{"report_id":"f2465b8e-8a2f-4a3c-abaf-23da60dc2cc9","version":0,"status":"done","tags":[],"date":"2026-09-13T19:04:03Z","url":{"schema":"http","addr":"lavandbit-sammet.net/","fqdn":"lavandbit-sammet.net","domain":"lavandbit-sammet.net","tld":"net"},"ip":{"addr":"104.21.39.69","port":0,"asn":13335,"as":"Cloudflare, Inc.","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"lavandbit-sammet.net/","fqdn":"lavandbit-sammet.net","domain":"lavandbit-sammet.net","tld":"net"},"title":"Lavandbit Sammet™ Official Platform | Smart AI Trading \u0026 Online Investment Solutions","dom":{"size":75497,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (811)","md5":"0143072b13958a17ba94fb03d4756a59","sha1":"78c56165fc1fe742d85826feeda92e05a1190f34","sha256":"3865895b91eabc0593e3a1cf35337580b18d1a5d7fa2dcda5da97570fc3f654e","sha512":"8d5696d38c82948fb837080a883fd3647a00b8f6271bcd8ed205972b1119adb26531fcefb64cdfb9c1ee6efd329fe04c46c6fbd106b6d9e231cc40847ad4a8b4","ssdeep":"768:ryB07PZpatxW3Pew3grayKjn5oa96qEY/Gbo6RCPBd5S2ooDOpYFCYORdRzPz:rx3Pewt/Gb1RCBd5S2oOXFj+Pz","tlshash":"6f73c622a1f314375473a2e6b7e6630a3ba2d103c40685047bec4ba84fd7dc5ad77a9c","dom_hash":"domhashab5dbb11ddef35546df4132598f2c068","first_seen":"2026-09-13T19:04:06.844909Z","last_seen":"2026-09-13T19:04:06.844909Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"lavandbit-sammet.net/","fqdn":"lavandbit-sammet.net","domain":"lavandbit-sammet.net","tld":"net"},"ip":{"addr":"104.21.39.69","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-10-18T19:04:03Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":5}},"detection":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"lavandbit-sammet.net","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"lavandbit-sammet.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"lavandbit-sammet.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"lavandbit-sammet.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-13","alert":"Phishing Block","trigger":"lavandbit-sammet.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null},"summary":[{"fqdn":"lavandbit-sammet.net","ip":{"addr":"104.21.39.69","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-09-13T18:37:33.204098Z","last_seen":"2026-09-13T18:37:33.204098Z","alert_count":20,"request_count":4,"received_data":126466,"sent_data":2166,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Django","description":"Django is a Python-based free and open-source web application framework.","website":"https://djangoproject.com","common_platform_enumeration":"cpe:2.3:a:djangoproject:django:*:*:*:*:*:*:*:*","icon":"Django.png","categories":["Web frameworks"]},{"name":"Python","description":"Python is an interpreted and general-purpose programming language.","website":"https://python.org","common_platform_enumeration":"cpe:2.3:a:python:python:*:*:*:*:*:*:*:*","icon":"Python.png","categories":["Programming languages"]},{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]}]},{"fqdn":"cdn.jsdelivr.net","ip":{"addr":"151.101.1.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2012-05-16","domain_rank":1678,"first_seen":"2012-09-30T00:15:09Z","last_seen":"2026-09-06T23:16:32.201366Z","alert_count":0,"request_count":4,"received_data":382552,"sent_data":2144,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-09-06T22:43:29.329928Z","alert_count":0,"request_count":1,"received_data":11404,"sent_data":502,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"cdnjs.cloudflare.com","ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2009-02-17","domain_rank":1222,"first_seen":"2012-05-23T12:49:49Z","last_seen":"2026-09-06T23:07:00.048542Z","alert_count":0,"request_count":2,"received_data":30452,"sent_data":1138,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"modernroomdesigns.com","ip":{"addr":"104.21.38.110","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2024-11-25","domain_rank":0,"first_seen":"2026-01-20T00:23:10.693862Z","last_seen":"2026-09-12T18:04:15.775799Z","alert_count":0,"request_count":1,"received_data":777,"sent_data":444,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"lavandbit-sammet.net/","fqdn":"lavandbit-sammet.net","domain":"lavandbit-sammet.net","tld":"net"},"ip":{"addr":"104.21.39.69","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"eb32c58d51ce221bf1bd99728b6b5719","sha1":"5022b33d0adc59c1c2a3e9cddb58ca61bd9cb219","sha256":"7d4e8c44e82ac07f712f0d7cc7e18a8fd640935a49a138aba8d672c31996bb70","sha512":"3e555b606b4cba4035bdbbfd43dd898212497e40156da9b411b743f5b0bff1b3679e5aeafd42f1895e690adff3cb4e9986bc72ef2b99b02a57d32dc1703498b6","ssdeep":"","tlshash":"e1e0c22880528822a01350403baa3fde72b7116b0e063d197bdccb146fe7d0fca813cc","size":315,"data":"","first_seen":"2026-06-25T00:25:28.344681Z","last_seen":"2026-09-15T18:40:30.22562Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lavandbit-sammet.net/","fqdn":"lavandbit-sammet.net","domain":"lavandbit-sammet.net","tld":"net"},"ip":{"addr":"104.21.39.69","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"1193a7e850110a52f5a15cd3f1fa7698","sha1":"10c4c2fcede3d6fe2dd7441a2c358accfd0fdebe","sha256":"10e7a87429778fcac73e15df99458c26c0f0b368744f93ea710a7715d8214ff7","sha512":"d99be0c36227bff7111e01345505037af46b628a32bafca4e50a276ef50018a937b2ab9d732e110ffba1fdcd196bfe9c792bf807272af7827c192baf5cfd5fcd","ssdeep":"","tlshash":"d2c09297c661449a1d150b6562add20327948585a8648689342e6273bf81c86aea538a","size":134,"data":"","first_seen":"2026-09-13T18:37:37.634061Z","last_seen":"2026-09-13T19:04:06.878834Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lavandbit-sammet.net/","fqdn":"lavandbit-sammet.net","domain":"lavandbit-sammet.net","tld":"net"},"ip":{"addr":"104.21.39.69","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"41e452ee854c23fe69de23a35e5cbc5e","sha1":"3db82673a98e6e0ab094f29141e797ed821b743a","sha256":"48bae6cf7b4767bb09b04aea7f6fab6327d0c174e62d6bda1c61c4246773c847","sha512":"a3613f20369903d629f230c24591713dc5e7951134cf3b1cbfea374e023ab53a0408e3c39dab76edac2ee875243c290c18e282a10abf3dedc2397af213b26beb","ssdeep":"","tlshash":"db51aada3d93213a29a338be67ef4645b67940134449ce003e2cd1019f61ba45f79fc8","size":3129,"data":"","first_seen":"2026-09-02T20:39:29.769151Z","last_seen":"2026-09-15T18:40:30.22851Z","times_seen":11,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lavandbit-sammet.net/","fqdn":"lavandbit-sammet.net","domain":"lavandbit-sammet.net","tld":"net"},"ip":{"addr":"104.21.39.69","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"1f3661d6844d4348e795e31936ac1d51","sha1":"eb3f7514ed5f66a75356cf920bb09e64db3ec1a4","sha256":"99ca4088ba4c07d5293e483f419a0c2b11cead43f9779d0c50691390bde2d426","sha512":"ad7bd057ee7256e23518ac098a99327963a8c256234dd9c665586d928a0aba92b41307fec5bba0dc054dbf6afee1efac64a9e94f2aebae26cbdf87ed31c69fb6","ssdeep":"","tlshash":"f231ceaf798534b6976bb331d26f3f4a366084122402db10244eecc9bfd0941a57bedc","size":1873,"data":"","first_seen":"2026-09-13T18:37:37.639487Z","last_seen":"2026-09-13T19:04:06.882371Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lavandbit-sammet.net/","fqdn":"lavandbit-sammet.net","domain":"lavandbit-sammet.net","tld":"net"},"ip":{"addr":"104.21.39.69","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"408c62e834ae1a0cd080a0f4e46fe38d","sha1":"d5cd250d4f4d7023dd386ea8f729012ec4be379e","sha256":"3f7082e7c8a2730e4b57eaa8acc98899c8c51bdc42043e3520c8135a095d23e0","sha512":"dcb1c930c41f83f5e0cf346ed1a607b3d7ba9041ede9984ca5f546a55c022ecfe9ea95bdeb02fd513aa284091a8030db498102da6c5b62dafe7ad19b2e633bd5","ssdeep":"","tlshash":"d341993fe1a33a3784f721ea27df92957d6100071442d8163e7ccb456f468650eb9dac","size":2435,"data":"","first_seen":"2026-09-02T20:39:29.771299Z","last_seen":"2026-09-15T18:40:30.231823Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lavandbit-sammet.net/","fqdn":"lavandbit-sammet.net","domain":"lavandbit-sammet.net","tld":"net"},"ip":{"addr":"104.21.39.69","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"4dbe6b425fd9dc66a6624f3dd62098cf","sha1":"1e5aba2876610e12a810ee8f9fb8cd617c2b0fce","sha256":"bab945bbb93d8c310ac12bd401f633088916374d96f835094cc3194fd71dfe6c","sha512":"d1ba10053c18be6fee1253dc777cca8208c7fea001d69b795c7b18f484490261e87a4892a9e1ec23c88da7291e1190e03a7b975b2781b6fb49037f2b9d87d564","ssdeep":"192:cgBeTpHx+fuZ+hjayiqQbOrTA0Cdagwmu+96dRPb+4+CG3:iGRdRzPY","tlshash":"15227359a8b704b6a1bb317e77ef204872f251576805d8003c4caa8c2fd48a652edfed","size":10002,"data":"","first_seen":"2026-09-02T20:39:29.77245Z","last_seen":"2026-09-15T18:54:13.114372Z","times_seen":19,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/intl-tel-input@23.0.12/build/js/utils.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.1.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"6eae88fad6fe723d8c8d2386a63dd152","sha1":"42046e250c7f2eeff4619a89b0be7b83e01e5edf","sha256":"a4000409a897003b1c5a8e1f9f32e18a11b022452151cc47c17ecdcb76d5223b","sha512":"d356bd87f7170499fbf445353afeda69dbaccc391eb41826290a30752475735a27d56ce1d642af1dcb02f93a1405926a440add5cb38000b7d112cab0f918bd6e","ssdeep":"3072:9klM0hpJjFs3OwPss3MwPKm7i9T2xFM8Mp2xHsNBWUsD56kmLNTg/QKWVRphmVEw:9klMipBKxxFM8Mp2qbZQ","tlshash":"1144f1ebd63c9737a1e97b35968eb3cd5a8cbca3c848567826c3b54f52784e0706c205","size":258914,"data":"","first_seen":"2024-07-10T10:54:41Z","last_seen":"2026-09-16T05:53:08.470768Z","times_seen":2425,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lavandbit-sammet.net/","fqdn":"lavandbit-sammet.net","domain":"lavandbit-sammet.net","tld":"net"},"ip":{"addr":"104.21.39.69","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"43e28c5553d54ed2964bd5147521769b","sha1":"0a2b8c3db330a47aa7b9195e6dfdf944adb9240d","sha256":"d63026c985dc46aeb316574b7bf1828080c906238e35d5e34cb80414c0e70d23","sha512":"6dda085e4196167cf64287cb675c05b09bdaa291decebd1bea2b52ccdbd380de5875dc233fa3d439559413693f1e7974f485d60a2c1541bf62a8887bf5ff9811","ssdeep":"","tlshash":"1b80000c0a20c0882a00af00e000c202a0c2200f0220238ce823bce2a83c888808fea0","size":38,"data":"","first_seen":"2023-04-10T16:02:06Z","last_seen":"2026-09-16T08:50:13.224664Z","times_seen":201850,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/intl-tel-input@23.0.12/build/js/intlTelInput.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.1.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"c86b61ae6f79b75c7e08b42a351a7b6e","sha1":"16ee5c0d605e5a30b9f58107dbded4a97ba9bfa2","sha256":"e1759a4dbfab9dcdae85ac8ee40e4c961a098eb49f7e5a96ceb1ab928e6f681f","sha512":"cb1485a28c54e0b665efebb05f6c21696c28e8679f1e818e92657a121286c337231a435ea84bebaaee26b6b6c7e966049c85d1b4db8b9070c096d18ae4d8308c","ssdeep":"768:c603Xlqn/kiIzJT9FSRzA4xXnT2nYdn24X68a:cDiIz8A4knYdw","tlshash":"0cd2e7aeb365673ba6fd82a270e54503af7f79444604083d78ac8ede0288ed171f5b34","size":29872,"data":"","first_seen":"2024-07-10T10:54:41Z","last_seen":"2026-09-15T18:54:13.102709Z","times_seen":480,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lavandbit-sammet.net/static/template_18/nexusxaloryx/js/form-phone.js","fqdn":"lavandbit-sammet.net","domain":"lavandbit-sammet.net","tld":"net"},"ip":{"addr":"104.21.39.69","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"caf8367f6cd6bcaa19261ef9db5d1784","sha1":"f5fe93369fa958b23d1bd2b5d07f30ae285ca71e","sha256":"4082edfaa0f4837bfa6ea5de436af8c395b7f6c65db26b87d2978143aab01885","sha512":"4aff50bab7663b2d2c5893f80ec0fd1a351c0e6edfbbd99a94b447ce52128465152908f0db3dcfacc8a5d9161df9aa6507ab7cd6584ca6425d6460e00379c0a4","ssdeep":"192:u2JG+1qj2XHZElDQn7TntzGWyQphSHYoydo8txuq76l5k3fTX:u2JG+1qj2elDQn77tzH3f/68D","tlshash":"491261b925b310247273e57e27cba111796670573845c8843b8c37042fcddaaa6a2bfe","size":9758,"data":"","first_seen":"2026-09-02T20:39:29.765459Z","last_seen":"2026-09-15T18:54:13.103245Z","times_seen":19,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"lavandbit-sammet.net/","fqdn":"lavandbit-sammet.net","domain":"lavandbit-sammet.net","tld":"net"},"ip":{"addr":"104.21.39.69","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-13T19:03:23.468Z","timestamp":1789326203468,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lavandbit-sammet.net","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 06 Sep 2026 06:20:28 GMT","end":"Sat, 05 Dec 2026 06:20:27 GMT"},"fingerprint":{"sha1":"B4:9E:88:4F:98:3F:1D:A5:40:F7:7C:90:28:E9:17:BA:C5:82:45:0B","sha256":"92:06:F6:49:08:37:ED:91:AF:F1:35:E6:5F:FD:62:B8:18:29:E8:FE:46:95:01:D6:A8:D2:39:D9:2B:AB:63:8C"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: lavandbit-sammet.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 13 Sep 2026 19:03:23 GMT\r\ncontent-type: text/html; charset=utf-8\r\npriority: u=0,i\r\nx-frame-options: DENY\r\nvary: Cookie\r\nx-content-type-options: nosniff\r\nreferrer-policy: same-origin\r\ncross-origin-opener-policy: same-origin\r\nset-cookie: _subid=18uumd045maen; Path=/\ncsrftoken=Xjexar4r86CaiTIa2qNCYhd6vweafqjN; expires=Sun, 12 Sep 2027 19:03:23 GMT; Max-Age=31449600; Path=/; SameSite=Lax\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ybSjOiJ%2FKOwb3wOyOL1UnCFrinKnA%2FIENGJRFQNPD3jx3QPot255wi2ZEWXaCXJ6nrKSOmS6pRsWLzTye2%2F9oP6rImcgHCFKr8p9J7iUb5zu13B4G134Tu8Ue49eKax%2F2QLYE%2Bey6g%3D%3D\"}]}\r\ncf-ray: a3a969640c34e4e7-RIX\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":[{"name":"_subid","value":"18uumd045maen","quoted":false,"path":"/","secure":false,"http_only":false,"same_site":"","partitioned":false,"raw":"_subid=18uumd045maen; Path=/"},{"name":"csrftoken","value":"Xjexar4r86CaiTIa2qNCYhd6vweafqjN","quoted":false,"path":"/","expires":"2027-09-12T19:03:23Z","raw_expires":"Sun, 12 Sep 2027 19:03:23 GMT","max_age":31449600,"secure":false,"http_only":false,"same_site":"Lax","partitioned":false,"raw":"csrftoken=Xjexar4r86CaiTIa2qNCYhd6vweafqjN; expires=Sun, 12 Sep 2027 19:03:23 GMT; Max-Age=31449600; Path=/; SameSite=Lax"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Django","description":"Django is a Python-based free and open-source web application framework.","website":"https://djangoproject.com","common_platform_enumeration":"cpe:2.3:a:djangoproject:django:*:*:*:*:*:*:*:*","icon":"Django.png","categories":["Web frameworks"]},{"name":"Python","description":"Python is an interpreted and general-purpose programming language.","website":"https://python.org","common_platform_enumeration":"cpe:2.3:a:python:python:*:*:*:*:*:*:*:*","icon":"Python.png","categories":["Programming languages"]},{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]}],"data":{"size":74741,"size_decoded":20116,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (517)","md5":"e30b116f25639349759e25f89d082850","sha1":"1db571aea10a0b35afd549803b52e79b2b8d3b5e","sha256":"f204f2922cc2214a1147dd1fb7ff2c3e8f9a882491beba8c048611e6a62043f8","sha512":"5f2608f34a528c0eeb3ba78d6a3db88e6c69a5f4009b1416d979e51625c69fad0a337dd0f87fa247a86bbd244643ad82befea9abca44c5cbf5dad15bd96d1271","ssdeep":"768:e9He58Gmsaixj3P3whH4SrayKjn5oa96qEY/pGr/RCqBd5S2opZ2FCYORdRzPX:I43P3wBo/pGTRbBd5S2o6Fj+PX","tlshash":"e073b522a1f314375073a1e6b7ea631a3ba1d143c40685047bec4ba84fd7dc9ed77a98","first_seen":"2026-09-13T19:04:06.850868Z","last_seen":"2026-09-13T19:04:06.850868Z","times_seen":1,"resource_available":false,"data":null}},"time_used":413,"timings":{"blocked":-1,"dns":9,"connect":40,"send":0,"wait":286,"receive":78,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"lavandbit-sammet.net","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"lavandbit-sammet.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"lavandbit-sammet.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"lavandbit-sammet.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-13","alert":"Phishing Block","trigger":"lavandbit-sammet.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/intl-tel-input@23.0.12/build/css/intlTelInput.css","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.1.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://lavandbit-sammet.net/","date":"2026-09-13T19:03:24.189Z","timestamp":1789326204189,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2026 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 20 May 2026 15:48:47 GMT","end":"Sat, 05 Dec 2026 14:48:47 GMT"},"fingerprint":{"sha1":"D4:05:C2:EC:C7:EE:2B:D0:08:68:0D:3D:33:77:48:78:43:E7:D1:E1","sha256":"ED:84:90:EE:71:BC:6B:5E:B3:D2:50:B0:23:3A:06:0D:E0:50:C6:B6:A9:09:36:E6:CE:FE:E8:66:89:EB:4E:C5"}}},"request":{"raw":"GET /npm/intl-tel-input@23.0.12/build/css/intlTelInput.css HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=0\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: text/css; charset=utf-8\r\nx-jsd-version: 23.0.12\r\nx-jsd-version-type: version\r\netag: W/\"4f9c-YW++h4sxifKlsVyMHgLARnQAuWE\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\ndate: Sun, 13 Sep 2026 19:03:24 GMT\r\nage: 2042721\r\nx-served-by: cache-fra-eddf8230071-FRA, cache-bma-essb1270048-BMA\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 3384\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":20380,"size_decoded":4165,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (830)","md5":"b46140e6a10359c79822e7b801f0391b","sha1":"616fbe878b3189f2a5b15c8c1e02c0467400b961","sha256":"def1a0f6d2bd2a01f1f842475b7e7da7f2596f2783fd8872c37624ae406425af","sha512":"3a44a85b26a849c8d784e9bced73b9843cf51396eebe6d9a024abee73266698a72940d0e289e67a39a9ce1946b980a686971205dcde7d22c954b5ab91608898e","ssdeep":"192:WTxfNDsX5uVsAPkkk8ii/yE9y6czvZzorr8/zJHVyT1bK0VN12o7tHPVEVtVaVb2:IVsXk1kdCqE9y6mporr8LJj0H12o7U5","tlshash":"c5929e2346b00d3e965dc1fa38a2c1b5773f0c8a35eecc96eed9504a5887b90e5ebc54","first_seen":"2024-06-08T15:25:15Z","last_seen":"2026-09-16T08:44:49.903489Z","times_seen":1611,"resource_available":false,"data":null}},"time_used":46,"timings":{"blocked":-1,"dns":4,"connect":9,"send":0,"wait":11,"receive":0,"ssl":20},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lavandbit-sammet.net/static/template_42/css/main.css","fqdn":"lavandbit-sammet.net","domain":"lavandbit-sammet.net","tld":"net"},"ip":{"addr":"104.21.39.69","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://lavandbit-sammet.net/","date":"2026-09-13T19:03:24.192Z","timestamp":1789326204192,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lavandbit-sammet.net","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 06 Sep 2026 06:20:28 GMT","end":"Sat, 05 Dec 2026 06:20:27 GMT"},"fingerprint":{"sha1":"B4:9E:88:4F:98:3F:1D:A5:40:F7:7C:90:28:E9:17:BA:C5:82:45:0B","sha256":"92:06:F6:49:08:37:ED:91:AF:F1:35:E6:5F:FD:62:B8:18:29:E8:FE:46:95:01:D6:A8:D2:39:D9:2B:AB:63:8C"}}},"request":{"raw":"GET /static/template_42/css/main.css HTTP/1.1\r\nHost: lavandbit-sammet.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://lavandbit-sammet.net/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: _subid=18uumd045maen; csrftoken=Xjexar4r86CaiTIa2qNCYhd6vweafqjN\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 13 Sep 2026 19:03:24 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 04 Jun 2026 04:07:30 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"6a20fa02-88d4\"\r\nexpires: Mon, 13 Sep 2027 19:03:24 GMT\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YSwx5kW6wiF%2FcuHE6WkSXMDJgeJp%2Bn%2FWvzpGHRyDC%2BlfLE8aydmwl7gqYqPlDqAUMjB%2Bm8cF5tSmzQ217sdwVUpUmdP0VS5uSRNS7LB9O3VI3U9IO3Q2mXllLvP8imUUpfbSzU2ScQ%3D%3D\"}]}\r\npriority: u=2,i=?0\r\nvary: accept-encoding\r\ncf-ray: a3a969684ddae4e7-RIX\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":35028,"size_decoded":7904,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (333)","md5":"ec72f97a9b0a9585d2d9d79c4025eded","sha1":"7597827fb0974826782f9ae581c51b259d9a69f8","sha256":"f7ac14e428ddae76474557f50edb23a888ad55783d96490e2663b8f807e64ed8","sha512":"1429bb9dd8674808f0173986432be904e9883acc711092563235b23d44e4f2804c91888739ae0d1aa74db2db9afd65c47819986cadab95cbae343ddfbac896bd","ssdeep":"768:hucfqlFG5XZ0x9ZKT5nb1mA/bQ4dVWwLT8+WCcg:huyqOp2ZCnbkqQYVWwLTDWCX","tlshash":"e0f254216b1092b5b967fa7577cbb79df254f207880951bcacd80418c5ce7f806aeb8c","first_seen":"2026-09-13T18:37:37.612313Z","last_seen":"2026-09-13T19:04:06.855579Z","times_seen":2,"resource_available":false,"data":null}},"time_used":81,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":81,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"lavandbit-sammet.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"lavandbit-sammet.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-13","alert":"Phishing Block","trigger":"lavandbit-sammet.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"lavandbit-sammet.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"lavandbit-sammet.net","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lavandbit-sammet.net/static/common/css/sticky_compact_header.css","fqdn":"lavandbit-sammet.net","domain":"lavandbit-sammet.net","tld":"net"},"ip":{"addr":"104.21.39.69","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://lavandbit-sammet.net/","date":"2026-09-13T19:03:24.194Z","timestamp":1789326204194,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lavandbit-sammet.net","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 06 Sep 2026 06:20:28 GMT","end":"Sat, 05 Dec 2026 06:20:27 GMT"},"fingerprint":{"sha1":"B4:9E:88:4F:98:3F:1D:A5:40:F7:7C:90:28:E9:17:BA:C5:82:45:0B","sha256":"92:06:F6:49:08:37:ED:91:AF:F1:35:E6:5F:FD:62:B8:18:29:E8:FE:46:95:01:D6:A8:D2:39:D9:2B:AB:63:8C"}}},"request":{"raw":"GET /static/common/css/sticky_compact_header.css HTTP/1.1\r\nHost: lavandbit-sammet.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://lavandbit-sammet.net/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: _subid=18uumd045maen; csrftoken=Xjexar4r86CaiTIa2qNCYhd6vweafqjN\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 13 Sep 2026 19:03:24 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 04 Jun 2026 04:07:30 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"6a20fa02-e96\"\r\nexpires: Mon, 13 Sep 2027 19:03:24 GMT\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Tu1scq02YqIi1FQPykfgfg5ARSpY6AXBk28ANCvKUbrP9soOQb17KbXvn%2F7rrsKUwiLZVO%2FfccLGwieyydh2mfnDi%2BKLu85OyBmnxOWRADjPkNAvCjoiR6Rg0GqcvhT3Nbv5gLvUsw%3D%3D\"}]}\r\npriority: u=2,i=?0\r\nvary: accept-encoding\r\ncf-ray: a3a969684ddbe4e7-RIX\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3734,"size_decoded":1569,"mime_type":"text/css","magic":"ASCII text","md5":"31f5ce8a6cb5d297531d3e51bd53b14d","sha1":"91e4af361886a4dbab9e7b60f5493b224c697ad1","sha256":"5585644d18335a74bbffebbefb1c3943cbc40ddd18c7541d242a9048d8029d1b","sha512":"435578ec5b06b9aaa89b8df77371de54dd05ca98352a67f80e97f89f48829c89e1c0b611f9a2277b015ee8908d25b584b1b18ba13f34e18697ff617b60526064","ssdeep":"","tlshash":"16712856fdd3326634199005c56f7eff7e3e5102860a9a68b9b0711f2fca6f2c0a16e4","first_seen":"2026-09-02T20:39:29.760978Z","last_seen":"2026-09-15T18:40:30.207985Z","times_seen":10,"resource_available":false,"data":null}},"time_used":113,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":113,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"lavandbit-sammet.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"lavandbit-sammet.net","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"lavandbit-sammet.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-13","alert":"Phishing Block","trigger":"lavandbit-sammet.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"lavandbit-sammet.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/intl-tel-input@23.0.12/build/js/utils.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.1.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://lavandbit-sammet.net/","date":"2026-09-13T19:03:24.806Z","timestamp":1789326204806,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2026 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 20 May 2026 15:48:47 GMT","end":"Sat, 05 Dec 2026 14:48:47 GMT"},"fingerprint":{"sha1":"D4:05:C2:EC:C7:EE:2B:D0:08:68:0D:3D:33:77:48:78:43:E7:D1:E1","sha256":"ED:84:90:EE:71:BC:6B:5E:B3:D2:50:B0:23:3A:06:0D:E0:50:C6:B6:A9:09:36:E6:CE:FE:E8:66:89:EB:4E:C5"}}},"request":{"raw":"GET /npm/intl-tel-input@23.0.12/build/js/utils.js HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://cdn.jsdelivr.net/npm/intl-tel-input@23.0.12/build/js/intlTelInput.min.js\r\nOrigin: https://lavandbit-sammet.net\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-length: 61923\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: application/javascript; charset=utf-8\r\nx-jsd-version: 23.0.12\r\nx-jsd-version-type: version\r\netag: W/\"3f362-QgRuJQx/Lu/0YZqJsL57g+AeXt8\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\ndate: Sun, 13 Sep 2026 19:03:24 GMT\r\nage: 3940808\r\nx-served-by: cache-fra-etou8220128-FRA, cache-bma-essb1270028-BMA\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":258914,"size_decoded":62700,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (1903)","md5":"6eae88fad6fe723d8c8d2386a63dd152","sha1":"42046e250c7f2eeff4619a89b0be7b83e01e5edf","sha256":"a4000409a897003b1c5a8e1f9f32e18a11b022452151cc47c17ecdcb76d5223b","sha512":"d356bd87f7170499fbf445353afeda69dbaccc391eb41826290a30752475735a27d56ce1d642af1dcb02f93a1405926a440add5cb38000b7d112cab0f918bd6e","ssdeep":"3072:9klM0hpJjFs3OwPss3MwPKm7i9T2xFM8Mp2xHsNBWUsD56kmLNTg/QKWVRphmVEw:9klMipBKxxFM8Mp2qbZQ","tlshash":"1144f1ebd63c9737a1e97b35968eb3cd5a8cbca3c848567826c3b54f52784e0706c205","first_seen":"2024-07-10T10:54:41Z","last_seen":"2026-09-16T05:53:08.470768Z","times_seen":2425,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":11,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Manrope:wght@400;500;600;700;800\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://lavandbit-sammet.net/","date":"2026-09-13T19:03:24.188Z","timestamp":1789326204188,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:11 GMT","end":"Mon, 02 Nov 2026 08:39:10 GMT"},"fingerprint":{"sha1":"97:55:92:07:19:C2:C2:85:E6:88:C9:C8:47:76:A5:6A:F2:45:6E:8D","sha256":"04:DC:D7:95:F1:60:AD:D7:D0:1C:2C:83:57:A1:87:FF:3E:5F:D7:B4:AC:EF:0D:A5:1F:03:CD:E3:6E:05:0A:2F"}}},"request":{"raw":"GET /css2?family=Manrope:wght@400;500;600;700;800\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=0\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sun, 13 Sep 2026 19:03:24 GMT\r\ndate: Sun, 13 Sep 2026 19:03:24 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10720,"size_decoded":1411,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"da3301dfd91fdc1be5ab43c54f09b29d","sha1":"9450ee235452602effc7b92c803fbd441e3d6686","sha256":"f67253a45f3086760a0c4c204f5dad9636a0c0e0984ab5584b8b96b2c1aeeccb","sha512":"f4767030466d6b0f5f49fe20b39fc0124072c3d573da3e764ad4241473996ddcf818e4d565a55bdde791c6ebb73b4f124cbcd3e45b31cf3c56bd44edb6df11fd","ssdeep":"192:zJDEV3WW89RJ8rV3118+4JlOV3MM8b/JGNV3TT80uJHYV3668hs:9wU+ME02EQJ","tlshash":"8a22a990002be804eb470cd677ce7e39ad4e61567451c5ba5bfe1cd8addbd222320b5e","first_seen":"2025-09-06T21:49:31.167078Z","last_seen":"2026-09-16T07:58:14.10971Z","times_seen":9223,"resource_available":false,"data":null}},"time_used":80,"timings":{"blocked":-1,"dns":0,"connect":15,"send":0,"wait":31,"receive":0,"ssl":34},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/flag-icon-css/7.0.2/css/flag-icons.min.css","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://lavandbit-sammet.net/","date":"2026-09-13T19:03:24.191Z","timestamp":1789326204191,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Sep 2026 14:43:48 GMT","end":"Sun, 06 Dec 2026 15:43:45 GMT"},"fingerprint":{"sha1":"70:B5:44:5C:25:65:CF:4A:4B:DB:6F:16:E1:4E:D9:85:C7:F3:75:4E","sha256":"63:B5:DA:B8:4F:95:99:9A:4B:77:FF:DB:3F:8D:7E:3D:1A:62:AD:A9:D9:06:9E:C3:59:6F:4A:61:A2:D2:20:CB"}}},"request":{"raw":"GET /ajax/libs/flag-icon-css/7.0.2/css/flag-icons.min.css HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://lavandbit-sammet.net\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=0\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nserver: cloudflare\r\ndate: Sun, 13 Sep 2026 19:03:24 GMT\r\ncontent-type: text/css; charset=utf-8\r\npriority: u=0,i=?0\r\ncf-cache-status: BYPASS\r\naccess-control-allow-origin: *\r\nage: 1095596\r\ncache-control: no-transform, public, s-maxage=30672000, max-age=30672000, immutable\r\ncontent-encoding: br\r\nlast-modified: Sat, 18 Nov 2023 09:37:59 GMT\r\nvary: Accept-Encoding\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/r2\r\nx-cdnjs-cache: HIT\r\nstrict-transport-security: max-age=15780000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VBR2NEeVdBMbauRjAq6WCFSsFpYnaPn1r0%2FJSZAY25rTDrjEGQ6zIAyNMUeHDtvA4WJj7M4xRdFTj5Iv2jRHPhMk41jWNpSlBhEsPe2TUk3xbvH12OF7hvcKhJhtqYRRJxC2CtVX\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\ncf-ray: a3a969684c5535a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1472\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":27904,"size_decoded":2472,"mime_type":"text/css; charset=utf-8","magic":"Unicode text, UTF-8 text, with very long lines (27901)","md5":"7dbfcbd8fec30f23b3faffa03e4750b9","sha1":"7602b4d0c2ea0e2b5d4ff88da9b9f2796573fdf6","sha256":"ee4afb53dd3560e8f9c7679e92307bdab545c4f8a5ca49216c4cfaca8307e3ab","sha512":"9730162d958133f58d6f6c4810be78481c8e31fe2d226a92a6becdbc3350d440b1a6d4549052a63d59fb9dba2329ce910b7fa3c28b96282ac3dca16313d06df1","ssdeep":"192:G6XxgF5JRQUZuEvCtkCNDpfDYxmn21KoLSQft599xs:ZcvQmv8DpfDYxh5t0","tlshash":"36c20323d2c6e46fb84b5a33745a771cb2db5ac7d305473b6a2f62b5e41a088343b1b0","first_seen":"2025-04-23T19:27:02.987446Z","last_seen":"2026-09-15T18:54:13.102197Z","times_seen":2664,"resource_available":false,"data":null}},"time_used":40,"timings":{"blocked":-1,"dns":4,"connect":8,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/intl-tel-input@23.0.12/build/js/intlTelInput.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.1.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://lavandbit-sammet.net/","date":"2026-09-13T19:03:24.196Z","timestamp":1789326204196,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2026 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 20 May 2026 15:48:47 GMT","end":"Sat, 05 Dec 2026 14:48:47 GMT"},"fingerprint":{"sha1":"D4:05:C2:EC:C7:EE:2B:D0:08:68:0D:3D:33:77:48:78:43:E7:D1:E1","sha256":"ED:84:90:EE:71:BC:6B:5E:B3:D2:50:B0:23:3A:06:0D:E0:50:C6:B6:A9:09:36:E6:CE:FE:E8:66:89:EB:4E:C5"}}},"request":{"raw":"GET /npm/intl-tel-input@23.0.12/build/js/intlTelInput.min.js HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-length: 11469\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: application/javascript; charset=utf-8\r\nx-jsd-version: 23.0.12\r\nx-jsd-version-type: version\r\netag: W/\"74b0-Fu5cDWBeWjC59YEH297UqXupv6I\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\ndate: Sun, 13 Sep 2026 19:03:24 GMT\r\nage: 2641895\r\nx-served-by: cache-fra-etou8220042-FRA, cache-bma-essb1270028-BMA\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":29872,"size_decoded":12245,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (29515)","md5":"c86b61ae6f79b75c7e08b42a351a7b6e","sha1":"16ee5c0d605e5a30b9f58107dbded4a97ba9bfa2","sha256":"e1759a4dbfab9dcdae85ac8ee40e4c961a098eb49f7e5a96ceb1ab928e6f681f","sha512":"cb1485a28c54e0b665efebb05f6c21696c28e8679f1e818e92657a121286c337231a435ea84bebaaee26b6b6c7e966049c85d1b4db8b9070c096d18ae4d8308c","ssdeep":"768:c603Xlqn/kiIzJT9FSRzA4xXnT2nYdn24X68a:cDiIz8A4knYdw","tlshash":"0cd2e7aeb365673ba6fd82a270e54503af7f79444604083d78ac8ede0288ed171f5b34","first_seen":"2024-07-10T10:54:41Z","last_seen":"2026-09-15T18:54:13.102709Z","times_seen":480,"resource_available":true,"data":null}},"time_used":264,"timings":{"blocked":-1,"dns":0,"connect":10,"send":0,"wait":11,"receive":0,"ssl":13},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lavandbit-sammet.net/static/template_18/nexusxaloryx/js/form-phone.js","fqdn":"lavandbit-sammet.net","domain":"lavandbit-sammet.net","tld":"net"},"ip":{"addr":"104.21.39.69","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://lavandbit-sammet.net/","date":"2026-09-13T19:03:24.197Z","timestamp":1789326204197,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lavandbit-sammet.net","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 06 Sep 2026 06:20:28 GMT","end":"Sat, 05 Dec 2026 06:20:27 GMT"},"fingerprint":{"sha1":"B4:9E:88:4F:98:3F:1D:A5:40:F7:7C:90:28:E9:17:BA:C5:82:45:0B","sha256":"92:06:F6:49:08:37:ED:91:AF:F1:35:E6:5F:FD:62:B8:18:29:E8:FE:46:95:01:D6:A8:D2:39:D9:2B:AB:63:8C"}}},"request":{"raw":"GET /static/template_18/nexusxaloryx/js/form-phone.js HTTP/1.1\r\nHost: lavandbit-sammet.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://lavandbit-sammet.net/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: _subid=18uumd045maen; csrftoken=Xjexar4r86CaiTIa2qNCYhd6vweafqjN\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 13 Sep 2026 19:03:24 GMT\r\ncontent-type: application/javascript\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Tue, 11 Aug 2026 13:09:46 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VGX5iENjzUgaVt%2BiXj4RuBCvO0j9cm3AtnbxdBdlk%2BYhXA%2FgNUDgn3itSLqViCNuV41rz28m3K0N4wN4JHlVKvJ1%2BM4yUl24j%2Bj5VfFWLNW5AprnPIGniHw4oUIje6vyChdPDa9BKg%3D%3D\"}]}\r\nexpires: Mon, 13 Sep 2027 19:03:24 GMT\r\ncache-control: public, max-age=31536000, immutable\r\npriority: u=3,i=?0\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\netag: W/\"6a7b1f1a-261e\"\r\ncf-ray: a3a969684ddce4e7-RIX\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9758,"size_decoded":4341,"mime_type":"application/javascript","magic":"Algol 68 source, Unicode text, UTF-8 text","md5":"caf8367f6cd6bcaa19261ef9db5d1784","sha1":"f5fe93369fa958b23d1bd2b5d07f30ae285ca71e","sha256":"4082edfaa0f4837bfa6ea5de436af8c395b7f6c65db26b87d2978143aab01885","sha512":"4aff50bab7663b2d2c5893f80ec0fd1a351c0e6edfbbd99a94b447ce52128465152908f0db3dcfacc8a5d9161df9aa6507ab7cd6584ca6425d6460e00379c0a4","ssdeep":"192:u2JG+1qj2XHZElDQn7TntzGWyQphSHYoydo8txuq76l5k3fTX:u2JG+1qj2elDQn77tzH3f/68D","tlshash":"491261b925b310247273e57e27cba111796670573845c8843b8c37042fcddaaa6a2bfe","first_seen":"2026-09-02T20:39:29.765459Z","last_seen":"2026-09-15T18:54:13.103245Z","times_seen":19,"resource_available":true,"data":null}},"time_used":111,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":111,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"lavandbit-sammet.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-13","alert":"Phishing Block","trigger":"lavandbit-sammet.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"lavandbit-sammet.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"lavandbit-sammet.net","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"lavandbit-sammet.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/flag-icon-css/7.0.2/flags/4x3/gb.svg","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lavandbit-sammet.net/","date":"2026-09-13T19:03:24.368Z","timestamp":1789326204368,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Sep 2026 14:43:48 GMT","end":"Sun, 06 Dec 2026 15:43:45 GMT"},"fingerprint":{"sha1":"70:B5:44:5C:25:65:CF:4A:4B:DB:6F:16:E1:4E:D9:85:C7:F3:75:4E","sha256":"63:B5:DA:B8:4F:95:99:9A:4B:77:FF:DB:3F:8D:7E:3D:1A:62:AD:A9:D9:06:9E:C3:59:6F:4A:61:A2:D2:20:CB"}}},"request":{"raw":"GET /ajax/libs/flag-icon-css/7.0.2/flags/4x3/gb.svg HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cdnjs.cloudflare.com/ajax/libs/flag-icon-css/7.0.2/css/flag-icons.min.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nserver: cloudflare\r\ndate: Sun, 13 Sep 2026 19:03:24 GMT\r\ncontent-type: image/svg+xml; charset=utf-8\r\npriority: u=6,i\r\ncf-cache-status: BYPASS\r\naccess-control-allow-origin: *\r\nage: 1077341\r\ncache-control: no-transform, public, s-maxage=30672000, max-age=30672000, immutable\r\ncontent-encoding: br\r\nlast-modified: Sat, 18 Nov 2023 09:37:59 GMT\r\nvary: Accept-Encoding\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/r2\r\nx-cdnjs-cache: HIT\r\nstrict-transport-security: max-age=15780000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7%2FST%2F2SElhU5lov4kzg1hD8pftyCJIr%2B6KbpiXRnhmO%2BWqQ3S1tCrsBgYRkA%2BO2VccTF3sco8dfvZg%2Bx5XOFQcWVNlxinHHBZ3fuvQHjvpAFuWKxxlgjIz%2BpHe4PFQeYS4Yn29sc\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\ncf-ray: a3a9696bcaaec272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 308\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":535,"size_decoded":1321,"mime_type":"image/svg+xml; charset=utf-8","magic":"SVG Scalable Vector Graphics image","md5":"fcfef6780b36bef537381474df9d0be9","sha1":"68b2ead4370e7ab7b70eb6d35a09c31e73c44fd3","sha256":"51a8613ac1b05eafb9486e6420336bd8b95dae7a9d11def6318776a61c701a08","sha512":"ec21f7b6951f00f0da0acfdb21bbbe037dcaa2a14f2a1de02c991f91af689b1039720801ebb90ca900379766d5726752ed7fd85a349db508d3f94edecc4ec0a0","ssdeep":"","tlshash":"acf0c9c8c32c7005c70a97105cbcf8e3d4c9a1ce588400eab4e09ae460aeba7dccadd1","first_seen":"2023-04-17T21:02:35Z","last_seen":"2026-09-15T18:40:30.224741Z","times_seen":2441,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"modernroomdesigns.com/api/v1/geo","fqdn":"modernroomdesigns.com","domain":"modernroomdesigns.com","tld":"com"},"ip":{"addr":"104.21.38.110","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://lavandbit-sammet.net/","date":"2026-09-13T19:03:24.773Z","timestamp":1789326204773,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"modernroomdesigns.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 27 Jul 2026 01:44:24 GMT","end":"Sun, 25 Oct 2026 02:43:10 GMT"},"fingerprint":{"sha1":"83:B0:37:42:AF:1E:90:C4:B4:89:55:9F:21:8E:CD:D6:95:78:56:63","sha256":"7D:67:00:29:F4:D5:6D:E9:A7:6B:D2:17:47:E0:A8:BA:F2:C8:40:3D:AC:7F:24:F3:28:60:07:FE:8E:54:AD:E5"}}},"request":{"raw":"GET /api/v1/geo HTTP/1.1\r\nHost: modernroomdesigns.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://lavandbit-sammet.net\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 13 Sep 2026 19:03:24 GMT\r\ncontent-type: application/json\r\npriority: u=4,i=?0\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\nx-served-by: modernroomdesigns.com\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZVfqRX0suItQR7j1tpkU%2FVawCE5yxAURoB4t%2BqpAk05zy9LN7j5vprSUGVRwTHphTJ86jJ%2FPuwoLTl7dzH3dVM%2BzOIvctCAoUskwVGaN477i9PzqqNQf8FnqlqloXbFrTi18Vr9%2BW24%3D\"}]}\r\ncf-ray: a3a9696c3eda9a01-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":75,"size_decoded":786,"mime_type":"application/json","magic":"JSON text data","md5":"65ff84d53d9f23c79824b79cd68ce401","sha1":"76a5716ae4ad41ff456498af0b9a95c886639802","sha256":"5de1f54cb6c7464ad247875930e1da59bcca917923ddabb116c542a8dd5d8a58","sha512":"f34abcf750f58734c5f9cf9401a83af50460f0954290d123ef440a7f58b211f6d755d498fcc19e3db199172897f045c66375fe051f26acebc3880b8796c516bf","ssdeep":"","tlshash":"7aa0120864f0050190101b49004d902040e676c021415c10c6c4a3258540098e002078","first_seen":"2026-09-13T19:04:06.870319Z","last_seen":"2026-09-13T19:04:06.870319Z","times_seen":1,"resource_available":false,"data":null}},"time_used":146,"timings":{"blocked":0,"dns":16,"connect":44,"send":0,"wait":86,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/intl-tel-input@23.0.12/build/img/flags.png?1","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.1.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lavandbit-sammet.net/","date":"2026-09-13T19:03:24.946Z","timestamp":1789326204946,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2026 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 20 May 2026 15:48:47 GMT","end":"Sat, 05 Dec 2026 14:48:47 GMT"},"fingerprint":{"sha1":"D4:05:C2:EC:C7:EE:2B:D0:08:68:0D:3D:33:77:48:78:43:E7:D1:E1","sha256":"ED:84:90:EE:71:BC:6B:5E:B3:D2:50:B0:23:3A:06:0D:E0:50:C6:B6:A9:09:36:E6:CE:FE:E8:66:89:EB:4E:C5"}}},"request":{"raw":"GET /npm/intl-tel-input@23.0.12/build/img/flags.png?1 HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cdn.jsdelivr.net/npm/intl-tel-input@23.0.12/build/css/intlTelInput.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-length: 70325\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: image/png\r\nx-jsd-version: 23.0.12\r\nx-jsd-version-type: version\r\netag: W/\"112b5-tFG020MXScxAzCpfJx+YB8oh8dM\"\r\naccept-ranges: bytes\r\nage: 2943190\r\ndate: Sun, 13 Sep 2026 19:03:24 GMT\r\nx-served-by: cache-fra-etou8220095-FRA, cache-bma-essb1270028-BMA\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":70325,"size_decoded":71052,"mime_type":"image/png","magic":"PNG image data, 5762 x 15, 8-bit/color RGBA, non-interlaced","md5":"0b1ca148890222235a0f9903636ca21a","sha1":"b451b4db431749cc40cc2a5f271f9807ca21f1d3","sha256":"54dc5bc49fbe41359681fa0af8add039fa1383a4f4eade34f7a0a5a257dd1caa","sha512":"37553ab4cecdb30b631d883dc0a1afe4b5e81b921fa2fb8054a63fa054c2f57954dddebfee1a5b676f97a392b954aaa553a803e6e9abeedd56f87da0b58a8475","ssdeep":"1536:3Cc3jdCcCx1zjonyR5/Gm5mwoKVehnITl1G/Ghdfal4pMy9c:SczdzCx9jonyT5mwo1hIp1hQ4pMOc","tlshash":"966302b241c2a627f87cb972b955522b673bfb30d280780a00cf15b6979517f04e3a3a","first_seen":"2023-09-16T21:00:24Z","last_seen":"2026-09-16T08:44:49.886765Z","times_seen":6807,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":11,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}