e160d59de","first_seen":"2023-06-06T21:28:24Z","last_seen":"2026-09-23T02:06:38.416838Z","times_seen":8660,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"thinkingoutsidethebucket.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"thinkingoutsidethebucket.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"thinkingoutsidethebucket.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"thinkingoutsidethebucket.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.lesrencontreseconomiques.fr/wp-content/uploads/2025/01/guillaume-faury-1-1-224x290.jpg","fqdn":"www.lesrencontreseconomiques.fr","domain":"lesrencontreseconomiques.fr","tld":"fr"},"ip":{"addr":"51.75.198.185","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://thinkingoutsidethebucket.com/","date":"2026-09-22T10:17:23.385Z","timestamp":1790072243385,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lesrencontreseconomiques.fr","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 16 Aug 2026 20:27:53 GMT","end":"Sat, 14 Nov 2026 20:27:52 GMT"},"fingerprint":{"sha1":"07:1E:5E:A4:CD:D4:CA:67:BA:18:1A:90:51:A8:6B:DB:84:25:9C:11","sha256":"C0:41:C7:DC:0F:09:17:5C:6A:2B:4C:E5:80:F5:69:91:A5:BF:6E:FC:CD:6C:A1:07:46:61:FE:89:6D:21:8B:0E"}}},"request":{"raw":"GET /wp-content/uploads/2025/01/guillaume-faury-1-1-224x290.jpg HTTP/1.1\r\nHost: www.lesrencontreseconomiques.fr\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://thinkingoutsidethebucket.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Tue, 22 Sep 2026 10:17:23 GMT\r\nServer: Apache\r\nLast-Modified: Fri, 28 Mar 2025 13:44:33 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 6462\r\nVary: Accept-Encoding\r\nCache-Control: max-age=180, public\r\nKeep-Alive: timeout=5, max=100\r\nConnection: Keep-Alive\r\nContent-Type: image/jpeg\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":6462,"size_decoded":6765,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"Compressed by jpeg-recompress\", comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82\", progressive, precision 8, 224x290, components 3","md5":"e725446228d55aaf446e173ebd91b2b9","sha1":"8a1fe046ee8b82cfa3e7247ad2ff5fb7836b99fb","sha256":"f4d9a0c39b888fdedc81b43d1c02bf3d3fc0e9d2e26c17905c48a028ce399fb5","sha512":"f3d5c3a611dcbe52794049257f10fdaa7be6423f3e914b5b5e106f4423e25b2cfe05e42afe8f163b5b7163af04137ac31a1d6d7bc13eeda79e066e8b440298de","ssdeep":"96:X8D/2LNtW9h3u1ntVdRRHCHCTcdv3fqQo105glNY56T3+l98ugm8G9vffLdKe7/l:ltWr6ntVL1wxgl/u9/aG9nfLgeVQm9","tlshash":"e1d18e6b80c0fc42d7d4982239040b8a9ddbff043359b26d76fb9a19b49651e3e4b50b","first_seen":"2026-06-13T08:37:31.333609Z","last_seen":"2026-09-22T10:17:56.84742Z","times_seen":14,"resource_available":false,"data":null}},"time_used":430,"timings":{"blocked":-1,"dns":62,"connect":31,"send":0,"wait":33,"receive":0,"ssl":301},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thinkingoutsidethebucket.com/lander/black_hole_sun_goal_point/w-logo-blue-white-bg.png","fqdn":"thinkingoutsidethebucket.com","domain":"thinkingoutsidethebucket.com","tld":"com"},"ip":{"addr":"172.67.186.110","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://thinkingoutsidethebucket.com/","date":"2026-09-22T10:17:23.823Z","timestamp":1790072243823,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thinkingoutsidethebucket.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 17 Aug 2026 16:20:47 GMT","end":"Sun, 15 Nov 2026 17:20:45 GMT"},"fingerprint":{"sha1":"31:D1:4C:C2:43:2B:3F:80:20:E9:8E:B1:74:AE:EE:22:C8:77:BD:D9","sha256":"12:37:00:91:E3:0C:F6:E7:15:A3:22:15:85:8C:7B:62:3B:E2:F6:3D:C1:3B:B7:44:F4:ED:A8:2D:12:BF:A9:9D"}}},"request":{"raw":"GET /lander/black_hole_sun_goal_point/w-logo-blue-white-bg.png HTTP/1.1\r\nHost: thinkingoutsidethebucket.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://thinkingoutsidethebucket.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 22 Sep 2026 10:17:23 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Thu, 04 Jun 2026 08:54:48 GMT\r\npriority: u=6,i=?0\r\netag: \"6a213d58-1017\"\r\nexpires: Mon, 28 Sep 2026 02:56:02 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 372081\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6FHBAuCdean8wPyGpKB8BWz1M30n69cZZrjBbMdr7FpJH4J9OYrCFlbTLg%2FuWc0dlvubx8VBoWfjOIrGZehc0xW%2FQUBGSkposp0U6hj3zCTy2g5jcwo0a%2FEwi46Gt8zY%2BAftLnKTHNElbBxyP7ZG\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3f08f43e8ba56c3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 4119\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4119,"size_decoded":4911,"mime_type":"image/png","magic":"PNG image data, 80 x 80, 8-bit/color RGBA, non-interlaced","md5":"000bf649cc8f6bf27cfb04d1bcdcd3c7","sha1":"d73d2f6d74ec6cdcbae07955592962e77d8ae814","sha256":"6bdb369337ac2496761c6f063bffea0aa6a91d4662279c399071a468251f51f0","sha512":"73d2ea5ffc572c1ae73f37f8f0ff25e945afee8e077b6ee42ce969e575cdc2d8444f90848ea1cb4d1c9ee4bd725aee2b4576afc25f17d7295a90e1cbfe6edfd5","ssdeep":"96:h3bdWfcmTY+aRF1pXWZL2+42HGhIUc8KeLEd:hgXTY+as02mOB8XLEd","tlshash":"00814b63df38c566e66a2b189ff6bca56b290fd50ca1194c0eecb025632c06d1065089","first_seen":"2023-04-08T12:31:37Z","last_seen":"2026-09-23T14:17:57.800216Z","times_seen":74877,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"thinkingoutsidethebucket.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"thinkingoutsidethebucket.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"thinkingoutsidethebucket.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"thinkingoutsidethebucket.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thinkingoutsidethebucket.com/lander/black_hole_sun_goal_point/css.css","fqdn":"thinkingoutsidethebucket.com","domain":"thinkingoutsidethebucket.com","tld":"com"},"ip":{"addr":"172.67.186.110","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thinkingoutsidethebucket.com/","date":"2026-09-22T10:17:22.926Z","timestamp":1790072242926,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thinkingoutsidethebucket.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 17 Aug 2026 16:20:47 GMT","end":"Sun, 15 Nov 2026 17:20:45 GMT"},"fingerprint":{"sha1":"31:D1:4C:C2:43:2B:3F:80:20:E9:8E:B1:74:AE:EE:22:C8:77:BD:D9","sha256":"12:37:00:91:E3:0C:F6:E7:15:A3:22:15:85:8C:7B:62:3B:E2:F6:3D:C1:3B:B7:44:F4:ED:A8:2D:12:BF:A9:9D"}}},"request":{"raw":"GET /lander/black_hole_sun_goal_point/css.css HTTP/1.1\r\nHost: thinkingoutsidethebucket.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://thinkingoutsidethebucket.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 22 Sep 2026 10:17:22 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 04 Jun 2026 08:54:48 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GXOO5%2BHFQa%2BRKNQ4xb%2FyXuGvhgUwFsgsLwUdraMLBH3h6uia15rQ6HrsJorEvgOf%2FgMB7QZnDAfFo1AS4NXt6kCNkP5Es4OBH%2B3ntiffqmwOu7RGJqu%2FnA%2F%2BUSI6egBjvtFVeF%2Fc8RpB1Xm65aPy\"}]}\r\npriority: u=2,i=?0\r\netag: W/\"6a213d58-19c2\"\r\nexpires: Wed, 30 Sep 2026 21:33:31 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nvary: accept-encoding\r\nage: 132231\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3f08f3e5fe656c3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6594,"size_decoded":1477,"mime_type":"text/css","magic":"ASCII text","md5":"5fb1a9c6b42d5c837c130881f9153e1c","sha1":"94d35824d6880ef7799a7142869e49b61d40e714","sha256":"b7209de5a3a701905aa9c47cd9cd82d0b5b9ec991524ec6d65a4e2c52bd7a59d","sha512":"60bc050fea57b2f9a361da975085033bc44e0fb58ac3ad85e8cee2b9cab27ab8fbea82b0a550eff18c6aa027cefb54b1afcbdd25bc9bb11a1a0bd755b85437de","ssdeep":"192:DMvzMxMqMP3aMmMRZM0MvSMcMLMP37MfMRkM9MvvMFMuMP3eMCMRtMJ:IJ8AoFY","tlshash":"b4d1daa1087b6401e7a70cc567cf3fa26dad6151a086d97d9ffe24287c9bd312360b8d","first_seen":"2026-06-13T08:37:31.335398Z","last_seen":"2026-09-22T10:17:56.848698Z","times_seen":20,"resource_available":true,"data":null}},"time_used":57,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":57,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"thinkingoutsidethebucket.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"thinkingoutsidethebucket.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"thinkingoutsidethebucket.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"thinkingoutsidethebucket.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thinkingoutsidethebucket.com/lander/black_hole_sun_goal_point/style.min.css","fqdn":"thinkingoutsidethebucket.com","domain":"thinkingoutsidethebucket.com","tld":"com"},"ip":{"addr":"172.67.186.110","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thinkingoutsidethebucket.com/","date":"2026-09-22T10:17:22.929Z","timestamp":1790072242929,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thinkingoutsidethebucket.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 17 Aug 2026 16:20:47 GMT","end":"Sun, 15 Nov 2026 17:20:45 GMT"},"fingerprint":{"sha1":"31:D1:4C:C2:43:2B:3F:80:20:E9:8E:B1:74:AE:EE:22:C8:77:BD:D9","sha256":"12:37:00:91:E3:0C:F6:E7:15:A3:22:15:85:8C:7B:62:3B:E2:F6:3D:C1:3B:B7:44:F4:ED:A8:2D:12:BF:A9:9D"}}},"request":{"raw":"GET /lander/black_hole_sun_goal_point/style.min.css HTTP/1.1\r\nHost: thinkingoutsidethebucket.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://thinkingoutsidethebucket.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 22 Sep 2026 10:17:22 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 04 Jun 2026 08:54:48 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8iGvWumkDB%2BkudacK%2F8MDMUK5Dx4w8bCAlLBkzMdUPzM4%2BdAkviP34t8OURqRanJU63Ll0Pbhwwe%2BqmO3xTbGIc1ANc5nB8hfK4KTfCVDzIXnEcGRQghyTjFuLUQXa9TLvqq4NP2pfd31br7aLTA\"}]}\r\npriority: u=2,i=?0\r\netag: W/\"6a213d58-1bf1d\"\r\nexpires: Wed, 30 Sep 2026 21:33:31 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nvary: accept-encoding\r\nage: 132231\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3f08f3e5fe756c3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":114461,"size_decoded":15887,"mime_type":"text/css","magic":"ASCII text, with very long lines (59210)","md5":"7729247eccaffc76e16f36f77115f375","sha1":"20c089ddd9cde956a41562afb091805497488e9b","sha256":"131297ee0bc20496776eea8c181df05097a56611fc3f80302963e76d67992474","sha512":"510a85574d413f6a84b091cca4bf58bce2dfce06cd503021cf67b32d9fea9ba827ada0dda53559d457a1593fe6766ca7ae344f3ee46642be5af081c027b45460","ssdeep":"3072:HaeJuX7Qg5MG7H+qehvP0x2pUk44Q03Pm:QX7Qg5MG7H+qehvP0x2pUk4T0O","tlshash":"a2b3625417b4dcf935ffa73a5e4ee258a103aa41c68a67e7e066d190618ca490cf3f0f","first_seen":"2025-07-21T01:28:49.075422Z","last_seen":"2026-09-22T10:17:56.849287Z","times_seen":31,"resource_available":true,"data":null}},"time_used":59,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":58,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"thinkingoutsidethebucket.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"thinkingoutsidethebucket.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"thinkingoutsidethebucket.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"thinkingoutsidethebucket.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thinkingoutsidethebucket.com/lander/black_hole_sun_goal_point/default-skin.css","fqdn":"thinkingoutsidethebucket.com","domain":"thinkingoutsidethebucket.com","tld":"com"},"ip":{"addr":"172.67.186.110","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thinkingoutsidethebucket.com/","date":"2026-09-22T10:17:22.932Z","timestamp":1790072242932,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thinkingoutsidethebucket.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 17 Aug 2026 16:20:47 GMT","end":"Sun, 15 Nov 2026 17:20:45 GMT"},"fingerprint":{"sha1":"31:D1:4C:C2:43:2B:3F:80:20:E9:8E:B1:74:AE:EE:22:C8:77:BD:D9","sha256":"12:37:00:91:E3:0C:F6:E7:15:A3:22:15:85:8C:7B:62:3B:E2:F6:3D:C1:3B:B7:44:F4:ED:A8:2D:12:BF:A9:9D"}}},"request":{"raw":"GET /lander/black_hole_sun_goal_point/default-skin.css HTTP/1.1\r\nHost: thinkingoutsidethebucket.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://thinkingoutsidethebucket.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 22 Sep 2026 10:17:23 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 04 Jun 2026 08:54:48 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=aqShxMz%2BP4p1sYlu0edTU3ysM2NzRcSYp8E6hfUiWjl0wxfXPhSUQoQVGoFDyKAv2PEuLlEu4BRkW7fMutNc2N%2B1zDJ2NscpchsskopGnR1ONZ3XwrKPiCAQGNqCPra6OWz4L7WznIyronWAX7vb\"}]}\r\npriority: u=2,i=?0\r\netag: W/\"6a213d58-1ed3\"\r\nexpires: Wed, 30 Sep 2026 21:33:31 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nvary: accept-encoding\r\nage: 132231\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3f08f3e5fea56c3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7891,"size_decoded":2712,"mime_type":"text/css","magic":"ASCII text, with very long lines (7809)","md5":"4c43b9732aabf4fe88387fdb825035bb","sha1":"90557c08241a751dd828ad3b8b7f7f8f0ef827d4","sha256":"b93c67780399c742c89adb12ec67905438288bd09307415e8a8cff79e77b0345","sha512":"07b3d22f3933a661809ed7148a0c36c86e954aa0c397d484363aa19aa5f6dff89b070b1d1de2e996930f89a400398c2faa8f42198aee604c916c1cd8e651495b","ssdeep":"192:w1MEFl2zTfwdS4xLxExWZtxIx+x9U/lbM:iUGxLxExWZtxIx+x9U/lbM","tlshash":"f7f15476c5c4221c6013df12e6dab71452a6932fb8723aafe731747bc2c6b684a1f513","first_seen":"2026-06-13T08:37:31.336275Z","last_seen":"2026-09-22T10:17:56.84996Z","times_seen":20,"resource_available":true,"data":null}},"time_used":74,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":74,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"thinkingoutsidethebucket.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"thinkingoutsidethebucket.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"thinkingoutsidethebucket.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"thinkingoutsidethebucket.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thinkingoutsidethebucket.com/lander/black_hole_sun_goal_point/6xKydSBYKcSV-LCoeQqfX1RYOo3iu4nwlxdu.woff2","fqdn":"thinkingoutsidethebucket.com","domain":"thinkingoutsidethebucket.com","tld":"com"},"ip":{"addr":"172.67.186.110","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://thinkingoutsidethebucket.com/","date":"2026-09-22T10:17:23.296Z","timestamp":1790072243296,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thinkingoutsidethebucket.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 17 Aug 2026 16:20:47 GMT","end":"Sun, 15 Nov 2026 17:20:45 GMT"},"fingerprint":{"sha1":"31:D1:4C:C2:43:2B:3F:80:20:E9:8E:B1:74:AE:EE:22:C8:77:BD:D9","sha256":"12:37:00:91:E3:0C:F6:E7:15:A3:22:15:85:8C:7B:62:3B:E2:F6:3D:C1:3B:B7:44:F4:ED:A8:2D:12:BF:A9:9D"}}},"request":{"raw":"GET /lander/black_hole_sun_goal_point/6xKydSBYKcSV-LCoeQqfX1RYOo3iu4nwlxdu.woff2 HTTP/1.1\r\nHost: thinkingoutsidethebucket.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://thinkingoutsidethebucket.com/lander/black_hole_sun_goal_point/css2.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 22 Sep 2026 10:17:23 GMT\r\ncontent-type: font/woff2\r\nserver-timing: cfExtPri\r\nlast-modified: Thu, 04 Jun 2026 08:54:48 GMT\r\npriority: u=3,i=?0\r\netag: \"6a213d58-376c\"\r\nexpires: Fri, 02 Oct 2026 09:44:52 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 1950\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YkIVwJqliPBSgajq4Afji%2BCO4wW5otb5JSdUwb3Tv3t2J1VYVgnR%2F35aMjIDrwtbKjeMti2hALWaG6IR8dWKg3tQvNn4E4Z4Q8kvovxl9tMStYxUUzz3xbJBf3aV8AUy7mly%2FBBmu3O4kK23GYzP\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3f08f40987756c3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 14188\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14188,"size_decoded":14978,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 14188, version 1.0","md5":"eb0aa55d4737c1ad19e5d9e5d3f0efbf","sha1":"f909e7fff1d5be6f308912d5c407ae618ba53d9c","sha256":"aee584e3d58344a41b190bb7b6e550f98ad3bb8e28fbc7ea6ddca22f0ef97183","sha512":"21bbb71ddada607e1dc82136cf48501fda8ef02aef44ddde0814757dd8c1d78deb3827528a309ded56926fe5c5b9654dfb2f79538fa86233e75073d3a6b93712","ssdeep":"384:X2kgMB7DA1ovnSGbhB51YCmChGAZQZVrb:vgM5DA+vn/hWw+Vrb","tlshash":"3952d0eb2602cdaac0566cd8f4787843f91e893ed6297cd34ac05dd6ec4ef469224c18","first_seen":"2023-06-07T02:47:16Z","last_seen":"2026-09-22T10:17:56.850546Z","times_seen":1927,"resource_available":false,"data":null}},"time_used":62,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":62,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"thinkingoutsidethebucket.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"thinkingoutsidethebucket.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"thinkingoutsidethebucket.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"thinkingoutsidethebucket.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.lesrencontreseconomiques.fr/wp-content/uploads/2024/03/christel-heydemann-224x290-1.jpg","fqdn":"www.lesrencontreseconomiques.fr","domain":"lesrencontreseconomiques.fr","tld":"fr"},"ip":{"addr":"51.75.198.185","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://thinkingoutsidethebucket.com/","date":"2026-09-22T10:17:23.387Z","timestamp":1790072243387,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lesrencontreseconomiques.fr","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 16 Aug 2026 20:27:53 GMT","end":"Sat, 14 Nov 2026 20:27:52 GMT"},"fingerprint":{"sha1":"07:1E:5E:A4:CD:D4:CA:67:BA:18:1A:90:51:A8:6B:DB:84:25:9C:11","sha256":"C0:41:C7:DC:0F:09:17:5C:6A:2B:4C:E5:80:F5:69:91:A5:BF:6E:FC:CD:6C:A1:07:46:61:FE:89:6D:21:8B:0E"}}},"request":{"raw":"GET /wp-content/uploads/2024/03/christel-heydemann-224x290-1.jpg HTTP/1.1\r\nHost: www.lesrencontreseconomiques.fr\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://thinkingoutsidethebucket.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Tue, 22 Sep 2026 10:17:23 GMT\r\nServer: Apache\r\nLast-Modified: Fri, 28 Mar 2025 14:57:19 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 4699\r\nVary: Accept-Encoding\r\nCache-Control: max-age=180, public\r\nKeep-Alive: timeout=5, max=100\r\nConnection: Keep-Alive\r\nContent-Type: image/jpeg\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":4699,"size_decoded":5002,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"Compressed by jpeg-recompress\", comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90\", progressive, precision 8, 224x290, components 3","md5":"3f4e41c8541134fc64c2bae3c2b0159c","sha1":"9a2d45a95485099d70dfbdc40eddea40b85f780a","sha256":"e9dac7edba330cd86b905c70d4d02f07e8411806d90f8bc3943f2bc71f1195d7","sha512":"f4cb260d95098f074c11af62f7daa71bcf8f75da0317f35abcc34c8de67645d7ec3002e2f34eb979a245b7b2d9e85c3545586b2976ff7c74d6db7ff4a2f2a867","ssdeep":"96:r/gaBGHm8z3Cpo62EhMUko/evBsczC1D/DlqUQ+6s:LgLlzREv/evmhlpr6s","tlshash":"56a18fb063a8077cf40b58fc94ed869557e2d7757443438323286a2fe9740f995149c3","first_seen":"2026-06-13T08:37:31.347794Z","last_seen":"2026-09-22T10:17:56.851082Z","times_seen":14,"resource_available":false,"data":null}},"time_used":432,"timings":{"blocked":-1,"dns":61,"connect":31,"send":0,"wait":33,"receive":0,"ssl":304},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thinkingoutsidethebucket.com/lander/black_hole_sun_goal_point/header-yt-grey.png","fqdn":"thinkingoutsidethebucket.com","domain":"thinkingoutsidethebucket.com","tld":"com"},"ip":{"addr":"172.67.186.110","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://thinkingoutsidethebucket.com/","date":"2026-09-22T10:17:23.131Z","timestamp":1790072243131,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thinkingoutsidethebucket.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 17 Aug 2026 16:20:47 GMT","end":"Sun, 15 Nov 2026 17:20:45 GMT"},"fingerprint":{"sha1":"31:D1:4C:C2:43:2B:3F:80:20:E9:8E:B1:74:AE:EE:22:C8:77:BD:D9","sha256":"12:37:00:91:E3:0C:F6:E7:15:A3:22:15:85:8C:7B:62:3B:E2:F6:3D:C1:3B:B7:44:F4:ED:A8:2D:12:BF:A9:9D"}}},"request":{"raw":"GET /lander/black_hole_sun_goal_point/header-yt-grey.png HTTP/1.1\r\nHost: thinkingoutsidethebucket.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://thinkingoutsidethebucket.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 22 Sep 2026 10:17:23 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Thu, 04 Jun 2026 08:54:48 GMT\r\npriority: u=5,i\r\netag: \"6a213d58-1e5\"\r\nexpires: Wed, 30 Sep 2026 21:33:31 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 132231\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1PmqG9yLjqzh9qeieYuiDgtETYBAt%2FpoJJLnrUIHHgMUiy6MLQEXS6zP6Qa%2FHY8RitR4iIU9hIWKsA%2Ff4uBFrJ6%2B8DAqqitBXORs8Q7KITdEOMZ8xiVqZyUIz6JQwZ3MZ0XHNUYsNpvGzz36Ey7L\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3f08f3f982756c3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 485\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":485,"size_decoded":1272,"mime_type":"image/png","magic":"PNG image data, 22 x 22, 8-bit/color RGBA, non-interlaced","md5":"2165ac0049b204e406cfab2b7a7f3cdf","sha1":"bb979b9987d4c71b4102e6f46a864a9a856e31ed","sha256":"de9944d3b3db90e9a7bc04fd540fa5d169f58e3a4a9c61f801ac664a8c343200","sha512":"2c69077c9e8a60d4b94f6ab13e5cefe8b27ed139acd4aac9769e8074d04abd1b67d9e96bd4785c16d328c4e7b78e890251ae74712e49a97562d91b0d0eae71a4","ssdeep":"","tlshash":"4df09e8ad73c3bb9c5096a298a4628981cdac7d0523b2e29896692d5994925c1880b53","first_seen":"2026-01-04T19:54:11.116733Z","last_seen":"2026-09-22T10:17:56.851625Z","times_seen":22,"resource_available":false,"data":null}},"time_used":68,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":68,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"thinkingoutsidethebucket.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"thinkingoutsidethebucket.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"thinkingoutsidethebucket.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"thinkingoutsidethebucket.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.lesrencontreseconomiques.fr/wp-content/uploads/2025/01/michel-barnier-224x290.jpg","fqdn":"www.lesrencontreseconomiques.fr","domain":"lesrencontreseconomiques.fr","tld":"fr"},"ip":{"addr":"51.75.198.185","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://thinkingoutsidethebucket.com/","date":"2026-09-22T10:17:23.160Z","timestamp":1790072243160,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lesrencontreseconomiques.fr","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 16 Aug 2026 20:27:53 GMT","end":"Sat, 14 Nov 2026 20:27:52 GMT"},"fingerprint":{"sha1":"07:1E:5E:A4:CD:D4:CA:67:BA:18:1A:90:51:A8:6B:DB:84:25:9C:11","sha256":"C0:41:C7:DC:0F:09:17:5C:6A:2B:4C:E5:80:F5:69:91:A5:BF:6E:FC:CD:6C:A1:07:46:61:FE:89:6D:21:8B:0E"}}},"request":{"raw":"GET /wp-content/uploads/2025/01/michel-barnier-224x290.jpg HTTP/1.1\r\nHost: www.lesrencontreseconomiques.fr\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://thinkingoutsidethebucket.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Tue, 22 Sep 2026 10:17:23 GMT\r\nServer: Apache\r\nLast-Modified: Fri, 28 Mar 2025 13:44:39 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 7315\r\nVary: Accept-Encoding\r\nCache-Control: max-age=180, public\r\nKeep-Alive: timeout=5, max=100\r\nConnection: Keep-Alive\r\nContent-Type: image/jpeg\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":7315,"size_decoded":7618,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"Compressed by jpeg-recompress\", comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82\", progressive, precision 8, 224x290, components 3","md5":"fb00f03bdfda9be247bb3c26e64efa31","sha1":"3d9fb5f12d78163d53c977c68447921641316538","sha256":"11b4a2e154fa7f420848561ab987c14a01ce975bb0d7680ef49ee32f6ff9a1c2","sha512":"d3d8dbdca33506aa31ccfb5f3f8152eb7c129c9204c8f3e8b07762ef9d1a2f1a9b20a758ea76acf23e14aa2cd73664f6176b66a127e5954a4841f06431baf8db","ssdeep":"192:l4xUV+QX/hIUcVLFP9YAg3d0vI1VJFMM86Ztk:l4xUEyEDPSJqM86Q","tlshash":"67e1ae55931b6d78e72fb0387af42ffd236428a4794c41d09b7f481a0fb98e49794492","first_seen":"2026-06-13T08:37:31.332597Z","last_seen":"2026-09-22T10:17:56.852154Z","times_seen":20,"resource_available":false,"data":null}},"time_used":442,"timings":{"blocked":-1,"dns":287,"connect":31,"send":0,"wait":58,"receive":0,"ssl":65},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thinkingoutsidethebucket.com/lander/black_hole_sun_goal_point/footer-yt-white.png","fqdn":"thinkingoutsidethebucket.com","domain":"thinkingoutsidethebucket.com","tld":"com"},"ip":{"addr":"172.67.186.110","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://thinkingoutsidethebucket.com/","date":"2026-09-22T10:17:23.164Z","timestamp":1790072243164,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thinkingoutsidethebucket.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 17 Aug 2026 16:20:47 GMT","end":"Sun, 15 Nov 2026 17:20:45 GMT"},"fingerprint":{"sha1":"31:D1:4C:C2:43:2B:3F:80:20:E9:8E:B1:74:AE:EE:22:C8:77:BD:D9","sha256":"12:37:00:91:E3:0C:F6:E7:15:A3:22:15:85:8C:7B:62:3B:E2:F6:3D:C1:3B:B7:44:F4:ED:A8:2D:12:BF:A9:9D"}}},"request":{"raw":"GET /lander/black_hole_sun_goal_point/footer-yt-white.png HTTP/1.1\r\nHost: thinkingoutsidethebucket.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://thinkingoutsidethebucket.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 22 Sep 2026 10:17:23 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Thu, 04 Jun 2026 08:54:48 GMT\r\npriority: u=5,i\r\netag: \"6a213d58-1a2\"\r\nexpires: Wed, 30 Sep 2026 21:33:31 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 132231\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oh3BPLmoGkpbYGbHoH%2Fx108Z2j1U%2F258KB4T%2BIwm%2FjK3Dsg1axkrYN4M9NfpYRJCl9j4YhWKp%2BRaEnUiu%2FWNFlehE2HHCoW9UvjPQkq%2FGQcOvyl42eUeOE0YDfFlh5i9mIjEQ1XcZTsuQ7zEuLfd\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3f08f3fc85e56c3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 418\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":418,"size_decoded":1211,"mime_type":"image/png","magic":"PNG image data, 30 x 30, 8-bit/color RGBA, non-interlaced","md5":"9019772fb8ebd5f2c35bac099588b32d","sha1":"f2bc4c59aa48b07c3628674aaafd808cb20ce226","sha256":"deaa3f5ff9538723f0085918b8fb52610d39f1adbade88ef6ee90304a7f06bb5","sha512":"8828afa372b7ce1550caa1331b66179aba44a1c71c22c399c4e8d2dd01fc25887905acad6b75dc68d892691934d7331866020eec3d2d105b6df7f40d18167a9a","ssdeep":"","tlshash":"20e0f1c7bac0f2b98172be2bb077410ccf075d2b8278b18433d49561665db04d5be57a","first_seen":"2026-01-04T19:54:11.114676Z","last_seen":"2026-09-22T10:17:56.852695Z","times_seen":22,"resource_available":false,"data":null}},"time_used":64,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":64,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"thinkingoutsidethebucket.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"thinkingoutsidethebucket.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"thinkingoutsidethebucket.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"thinkingoutsidethebucket.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thinkingoutsidethebucket.com/","fqdn":"thinkingoutsidethebucket.com","domain":"thinkingoutsidethebucket.com","tld":"com"},"ip":{"addr":"172.67.186.110","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-22T10:17:22.547Z","timestamp":1790072242547,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thinkingoutsidethebucket.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 17 Aug 2026 16:20:47 GMT","end":"Sun, 15 Nov 2026 17:20:45 GMT"},"fingerprint":{"sha1":"31:D1:4C:C2:43:2B:3F:80:20:E9:8E:B1:74:AE:EE:22:C8:77:BD:D9","sha256":"12:37:00:91:E3:0C:F6:E7:15:A3:22:15:85:8C:7B:62:3B:E2:F6:3D:C1:3B:B7:44:F4:ED:A8:2D:12:BF:A9:9D"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: thinkingoutsidethebucket.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 22 Sep 2026 10:17:22 GMT\r\ncontent-type: text/html; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=b4cBq8YSzBo%2F3x2fV8odC8AJbseMo4T9ukaZWIdZ4qKS4UDmo4oJSxnkfoQhvgFe%2BIdqu4lrqDZM4fhiW9Uy6TcDm0XvolhjFyc%2B4geS8i74Mfg4DkPTBicG9%2BLPLNuQgbVm13XVfayYN%2FGlDAY%2B\"}]}\r\npriority: u=0,i\r\ncache-control: no-cache, no-store, must-revalidate\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Tue, 22 Sep 2026 10:17:22 GMT\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: zstd\r\ncf-ray: a3f08f3c4fa056c3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"WPML:4.7.2","description":"WPML plugin makes it possible to build and run fully multilingual WordPress sites.","website":"https://wpml.org/","common_platform_enumeration":"","icon":"WPML.svg","categories":["WordPress plugins","Translation"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Yoast SEO:24.8","description":"Yoast SEO is a search engine optimisation plugin for WordPress and other platforms.","website":"https://yoast.com/wordpress/plugins/seo/","common_platform_enumeration":"","icon":"Yoast SEO.png","categories":["SEO","WordPress plugins"]},{"name":"WordPress:6.7.2","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"Google Tag Manager","description":"Google Tag Manager is a tag management system (TMS) that allows you to quickly and easily update measurement codes and related code fragments collectively known as tags on your website or mobile app.","website":"https://www.google.com/tagmanager","common_platform_enumeration":"","icon":"Google Tag Manager.svg","categories":["Tag managers"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":353310,"size_decoded":40507,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (12112)","md5":"ade71862fe9f4238da9c4b7b0d5b47a1","sha1":"d0658903a523fca6064282ede6cfde43bdfa1a2b","sha256":"492e6a8e844234b34ad0c42fb8b00dcee4b48cff9e1d0a2fbefc80a0bf0d98a4","sha512":"dfbe5114ec07d8af3db42d8e1b6535f8cd1dbd013a8379f881cdd3eb08f564dbd3a7f4c6498e0f2d41c363fcc70054b13e558ed7fdd7ae027e68401461cb1108","ssdeep":"3072:1xLE8BTI9niIgsJSOVCiBa2zdxWTDLZv2+io+60IROitOmxGqPzrEl5pFDo+iY+V:fEAE9iXivS","tlshash":"fa741213e761513efd27666a27bc969c62797d82dc10abe5f91f20708bd3efe1092024","first_seen":"2026-06-13T08:37:31.349788Z","last_seen":"2026-09-22T10:17:56.853425Z","times_seen":14,"resource_available":true,"data":null}},"time_used":186,"timings":{"blocked":-1,"dns":19,"connect":27,"send":0,"wait":137,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"thinkingoutsidethebucket.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"thinkingoutsidethebucket.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"thinkingoutsidethebucket.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"thinkingoutsidethebucket.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thinkingoutsidethebucket.com/lander/black_hole_sun_goal_point/font-summer.css","fqdn":"thinkingoutsidethebucket.com","domain":"thinkingoutsidethebucket.com","tld":"com"},"ip":{"addr":"172.67.186.110","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thinkingoutsidethebucket.com/","date":"2026-09-22T10:17:22.933Z","timestamp":1790072242933,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thinkingoutsidethebucket.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 17 Aug 2026 16:20:47 GMT","end":"Sun, 15 Nov 2026 17:20:45 GMT"},"fingerprint":{"sha1":"31:D1:4C:C2:43:2B:3F:80:20:E9:8E:B1:74:AE:EE:22:C8:77:BD:D9","sha256":"12:37:00:91:E3:0C:F6:E7:15:A3:22:15:85:8C:7B:62:3B:E2:F6:3D:C1:3B:B7:44:F4:ED:A8:2D:12:BF:A9:9D"}}},"request":{"raw":"GET /lander/black_hole_sun_goal_point/font-summer.css HTTP/1.1\r\nHost: thinkingoutsidethebucket.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://thinkingoutsidethebucket.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 22 Sep 2026 10:17:22 GMT\r\ncontent-type: text/css\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cD%2FBQ0tJete6WdljO6f88VbcI92BQrtosf5ClBd143HjHPnuLRsbNQqqn%2FFqa0m0Gtr6QutKntDHi8rx14qEl8dbx6xQFEjnz4y2%2BRAy70D605e5wQ%2BjEDUHpZAv%2B%2Be6%2F9lqVpvjYq9UsfzsENZ0\"}]}\r\nlast-modified: Thu, 04 Jun 2026 08:54:48 GMT\r\npriority: u=2,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Wed, 30 Sep 2026 21:33:31 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\netag: W/\"6a213d58-b3\"\r\nage: 132231\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a3f08f3e5feb56c3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":179,"size_decoded":897,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"389a6076b43fdeba7a62fa545b4632aa","sha1":"9f87316d543cf4fbd1d2aa9203cb9156b5426c0e","sha256":"9b9251c49559476d2631fa7bb37efb80d906360416e2c6b6d766b80a1b998b97","sha512":"da9a422023f7c4c8600cd37ed95b3432e90d0b2e8fc1b1f9bf56e55bcc2ae44100702a603c68147049938af201d68f2f8afefe88a03d2f5f6efba91fe9c4389a","ssdeep":"","tlshash":"55c012218416c02380a2aa723acafb622e1ff0283428192280168829ccb2da303c4f38","first_seen":"2026-06-13T08:37:31.328669Z","last_seen":"2026-09-22T10:17:56.85396Z","times_seen":20,"resource_available":true,"data":null}},"time_used":64,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":63,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"thinkingoutsidethebucket.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"thinkingoutsidethebucket.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"thinkingoutsidethebucket.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"thinkingoutsidethebucket.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thinkingoutsidethebucket.com/lander/black_hole_sun_goal_point/style-fix.css","fqdn":"thinkingoutsidethebucket.com","domain":"thinkingoutsidethebucket.com","tld":"com"},"ip":{"addr":"172.67.186.110","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thinkingoutsidethebucket.com/","date":"2026-09-22T10:17:22.938Z","timestamp":1790072242938,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thinkingoutsidethebucket.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 17 Aug 2026 16:20:47 GMT","end":"Sun, 15 Nov 2026 17:20:45 GMT"},"fingerprint":{"sha1":"31:D1:4C:C2:43:2B:3F:80:20:E9:8E:B1:74:AE:EE:22:C8:77:BD:D9","sha256":"12:37:00:91:E3:0C:F6:E7:15:A3:22:15:85:8C:7B:62:3B:E2:F6:3D:C1:3B:B7:44:F4:ED:A8:2D:12:BF:A9:9D"}}},"request":{"raw":"GET /lander/black_hole_sun_goal_point/style-fix.css HTTP/1.1\r\nHost: thinkingoutsidethebucket.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://thinkingoutsidethebucket.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 22 Sep 2026 10:17:22 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 04 Jun 2026 08:54:48 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=C7RDioUwHAF3Mpu%2FAThR6XDRvljpe5QwMy0W29jHLvLSzoYc4mF15gE8g3bShA2WjouLoM%2F5hY3mWnv0Orr%2FyswCbtJyK0XNlWMEIGharOJsWOztz96wlIaZkUs7UyJ78IEkZGjSP%2By5oyKl4Req\"}]}\r\npriority: u=2,i=?0\r\netag: W/\"6a213d58-55c8\"\r\nexpires: Wed, 30 Sep 2026 21:33:31 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nvary: accept-encoding\r\nage: 132231\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3f08f3e6fee56c3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":21960,"size_decoded":5462,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (21958), with no line terminators","md5":"745c5b0ded2a119fb91cd5f1140a010e","sha1":"022471de756d5ece0ffd2c2f1c49228b1e63f004","sha256":"9b19b30802d054331a985ffde4dc08222717f1633c734216398a2e7dcecc2da7","sha512":"546044f987843b0e9e9afefe72541504ec43fbc9e34768c0c8ef892e5e760005af8d093210348d0c6c648bc9f15bfa6f966b54f4b34bc6545b27db9124c6e889","ssdeep":"384:yNKOTQUZ408swYwdwHw6wxwOwVwHo3ki3hy8oCIrDhvHbAt8IjNyvbtlXJ16pf6p:yikwYwdwHw6wxwOwVwHo0iRy8CrtIw3","tlshash":"19a2b752e882942c6117c075f5d6e35cb23ec512f3a746ea9c16993acfce5de02b26c8","first_seen":"2026-01-04T19:54:11.12197Z","last_seen":"2026-09-22T10:17:56.854597Z","times_seen":22,"resource_available":true,"data":null}},"time_used":63,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":63,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"thinkingoutsidethebucket.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"thinkingoutsidethebucket.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"thinkingoutsidethebucket.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"thinkingoutsidethebucket.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thinkingoutsidethebucket.com/lander/black_hole_sun_goal_point/style-variation.css","fqdn":"thinkingoutsidethebucket.com","domain":"thinkingoutsidethebucket.com","tld":"com"},"ip":{"addr":"172.67.186.110","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thinkingoutsidethebucket.com/","date":"2026-09-22T10:17:22.941Z","timestamp":1790072242941,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thinkingoutsidethebucket.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 17 Aug 2026 16:20:47 GMT","end":"Sun, 15 Nov 2026 17:20:45 GMT"},"fingerprint":{"sha1":"31:D1:4C:C2:43:2B:3F:80:20:E9:8E:B1:74:AE:EE:22:C8:77:BD:D9","sha256":"12:37:00:91:E3:0C:F6:E7:15:A3:22:15:85:8C:7B:62:3B:E2:F6:3D:C1:3B:B7:44:F4:ED:A8:2D:12:BF:A9:9D"}}},"request":{"raw":"GET /lander/black_hole_sun_goal_point/style-variation.css HTTP/1.1\r\nHost: thinkingoutsidethebucket.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://thinkingoutsidethebucket.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 22 Sep 2026 10:17:22 GMT\r\ncontent-type: text/css\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3z4FcgOqnQTItByfX6dRRDRaxj%2F9FxAp9ej1P2aJXRZ1xDRNO%2B4IlN2TDxIm49%2BxENo7Wczw5UN1oEJ2%2FUkKWVV6cNVR0NmQkad%2Bk8rTx3fO6pTN3RhW7hY11S3251Nz%2F4xNS7j2kMTysSeQp0dj\"}]}\r\nlast-modified: Thu, 04 Jun 2026 08:54:48 GMT\r\npriority: u=2,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Wed, 30 Sep 2026 21:33:31 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\netag: W/\"6a213d58-4ed\"\r\nage: 132231\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a3f08f3e6ff356c3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1261,"size_decoded":1247,"mime_type":"text/css","magic":"ASCII text, with very long lines (1261), with no line terminators","md5":"22270530fe80cd29e7d3c45f4849ca05","sha1":"553418f4eb853fe607dcc32df488d89cb5a51946","sha256":"c2083eb8364e9c6ce40b4788b35cd197bea95c4ec6a01cfad08e27ae3cb45389","sha512":"e7a5fe1a330a59f34e0b9c07fbce0a579baf03ee8d31696ab4f1f4176aeeaf526f352fe3a6fdfe87c497cf5457d57d51270c5197e92aa54e0e80a64931e4a506","ssdeep":"","tlshash":"7e2197a3fbc429593026c656a4477f7c7c3e94808b819cb6e620b7b847450df5ba060f","first_seen":"2026-06-13T08:37:31.329519Z","last_seen":"2026-09-22T10:17:56.85524Z","times_seen":20,"resource_available":true,"data":null}},"time_used":41,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":41,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"thinkingoutsidethebucket.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"thinkingoutsidethebucket.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"thinkingoutsidethebucket.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"thinkingoutsidethebucket.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thinkingoutsidethebucket.com/lander/black_hole_sun_goal_point/digifactory.css","fqdn":"thinkingoutsidethebucket.com","domain":"thinkingoutsidethebucket.com","tld":"com"},"ip":{"addr":"172.67.186.110","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thinkingoutsidethebucket.com/","date":"2026-09-22T10:17:22.944Z","timestamp":1790072242944,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thinkingoutsidethebucket.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 17 Aug 2026 16:20:47 GMT","end":"Sun, 15 Nov 2026 17:20:45 GMT"},"fingerprint":{"sha1":"31:D1:4C:C2:43:2B:3F:80:20:E9:8E:B1:74:AE:EE:22:C8:77:BD:D9","sha256":"12:37:00:91:E3:0C:F6:E7:15:A3:22:15:85:8C:7B:62:3B:E2:F6:3D:C1:3B:B7:44:F4:ED:A8:2D:12:BF:A9:9D"}}},"request":{"raw":"GET /lander/black_hole_sun_goal_point/digifactory.css HTTP/1.1\r\nHost: thinkingoutsidethebucket.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://thinkingoutsidethebucket.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 22 Sep 2026 10:17:23 GMT\r\ncontent-type: text/css\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=eam4Bzjb6wFpPzhaqmueluoRpih61nBTQvZ87LtJqQlUgf7ZfBWdP8MS7gk3cNYjg98xYI1xHW5Jg4G4CYdhpGcH%2BBZlj%2BaIt46v8tLBbw1LXooDeBGBxF8BMExrCpj%2BT9C2Wk2aVKr9U4q57xik\"}]}\r\nlast-modified: Thu, 04 Jun 2026 08:54:48 GMT\r\npriority: u=2,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Wed, 30 Sep 2026 21:33:31 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\netag: W/\"6a213d58-9af\"\r\nage: 132231\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a3f08f3e6ff556c3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2479,"size_decoded":1596,"mime_type":"text/css","magic":"ASCII text, with very long lines (2479), with no line terminators","md5":"f3b491f9d3c356c4494df3a97e02afc3","sha1":"e416f4d90bb996d7ed6e1f6b2e38142c568f4d36","sha256":"1e3b3898d35997182934fc497ba78c189ffbdea6b2c95da12c0f6725bfe28063","sha512":"03a9d0b7ab78d93f78fd43e80fc67c2e795c57c1c68e59433975ec81502f5f2878e09758e4de00d16413313b1692d5a3003ba8ce2874054f486ab4ab45646ca3","ssdeep":"","tlshash":"b151ce63e9e50118bd3b9460aec1b286330141e7f1869fe9c901b066974dcf31d69fcc","first_seen":"2026-01-04T19:54:11.045444Z","last_seen":"2026-09-22T10:17:56.855737Z","times_seen":22,"resource_available":true,"data":null}},"time_used":117,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":117,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"thinkingoutsidethebucket.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"thinkingoutsidethebucket.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"thinkingoutsidethebucket.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"thinkingoutsidethebucket.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thinkingoutsidethebucket.com/lander/black_hole_sun_goal_point/css2.css","fqdn":"thinkingoutsidethebucket.com","domain":"thinkingoutsidethebucket.com","tld":"com"},"ip":{"addr":"172.67.186.110","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thinkingoutsidethebucket.com/","date":"2026-09-22T10:17:22.928Z","timestamp":1790072242928,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thinkingoutsidethebucket.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 17 Aug 2026 16:20:47 GMT","end":"Sun, 15 Nov 2026 17:20:45 GMT"},"fingerprint":{"sha1":"31:D1:4C:C2:43:2B:3F:80:20:E9:8E:B1:74:AE:EE:22:C8:77:BD:D9","sha256":"12:37:00:91:E3:0C:F6:E7:15:A3:22:15:85:8C:7B:62:3B:E2:F6:3D:C1:3B:B7:44:F4:ED:A8:2D:12:BF:A9:9D"}}},"request":{"raw":"GET /lander/black_hole_sun_goal_point/css2.css HTTP/1.1\r\nHost: thinkingoutsidethebucket.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://thinkingoutsidethebucket.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 22 Sep 2026 10:17:22 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 04 Jun 2026 08:54:48 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Jh0BOj0LGKY9fH3rlJTae3f8SSDVoHFEQcuT2ZIuK95UEzFhdDUCVbx9KSvbHwx7Qs20LKAQjVWHhm6WEIBydqzw5a5a3ZcZvR7WaDZqcnkzfLh%2BU5AGMQusUQ%2FbobNjOwUA9zuAqB%2Btz8xjb%2Bt3\"}]}\r\npriority: u=2,i=?0\r\netag: W/\"6a213d58-41d2\"\r\nexpires: Wed, 30 Sep 2026 21:33:31 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nvary: accept-encoding\r\nage: 132231\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3f08f3e5fe856c3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16850,"size_decoded":1777,"mime_type":"text/css","magic":"ASCII text","md5":"e5019f0e3a345ef955fe600af83edbe3","sha1":"fd3ed11e72921c3bd8ed09f4f30f2996aad3f09a","sha256":"1f83c899c8d66f00f6cb9d08c7bc6e277d1012fcf3e059a1af505b3be7f2f98c","sha512":"06fb8afa6795a874d657de08e920f02411df4e83909e7a64177f873b620103762e1fb86b48863a27bb219f92188a44b92e387f82260682c20f7d520a8d9b6453","ssdeep":"192:/Uv2o7cV2Uo2vUc2sUS2BecstLXgdU3q6QtZ0+23i3L1dgrd0NoS3tPSquLbkJUT:MuRj8143REuyOL5fR","tlshash":"1d72de60042e6404eba71cc637cf3f6a6e9e72517045c6396ffd0458bcabc255369b8e","first_seen":"2026-06-13T08:37:31.35116Z","last_seen":"2026-09-22T10:17:56.856238Z","times_seen":20,"resource_available":true,"data":null}},"time_used":66,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":66,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"thinkingoutsidethebucket.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"thinkingoutsidethebucket.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"thinkingoutsidethebucket.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"thinkingoutsidethebucket.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thinkingoutsidethebucket.com/lander/black_hole_sun_goal_point/photoswipe.css","fqdn":"thinkingoutsidethebucket.com","domain":"thinkingoutsidethebucket.com","tld":"com"},"ip":{"addr":"172.67.186.110","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thinkingoutsidethebucket.com/","date":"2026-09-22T10:17:22.930Z","timestamp":1790072242930,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thinkingoutsidethebucket.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 17 Aug 2026 16:20:47 GMT","end":"Sun, 15 Nov 2026 17:20:45 GMT"},"fingerprint":{"sha1":"31:D1:4C:C2:43:2B:3F:80:20:E9:8E:B1:74:AE:EE:22:C8:77:BD:D9","sha256":"12:37:00:91:E3:0C:F6:E7:15:A3:22:15:85:8C:7B:62:3B:E2:F6:3D:C1:3B:B7:44:F4:ED:A8:2D:12:BF:A9:9D"}}},"request":{"raw":"GET /lander/black_hole_sun_goal_point/photoswipe.css HTTP/1.1\r\nHost: thinkingoutsidethebucket.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://thinkingoutsidethebucket.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 22 Sep 2026 10:17:22 GMT\r\ncontent-type: text/css\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=l0LwjTGSARNqLytgalINow%2BlLipU3bEj1jLtXhVL5tmJo1AY4wbDPI4FBPmj6lZnLSzOud%2Fer2CtzTNCIRlmkSWwu3FxB2f9A2tbdf9DHYbUD8uJ70YhSon9m9PXyWWTy5h%2BH9n6XC9YHOk4R5Ho\"}]}\r\nlast-modified: Thu, 04 Jun 2026 08:54:48 GMT\r\npriority: u=2,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Wed, 30 Sep 2026 21:33:31 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\netag: W/\"6a213d58-9c8\"\r\nage: 132231\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a3f08f3e5fe956c3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2504,"size_decoded":1604,"mime_type":"text/css","magic":"ASCII text, with very long lines (2428)","md5":"eaeeeb546d1d98ab9a665ca1a7a4f8a6","sha1":"2c1d033dec411075daa1d309adf0444c8f535b3e","sha256":"6038af3f2e92c6a1707439e0ff530543eadf859714ef34aafe6836ad195b31e4","sha512":"53adc7423471d68c9ff908dbf100c4d1c061cc7f4e7998543ac3a23c3e160b61d1f38ed5cb79b68d6f0a43ecd9b2d29a206508e8990ee1b0d0f6f98595f8f06d","ssdeep":"","tlshash":"7051df3bd505320dc11bee55abd9b66c1a3bc62b99733ace1228fd12c75bb5b0007487","first_seen":"2023-10-13T20:26:00Z","last_seen":"2026-09-22T10:17:56.856885Z","times_seen":74,"resource_available":true,"data":null}},"time_used":75,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":75,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"thinkingoutsidethebucket.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"thinkingoutsidethebucket.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"thinkingoutsidethebucket.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"thinkingoutsidethebucket.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thinkingoutsidethebucket.com/lander/black_hole_sun_goal_point/aos.css","fqdn":"thinkingoutsidethebucket.com","domain":"thinkingoutsidethebucket.com","tld":"com"},"ip":{"addr":"172.67.186.110","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thinkingoutsidethebucket.com/","date":"2026-09-22T10:17:22.943Z","timestamp":1790072242943,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thinkingoutsidethebucket.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 17 Aug 2026 16:20:47 GMT","end":"Sun, 15 Nov 2026 17:20:45 GMT"},"fingerprint":{"sha1":"31:D1:4C:C2:43:2B:3F:80:20:E9:8E:B1:74:AE:EE:22:C8:77:BD:D9","sha256":"12:37:00:91:E3:0C:F6:E7:15:A3:22:15:85:8C:7B:62:3B:E2:F6:3D:C1:3B:B7:44:F4:ED:A8:2D:12:BF:A9:9D"}}},"request":{"raw":"GET /lander/black_hole_sun_goal_point/aos.css HTTP/1.1\r\nHost: thinkingoutsidethebucket.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://thinkingoutsidethebucket.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 22 Sep 2026 10:17:23 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 04 Jun 2026 08:54:48 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nH88k1pXyQqjWbn9WUGRXIxlwAAcyztxGCiWqWNezdxHFIzrhFxSEGoB%2FgrIIVbG5YCsKw9aHKzBmE68ayf9QbD50gFWg7MI5QT7DMIrX8geUxZhceDcL%2FwToQMKZBtZEUzfp63MhTrzD7tsBSBC\"}]}\r\npriority: u=2,i=?0\r\netag: W/\"6a213d58-65c5\"\r\nexpires: Wed, 30 Sep 2026 21:33:31 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nvary: accept-encoding\r\nage: 132231\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3f08f3e6ff456c3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":26053,"size_decoded":3028,"mime_type":"text/css","magic":"ASCII text, with very long lines (26053), with no line terminators","md5":"847da8fca8060ca1a70f976aab1210b9","sha1":"0557d37454b67f42f2cb101e57e5070fb1193570","sha256":"1aa8845fd06e475aefe733d4e55b36a92fcd487975049c8172341827ac9cc03e","sha512":"d5c2bbf1ad68fa1b7625c696ea0f0e5d8c2aa5ebfdfba1aa3a4cfdc6604df625148489dd2adc7020b19660e4a26ce2a32ec11d8f28d9bd80eafdc67035e6a4d3","ssdeep":"768:CMJihoCcZCOud8G8tKS65wqsZQ1G+dM2cl6iCRotsV84sxIKcv4g01UeEPEQEB4D:CMJihoCcZCOud8G8tKS65wqsZCG+dM25","tlshash":"f0c24b5a7a4cd100bf831b4762df2a0859347588e5301986be3f35ca2cd5ce6b973fa9","first_seen":"2023-04-05T07:18:45Z","last_seen":"2026-09-23T14:17:15.651333Z","times_seen":46517,"resource_available":true,"data":null}},"time_used":63,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":63,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"thinkingoutsidethebucket.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"thinkingoutsidethebucket.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"thinkingoutsidethebucket.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"thinkingoutsidethebucket.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}}]}