{"report_id":"f538ddda-f2c0-4d73-a2eb-ea937de7fd43","version":6,"status":"done","tags":["meta","facebook","phishing","social"],"date":"2026-05-23T13:26:17Z","url":{"schema":"https","addr":"clearshaven.com","fqdn":"clearshaven.com","domain":"clearshaven.com","tld":"com"},"ip":{"addr":"104.21.44.216","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"clearshaven.com/","fqdn":"clearshaven.com","domain":"clearshaven.com","tld":"com"},"title":"Facebook","dom":{"size":36424,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (1602)","md5":"027f3ddd9f93556206105821ddf1ff9b","sha1":"060cd545c55b374ad1eeac28493848be253aa9f8","sha256":"e79e69055f35ae4781ebd334945ff52cc997461e981f9956c8cf0471c6a70d2b","sha512":"4d4cf37e6d8ca634dd7fca0bd37ab5ead1f4e049392d00a5afd60b8b7db490faeb8aea516fa6bfc8c7f18307209a892dd6d3ebad2af725e2ee3f7c4f978e9f1e","ssdeep":"768:T91XMF1FFDln4F0FpFek3toC6XQ/We0IF6FfFoFN:T8HLaSf8kD0IQ9ev","tlshash":"80f2b62518f350a601a3a1e8aff75b5a3eb4a003e506d8007ded47d94fdad8b8d6339c","dom_hash":"domhash47577c78f7a56a0bd597c23cbaa4a6d9","first_seen":"2026-05-23T13:26:22.191275Z","last_seen":"2026-05-23T13:26:22.191275Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"clearshaven.com","fqdn":"clearshaven.com","domain":"clearshaven.com","tld":"com"},"ip":{"addr":"104.21.44.216","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null,"user":{"user_id":"akbkyowd9geqr98"}},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-06-27T13:26:17Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":2,"analyzer":3}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-23","alert":"Sinkholed","trigger":"clearshaven.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-23","alert":"Phishing Block","trigger":"clearshaven.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-23","alert":"Sinkholed","trigger":"clearshaven.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Facebook","verdict":"phishing","severity":"medium","comment":"Resource associated with Facebook phishing","tags":["meta","facebook","phishing","social"],"meta":null},{"sensor_name":"urlquery","alert":"Phishing - Facebook","verdict":"phishing","severity":"medium","comment":"Resource associated with Facebook phishing","tags":["meta","facebook","phishing","social"],"meta":null}]},"summary":[{"fqdn":"clearshaven.com","ip":{"addr":"172.67.203.238","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-04-08","domain_rank":0,"first_seen":"2026-05-15T05:58:06.049616Z","last_seen":"2026-05-23T06:30:55.733548Z","alert_count":172,"request_count":43,"received_data":2833812,"sent_data":35759,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP:7.4.33","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}]},{"fqdn":"cdnjs.cloudflare.com","ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2009-02-17","domain_rank":1222,"first_seen":"2012-05-23T12:49:49Z","last_seen":"2026-05-17T22:36:28.748469Z","alert_count":0,"request_count":4,"received_data":451801,"sent_data":2047,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Facebook","verdict":"phishing","severity":"medium","comment":"Resource associated with Facebook phishing","tags":["meta","facebook","phishing","social"],"meta":null}]},"javascript":{"script":[{"url":{"schema":"https","addr":"clearshaven.com/lander/baykarai_post_new_creo_tizer/form/js/libs.js","fqdn":"clearshaven.com","domain":"clearshaven.com","tld":"com"},"ip":{"addr":"172.67.203.238","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"0cc13dab9df2d6fe238ff738f3799f39","sha1":"cf4fbe1a22fdacb348b44edea0915ff258e69ce4","sha256":"8448d75feec84ed58e9ae34e27a8f50286d3587f54fa255ac9e3f2a2ec52be3f","sha512":"5df3dedc530768272dff636a1179c062de6311467c0f818dfa07cb03a670fe4047a6fe87b7d2e25e09fbf66b0bf15a019c2c87650e803a52d2d5ec58b64b1960","ssdeep":"","tlshash":"0dc0122610884a6a36a04c9cb9c770fd02b8a16afae0939a6128033af2b03e2c020800","size":175,"data":"","first_seen":"2025-10-13T16:17:17.484334Z","last_seen":"2026-06-14T01:48:19.637303Z","times_seen":29,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"clearshaven.com/lander/baykarai_post_new_creo_tizer/form/js/functions.js?v=1","fqdn":"clearshaven.com","domain":"clearshaven.com","tld":"com"},"ip":{"addr":"172.67.203.238","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"e2c838b44e872b04e622b61991e9e431","sha1":"127c83febce410d936d75c7888c1885561e58a89","sha256":"253bbb0a4e96be8fb7e8cb2467939eddf0e968e5ecf4b207fc227fe484ea96dd","sha512":"8327338e5cb93e72482b4830295c9d1503bcc8b551a9a3a5e89d087cae7d3f96f1083939d44945253c533a42a03ff2fc51908e39026a7dd0b8ba2f7e37eafcaa","ssdeep":"192:eAXXX9YHfPs0PvhDCf56YGINvYCFuuuuefh/7fhZni6W:eaH9Y/E0Pvim4uuuuet7iV","tlshash":"22e1a60552f958ba00a794f9abcb8b1a3699d013fc09891035ec47c91fd6c5b8af37ce","size":7440,"data":"","first_seen":"2025-11-25T10:15:34.295906Z","last_seen":"2026-05-23T13:26:22.196027Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"clearshaven.com/","fqdn":"clearshaven.com","domain":"clearshaven.com","tld":"com"},"ip":{"addr":"172.67.203.238","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"7d8ee275d007d95a3d2168f4948ac931","sha1":"c4016c044efed7342aa0bedca8db935b1dbd0e53","sha256":"e5e3e01e7407ec88a5ba6076aca766a32ee3b166e9277da299fea495254a21ba","sha512":"41995224e1cf84b08efb8271e4ef8fc979828f9355d68c35ce81180b3c607b90c908086f8de10ea461ecf9b2baad97c84b61e009dd30bb0dccb704348d1d9f8c","ssdeep":"","tlshash":"d4618b2c32eb20714e63906ebb8b51d47138b0436404d868bdcdd5882fe59dac5f2be7","size":3378,"data":"","first_seen":"2026-05-15T05:58:11.085521Z","last_seen":"2026-05-23T13:26:22.293782Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/jquery/3.7.1/jquery.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"2c872dbe60f4ba70fb85356113d8b35e","sha1":"ee48592d1fff952fcf06ce0b666ed4785493afdc","sha256":"fc9a93dd241f6b045cbff0481cf4e1901becd0e12fb45166a8f17f95823f0b1a","sha512":"bf6089ed4698cb8270a8b0c8ad9508ff886a7a842278e98064d5c1790ca3a36d5d69d9f047ef196882554fc104da2c88eb5395f1ee8cf0f3f6ff8869408350fe","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKr:sHNwcv9VBQpLl88SMBQ47GKr","tlshash":"3983f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","size":87533,"data":"","first_seen":"2023-08-31T16:03:19Z","last_seen":"2026-08-04T08:29:43.744766Z","times_seen":183776,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"clearshaven.com/lander/baykarai_post_new_creo_tizer/form/js/libs/utils.js","fqdn":"clearshaven.com","domain":"clearshaven.com","tld":"com"},"ip":{"addr":"172.67.203.238","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"41e291dfd45560d2d4fb659a40ca4c56","sha1":"3792bce8f036876641cc14702b1f6a26e6d0d44d","sha256":"8abb51715ec9b4b8587b197b320ba4b6b0092234563b2c72fba42583810ef0da","sha512":"7521362194cc5073e616d9bd9701b5885216aef6da96e497cd08f85a5cf6fa94d678bd2bafa7e0860440cb7d85725d907f88156ee6d731af1d6a18a6335ee0cb","ssdeep":"3072:7XEe8tABjO03k4Pc03C4P0IMOx2EZDmXmoLGYAIrBm6nRTvUQL+D4tQrxaySCkKU:7Xwu59hZDmXmod1","tlshash":"6634deebd63c9736a5d97b35968eb3cd5a8cbca3c848527826c3b54f53788e0706c205","size":248044,"data":"","first_seen":"2024-06-06T14:03:54Z","last_seen":"2026-07-04T03:35:56.599196Z","times_seen":90,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"clearshaven.com/lander/baykarai_post_new_creo_tizer/form/js/libs/intlTelInput.js","fqdn":"clearshaven.com","domain":"clearshaven.com","tld":"com"},"ip":{"addr":"172.67.203.238","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"c79a1dd02df4c628a56f3835471fc932","sha1":"f2fa8f443e3b91187c8c786c5242c60a65364bf9","sha256":"b31fd662513a7c7f7c90c8df2a060f319219e380c774326322034acb0d7b2116","sha512":"a245ebd8efa3f512a4aeac9c3fc88fe7cb2593d1bd8e67225f88b01dd52ef866dd44adf931fb20913b35877ca81f630d48587cf9dcc21749f22d376f45023594","ssdeep":"768:AqDnUfAow5D45YiLpJonAuN1dlfJLKgHJAV:lo5JoAuN1U","tlshash":"3cf2c89d7344533be8fac196b89b014b2aee35141a84c89c787dcfcc4aa8ed5b567334","size":34655,"data":"","first_seen":"2024-06-06T14:03:54Z","last_seen":"2026-07-04T03:35:56.592968Z","times_seen":92,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"clearshaven.com/","fqdn":"clearshaven.com","domain":"clearshaven.com","tld":"com"},"ip":{"addr":"172.67.203.238","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"b5221a4ceb2b913d0652ef8ebafa8909","sha1":"a713361697c602278bc0c2fb38c3618a26dd0fe4","sha256":"a59dcba6a0e38824f702aa05b07bd22da99b5882ec2e66f31db5e0cf89d29003","sha512":"10698cc4b50f34a47efd530bb9aef1ead588b271aea98385eacf2010cbfa3730f98b24118a9ec8688a2998e69a3c5ce50def6224044ff52d8aea7e7bdb13849f","ssdeep":"","tlshash":"61d09738023200b602334049cb4bbb82faa100a32001d812bd2cc8cd1fc4b18a8b2bc1","size":269,"data":"","first_seen":"2026-05-15T05:58:11.087099Z","last_seen":"2026-05-23T13:26:22.297642Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"clearshaven.com/","fqdn":"clearshaven.com","domain":"clearshaven.com","tld":"com"},"ip":{"addr":"172.67.203.238","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"879522e41acd26a56c0320ab062dc4fd","sha1":"a45fbcbc2270e436fe73423235fe86400cd1188b","sha256":"afb3c70bfdca19ccd9f78bbedfe6fdff028c068b783320258143e645bf98fa53","sha512":"38ecd44b7ab2f23ca2ef1f0a851a7ac2828d37247da620a4f8c1d984d67cd821ab0f893e348498a6c52b6063398b61cb262cc1ae6d2d3003d32f40e765cc17e6","ssdeep":"","tlshash":"bb012b3b13b114b2427be26f935fe308b22510136883ed017e5c47881fa4a2bb5a6ad5","size":677,"data":"","first_seen":"2026-05-15T05:58:11.088453Z","last_seen":"2026-05-23T13:26:22.299723Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"clearshaven.com/lander/baykarai_post_new_creo_tizer/form/js/libs/jquery.maskedinput.js","fqdn":"clearshaven.com","domain":"clearshaven.com","tld":"com"},"ip":{"addr":"172.67.203.238","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"9833dfbc30d6fc0ebf316ed43952707d","sha1":"43772e9441e42983f229dc13ca3477d6f8f2f5e2","sha256":"bd9074e7da91f4f7df45000ea013ca770d4e9a69f2a2eb3955f755bd83917206","sha512":"c86ec760305d02e4ba89008e6ae78557e19ced1a78117e5be62c8250fc4b57bfb078de6491d154029a4d932d148bb975e3480843fc45b3ebd85ef33863fe6160","ssdeep":"96:6xaRbOnjRn9J/iDysXyDE48NsYenp8mWN3kPTz5HD2:4aCjp9J/AysXUE4OneeNyx2","tlshash":"cf91b99dbc9c721123b748a100afc5595235bf19485fd4b0e121f8d1f8389aa325bebf","size":4215,"data":"","first_seen":"2024-06-06T14:03:54Z","last_seen":"2026-07-04T03:35:56.598689Z","times_seen":100,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"clearshaven.com/lander/baykarai_post_new_creo_tizer/form/js/main-form.js?v=29","fqdn":"clearshaven.com","domain":"clearshaven.com","tld":"com"},"ip":{"addr":"172.67.203.238","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"77092b17b81377e711e1f1c731056296","sha1":"233116ab2793e34f085573b6638472c959cadece","sha256":"3b9704adb876fd5f09936f892678e3284f3b940a709789b0b29af7886c4984dc","sha512":"04f64eadae6ee9bfdabc5564aa2ed5797914b42847c1752146cecd345f10a04b18d6fa4f441f20b17341da03cf9121612f59a945ab87e6905dd0e29574c0658b","ssdeep":"192:uTCwh47OZWc6hIAe370I584s/k8YnQpeLgqGb83AxOk0GT6K2m6Af5G5W:a98uWOAGIw2eLglYK2/Esc","tlshash":"8e12a64821b6483041731afbb7eb474369b9021bbc08ea453d8c63841fa8e5967f0bfd","size":9559,"data":"","first_seen":"2026-05-15T05:58:11.047314Z","last_seen":"2026-05-23T13:26:22.245713Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"clearshaven.com/","fqdn":"clearshaven.com","domain":"clearshaven.com","tld":"com"},"ip":{"addr":"172.67.203.238","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"ec1fe0e7d7e79deb595c9541dcba4250","sha1":"61800d65e9cf76a2f0b9061917f0e64751f744f0","sha256":"789ff0b307f38e24059c6d632a2580974e7a297580338897bd4044fd5b5e9b4f","sha512":"7e2dda40963b6b54e7de68f6942e0aaf20e1a6cb7d0fef8cafe296264aee6e9790a2a385e9c4cf5ec7ac41ce078cc675747dda74015806437829075b6922b80e","ssdeep":"","tlshash":"d6114c52d1720e84952bb2d897874609050670573ca6d1abf78dd3490f5b84bd47f2dc","size":938,"data":"","first_seen":"2026-05-15T05:58:11.089813Z","last_seen":"2026-05-23T13:26:22.301854Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"clearshaven.com/","fqdn":"clearshaven.com","domain":"clearshaven.com","tld":"com"},"ip":{"addr":"172.67.203.238","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"61560218beddc9172c2a22e3673f5dd9","sha1":"ae9618167dcd7e44b229834f31388552596d4a7a","sha256":"8d80bd20a82982aacc958481eb67d3198584ee28f9a5807ecf4a7aeee7f3328c","sha512":"651aa25125f8be886d330a4fbe1426b33c79f05a40506679712df77c72ab4d1e278f174db4d7cd721d98adfed405c4fbaff099e64b73f82c7810ddf1be808c5f","ssdeep":"","tlshash":"dbe09b5221a1490852b363c79a47616c1078b0573dcdd1a9790dc7580fc5466e51a5f5","size":399,"data":"","first_seen":"2026-05-15T05:58:11.090854Z","last_seen":"2026-05-23T13:26:22.305523Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/jquery/3.7.1/jquery.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://clearshaven.com/","date":"2026-05-23T13:25:55.669Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 12 May 2026 03:46:57 GMT","end":"Mon, 10 Aug 2026 04:46:42 GMT"},"fingerprint":{"sha1":"95:12:1E:0A:F6:69:8B:FC:A0:08:DA:67:1A:A4:D1:9D:87:F5:E9:07","sha256":"F3:4A:39:63:C7:6A:CE:66:1A:B4:62:2C:E9:92:82:9A:81:78:1B:CC:3F:D5:2D:0A:6D:D6:89:D9:F6:66:7B:BC"}}},"request":{"raw":"GET /ajax/libs/jquery/3.7.1/jquery.min.js HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://clearshaven.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://clearshaven.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 23 May 2026 13:25:55 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 27446\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"64ed75bb-6b36\"\r\nlast-modified: Tue, 29 Aug 2023 04:36:11 GMT\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/kv\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 1247135\r\nexpires: Thu, 13 May 2027 13:25:55 GMT\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=15780000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hi%2FrkwGjkRhYHcrOCjYpIpSDgQmysCFFd68xejffCNuY5Lu8%2FQM9o%2FoeXuExn%2BKuzL6T%2BRYVvUlOCUXtwgg7p6mIEPvqK6h0zBTYZrLzwgNp3p7zovDnsv9WFy3cSzPsX0oI3NIJ\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\ncf-ray: a00463aef90b0b06-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":87533,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65447)","md5":"2c872dbe60f4ba70fb85356113d8b35e","sha1":"ee48592d1fff952fcf06ce0b666ed4785493afdc","sha256":"fc9a93dd241f6b045cbff0481cf4e1901becd0e12fb45166a8f17f95823f0b1a","sha512":"bf6089ed4698cb8270a8b0c8ad9508ff886a7a842278e98064d5c1790ca3a36d5d69d9f047ef196882554fc104da2c88eb5395f1ee8cf0f3f6ff8869408350fe","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKr:sHNwcv9VBQpLl88SMBQ47GKr","tlshash":"3983f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","first_seen":"2023-08-31T16:03:19Z","last_seen":"2026-08-04T08:29:43.744766Z","times_seen":183776,"resource_available":true,"data":null}},"time_used":21,"timings":{"blocked":10,"dns":1,"connect":0,"send":0,"wait":8,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"clearshaven.com/lander/baykarai_post_new_creo_tizer/form/js/functions.js?v=1","fqdn":"clearshaven.com","domain":"clearshaven.com","tld":"com"},"ip":{"addr":"172.67.203.238","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://clearshaven.com/","date":"2026-05-23T13:25:55.680Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"clearshaven.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Apr 2026 11:27:24 GMT","end":"Tue, 07 Jul 2026 11:27:23 GMT"},"fingerprint":{"sha1":"DC:89:A1:EF:92:53:03:EF:FF:61:53:2C:8C:EE:71:76:0B:BB:A3:9A","sha256":"CF:3B:DD:36:E5:61:52:73:B2:A3:90:0B:59:27:8B:3C:A0:B4:72:4C:94:17:C5:AF:6B:64:D1:54:A2:2E:C7:7A"}}},"request":{"raw":"GET /lander/baykarai_post_new_creo_tizer/form/js/functions.js?v=1 HTTP/1.1\r\nHost: clearshaven.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://clearshaven.com/lander/baykarai_post_new_creo_tizer/form/js/main-form.js?v=29\r\nCookie: _subid=1sjos4f2nr1lq; 502d3=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjE1NDU0XCI6MTc3OTU0Mjc1NX0sXCJjYW1wYWlnbnNcIjp7XCIzMzMwXCI6MTc3OTU0Mjc1NX0sXCJ0aW1lXCI6MTc3OTU0Mjc1NX0ifQ.Ye4K8KtvxT925lLk1p7GLWgtysWEEooHZZfU2LDVP-E; _token=uuid_1sjos4f2nr1lq_1sjos4f2nr1lq6a11aae3394675.63059918\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 23 May 2026 13:25:55 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=c2YGW5%2Fm4rPsiTTmKr91pd0dS8MmOHxPoozRg3C55HiZXPRVKfkeDac%2FOuYEFlZ9XRWVzRbAI2uJTVMtSM8BNV24RPdqsXAf8EM9NG2mWnLbOiH0SbfYYmVG0u4ZEUU8YMQ%3D\"}]}\r\npriority: u=3,i=?0\r\nlast-modified: Wed, 18 Feb 2026 06:46:55 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Tue, 02 Jun 2026 06:30:31 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\ncontent-encoding: br\r\nage: 24923\r\ncf-cache-status: HIT\r\netag: W/\"6995605f-1d10\"\r\ncf-ray: a00463aeeae6b4fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7440,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (384)","md5":"e2c838b44e872b04e622b61991e9e431","sha1":"127c83febce410d936d75c7888c1885561e58a89","sha256":"253bbb0a4e96be8fb7e8cb2467939eddf0e968e5ecf4b207fc227fe484ea96dd","sha512":"8327338e5cb93e72482b4830295c9d1503bcc8b551a9a3a5e89d087cae7d3f96f1083939d44945253c533a42a03ff2fc51908e39026a7dd0b8ba2f7e37eafcaa","ssdeep":"192:eAXXX9YHfPs0PvhDCf56YGINvYCFuuuuefh/7fhZni6W:eaH9Y/E0Pvim4uuuuet7iV","tlshash":"22e1a60552f958ba00a794f9abcb8b1a3699d013fc09891035ec47c91fd6c5b8af37ce","first_seen":"2025-11-25T10:15:34.295906Z","last_seen":"2026-05-23T13:26:22.196027Z","times_seen":10,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-23","alert":"Sinkholed","trigger":"clearshaven.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-23","alert":"Phishing Block","trigger":"clearshaven.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-23","alert":"Sinkholed","trigger":"clearshaven.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Facebook","verdict":"phishing","severity":"medium","comment":"Resource associated with Facebook phishing","tags":["meta","facebook","phishing","social"],"meta":null}]}},{"url":{"schema":"https","addr":"clearshaven.com/lander/baykarai_post_new_creo_tizer/video1.mp4","fqdn":"clearshaven.com","domain":"clearshaven.com","tld":"com"},"ip":{"addr":"172.67.203.238","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://clearshaven.com/","date":"2026-05-23T13:25:55.933Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"clearshaven.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Apr 2026 11:27:24 GMT","end":"Tue, 07 Jul 2026 11:27:23 GMT"},"fingerprint":{"sha1":"DC:89:A1:EF:92:53:03:EF:FF:61:53:2C:8C:EE:71:76:0B:BB:A3:9A","sha256":"CF:3B:DD:36:E5:61:52:73:B2:A3:90:0B:59:27:8B:3C:A0:B4:72:4C:94:17:C5:AF:6B:64:D1:54:A2:2E:C7:7A"}}},"request":{"raw":"GET /lander/baykarai_post_new_creo_tizer/video1.mp4 HTTP/1.1\r\nHost: clearshaven.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://clearshaven.com/\r\nCookie: _subid=1sjos4f2nr1lq; 502d3=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjE1NDU0XCI6MTc3OTU0Mjc1NX0sXCJjYW1wYWlnbnNcIjp7XCIzMzMwXCI6MTc3OTU0Mjc1NX0sXCJ0aW1lXCI6MTc3OTU0Mjc1NX0ifQ.Ye4K8KtvxT925lLk1p7GLWgtysWEEooHZZfU2LDVP-E; _token=uuid_1sjos4f2nr1lq_1sjos4f2nr1lq6a11aae3394675.63059918\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 206 Partial Content\r\nserver: cloudflare\r\ndate: Sat, 23 May 2026 13:25:55 GMT\r\ncontent-type: video/mp4\r\ncontent-length: 4164354\r\npriority: u=4,i=?0\r\nlast-modified: Wed, 18 Feb 2026 06:46:55 GMT\r\netag: \"6995605f-3f8b02\"\r\nexpires: Mon, 01 Jun 2026 14:09:13 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\nage: 83802\r\ncontent-range: bytes 0-4164353/4164354\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=c9P0r8%2Bgi6Ak3ojnh6rmTbFE91%2FjXeaThRI0fI%2Boe7vc7oTGxGGGApm%2B1pfRkXA8u7AVguZat7jGXf1l8WRnyap%2BqVcAeqK%2FyzDOp%2ByuTIiKZ%2BxQg3UEp0BiZWFetGnuXwE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a00463b09b38b4fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1074673,"size_decoded":0,"mime_type":"video/mp4","magic":"ISO Media, MP4 Base Media v1 [ISO 14496-12:2003]","md5":"c4fcc0ecf7061e6fa6ab02d4c1099058","sha1":"5bb24a6d6afdd3be2c11c1471883451cb746fee3","sha256":"cca2a5800185b5429f0d00c90da18078351798742b39f7ee25535ca2c8670571","sha512":"0c96eebb79aefe57918c5184a79c1e5132285e811a1588911f1f07cc43b54a2730238cdbc2c41749df355fcb357c8d47609cbbf80d90a25e15365e804182b38e","ssdeep":"24576:rVOk6evUx+wc7h4og9GQ42xWhJvLk8v/Q:ROk6evk3cF4GsxWhZZ4","tlshash":"072522ad7b141316c3a1d37495d64720bba8ec924203c68fc8c176364da63f9762fee6","first_seen":"2026-05-23T06:30:59.775754Z","last_seen":"2026-06-22T07:36:21.382012Z","times_seen":6,"resource_available":false,"data":null}},"time_used":109,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":100,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-23","alert":"Phishing Block","trigger":"clearshaven.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-23","alert":"Sinkholed","trigger":"clearshaven.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-23","alert":"Sinkholed","trigger":"clearshaven.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Facebook","verdict":"phishing","severity":"medium","comment":"Resource associated with Facebook phishing","tags":["meta","facebook","phishing","social"],"meta":null}]}},{"url":{"schema":"https","addr":"clearshaven.com/lander/baykarai_post_new_creo_tizer/index/fa-brands-400.ttf","fqdn":"clearshaven.com","domain":"clearshaven.com","tld":"com"},"ip":{"addr":"172.67.203.238","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://clearshaven.com/","date":"2026-05-23T13:25:55.937Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"clearshaven.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Apr 2026 11:27:24 GMT","end":"Tue, 07 Jul 2026 11:27:23 GMT"},"fingerprint":{"sha1":"DC:89:A1:EF:92:53:03:EF:FF:61:53:2C:8C:EE:71:76:0B:BB:A3:9A","sha256":"CF:3B:DD:36:E5:61:52:73:B2:A3:90:0B:59:27:8B:3C:A0:B4:72:4C:94:17:C5:AF:6B:64:D1:54:A2:2E:C7:7A"}}},"request":{"raw":"GET /lander/baykarai_post_new_creo_tizer/index/fa-brands-400.ttf HTTP/1.1\r\nHost: clearshaven.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://clearshaven.com/lander/baykarai_post_new_creo_tizer/index/all(1).min.css\r\nCookie: _subid=1sjos4f2nr1lq; 502d3=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjE1NDU0XCI6MTc3OTU0Mjc1NX0sXCJjYW1wYWlnbnNcIjp7XCIzMzMwXCI6MTc3OTU0Mjc1NX0sXCJ0aW1lXCI6MTc3OTU0Mjc1NX0ifQ.Ye4K8KtvxT925lLk1p7GLWgtysWEEooHZZfU2LDVP-E; _token=uuid_1sjos4f2nr1lq_1sjos4f2nr1lq6a11aae3394675.63059918\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\nserver: cloudflare\r\ndate: Sat, 23 May 2026 13:25:55 GMT\r\ncontent-type: text/html\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\ncontent-encoding: br\r\nage: 43\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IQcB%2BdfnnpkbgPV7PHL%2FcAOShHp2Q3HfGPo%2BGCrJne5sLVa%2BjW8%2BCmBK7qJDCqBU8b3M0OnmMF2FUqcQVqFUS%2BgHC%2FpI6SvT9vCGmaCrj7YRcfH2ERbn07bXLtapTQpWtSk%3D\"}]}\r\ncf-ray: a00463b09b3ab4fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":146,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"8eec510e57f5f732fd2cce73df7b73ef","sha1":"3c0af39ecb3753c5fee3b53d063c7286019eac3b","sha256":"55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0","sha512":"73bbf698482132b5fd60a0b58926fddec9055f8095a53bc52714e211e9340c3419736ceafd6b279667810114d306bfccdcfcddf51c0b67fe9e3c73c54583e574","ssdeep":"","tlshash":"b7c02b2d35133c4cc563313423c37140c0d6833b687a41110400c00371cf2998ec3397","first_seen":"2023-03-07T12:05:15Z","last_seen":"2026-08-04T08:31:18.797433Z","times_seen":546310,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-23","alert":"Phishing Block","trigger":"clearshaven.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-23","alert":"Sinkholed","trigger":"clearshaven.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-23","alert":"Sinkholed","trigger":"clearshaven.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Facebook","verdict":"phishing","severity":"medium","comment":"Resource associated with Facebook phishing","tags":["meta","facebook","phishing","social"],"meta":null}]}},{"url":{"schema":"https","addr":"clearshaven.com/lander/baykarai_post_new_creo_tizer/index/heart.png","fqdn":"clearshaven.com","domain":"clearshaven.com","tld":"com"},"ip":{"addr":"172.67.203.238","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://clearshaven.com/","date":"2026-05-23T13:25:55.482Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"clearshaven.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Apr 2026 11:27:24 GMT","end":"Tue, 07 Jul 2026 11:27:23 GMT"},"fingerprint":{"sha1":"DC:89:A1:EF:92:53:03:EF:FF:61:53:2C:8C:EE:71:76:0B:BB:A3:9A","sha256":"CF:3B:DD:36:E5:61:52:73:B2:A3:90:0B:59:27:8B:3C:A0:B4:72:4C:94:17:C5:AF:6B:64:D1:54:A2:2E:C7:7A"}}},"request":{"raw":"GET /lander/baykarai_post_new_creo_tizer/index/heart.png HTTP/1.1\r\nHost: clearshaven.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://clearshaven.com/\r\nCookie: _subid=1sjos4f2nr1lq; 502d3=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjE1NDU0XCI6MTc3OTU0Mjc1NX0sXCJjYW1wYWlnbnNcIjp7XCIzMzMwXCI6MTc3OTU0Mjc1NX0sXCJ0aW1lXCI6MTc3OTU0Mjc1NX0ifQ.Ye4K8KtvxT925lLk1p7GLWgtysWEEooHZZfU2LDVP-E; _token=uuid_1sjos4f2nr1lq_1sjos4f2nr1lq6a11aae3394675.63059918\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 23 May 2026 13:25:55 GMT\r\ncontent-type: image/png\r\ncontent-length: 36828\r\npriority: u=4,i=?0\r\nlast-modified: Wed, 18 Feb 2026 06:46:55 GMT\r\netag: \"6995605f-8fdc\"\r\nexpires: Mon, 01 Jun 2026 14:09:13 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 83801\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FWHdyq7AvY4Zvx%2FG4eIKgHA8bzXuQKO23iXJ%2BFskmgTHvoU7He0z%2Bc%2Fwd%2BPIP8ASTjJD5TojXL6jXia7CiIZ2KI1R4DABGHhl4x2ez1VgtQKWUJSJSGKpxR2%2FZcGipeekJc%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a00463ad9ac2b4fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":36828,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 500 x 500, 8-bit/color RGBA, non-interlaced","md5":"4d380586c7cf194ecbfbaa5b014957e5","sha1":"72b2a0f24ecba554ac2cb4d1756d7d2d98942ff3","sha256":"6fd9e2b322a30d2d93ada14178c0b0f7869c4d5d9268e47e0f13ca0f9a67918c","sha512":"b1acadd30148a7223db8338f8ae91718950cd998ee6e5aa249864efe35d16d5ed2746e74657ee00a6425bec0bfffc9c8baf2fe8ab1143310c632f260b03c9048","ssdeep":"768:Lm0A0FGg0WS6o/W5mgG47zfz21Xih4bPkPDOol6NERFlu:Lm0A0FjQ6o/WM47zqRih11oNEdu","tlshash":"e8f2f17fc91598c0c9962dc06ff9e1569d6a83cd27d2678b8eb78f9465ac402e838390","first_seen":"2024-10-06T09:22:12.633464Z","last_seen":"2026-06-22T07:36:21.377615Z","times_seen":25,"resource_available":false,"data":null}},"time_used":63,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":42,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-23","alert":"Phishing Block","trigger":"clearshaven.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-23","alert":"Sinkholed","trigger":"clearshaven.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-23","alert":"Sinkholed","trigger":"clearshaven.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Facebook","verdict":"phishing","severity":"medium","comment":"Resource associated with Facebook phishing","tags":["meta","facebook","phishing","social"],"meta":null}]}},{"url":{"schema":"https","addr":"clearshaven.com/lander/baykarai_post_new_creo_tizer/index/like.png","fqdn":"clearshaven.com","domain":"clearshaven.com","tld":"com"},"ip":{"addr":"172.67.203.238","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://clearshaven.com/","date":"2026-05-23T13:25:55.479Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"clearshaven.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Apr 2026 11:27:24 GMT","end":"Tue, 07 Jul 2026 11:27:23 GMT"},"fingerprint":{"sha1":"DC:89:A1:EF:92:53:03:EF:FF:61:53:2C:8C:EE:71:76:0B:BB:A3:9A","sha256":"CF:3B:DD:36:E5:61:52:73:B2:A3:90:0B:59:27:8B:3C:A0:B4:72:4C:94:17:C5:AF:6B:64:D1:54:A2:2E:C7:7A"}}},"request":{"raw":"GET /lander/baykarai_post_new_creo_tizer/index/like.png HTTP/1.1\r\nHost: clearshaven.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://clearshaven.com/\r\nCookie: _subid=1sjos4f2nr1lq; 502d3=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjE1NDU0XCI6MTc3OTU0Mjc1NX0sXCJjYW1wYWlnbnNcIjp7XCIzMzMwXCI6MTc3OTU0Mjc1NX0sXCJ0aW1lXCI6MTc3OTU0Mjc1NX0ifQ.Ye4K8KtvxT925lLk1p7GLWgtysWEEooHZZfU2LDVP-E; _token=uuid_1sjos4f2nr1lq_1sjos4f2nr1lq6a11aae3394675.63059918\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 23 May 2026 13:25:55 GMT\r\ncontent-type: image/png\r\ncontent-length: 34926\r\npriority: u=4,i=?0\r\nlast-modified: Wed, 18 Feb 2026 06:46:55 GMT\r\netag: \"6995605f-886e\"\r\nexpires: Tue, 02 Jun 2026 06:30:31 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 24923\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=H0hOuM7Yam9R6%2FnYKK7Djok46MuI8Uawn0NqVIaEaAGof6rNiGv%2FfUy16u6TSfC%2FCl7tsMRPA3sY1kB2Tbq8lNoz%2BiA1HSi7xIcqNXmeOxuHUJENIT2WWG%2BpRf%2FRcJkvoYA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a00463ad9ac1b4fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":34926,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 500 x 500, 8-bit/color RGBA, non-interlaced","md5":"7d4f0a6d69bf856ea5bb4460d9163bec","sha1":"cfb40a3d3010c4f381360ab4e62f1fc25f716c63","sha256":"e8722736c5282dd10ec95a58955c30e49e3593ebdf44b577b6871bee591f6c33","sha512":"2c7a15851466807ebe9bd884d91498c3226fbe414d08f07689d9fc2a6d993a735a118a9751b2e5bd36ac34e7532afdc8e5307a63a56bfef086f74319a333e114","ssdeep":"768:LbVC1ehSpAKvWI48RhIqf4JLYzxjW9jYMFugl5zHeeKh7:LbVtMvt42uqf4RYzxq9YMHK7","tlshash":"54f2e187e811c8d9cf82b3260cd9f78a2123cb894a86d5d464b08f575531babc19f288","first_seen":"2024-10-06T09:22:12.604038Z","last_seen":"2026-06-22T07:36:21.393416Z","times_seen":25,"resource_available":false,"data":null}},"time_used":62,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":39,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-23","alert":"Sinkholed","trigger":"clearshaven.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-23","alert":"Sinkholed","trigger":"clearshaven.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-23","alert":"Phishing Block","trigger":"clearshaven.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Facebook","verdict":"phishing","severity":"medium","comment":"Resource associated with Facebook phishing","tags":["meta","facebook","phishing","social"],"meta":null}]}},{"url":{"schema":"https","addr":"clearshaven.com/lander/baykarai_post_new_creo_tizer/index/car1.jpg","fqdn":"clearshaven.com","domain":"clearshaven.com","tld":"com"},"ip":{"addr":"172.67.203.238","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://clearshaven.com/","date":"2026-05-23T13:25:55.485Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"clearshaven.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Apr 2026 11:27:24 GMT","end":"Tue, 07 Jul 2026 11:27:23 GMT"},"fingerprint":{"sha1":"DC:89:A1:EF:92:53:03:EF:FF:61:53:2C:8C:EE:71:76:0B:BB:A3:9A","sha256":"CF:3B:DD:36:E5:61:52:73:B2:A3:90:0B:59:27:8B:3C:A0:B4:72:4C:94:17:C5:AF:6B:64:D1:54:A2:2E:C7:7A"}}},"request":{"raw":"GET /lander/baykarai_post_new_creo_tizer/index/car1.jpg HTTP/1.1\r\nHost: clearshaven.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://clearshaven.com/\r\nCookie: _subid=1sjos4f2nr1lq; 502d3=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjE1NDU0XCI6MTc3OTU0Mjc1NX0sXCJjYW1wYWlnbnNcIjp7XCIzMzMwXCI6MTc3OTU0Mjc1NX0sXCJ0aW1lXCI6MTc3OTU0Mjc1NX0ifQ.Ye4K8KtvxT925lLk1p7GLWgtysWEEooHZZfU2LDVP-E; _token=uuid_1sjos4f2nr1lq_1sjos4f2nr1lq6a11aae3394675.63059918\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 23 May 2026 13:25:55 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 462621\r\npriority: u=4,i=?0\r\nlast-modified: Wed, 18 Feb 2026 06:46:55 GMT\r\netag: \"6995605f-70f1d\"\r\nexpires: Mon, 01 Jun 2026 14:09:13 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 83801\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jK6CYRe2LBCsnCgFQio9HNz8mhmjq3Q6XJ9T%2BKjkp4jBQeLDZpIAvBHfUg7a6v1%2BCZ1ov5aLWnMO05Oj65uYqr1T8Cfdt52k99sQ91rgjXli%2BeT%2FDADN4rObsgShXrIgR5Q%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a00463ad9ac6b4fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":462621,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 960x1280, components 3","md5":"624a23fc3bc7b8f49538a04a566c1693","sha1":"3d5f920d394a01cc75212afe6a7dabc1ccaea7c3","sha256":"28feba44fb617c6b1b88d0c12c1a1792064bb6d6c197f63653ddcabf193e13f4","sha512":"09fb0a386f5fcdcce80ec361d7d15eaac43e7d697ad3ca4917d959937dd2de055bf12b47587c2ccf797889d2685232d056619c601d2ba0718806900a1d2b376a","ssdeep":"12288:7tsmUtJosqv4jwbhr0Lcxw2xxr7bexcsbmYD5sItaj:+T0Akr0Lcxwox3ccINtaj","tlshash":"58a4027851619122ad5ed69ac879b92f42939fa808dff25d276c0fc8f2c3161bdd4c1c","first_seen":"2026-04-15T02:58:20.482178Z","last_seen":"2026-05-23T13:26:22.210932Z","times_seen":7,"resource_available":false,"data":null}},"time_used":112,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":92,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-23","alert":"Sinkholed","trigger":"clearshaven.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-23","alert":"Sinkholed","trigger":"clearshaven.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-23","alert":"Phishing Block","trigger":"clearshaven.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Facebook","verdict":"phishing","severity":"medium","comment":"Resource associated with Facebook phishing","tags":["meta","facebook","phishing","social"],"meta":null}]}},{"url":{"schema":"https","addr":"clearshaven.com/lander/baykarai_post_new_creo_tizer/index/ava3.jpg","fqdn":"clearshaven.com","domain":"clearshaven.com","tld":"com"},"ip":{"addr":"172.67.203.238","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://clearshaven.com/","date":"2026-05-23T13:25:55.487Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"clearshaven.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Apr 2026 11:27:24 GMT","end":"Tue, 07 Jul 2026 11:27:23 GMT"},"fingerprint":{"sha1":"DC:89:A1:EF:92:53:03:EF:FF:61:53:2C:8C:EE:71:76:0B:BB:A3:9A","sha256":"CF:3B:DD:36:E5:61:52:73:B2:A3:90:0B:59:27:8B:3C:A0:B4:72:4C:94:17:C5:AF:6B:64:D1:54:A2:2E:C7:7A"}}},"request":{"raw":"GET /lander/baykarai_post_new_creo_tizer/index/ava3.jpg HTTP/1.1\r\nHost: clearshaven.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://clearshaven.com/\r\nCookie: _subid=1sjos4f2nr1lq; 502d3=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjE1NDU0XCI6MTc3OTU0Mjc1NX0sXCJjYW1wYWlnbnNcIjp7XCIzMzMwXCI6MTc3OTU0Mjc1NX0sXCJ0aW1lXCI6MTc3OTU0Mjc1NX0ifQ.Ye4K8KtvxT925lLk1p7GLWgtysWEEooHZZfU2LDVP-E; _token=uuid_1sjos4f2nr1lq_1sjos4f2nr1lq6a11aae3394675.63059918\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 23 May 2026 13:25:55 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 72843\r\npriority: u=4,i=?0\r\nlast-modified: Wed, 18 Feb 2026 06:46:55 GMT\r\netag: \"6995605f-11c8b\"\r\nexpires: Mon, 01 Jun 2026 14:09:13 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 83801\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TEbVGQMh92txikNlsCqHuxGGWtG6SYyKP4tSIK%2BqveGvh2I%2BV7mNsjnTw8udU6veV8gx6HEBN9y9JZl%2FwqtS9tbBwDAC0piCvlly%2FZPe2URefp%2Bfv2uBqUNVv0AvXsq5mJI%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a00463ad9acab4fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":72843,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 796x756, components 3","md5":"5f8e4dd05c5e8d6ee71c5235c8240e5d","sha1":"3260d28d23f8451139b4482ea295fbc6ef210b0a","sha256":"92177678f722cfce6dc5a3091afb70e9114ad93344c56be5236102c3a26232a4","sha512":"b9c202ccd3d3e07ac41deb817b40b098d538dde3cdf784761532b06bdb401d4e74fbab88d45403ad17358cb18d3c652b22de0585d466c13f11e27af7d4fd17cb","ssdeep":"1536:EpaLv0iWFBSJTzjCSHsBcwizbOjRIN9vN1bglrsodc8yzxkaGzQyAY3:nL8ieS9anizCINFNxad5yzCFQyP","tlshash":"bb6302a7125e9e73a5f570aa0ddf3ea956c879f221862f8231012c7597e4d890b02dd3","first_seen":"2026-02-27T03:08:58.335617Z","last_seen":"2026-06-22T07:36:21.380179Z","times_seen":10,"resource_available":false,"data":null}},"time_used":75,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":53,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-23","alert":"Sinkholed","trigger":"clearshaven.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-23","alert":"Phishing Block","trigger":"clearshaven.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-23","alert":"Sinkholed","trigger":"clearshaven.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Facebook","verdict":"phishing","severity":"medium","comment":"Resource associated with Facebook phishing","tags":["meta","facebook","phishing","social"],"meta":null}]}},{"url":{"schema":"https","addr":"clearshaven.com/lander/baykarai_post_new_creo_tizer/index/car2.jpg","fqdn":"clearshaven.com","domain":"clearshaven.com","tld":"com"},"ip":{"addr":"172.67.203.238","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://clearshaven.com/","date":"2026-05-23T13:25:55.491Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"clearshaven.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Apr 2026 11:27:24 GMT","end":"Tue, 07 Jul 2026 11:27:23 GMT"},"fingerprint":{"sha1":"DC:89:A1:EF:92:53:03:EF:FF:61:53:2C:8C:EE:71:76:0B:BB:A3:9A","sha256":"CF:3B:DD:36:E5:61:52:73:B2:A3:90:0B:59:27:8B:3C:A0:B4:72:4C:94:17:C5:AF:6B:64:D1:54:A2:2E:C7:7A"}}},"request":{"raw":"GET /lander/baykarai_post_new_creo_tizer/index/car2.jpg HTTP/1.1\r\nHost: clearshaven.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://clearshaven.com/\r\nCookie: _subid=1sjos4f2nr1lq; 502d3=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjE1NDU0XCI6MTc3OTU0Mjc1NX0sXCJjYW1wYWlnbnNcIjp7XCIzMzMwXCI6MTc3OTU0Mjc1NX0sXCJ0aW1lXCI6MTc3OTU0Mjc1NX0ifQ.Ye4K8KtvxT925lLk1p7GLWgtysWEEooHZZfU2LDVP-E; _token=uuid_1sjos4f2nr1lq_1sjos4f2nr1lq6a11aae3394675.63059918\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 23 May 2026 13:25:55 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 60977\r\npriority: u=4,i=?0\r\nlast-modified: Wed, 18 Feb 2026 06:46:55 GMT\r\netag: \"6995605f-ee31\"\r\nexpires: Mon, 01 Jun 2026 14:09:13 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 83801\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=j1BtF%2B0Ku9ob8Dfbslt8I%2FmQVsFDQ4UISH976mRIJFH4Dag5VZu4zz4M2BOSv0Bvhh0NXDcsr3k7QFcAFbMc6cxXtwBuO0A6ZQiphlhqs5Sjub9mHEHBzuggK2mdc7rjNr8%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a00463ad9acbb4fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":60977,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 75\", baseline, precision 8, 512x512, components 3","md5":"3038be64620b31474c489deae2847162","sha1":"7e007c4886aaba677effaa8c4f2a29c4e73d8753","sha256":"e508d041ba429c2804ef636492eaa0100abc0020c7eeecb485d4228564f45644","sha512":"76695526a1dd685020e90ab8c74b76065f236002eba0794fec74d5fcddf80cdf262ac5cc1c0978ae994e597c9fc2d5c569014a1642a657547550fe5c5d1fc2e7","ssdeep":"1536:CujYbUkkPontQ2SPd7a6ZmtK8g7p/dAVPNzhJ/N0:XjkkFF+MmtK8g9d2V90","tlshash":"b3530296d12988c1a79fc11070c9b8a3fdceec87ba6bb37851544f07cab08b4d8454cb","first_seen":"2026-04-15T02:58:20.508392Z","last_seen":"2026-05-23T13:26:22.216141Z","times_seen":7,"resource_available":false,"data":null}},"time_used":73,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":46,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-23","alert":"Sinkholed","trigger":"clearshaven.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-23","alert":"Phishing Block","trigger":"clearshaven.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-23","alert":"Sinkholed","trigger":"clearshaven.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Facebook","verdict":"phishing","severity":"medium","comment":"Resource associated with Facebook phishing","tags":["meta","facebook","phishing","social"],"meta":null}]}},{"url":{"schema":"https","addr":"clearshaven.com/lander/baykarai_post_new_creo_tizer/index/ava7.jpg","fqdn":"clearshaven.com","domain":"clearshaven.com","tld":"com"},"ip":{"addr":"172.67.203.238","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://clearshaven.com/","date":"2026-05-23T13:25:55.494Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"clearshaven.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Apr 2026 11:27:24 GMT","end":"Tue, 07 Jul 2026 11:27:23 GMT"},"fingerprint":{"sha1":"DC:89:A1:EF:92:53:03:EF:FF:61:53:2C:8C:EE:71:76:0B:BB:A3:9A","sha256":"CF:3B:DD:36:E5:61:52:73:B2:A3:90:0B:59:27:8B:3C:A0:B4:72:4C:94:17:C5:AF:6B:64:D1:54:A2:2E:C7:7A"}}},"request":{"raw":"GET /lander/baykarai_post_new_creo_tizer/index/ava7.jpg HTTP/1.1\r\nHost: clearshaven.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://clearshaven.com/\r\nCookie: _subid=1sjos4f2nr1lq; 502d3=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjE1NDU0XCI6MTc3OTU0Mjc1NX0sXCJjYW1wYWlnbnNcIjp7XCIzMzMwXCI6MTc3OTU0Mjc1NX0sXCJ0aW1lXCI6MTc3OTU0Mjc1NX0ifQ.Ye4K8KtvxT925lLk1p7GLWgtysWEEooHZZfU2LDVP-E; _token=uuid_1sjos4f2nr1lq_1sjos4f2nr1lq6a11aae3394675.63059918\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 23 May 2026 13:25:55 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 64495\r\npriority: u=4,i=?0\r\nlast-modified: Wed, 18 Feb 2026 06:46:55 GMT\r\netag: \"6995605f-fbef\"\r\nexpires: Tue, 02 Jun 2026 06:30:31 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 24923\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wPg9zrqgds5afboN16kqf3X5Snr%2FqO6EONQibBnDuD9ALlMGlTZGlr3O63PPGvti4zFt570t1t9Ns7fy0HoBH2qdKCckA6cxjfHokPvzyTKNVBDFpSpXhd5zppfw2Dz1Xfw%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a00463ad9accb4fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":64495,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 685x863, components 3","md5":"badd7c1f09bf3d5f315185c7633666d1","sha1":"ae4059cbf1797c225d6bd659d225786d7ebac37f","sha256":"6cb557671178c98c8d2db1fea0cb53c4c1f87746888da4c6cc5f606a56dc8abd","sha512":"c0cccd648cd09afbc0f4d0bab610c5a1c95e8f29fef43b5be8627c76ba5aeccd939b93fdf9f5462c32dff41434616374f0499e202b43783b747ed2bfcc8f016c","ssdeep":"1536:cZQcrp4PhfQQLQmVQ9SA72wsr8vr+dYUqRp6oO+LK5IQ:4luWPZE8j+oRkeKJ","tlshash":"ae53021fd2ea6177d867a5f3316a4c2a6588f2343b34422c1cca99e38bed90ed5224c5","first_seen":"2026-02-27T03:08:58.351765Z","last_seen":"2026-06-22T07:36:21.381022Z","times_seen":10,"resource_available":false,"data":null}},"time_used":76,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":47,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-23","alert":"Phishing Block","trigger":"clearshaven.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-23","alert":"Sinkholed","trigger":"clearshaven.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-23","alert":"Sinkholed","trigger":"clearshaven.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Facebook","verdict":"phishing","severity":"medium","comment":"Resource associated with Facebook phishing","tags":["meta","facebook","phishing","social"],"meta":null}]}},{"url":{"schema":"https","addr":"clearshaven.com/lander/baykarai_post_new_creo_tizer/form/js/libs.js","fqdn":"clearshaven.com","domain":"clearshaven.com","tld":"com"},"ip":{"addr":"172.67.203.238","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://clearshaven.com/","date":"2026-05-23T13:25:55.500Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"clearshaven.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Apr 2026 11:27:24 GMT","end":"Tue, 07 Jul 2026 11:27:23 GMT"},"fingerprint":{"sha1":"DC:89:A1:EF:92:53:03:EF:FF:61:53:2C:8C:EE:71:76:0B:BB:A3:9A","sha256":"CF:3B:DD:36:E5:61:52:73:B2:A3:90:0B:59:27:8B:3C:A0:B4:72:4C:94:17:C5:AF:6B:64:D1:54:A2:2E:C7:7A"}}},"request":{"raw":"GET /lander/baykarai_post_new_creo_tizer/form/js/libs.js HTTP/1.1\r\nHost: clearshaven.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://clearshaven.com/\r\nCookie: _subid=1sjos4f2nr1lq; 502d3=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjE1NDU0XCI6MTc3OTU0Mjc1NX0sXCJjYW1wYWlnbnNcIjp7XCIzMzMwXCI6MTc3OTU0Mjc1NX0sXCJ0aW1lXCI6MTc3OTU0Mjc1NX0ifQ.Ye4K8KtvxT925lLk1p7GLWgtysWEEooHZZfU2LDVP-E; _token=uuid_1sjos4f2nr1lq_1sjos4f2nr1lq6a11aae3394675.63059918\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 23 May 2026 13:25:55 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mta%2B1lNwBUXbtICITF%2BOx6ul5uUIpgKaQA4NxaQWTrscDIOgkN2qeWKCBdJ0ueXCwOd%2BxOHgBtZF9OmcbiVYYoV5U3%2BXcjPmYRGdGuk%2BYWf8KeULhDlyNb8sWO9rNSNpZG0%3D\"}]}\r\npriority: u=3,i=?0\r\nlast-modified: Wed, 18 Feb 2026 06:46:55 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Tue, 02 Jun 2026 06:30:31 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\ncontent-encoding: br\r\nage: 24923\r\ncf-cache-status: HIT\r\netag: W/\"6995605f-af\"\r\ncf-ray: a00463adaad0b4fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":175,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"0cc13dab9df2d6fe238ff738f3799f39","sha1":"cf4fbe1a22fdacb348b44edea0915ff258e69ce4","sha256":"8448d75feec84ed58e9ae34e27a8f50286d3587f54fa255ac9e3f2a2ec52be3f","sha512":"5df3dedc530768272dff636a1179c062de6311467c0f818dfa07cb03a670fe4047a6fe87b7d2e25e09fbf66b0bf15a019c2c87650e803a52d2d5ec58b64b1960","ssdeep":"","tlshash":"0dc0122610884a6a36a04c9cb9c770fd02b8a16afae0939a6128033af2b03e2c020800","first_seen":"2025-10-13T16:17:17.484334Z","last_seen":"2026-06-14T01:48:19.637303Z","times_seen":29,"resource_available":true,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-23","alert":"Phishing Block","trigger":"clearshaven.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-23","alert":"Sinkholed","trigger":"clearshaven.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-23","alert":"Sinkholed","trigger":"clearshaven.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Facebook","verdict":"phishing","severity":"medium","comment":"Resource associated with Facebook phishing","tags":["meta","facebook","phishing","social"],"meta":null}]}},{"url":{"schema":"https","addr":"clearshaven.com/lander/baykarai_post_new_creo_tizer/form/js/libs/jquery.maskedinput.js","fqdn":"clearshaven.com","domain":"clearshaven.com","tld":"com"},"ip":{"addr":"172.67.203.238","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://clearshaven.com/","date":"2026-05-23T13:25:55.677Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"clearshaven.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Apr 2026 11:27:24 GMT","end":"Tue, 07 Jul 2026 11:27:23 GMT"},"fingerprint":{"sha1":"DC:89:A1:EF:92:53:03:EF:FF:61:53:2C:8C:EE:71:76:0B:BB:A3:9A","sha256":"CF:3B:DD:36:E5:61:52:73:B2:A3:90:0B:59:27:8B:3C:A0:B4:72:4C:94:17:C5:AF:6B:64:D1:54:A2:2E:C7:7A"}}},"request":{"raw":"GET /lander/baykarai_post_new_creo_tizer/form/js/libs/jquery.maskedinput.js HTTP/1.1\r\nHost: clearshaven.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://clearshaven.com/lander/baykarai_post_new_creo_tizer/form/js/libs.js\r\nCookie: _subid=1sjos4f2nr1lq; 502d3=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjE1NDU0XCI6MTc3OTU0Mjc1NX0sXCJjYW1wYWlnbnNcIjp7XCIzMzMwXCI6MTc3OTU0Mjc1NX0sXCJ0aW1lXCI6MTc3OTU0Mjc1NX0ifQ.Ye4K8KtvxT925lLk1p7GLWgtysWEEooHZZfU2LDVP-E; _token=uuid_1sjos4f2nr1lq_1sjos4f2nr1lq6a11aae3394675.63059918\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 23 May 2026 13:25:55 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xdjo1neiE%2FFaiBan5Hm5%2FjK9ouvUksrd5EjkEUYZJRjjuLme13OIH5LOZFdfYoQHL7Hz5VH2E4fo5uj9GN9O%2BoceIHptYe0I14Fdq4hsz4Usnf6RoFmKUu8jMv29ZudAqK0%3D\"}]}\r\npriority: u=3,i=?0\r\nlast-modified: Wed, 18 Feb 2026 06:46:55 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Tue, 02 Jun 2026 06:30:31 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\ncontent-encoding: br\r\nage: 24923\r\ncf-cache-status: HIT\r\netag: W/\"6995605f-1077\"\r\ncf-ray: a00463aeeae5b4fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4215,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (4215), with no line terminators","md5":"9833dfbc30d6fc0ebf316ed43952707d","sha1":"43772e9441e42983f229dc13ca3477d6f8f2f5e2","sha256":"bd9074e7da91f4f7df45000ea013ca770d4e9a69f2a2eb3955f755bd83917206","sha512":"c86ec760305d02e4ba89008e6ae78557e19ced1a78117e5be62c8250fc4b57bfb078de6491d154029a4d932d148bb975e3480843fc45b3ebd85ef33863fe6160","ssdeep":"96:6xaRbOnjRn9J/iDysXyDE48NsYenp8mWN3kPTz5HD2:4aCjp9J/AysXUE4OneeNyx2","tlshash":"cf91b99dbc9c721123b748a100afc5595235bf19485fd4b0e121f8d1f8389aa325bebf","first_seen":"2024-06-06T14:03:54Z","last_seen":"2026-07-04T03:35:56.598689Z","times_seen":100,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-23","alert":"Phishing Block","trigger":"clearshaven.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-23","alert":"Sinkholed","trigger":"clearshaven.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-23","alert":"Sinkholed","trigger":"clearshaven.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Facebook","verdict":"phishing","severity":"medium","comment":"Resource associated with Facebook phishing","tags":["meta","facebook","phishing","social"],"meta":null}]}},{"url":{"schema":"https","addr":"clearshaven.com/lander/baykarai_post_new_creo_tizer/index/fa-solid-900.ttf","fqdn":"clearshaven.com","domain":"clearshaven.com","tld":"com"},"ip":{"addr":"172.67.203.238","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://clearshaven.com/","date":"2026-05-23T13:25:55.935Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"clearshaven.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Apr 2026 11:27:24 GMT","end":"Tue, 07 Jul 2026 11:27:23 GMT"},"fingerprint":{"sha1":"DC:89:A1:EF:92:53:03:EF:FF:61:53:2C:8C:EE:71:76:0B:BB:A3:9A","sha256":"CF:3B:DD:36:E5:61:52:73:B2:A3:90:0B:59:27:8B:3C:A0:B4:72:4C:94:17:C5:AF:6B:64:D1:54:A2:2E:C7:7A"}}},"request":{"raw":"GET /lander/baykarai_post_new_creo_tizer/index/fa-solid-900.ttf HTTP/1.1\r\nHost: clearshaven.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://clearshaven.com/lander/baykarai_post_new_creo_tizer/index/all(1).min.css\r\nCookie: _subid=1sjos4f2nr1lq; 502d3=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjE1NDU0XCI6MTc3OTU0Mjc1NX0sXCJjYW1wYWlnbnNcIjp7XCIzMzMwXCI6MTc3OTU0Mjc1NX0sXCJ0aW1lXCI6MTc3OTU0Mjc1NX0ifQ.Ye4K8KtvxT925lLk1p7GLWgtysWEEooHZZfU2LDVP-E; _token=uuid_1sjos4f2nr1lq_1sjos4f2nr1lq6a11aae3394675.63059918\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\nserver: cloudflare\r\ndate: Sat, 23 May 2026 13:25:55 GMT\r\ncontent-type: text/html\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\ncontent-encoding: br\r\nage: 43\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3P%2BaKO%2FzphluBkIF%2F6eruvYtK3gP3Yu%2BacLNl20eM75gQe3h0%2F9Fl%2F%2B6TopTv%2B99jUaFP8iZoNCNJzLFysbrewOG8Dn1Z90i%2BmomVuGgDms1l75q9rOeoZ0N2YiMl9jK9PA%3D\"}]}\r\ncf-ray: a00463b09b39b4fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":146,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"8eec510e57f5f732fd2cce73df7b73ef","sha1":"3c0af39ecb3753c5fee3b53d063c7286019eac3b","sha256":"55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0","sha512":"73bbf698482132b5fd60a0b58926fddec9055f8095a53bc52714e211e9340c3419736ceafd6b279667810114d306bfccdcfcddf51c0b67fe9e3c73c54583e574","ssdeep":"","tlshash":"b7c02b2d35133c4cc563313423c37140c0d6833b687a41110400c00371cf2998ec3397","first_seen":"2023-03-07T12:05:15Z","last_seen":"2026-08-04T08:31:18.797433Z","times_seen":546310,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-23","alert":"Sinkholed","trigger":"clearshaven.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-23","alert":"Phishing Block","trigger":"clearshaven.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-23","alert":"Sinkholed","trigger":"clearshaven.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Facebook","verdict":"phishing","severity":"medium","comment":"Resource associated with Facebook phishing","tags":["meta","facebook","phishing","social"],"meta":null}]}},{"url":{"schema":"https","addr":"clearshaven.com/lander/baykarai_post_new_creo_tizer/index/ava4.jpg","fqdn":"clearshaven.com","domain":"clearshaven.com","tld":"com"},"ip":{"addr":"172.67.203.238","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://clearshaven.com/","date":"2026-05-23T13:25:55.489Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"clearshaven.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Apr 2026 11:27:24 GMT","end":"Tue, 07 Jul 2026 11:27:23 GMT"},"fingerprint":{"sha1":"DC:89:A1:EF:92:53:03:EF:FF:61:53:2C:8C:EE:71:76:0B:BB:A3:9A","sha256":"CF:3B:DD:36:E5:61:52:73:B2:A3:90:0B:59:27:8B:3C:A0:B4:72:4C:94:17:C5:AF:6B:64:D1:54:A2:2E:C7:7A"}}},"request":{"raw":"GET /lander/baykarai_post_new_creo_tizer/index/ava4.jpg HTTP/1.1\r\nHost: clearshaven.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://clearshaven.com/\r\nCookie: _subid=1sjos4f2nr1lq; 502d3=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjE1NDU0XCI6MTc3OTU0Mjc1NX0sXCJjYW1wYWlnbnNcIjp7XCIzMzMwXCI6MTc3OTU0Mjc1NX0sXCJ0aW1lXCI6MTc3OTU0Mjc1NX0ifQ.Ye4K8KtvxT925lLk1p7GLWgtysWEEooHZZfU2LDVP-E; _token=uuid_1sjos4f2nr1lq_1sjos4f2nr1lq6a11aae3394675.63059918\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 23 May 2026 13:25:55 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 48399\r\npriority: u=4,i=?0\r\nlast-modified: Wed, 18 Feb 2026 06:46:55 GMT\r\netag: \"6995605f-bd0f\"\r\nexpires: Mon, 01 Jun 2026 14:09:13 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 83801\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qEjdqxBICEHDmeIECTlHTHKWTDXxNVcHPP0vvrQlEQ%2BSTY5TjtjRePhSB0HtNaAZWVQQAJ%2BdohQm5BQ11oySnZTOBbyWHD1Kz4SjyIh7sihbhxcJxvLgKp%2Bu43E%2Fvlvh8AQ%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a00463ad9ac8b4fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":48399,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 499x417, components 3","md5":"ac55ebd809f695225b0b75f5a7b58220","sha1":"253fac430cf0dc9a5961bceeea622facc3a788fb","sha256":"94e4a4b162a68e21f34cd37fc53e1b36827caf5310860abaa00ff1a50c43cc9e","sha512":"5de28e3456e9baa0299c4888cb840a9a4264d9c69c355bb495d8f1838c5bfeca9e7d3c4fe32357c1df4e17b24c7f4e88f99538bed769a7fe45570260d36c8696","ssdeep":"768:DIXPl33iLHbQU8GoVHgHKSFcocEDwD7bZXqCN0aHxF3620CF1ay2LVv3Em6Madg:AlniPQU8/AqREDgb8CN0aHxt6f3y2LVj","tlshash":"e4230192d342360ff65e9938f095b7af3309ffa210c25eeead4346eaa1d50d47a494c0","first_seen":"2026-02-27T03:08:58.342962Z","last_seen":"2026-06-22T07:36:21.389144Z","times_seen":10,"resource_available":false,"data":null}},"time_used":71,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":48,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-23","alert":"Sinkholed","trigger":"clearshaven.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-23","alert":"Phishing Block","trigger":"clearshaven.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-23","alert":"Sinkholed","trigger":"clearshaven.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Facebook","verdict":"phishing","severity":"medium","comment":"Resource associated with Facebook phishing","tags":["meta","facebook","phishing","social"],"meta":null}]}},{"url":{"schema":"https","addr":"clearshaven.com/lander/baykarai_post_new_creo_tizer/form/css/modal-error.css","fqdn":"clearshaven.com","domain":"clearshaven.com","tld":"com"},"ip":{"addr":"172.67.203.238","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://clearshaven.com/","date":"2026-05-23T13:25:55.666Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"clearshaven.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Apr 2026 11:27:24 GMT","end":"Tue, 07 Jul 2026 11:27:23 GMT"},"fingerprint":{"sha1":"DC:89:A1:EF:92:53:03:EF:FF:61:53:2C:8C:EE:71:76:0B:BB:A3:9A","sha256":"CF:3B:DD:36:E5:61:52:73:B2:A3:90:0B:59:27:8B:3C:A0:B4:72:4C:94:17:C5:AF:6B:64:D1:54:A2:2E:C7:7A"}}},"request":{"raw":"GET /lander/baykarai_post_new_creo_tizer/form/css/modal-error.css HTTP/1.1\r\nHost: clearshaven.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://clearshaven.com/lander/baykarai_post_new_creo_tizer/form/css/form.css\r\nCookie: _subid=1sjos4f2nr1lq; 502d3=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjE1NDU0XCI6MTc3OTU0Mjc1NX0sXCJjYW1wYWlnbnNcIjp7XCIzMzMwXCI6MTc3OTU0Mjc1NX0sXCJ0aW1lXCI6MTc3OTU0Mjc1NX0ifQ.Ye4K8KtvxT925lLk1p7GLWgtysWEEooHZZfU2LDVP-E; _token=uuid_1sjos4f2nr1lq_1sjos4f2nr1lq6a11aae3394675.63059918\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 23 May 2026 13:25:55 GMT\r\ncontent-type: text/css\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BwUCgw%2BZ9qMPDca1miRdi1vCUNwzn8BlAtzAlxESARGg%2Fou%2FT6MNJHNKMjXY40WMpjRuuCo3G89%2FGwmGb1oDtNfl41qDXpfN5ad2WcGPukC7XYFLN6Ue%2FtIV%2BKSR0ImoWWU%3D\"}]}\r\npriority: u=2,i=?0\r\nlast-modified: Wed, 18 Feb 2026 06:46:55 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Mon, 01 Jun 2026 14:09:13 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\ncontent-encoding: br\r\nage: 83802\r\ncf-cache-status: HIT\r\netag: W/\"6995605f-f83\"\r\ncf-ray: a00463aedae2b4fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3971,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"cb0153149f6ca7cf259e787f38f3a0aa","sha1":"bacf1e7dc670a51388fb8531281deedb5f6cece5","sha256":"17d7232b0dbfe66610f81220f9f587e42b21f365d74e7e286673487167d21916","sha512":"40ff94fad842a28ff13cb7a7f334d00a2ef848dd5dccc809f10fca88fa1310ebc25f2a8d7b46e0bf51bbfd8f7912342f78f4f794f442bc50cc78b86a6b4c76c0","ssdeep":"","tlshash":"e08130935aa31445760be1a02ffecb145374408bb58fce9c7b8a328c8f49588a6d3fd5","first_seen":"2023-05-23T13:43:09Z","last_seen":"2026-06-17T08:11:37.748054Z","times_seen":318,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-23","alert":"Sinkholed","trigger":"clearshaven.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-23","alert":"Phishing Block","trigger":"clearshaven.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-23","alert":"Sinkholed","trigger":"clearshaven.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Facebook","verdict":"phishing","severity":"medium","comment":"Resource associated with Facebook phishing","tags":["meta","facebook","phishing","social"],"meta":null}]}},{"url":{"schema":"https","addr":"clearshaven.com/lander/baykarai_post_new_creo_tizer/webfonts/fa-solid-900.ttf","fqdn":"clearshaven.com","domain":"clearshaven.com","tld":"com"},"ip":{"addr":"172.67.203.238","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://clearshaven.com/","date":"2026-05-23T13:25:56.096Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"clearshaven.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Apr 2026 11:27:24 GMT","end":"Tue, 07 Jul 2026 11:27:23 GMT"},"fingerprint":{"sha1":"DC:89:A1:EF:92:53:03:EF:FF:61:53:2C:8C:EE:71:76:0B:BB:A3:9A","sha256":"CF:3B:DD:36:E5:61:52:73:B2:A3:90:0B:59:27:8B:3C:A0:B4:72:4C:94:17:C5:AF:6B:64:D1:54:A2:2E:C7:7A"}}},"request":{"raw":"GET /lander/baykarai_post_new_creo_tizer/webfonts/fa-solid-900.ttf HTTP/1.1\r\nHost: clearshaven.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://clearshaven.com/lander/baykarai_post_new_creo_tizer/index/all.min.css\r\nCookie: _subid=1sjos4f2nr1lq; 502d3=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjE1NDU0XCI6MTc3OTU0Mjc1NX0sXCJjYW1wYWlnbnNcIjp7XCIzMzMwXCI6MTc3OTU0Mjc1NX0sXCJ0aW1lXCI6MTc3OTU0Mjc1NX0ifQ.Ye4K8KtvxT925lLk1p7GLWgtysWEEooHZZfU2LDVP-E; _token=uuid_1sjos4f2nr1lq_1sjos4f2nr1lq6a11aae3394675.63059918; pixel=null; token=uuid_1sjos4f2nr1lq_1sjos4f2nr1lq6a11aae3394675.63059918; subid=1sjos4f2nr1lq; aff=55; flow=null\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\nserver: cloudflare\r\ndate: Sat, 23 May 2026 13:25:56 GMT\r\ncontent-type: text/html\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\ncontent-encoding: br\r\nage: 43\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lDuyRpGBKOCiaYNgEJkj9Vq6udluNs2fMnwRykPmAtg0VWIOdBab3IRWGifTQVosX1n6JYlzpY6b%2BcpuerrnAOfnf2YOd0zfuEwWQa3MpdgxmsmTyf9o8RUEvCRWD7YCzCs%3D\"}]}\r\ncf-ray: a00463b19b5bb4fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":146,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"8eec510e57f5f732fd2cce73df7b73ef","sha1":"3c0af39ecb3753c5fee3b53d063c7286019eac3b","sha256":"55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0","sha512":"73bbf698482132b5fd60a0b58926fddec9055f8095a53bc52714e211e9340c3419736ceafd6b279667810114d306bfccdcfcddf51c0b67fe9e3c73c54583e574","ssdeep":"","tlshash":"b7c02b2d35133c4cc563313423c37140c0d6833b687a41110400c00371cf2998ec3397","first_seen":"2023-03-07T12:05:15Z","last_seen":"2026-08-04T08:31:18.797433Z","times_seen":546310,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-23","alert":"Phishing Block","trigger":"clearshaven.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-23","alert":"Sinkholed","trigger":"clearshaven.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-23","alert":"Sinkholed","trigger":"clearshaven.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Facebook","verdict":"phishing","severity":"medium","comment":"Resource associated with Facebook phishing","tags":["meta","facebook","phishing","social"],"meta":null}]}},{"url":{"schema":"https","addr":"clearshaven.com/lander/baykarai_post_new_creo_tizer/webfonts/fa-brands-400.ttf","fqdn":"clearshaven.com","domain":"clearshaven.com","tld":"com"},"ip":{"addr":"172.67.203.238","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://clearshaven.com/","date":"2026-05-23T13:25:56.099Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"clearshaven.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Apr 2026 11:27:24 GMT","end":"Tue, 07 Jul 2026 11:27:23 GMT"},"fingerprint":{"sha1":"DC:89:A1:EF:92:53:03:EF:FF:61:53:2C:8C:EE:71:76:0B:BB:A3:9A","sha256":"CF:3B:DD:36:E5:61:52:73:B2:A3:90:0B:59:27:8B:3C:A0:B4:72:4C:94:17:C5:AF:6B:64:D1:54:A2:2E:C7:7A"}}},"request":{"raw":"GET /lander/baykarai_post_new_creo_tizer/webfonts/fa-brands-400.ttf HTTP/1.1\r\nHost: clearshaven.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://clearshaven.com/lander/baykarai_post_new_creo_tizer/index/all.min.css\r\nCookie: _subid=1sjos4f2nr1lq; 502d3=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjE1NDU0XCI6MTc3OTU0Mjc1NX0sXCJjYW1wYWlnbnNcIjp7XCIzMzMwXCI6MTc3OTU0Mjc1NX0sXCJ0aW1lXCI6MTc3OTU0Mjc1NX0ifQ.Ye4K8KtvxT925lLk1p7GLWgtysWEEooHZZfU2LDVP-E; _token=uuid_1sjos4f2nr1lq_1sjos4f2nr1lq6a11aae3394675.63059918; pixel=null; token=uuid_1sjos4f2nr1lq_1sjos4f2nr1lq6a11aae3394675.63059918; subid=1sjos4f2nr1lq; aff=55; flow=null\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\nserver: cloudflare\r\ndate: Sat, 23 May 2026 13:25:56 GMT\r\ncontent-type: text/html\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\ncontent-encoding: br\r\nage: 43\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VeB8QgxVQwRmIboxCMOgM6aN49xQvPKgts8z3dyispGCh7dm760Op4zJ%2FAvFhdB%2Fe%2FRkBppCpJaU3XjHr9J3LldZN0Eo%2BFn4aiimT0wArXz22dnqZBl1wJZS%2FtKQr50p8pI%3D\"}]}\r\ncf-ray: a00463b19b5fb4fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":146,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"8eec510e57f5f732fd2cce73df7b73ef","sha1":"3c0af39ecb3753c5fee3b53d063c7286019eac3b","sha256":"55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0","sha512":"73bbf698482132b5fd60a0b58926fddec9055f8095a53bc52714e211e9340c3419736ceafd6b279667810114d306bfccdcfcddf51c0b67fe9e3c73c54583e574","ssdeep":"","tlshash":"b7c02b2d35133c4cc563313423c37140c0d6833b687a41110400c00371cf2998ec3397","first_seen":"2023-03-07T12:05:15Z","last_seen":"2026-08-04T08:31:18.797433Z","times_seen":546310,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-23","alert":"Sinkholed","trigger":"clearshaven.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-23","alert":"Sinkholed","trigger":"clearshaven.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-23","alert":"Phishing Block","trigger":"clearshaven.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Facebook","verdict":"phishing","severity":"medium","comment":"Resource associated with Facebook phishing","tags":["meta","facebook","phishing","social"],"meta":null}]}},{"url":{"schema":"https","addr":"clearshaven.com/lander/baykarai_post_new_creo_tizer/index/sendIcon.png","fqdn":"clearshaven.com","domain":"clearshaven.com","tld":"com"},"ip":{"addr":"172.67.203.238","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://clearshaven.com/","date":"2026-05-23T13:25:55.497Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"clearshaven.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Apr 2026 11:27:24 GMT","end":"Tue, 07 Jul 2026 11:27:23 GMT"},"fingerprint":{"sha1":"DC:89:A1:EF:92:53:03:EF:FF:61:53:2C:8C:EE:71:76:0B:BB:A3:9A","sha256":"CF:3B:DD:36:E5:61:52:73:B2:A3:90:0B:59:27:8B:3C:A0:B4:72:4C:94:17:C5:AF:6B:64:D1:54:A2:2E:C7:7A"}}},"request":{"raw":"GET /lander/baykarai_post_new_creo_tizer/index/sendIcon.png HTTP/1.1\r\nHost: clearshaven.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://clearshaven.com/\r\nCookie: _subid=1sjos4f2nr1lq; 502d3=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjE1NDU0XCI6MTc3OTU0Mjc1NX0sXCJjYW1wYWlnbnNcIjp7XCIzMzMwXCI6MTc3OTU0Mjc1NX0sXCJ0aW1lXCI6MTc3OTU0Mjc1NX0ifQ.Ye4K8KtvxT925lLk1p7GLWgtysWEEooHZZfU2LDVP-E; _token=uuid_1sjos4f2nr1lq_1sjos4f2nr1lq6a11aae3394675.63059918\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 23 May 2026 13:25:55 GMT\r\ncontent-type: image/png\r\ncontent-length: 24093\r\npriority: u=4,i=?0\r\nlast-modified: Wed, 18 Feb 2026 06:46:55 GMT\r\netag: \"6995605f-5e1d\"\r\nexpires: Mon, 01 Jun 2026 14:09:13 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 83801\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=b%2BmH8bJbseCamLzkM4SVeoLClU9ZHVl1t4%2FGl9axKDQD4HFC1aGmJscAFR09cv%2FMt1cBXxEtkCh5nY5OGOF3f88VgZbL3gvNJ94WodDOdjdJkcNY6z1Jmoi13OOfZnVL5mE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a00463adaacfb4fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":24093,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 512 x 498, 8-bit/color RGBA, non-interlaced","md5":"b822cbdfdf9f211d52afc105534139ac","sha1":"ca75d1ddfbef47eabb2640c88bfbbddb4304d509","sha256":"13dd0e2f21e06f8ffa20219053b616f5690478fd494534b107c9be56c8a5faab","sha512":"88b8574dd1c8235abc64832cdff0df27a411dbad31ad19689a9543286592fa4a3c44783080977aae6871f57e691a229071054167c55a0187dcd7d459e88f6d6a","ssdeep":"384:mgC9shbodhVmQA5v1Gv6CaCYtI+xi5HO/LECEuG9SVUJtLeFexgkyyTbRxXvBp2B:mgC9cbodhgvhCbMi5HO/LEpPGg+yyeF4","tlshash":"8fb2f1efa6a33739e4c3d65085a9fd94d85e0963f74830d8609ea6e73ecb94043c4486","first_seen":"2024-10-30T16:26:10.447922Z","last_seen":"2026-06-22T07:36:21.39Z","times_seen":13,"resource_available":false,"data":null}},"time_used":53,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":25,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-23","alert":"Sinkholed","trigger":"clearshaven.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-23","alert":"Phishing Block","trigger":"clearshaven.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-23","alert":"Sinkholed","trigger":"clearshaven.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Facebook","verdict":"phishing","severity":"medium","comment":"Resource associated with Facebook phishing","tags":["meta","facebook","phishing","social"],"meta":null}]}},{"url":{"schema":"https","addr":"clearshaven.com/lander/baykarai_post_new_creo_tizer/index/ava5.jpg","fqdn":"clearshaven.com","domain":"clearshaven.com","tld":"com"},"ip":{"addr":"172.67.203.238","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://clearshaven.com/","date":"2026-05-23T13:25:55.490Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"clearshaven.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Apr 2026 11:27:24 GMT","end":"Tue, 07 Jul 2026 11:27:23 GMT"},"fingerprint":{"sha1":"DC:89:A1:EF:92:53:03:EF:FF:61:53:2C:8C:EE:71:76:0B:BB:A3:9A","sha256":"CF:3B:DD:36:E5:61:52:73:B2:A3:90:0B:59:27:8B:3C:A0:B4:72:4C:94:17:C5:AF:6B:64:D1:54:A2:2E:C7:7A"}}},"request":{"raw":"GET /lander/baykarai_post_new_creo_tizer/index/ava5.jpg HTTP/1.1\r\nHost: clearshaven.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://clearshaven.com/\r\nCookie: _subid=1sjos4f2nr1lq; 502d3=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjE1NDU0XCI6MTc3OTU0Mjc1NX0sXCJjYW1wYWlnbnNcIjp7XCIzMzMwXCI6MTc3OTU0Mjc1NX0sXCJ0aW1lXCI6MTc3OTU0Mjc1NX0ifQ.Ye4K8KtvxT925lLk1p7GLWgtysWEEooHZZfU2LDVP-E; _token=uuid_1sjos4f2nr1lq_1sjos4f2nr1lq6a11aae3394675.63059918\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 23 May 2026 13:25:55 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 50458\r\npriority: u=4,i=?0\r\nlast-modified: Wed, 18 Feb 2026 06:46:55 GMT\r\netag: \"6995605f-c51a\"\r\nexpires: Mon, 01 Jun 2026 14:09:13 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 83801\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=j%2FJXBLDdYSHL9OEEhnAPwJg2WixdvRYC6%2FY6nu5wgnEfQPZFH%2BJl31%2B90wW2jCQkVlk5j510zWJ9GSXhoaqeqLnLVTvtUfGa6ezZOAQslPI5r5Xmaj2V5wGcAWZ%2FCBuSB7o%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a00463ad9acdb4fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":50458,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 709x799, components 3","md5":"fede6ce7d25999ad047496e1a91a2fb3","sha1":"f1d6af77a0cb4f2894ebf62c711b18b3efc9f006","sha256":"5ea0142423b1a84eb6611876a71941e299ee31615711e9a3feda83792132fa3d","sha512":"8dda52349b104035b5ba1c37e065fd9a487bc8a76d1e089ec88ae4f36214dbc199e0cba4944029fac1b80931afdd0e29b6c8cd2cc9bd0303179ec11cc3028380","ssdeep":"768:vXOZ1dP8EFZJUNpLpuql4GQYxfuL07XS7w3wWFx9W2Q/18gnvOd/TcOC70:vw8EbJIpdxnXfup7G/5gvAbcf0","tlshash":"983301c3275088bdc3372edea21eb2e24badd518379227a6755356c4b0943f14ee48e5","first_seen":"2026-02-27T03:08:58.336899Z","last_seen":"2026-06-22T07:36:21.384097Z","times_seen":10,"resource_available":false,"data":null}},"time_used":68,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":44,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-23","alert":"Sinkholed","trigger":"clearshaven.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-23","alert":"Phishing Block","trigger":"clearshaven.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-23","alert":"Sinkholed","trigger":"clearshaven.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Facebook","verdict":"phishing","severity":"medium","comment":"Resource associated with Facebook phishing","tags":["meta","facebook","phishing","social"],"meta":null}]}},{"url":{"schema":"https","addr":"clearshaven.com/lander/baykarai_post_new_creo_tizer/index/ava2.jpg","fqdn":"clearshaven.com","domain":"clearshaven.com","tld":"com"},"ip":{"addr":"172.67.203.238","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://clearshaven.com/","date":"2026-05-23T13:25:55.486Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"clearshaven.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Apr 2026 11:27:24 GMT","end":"Tue, 07 Jul 2026 11:27:23 GMT"},"fingerprint":{"sha1":"DC:89:A1:EF:92:53:03:EF:FF:61:53:2C:8C:EE:71:76:0B:BB:A3:9A","sha256":"CF:3B:DD:36:E5:61:52:73:B2:A3:90:0B:59:27:8B:3C:A0:B4:72:4C:94:17:C5:AF:6B:64:D1:54:A2:2E:C7:7A"}}},"request":{"raw":"GET /lander/baykarai_post_new_creo_tizer/index/ava2.jpg HTTP/1.1\r\nHost: clearshaven.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://clearshaven.com/\r\nCookie: _subid=1sjos4f2nr1lq; 502d3=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjE1NDU0XCI6MTc3OTU0Mjc1NX0sXCJjYW1wYWlnbnNcIjp7XCIzMzMwXCI6MTc3OTU0Mjc1NX0sXCJ0aW1lXCI6MTc3OTU0Mjc1NX0ifQ.Ye4K8KtvxT925lLk1p7GLWgtysWEEooHZZfU2LDVP-E; _token=uuid_1sjos4f2nr1lq_1sjos4f2nr1lq6a11aae3394675.63059918\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 23 May 2026 13:25:55 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 26566\r\npriority: u=4,i=?0\r\nlast-modified: Wed, 18 Feb 2026 06:46:55 GMT\r\netag: \"6995605f-67c6\"\r\nexpires: Mon, 01 Jun 2026 14:09:13 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 83801\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lA9eud%2FuIBaFAGZuKudHbW%2FCn0oPDsDV4MCi02U%2BNBNjbyGrz8rxUMlr8bwT85%2Be6cnrN2AyX52Uwtpm9LN7u7o1xRqoENRP1pFj82cwKiIJ%2FZmrHO7iexFjTb38fPrVM9A%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a00463ad9ac7b4fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":26566,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 566x516, components 3","md5":"c42df815e3757e40e481a5520a26c040","sha1":"eb611b9ff849e67745042349860e1bb9047e2c06","sha256":"a32626db8846f2bf64ef3ca6809a7c0e18cae6f35b2c446186ca2261e5fb992d","sha512":"541e69eb3ba98d14d328caf4dd914ed71cfdfaf8d806cd48890072a53570d6bd84fbc545aa38b9bc7e04ab8800f2e43ed100e7c4ad327d2a68e3b70ca39d990f","ssdeep":"768:j/irnO5PXSHhgqIqRsY9s6FKEI6QyZcAFghnXZWR:j6rO5PiHmqb9BFKEI6RZcpZWR","tlshash":"49c2e1abcfaaa91fe8d876a64ba027585f14d42ac2307cd539093cd0f4f51e78d930c4","first_seen":"2026-02-27T03:08:58.350242Z","last_seen":"2026-06-22T07:36:21.378723Z","times_seen":10,"resource_available":false,"data":null}},"time_used":52,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":30,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-23","alert":"Phishing Block","trigger":"clearshaven.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-23","alert":"Sinkholed","trigger":"clearshaven.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-23","alert":"Sinkholed","trigger":"clearshaven.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Facebook","verdict":"phishing","severity":"medium","comment":"Resource associated with Facebook phishing","tags":["meta","facebook","phishing","social"],"meta":null}]}},{"url":{"schema":"https","addr":"clearshaven.com/lander/baykarai_post_new_creo_tizer/form/js/main-form.js?v=29","fqdn":"clearshaven.com","domain":"clearshaven.com","tld":"com"},"ip":{"addr":"172.67.203.238","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://clearshaven.com/","date":"2026-05-23T13:25:55.502Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"clearshaven.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Apr 2026 11:27:24 GMT","end":"Tue, 07 Jul 2026 11:27:23 GMT"},"fingerprint":{"sha1":"DC:89:A1:EF:92:53:03:EF:FF:61:53:2C:8C:EE:71:76:0B:BB:A3:9A","sha256":"CF:3B:DD:36:E5:61:52:73:B2:A3:90:0B:59:27:8B:3C:A0:B4:72:4C:94:17:C5:AF:6B:64:D1:54:A2:2E:C7:7A"}}},"request":{"raw":"GET /lander/baykarai_post_new_creo_tizer/form/js/main-form.js?v=29 HTTP/1.1\r\nHost: clearshaven.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://clearshaven.com/\r\nCookie: _subid=1sjos4f2nr1lq; 502d3=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjE1NDU0XCI6MTc3OTU0Mjc1NX0sXCJjYW1wYWlnbnNcIjp7XCIzMzMwXCI6MTc3OTU0Mjc1NX0sXCJ0aW1lXCI6MTc3OTU0Mjc1NX0ifQ.Ye4K8KtvxT925lLk1p7GLWgtysWEEooHZZfU2LDVP-E; _token=uuid_1sjos4f2nr1lq_1sjos4f2nr1lq6a11aae3394675.63059918\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 23 May 2026 13:25:55 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OX64Q4V%2Fpbi2qw5qVhisFfoIUMeKI%2BmFWtGoYH4THfu4uzt7NcXO4u6gf%2FDBYMzjIJPxfX%2FOXDdDLj%2Fw%2Bu6Gvqmymhg%2FBQpO5J2Abl%2BFaPPyhq1oxy3OpC44ErS2l8T6upw%3D\"}]}\r\npriority: u=3,i=?0\r\nlast-modified: Wed, 18 Feb 2026 06:46:55 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Tue, 02 Jun 2026 06:30:31 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\ncontent-encoding: br\r\nage: 24923\r\ncf-cache-status: HIT\r\netag: W/\"6995605f-2557\"\r\ncf-ray: a00463adaad1b4fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9559,"size_decoded":0,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text","md5":"77092b17b81377e711e1f1c731056296","sha1":"233116ab2793e34f085573b6638472c959cadece","sha256":"3b9704adb876fd5f09936f892678e3284f3b940a709789b0b29af7886c4984dc","sha512":"04f64eadae6ee9bfdabc5564aa2ed5797914b42847c1752146cecd345f10a04b18d6fa4f441f20b17341da03cf9121612f59a945ab87e6905dd0e29574c0658b","ssdeep":"192:uTCwh47OZWc6hIAe370I584s/k8YnQpeLgqGb83AxOk0GT6K2m6Af5G5W:a98uWOAGIw2eLglYK2/Esc","tlshash":"8e12a64821b6483041731afbb7eb474369b9021bbc08ea453d8c63841fa8e5967f0bfd","first_seen":"2026-05-15T05:58:11.047314Z","last_seen":"2026-05-23T13:26:22.245713Z","times_seen":5,"resource_available":true,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-23","alert":"Sinkholed","trigger":"clearshaven.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-23","alert":"Sinkholed","trigger":"clearshaven.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-23","alert":"Phishing Block","trigger":"clearshaven.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Facebook","verdict":"phishing","severity":"medium","comment":"Resource associated with Facebook phishing","tags":["meta","facebook","phishing","social"],"meta":null}]}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/font-awesome/6.4.0/webfonts/fa-solid-900.woff2","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://clearshaven.com/","date":"2026-05-23T13:25:56.062Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 12 May 2026 03:46:57 GMT","end":"Mon, 10 Aug 2026 04:46:42 GMT"},"fingerprint":{"sha1":"95:12:1E:0A:F6:69:8B:FC:A0:08:DA:67:1A:A4:D1:9D:87:F5:E9:07","sha256":"F3:4A:39:63:C7:6A:CE:66:1A:B4:62:2C:E9:92:82:9A:81:78:1B:CC:3F:D5:2D:0A:6D:D6:89:D9:F6:66:7B:BC"}}},"request":{"raw":"GET /ajax/libs/font-awesome/6.4.0/webfonts/fa-solid-900.woff2 HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://clearshaven.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cdnjs.cloudflare.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 23 May 2026 13:25:56 GMT\r\ncontent-type: application/octet-stream; charset=utf-8\r\ncontent-length: 150124\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\netag: \"6421d693-24a6c\"\r\nlast-modified: Mon, 27 Mar 2023 17:46:59 GMT\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/kv\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 1435037\r\nexpires: Thu, 13 May 2027 13:25:56 GMT\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=15780000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7LZCh5UZubmKiDvu8frtM8ATmVfw0JOrecGIDkcL%2BRj6GNWVCQRXKupmkMbeZp2eS29AJCqUotyyRcD5bvfsAhZyLs5eeSQ4Xpi%2BF8GfjLSsRtBXmd3i2bCfQz%2BysllndpRss8Z%2F\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\ncf-ray: a00463b15a4f0b06-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":150124,"size_decoded":0,"mime_type":"application/octet-stream; charset=utf-8","magic":"Web Open Font Format (Version 2), TrueType, length 150124, version 772.256","md5":"c64278386c2bbb5e293e11b94ca2f6d1","sha1":"6b99aa650bd12a36caa14e0127435d8f4cd3ba73","sha256":"7152a6933ee3d690ec2af3d09da9d701723d16aa3410a6d80f28ff8866f3b880","sha512":"0ccdc1515510d902c0b4a48b863c48bad86e1f766b1f9c890a64e28d91ee7c6d488241c531fc094d15b29c211da71e092587a987e24ee8e67ef8ea99c284e821","ssdeep":"3072:7sCbk7w0ZXdkN6iMjif3Lr7x7wAtf+D7gDk1feXDLnurWHqrNIuv5n0:7sCbkFZXdC7MaLr9w2mIY1feXXurWyNW","tlshash":"28e3123cf2c6d486735f5aeadb79636894fd0a2e74ecc67d26b982112048f828174d1d","first_seen":"2023-04-09T20:30:06Z","last_seen":"2026-08-04T07:29:59.952089Z","times_seen":44638,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":13,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"clearshaven.com/lander/baykarai_post_new_creo_tizer/form/css/form.css","fqdn":"clearshaven.com","domain":"clearshaven.com","tld":"com"},"ip":{"addr":"172.67.203.238","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://clearshaven.com/","date":"2026-05-23T13:25:55.473Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"clearshaven.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Apr 2026 11:27:24 GMT","end":"Tue, 07 Jul 2026 11:27:23 GMT"},"fingerprint":{"sha1":"DC:89:A1:EF:92:53:03:EF:FF:61:53:2C:8C:EE:71:76:0B:BB:A3:9A","sha256":"CF:3B:DD:36:E5:61:52:73:B2:A3:90:0B:59:27:8B:3C:A0:B4:72:4C:94:17:C5:AF:6B:64:D1:54:A2:2E:C7:7A"}}},"request":{"raw":"GET /lander/baykarai_post_new_creo_tizer/form/css/form.css HTTP/1.1\r\nHost: clearshaven.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://clearshaven.com/\r\nCookie: _subid=1sjos4f2nr1lq; 502d3=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjE1NDU0XCI6MTc3OTU0Mjc1NX0sXCJjYW1wYWlnbnNcIjp7XCIzMzMwXCI6MTc3OTU0Mjc1NX0sXCJ0aW1lXCI6MTc3OTU0Mjc1NX0ifQ.Ye4K8KtvxT925lLk1p7GLWgtysWEEooHZZfU2LDVP-E; _token=uuid_1sjos4f2nr1lq_1sjos4f2nr1lq6a11aae3394675.63059918\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 23 May 2026 13:25:55 GMT\r\ncontent-type: text/css\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=brl9QIW8rBSdoDaeiOCG5aTV6PUFQHXxm9B76aQeO3oYfuifEDJuf7vr1SFkCMVUIX09Tepep%2F18iPbHS6iTjHlJf7upaaMvvAQmdUw5Ou25B1DdpFHrHibPWqScoRAm%2F%2BE%3D\"}]}\r\npriority: u=2,i=?0\r\nlast-modified: Wed, 18 Feb 2026 06:46:55 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Mon, 01 Jun 2026 14:09:13 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\ncontent-encoding: br\r\nage: 83802\r\ncf-cache-status: HIT\r\netag: W/\"6995605f-181b\"\r\ncf-ray: a00463ad9abbb4fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6171,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"663a45f0be8d646f73ac7e1d8f794bd4","sha1":"0d213ad2b3e358c7b4c3f4202d54b507b2b70fa2","sha256":"2fd1cadef9395a659364bfcc017835b0d64a20695fc416c21434efe83bf9adcc","sha512":"7f9f60feb42a1ecb977e52d51d80b7adef1aaa5631b7dc7d6ef1e1561fdd1a8d6440c338fe2572486a7af9ce4e985a36ad90175e80a0206cdbd90018702f974a","ssdeep":"192:QV3V/5ag0mu2FsXFesooByaCsOnLu7Ag/TFaF73FLm6cYVBH6OrvY1:+lhag0x2FscpjIFaFTF+OIaw1","tlshash":"96d151a11ab50600711bd4dd38e1a7647b7c5092a94ece7e2be1245c9fc93c7a273fc4","first_seen":"2026-02-27T03:08:58.366511Z","last_seen":"2026-05-23T13:26:22.250156Z","times_seen":6,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-23","alert":"Sinkholed","trigger":"clearshaven.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-23","alert":"Sinkholed","trigger":"clearshaven.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-23","alert":"Phishing Block","trigger":"clearshaven.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Facebook","verdict":"phishing","severity":"medium","comment":"Resource associated with Facebook phishing","tags":["meta","facebook","phishing","social"],"meta":null}]}},{"url":{"schema":"https","addr":"clearshaven.com/lander/baykarai_post_new_creo_tizer/index/facebook-logo.png","fqdn":"clearshaven.com","domain":"clearshaven.com","tld":"com"},"ip":{"addr":"172.67.203.238","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://clearshaven.com/","date":"2026-05-23T13:25:55.475Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"clearshaven.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Apr 2026 11:27:24 GMT","end":"Tue, 07 Jul 2026 11:27:23 GMT"},"fingerprint":{"sha1":"DC:89:A1:EF:92:53:03:EF:FF:61:53:2C:8C:EE:71:76:0B:BB:A3:9A","sha256":"CF:3B:DD:36:E5:61:52:73:B2:A3:90:0B:59:27:8B:3C:A0:B4:72:4C:94:17:C5:AF:6B:64:D1:54:A2:2E:C7:7A"}}},"request":{"raw":"GET /lander/baykarai_post_new_creo_tizer/index/facebook-logo.png HTTP/1.1\r\nHost: clearshaven.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://clearshaven.com/\r\nCookie: _subid=1sjos4f2nr1lq; 502d3=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjE1NDU0XCI6MTc3OTU0Mjc1NX0sXCJjYW1wYWlnbnNcIjp7XCIzMzMwXCI6MTc3OTU0Mjc1NX0sXCJ0aW1lXCI6MTc3OTU0Mjc1NX0ifQ.Ye4K8KtvxT925lLk1p7GLWgtysWEEooHZZfU2LDVP-E; _token=uuid_1sjos4f2nr1lq_1sjos4f2nr1lq6a11aae3394675.63059918\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 23 May 2026 13:25:55 GMT\r\ncontent-type: image/png\r\ncontent-length: 19204\r\npriority: u=4,i=?0\r\nlast-modified: Wed, 18 Feb 2026 06:46:55 GMT\r\netag: \"6995605f-4b04\"\r\nexpires: Mon, 01 Jun 2026 14:09:13 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 83802\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BkKBNds0aR1gIoFye7hD2oFO60jZgcOlzIyHs6NCMAP19xgk1mHo1gbi91ZPj6Ip73YaRmy0rJQIiYOqoHPgTKiZENjHN09AjlPjGSnVw9TesUHD1jKzC8zW4IvdsbcCGqk%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a00463ad9abeb4fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19204,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 640 x 640, 8-bit/color RGBA, non-interlaced","md5":"d65f66bb1fe144c700e2ca6de702871e","sha1":"ceaaf752f76f68706d709064e91ea94527081131","sha256":"90e152337c4e1fc4485d5ee6d51aaf7f1287eb1561b86e6dcf678de7ea00bf20","sha512":"09ea6244a7093d5a1a20ce3b9600dd8f925bb23b2f1d6225d34750745f082a613bd1f9e95a4e34da60ed47801bf30c93a88978004f8c6676e8e9c57e995fe90e","ssdeep":"384:V25e+Lq3I6R1xB8scD1aK3jG0hTgnLsumYNvNHkU/cvPnTBEfsq5:V25Vq31xqLDUoZ8/NH4r6fsq5","tlshash":"3b82c04e72e4b850ea37a52089935d6b0e0a0e36fbd9d6cd15b6c893724c3afc60d138","first_seen":"2024-10-30T16:26:10.407838Z","last_seen":"2026-06-22T07:36:21.39672Z","times_seen":14,"resource_available":false,"data":null}},"time_used":47,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":30,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-23","alert":"Phishing Block","trigger":"clearshaven.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-23","alert":"Sinkholed","trigger":"clearshaven.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-23","alert":"Sinkholed","trigger":"clearshaven.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Facebook","verdict":"phishing","severity":"medium","comment":"Resource associated with Facebook phishing","tags":["meta","facebook","phishing","social"],"meta":null}]}},{"url":{"schema":"https","addr":"clearshaven.com/lander/baykarai_post_new_creo_tizer/form/js/libs/utils.js","fqdn":"clearshaven.com","domain":"clearshaven.com","tld":"com"},"ip":{"addr":"172.67.203.238","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://clearshaven.com/","date":"2026-05-23T13:25:55.676Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"clearshaven.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Apr 2026 11:27:24 GMT","end":"Tue, 07 Jul 2026 11:27:23 GMT"},"fingerprint":{"sha1":"DC:89:A1:EF:92:53:03:EF:FF:61:53:2C:8C:EE:71:76:0B:BB:A3:9A","sha256":"CF:3B:DD:36:E5:61:52:73:B2:A3:90:0B:59:27:8B:3C:A0:B4:72:4C:94:17:C5:AF:6B:64:D1:54:A2:2E:C7:7A"}}},"request":{"raw":"GET /lander/baykarai_post_new_creo_tizer/form/js/libs/utils.js HTTP/1.1\r\nHost: clearshaven.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://clearshaven.com/lander/baykarai_post_new_creo_tizer/form/js/libs.js\r\nCookie: _subid=1sjos4f2nr1lq; 502d3=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjE1NDU0XCI6MTc3OTU0Mjc1NX0sXCJjYW1wYWlnbnNcIjp7XCIzMzMwXCI6MTc3OTU0Mjc1NX0sXCJ0aW1lXCI6MTc3OTU0Mjc1NX0ifQ.Ye4K8KtvxT925lLk1p7GLWgtysWEEooHZZfU2LDVP-E; _token=uuid_1sjos4f2nr1lq_1sjos4f2nr1lq6a11aae3394675.63059918\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 23 May 2026 13:25:55 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rf4suXlQOyBFrzL4%2Foqm2%2Bg2sS46CX34WolULsmoSPXgSriHEkY7rI9dBIOznIXQDKhb0nnxV1khtkJvVjSv1jq7HamPPvlc%2BdMwrwOJMAa6w4Ugs5YoeiO2IVz%2B%2F%2B55Oec%3D\"}]}\r\npriority: u=3,i=?0\r\nlast-modified: Wed, 18 Feb 2026 06:46:55 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Tue, 02 Jun 2026 06:30:31 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\ncontent-encoding: br\r\nage: 24923\r\ncf-cache-status: HIT\r\netag: W/\"6995605f-3c8ec\"\r\ncf-ray: a00463aeeae3b4fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":248044,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"41e291dfd45560d2d4fb659a40ca4c56","sha1":"3792bce8f036876641cc14702b1f6a26e6d0d44d","sha256":"8abb51715ec9b4b8587b197b320ba4b6b0092234563b2c72fba42583810ef0da","sha512":"7521362194cc5073e616d9bd9701b5885216aef6da96e497cd08f85a5cf6fa94d678bd2bafa7e0860440cb7d85725d907f88156ee6d731af1d6a18a6335ee0cb","ssdeep":"3072:7XEe8tABjO03k4Pc03C4P0IMOx2EZDmXmoLGYAIrBm6nRTvUQL+D4tQrxaySCkKU:7Xwu59hZDmXmod1","tlshash":"6634deebd63c9736a5d97b35968eb3cd5a8cbca3c848527826c3b54f53788e0706c205","first_seen":"2024-06-06T14:03:54Z","last_seen":"2026-07-04T03:35:56.599196Z","times_seen":90,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-23","alert":"Phishing Block","trigger":"clearshaven.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-23","alert":"Sinkholed","trigger":"clearshaven.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-23","alert":"Sinkholed","trigger":"clearshaven.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Facebook","verdict":"phishing","severity":"medium","comment":"Resource associated with Facebook phishing","tags":["meta","facebook","phishing","social"],"meta":null}]}},{"url":{"schema":"https","addr":"clearshaven.com/lander/baykarai_post_new_creo_tizer/form/css/flags.css","fqdn":"clearshaven.com","domain":"clearshaven.com","tld":"com"},"ip":{"addr":"172.67.203.238","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://clearshaven.com/","date":"2026-05-23T13:25:55.663Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"clearshaven.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Apr 2026 11:27:24 GMT","end":"Tue, 07 Jul 2026 11:27:23 GMT"},"fingerprint":{"sha1":"DC:89:A1:EF:92:53:03:EF:FF:61:53:2C:8C:EE:71:76:0B:BB:A3:9A","sha256":"CF:3B:DD:36:E5:61:52:73:B2:A3:90:0B:59:27:8B:3C:A0:B4:72:4C:94:17:C5:AF:6B:64:D1:54:A2:2E:C7:7A"}}},"request":{"raw":"GET /lander/baykarai_post_new_creo_tizer/form/css/flags.css HTTP/1.1\r\nHost: clearshaven.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://clearshaven.com/lander/baykarai_post_new_creo_tizer/form/css/form.css\r\nCookie: _subid=1sjos4f2nr1lq; 502d3=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjE1NDU0XCI6MTc3OTU0Mjc1NX0sXCJjYW1wYWlnbnNcIjp7XCIzMzMwXCI6MTc3OTU0Mjc1NX0sXCJ0aW1lXCI6MTc3OTU0Mjc1NX0ifQ.Ye4K8KtvxT925lLk1p7GLWgtysWEEooHZZfU2LDVP-E; _token=uuid_1sjos4f2nr1lq_1sjos4f2nr1lq6a11aae3394675.63059918\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 23 May 2026 13:25:55 GMT\r\ncontent-type: text/css\r\ncontent-length: 0\r\npriority: u=2,i=?0\r\nlast-modified: Wed, 18 Feb 2026 06:46:55 GMT\r\netag: \"6995605f-0\"\r\nexpires: Mon, 01 Jun 2026 14:09:13 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 83802\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=T%2BDR19MFdN2oQj%2FpB4yfSa4%2FHB%2BjsBo9sAyGh7evFYxultRZHe%2FcvWEUHE9TlQ42ZNBtGlJiE7NhuEKNKAwlb1k6VsqMYfm5E9RVlaC2bF%2BeTd3TcS2S%2F4YXWLnbMgc3eVY%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a00463aedae0b4fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-04T08:30:18.219238Z","times_seen":17705378,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-23","alert":"Sinkholed","trigger":"clearshaven.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-23","alert":"Phishing Block","trigger":"clearshaven.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-23","alert":"Sinkholed","trigger":"clearshaven.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Facebook","verdict":"phishing","severity":"medium","comment":"Resource associated with Facebook phishing","tags":["meta","facebook","phishing","social"],"meta":null}]}},{"url":{"schema":"https","addr":"clearshaven.com/lander/baykarai_post_new_creo_tizer/index/all.min.css","fqdn":"clearshaven.com","domain":"clearshaven.com","tld":"com"},"ip":{"addr":"172.67.203.238","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://clearshaven.com/","date":"2026-05-23T13:25:55.461Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"clearshaven.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Apr 2026 11:27:24 GMT","end":"Tue, 07 Jul 2026 11:27:23 GMT"},"fingerprint":{"sha1":"DC:89:A1:EF:92:53:03:EF:FF:61:53:2C:8C:EE:71:76:0B:BB:A3:9A","sha256":"CF:3B:DD:36:E5:61:52:73:B2:A3:90:0B:59:27:8B:3C:A0:B4:72:4C:94:17:C5:AF:6B:64:D1:54:A2:2E:C7:7A"}}},"request":{"raw":"GET /lander/baykarai_post_new_creo_tizer/index/all.min.css HTTP/1.1\r\nHost: clearshaven.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://clearshaven.com/\r\nCookie: _subid=1sjos4f2nr1lq; 502d3=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjE1NDU0XCI6MTc3OTU0Mjc1NX0sXCJjYW1wYWlnbnNcIjp7XCIzMzMwXCI6MTc3OTU0Mjc1NX0sXCJ0aW1lXCI6MTc3OTU0Mjc1NX0ifQ.Ye4K8KtvxT925lLk1p7GLWgtysWEEooHZZfU2LDVP-E; _token=uuid_1sjos4f2nr1lq_1sjos4f2nr1lq6a11aae3394675.63059918\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 23 May 2026 13:25:55 GMT\r\ncontent-type: text/css\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=S1kPnECHBRVtE6F%2ByxaQrR%2FyJ279sSQGCh4FVolxlZ5%2B%2FhXApqU%2BUMExacgdEDN7vpuWDrD4h%2BVLkqTsNxRQ4SpKVwHE1k3nX0cmU3UdXstLxZpkXYRCYQLNzrbaXbIg5sE%3D\"}]}\r\npriority: u=2,i=?0\r\nlast-modified: Wed, 18 Feb 2026 06:46:55 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Mon, 01 Jun 2026 14:09:13 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\ncontent-encoding: br\r\nage: 83802\r\ncf-cache-status: HIT\r\netag: W/\"6995605f-1d84d\"\r\ncf-ray: a00463ad8ab7b4fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":120909,"size_decoded":0,"mime_type":"text/css","magic":"troff or preprocessor input, ASCII text","md5":"69f7b15a316380cdf62a1b2607783382","sha1":"c0f9a7dfe9a3b42f12f5cf7018c6bff7913551fe","sha256":"91915d45c4287d48a5254916c5d53d617ecc004675bebc39d7f12f06c9e88b59","sha512":"74027ce560242a4ad4d6c8ba0bdc12059ba70f864479eb4fa642f111ffc4d6316a2ec509b01ca0686a3366f4ac49a66688d2d3cc32364254d94ae20179e524bb","ssdeep":"1536:OjmSmYmSmZmSm23mSm0mSmTsJuYNpWx/NCDADOkvCHI3mmojW+0TP0Ammk10R6wc:9jNpWx/NCDADOTHI3mmojWtTPEmk10RC","tlshash":"dec37aecd4bf18904391e4c1234aa374bb3dbb3c9c4a6c5ce2a7798da6c2654d1863dd","first_seen":"2025-11-01T13:50:34.4069Z","last_seen":"2026-05-23T13:26:22.258894Z","times_seen":11,"resource_available":false,"data":null}},"time_used":67,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":31,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-23","alert":"Sinkholed","trigger":"clearshaven.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-23","alert":"Phishing Block","trigger":"clearshaven.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-23","alert":"Sinkholed","trigger":"clearshaven.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Facebook","verdict":"phishing","severity":"medium","comment":"Resource associated with Facebook phishing","tags":["meta","facebook","phishing","social"],"meta":null}]}},{"url":{"schema":"https","addr":"clearshaven.com/lander/baykarai_post_new_creo_tizer/index/style.css","fqdn":"clearshaven.com","domain":"clearshaven.com","tld":"com"},"ip":{"addr":"172.67.203.238","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://clearshaven.com/","date":"2026-05-23T13:25:55.463Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"clearshaven.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Apr 2026 11:27:24 GMT","end":"Tue, 07 Jul 2026 11:27:23 GMT"},"fingerprint":{"sha1":"DC:89:A1:EF:92:53:03:EF:FF:61:53:2C:8C:EE:71:76:0B:BB:A3:9A","sha256":"CF:3B:DD:36:E5:61:52:73:B2:A3:90:0B:59:27:8B:3C:A0:B4:72:4C:94:17:C5:AF:6B:64:D1:54:A2:2E:C7:7A"}}},"request":{"raw":"GET /lander/baykarai_post_new_creo_tizer/index/style.css HTTP/1.1\r\nHost: clearshaven.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://clearshaven.com/\r\nCookie: _subid=1sjos4f2nr1lq; 502d3=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjE1NDU0XCI6MTc3OTU0Mjc1NX0sXCJjYW1wYWlnbnNcIjp7XCIzMzMwXCI6MTc3OTU0Mjc1NX0sXCJ0aW1lXCI6MTc3OTU0Mjc1NX0ifQ.Ye4K8KtvxT925lLk1p7GLWgtysWEEooHZZfU2LDVP-E; _token=uuid_1sjos4f2nr1lq_1sjos4f2nr1lq6a11aae3394675.63059918\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 23 May 2026 13:25:55 GMT\r\ncontent-type: text/css\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=eJ%2BRW5cymcgrJM8ma%2BBeZ294NZJ%2B0ODO20tHRhuNB%2FutTSBL4UxtfbuBoEGSPBEA4qUe4sZDI44OJ%2FY%2BSQlQeYzCP2Wt1Xbz8hKa3XNzaDLZYXLq8MGFi5G1nNt4y9glud4%3D\"}]}\r\npriority: u=2,i=?0\r\nlast-modified: Wed, 18 Feb 2026 06:46:55 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Mon, 01 Jun 2026 14:09:13 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\ncontent-encoding: br\r\nage: 83802\r\ncf-cache-status: HIT\r\netag: W/\"6995605f-4241\"\r\ncf-ray: a00463ad8ab8b4fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16961,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text","md5":"69310ef97b482188e7a24ad817de7c18","sha1":"08de3d8705d7f05509a91b9d7744ea51d7eabc0c","sha256":"b116c054748025ceaaa1b5d45acdafca657e845aae7f9fd8173dd53fb0897f17","sha512":"198ec8789de6e87122ad8b88ae052d50a63f3d0183e71c81684314eb876034e9424f1d878980d41b5e882957fde99e3151f357c299e022e45fe1918089d4cb43","ssdeep":"192:5NpXQz/7BtzPstf+aeXbsdbV9NvhF5gUOywZ/UPFBHCYkRC+yaFRc/9JFosnFHXD:7sbMf8C5FseFx/RaFyFowF7qF6JFVKO","tlshash":"2872044649631881691be4982f7d874b72a99193624dd06d3fcc368ccf876d6acb2fcc","first_seen":"2026-02-27T03:08:58.356484Z","last_seen":"2026-06-22T07:36:21.391147Z","times_seen":8,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-23","alert":"Phishing Block","trigger":"clearshaven.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-23","alert":"Sinkholed","trigger":"clearshaven.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-23","alert":"Sinkholed","trigger":"clearshaven.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Facebook","verdict":"phishing","severity":"medium","comment":"Resource associated with Facebook phishing","tags":["meta","facebook","phishing","social"],"meta":null}]}},{"url":{"schema":"https","addr":"clearshaven.com/lander/baykarai_post_new_creo_tizer/index/Baykar-logo.jpg","fqdn":"clearshaven.com","domain":"clearshaven.com","tld":"com"},"ip":{"addr":"172.67.203.238","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://clearshaven.com/","date":"2026-05-23T13:25:55.476Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"clearshaven.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Apr 2026 11:27:24 GMT","end":"Tue, 07 Jul 2026 11:27:23 GMT"},"fingerprint":{"sha1":"DC:89:A1:EF:92:53:03:EF:FF:61:53:2C:8C:EE:71:76:0B:BB:A3:9A","sha256":"CF:3B:DD:36:E5:61:52:73:B2:A3:90:0B:59:27:8B:3C:A0:B4:72:4C:94:17:C5:AF:6B:64:D1:54:A2:2E:C7:7A"}}},"request":{"raw":"GET /lander/baykarai_post_new_creo_tizer/index/Baykar-logo.jpg HTTP/1.1\r\nHost: clearshaven.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://clearshaven.com/\r\nCookie: _subid=1sjos4f2nr1lq; 502d3=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjE1NDU0XCI6MTc3OTU0Mjc1NX0sXCJjYW1wYWlnbnNcIjp7XCIzMzMwXCI6MTc3OTU0Mjc1NX0sXCJ0aW1lXCI6MTc3OTU0Mjc1NX0ifQ.Ye4K8KtvxT925lLk1p7GLWgtysWEEooHZZfU2LDVP-E; _token=uuid_1sjos4f2nr1lq_1sjos4f2nr1lq6a11aae3394675.63059918\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 23 May 2026 13:25:55 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 11636\r\npriority: u=4,i=?0\r\nlast-modified: Wed, 18 Feb 2026 06:46:55 GMT\r\netag: \"6995605f-2d74\"\r\nexpires: Mon, 01 Jun 2026 14:09:13 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 83802\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AW%2BUx%2B941UAarw4vhtxtyGx3VGB4X5qB3r0S2nYEEUMOUqAEvQfRE%2FgZ135ybaDthe60sxf2%2F%2FhT%2BDf2V5OwMz2LtXs4aV9yaJN0Y5Y1p0969XmAq9ahP8T1bhgxIwCRFaE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a00463ad9abfb4fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11636,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 400x400, components 3","md5":"6e3afe8124106542f0393c95b39891f4","sha1":"66df0914899939ee0d5a01261092eadd440bf46c","sha256":"ba60a4ebdb859900b19e85958eaa16d0931e0b723cc97e75d78cc948c87099d8","sha512":"43ee816bfa676b3b7201fdba59661a337884356beeb60b0449cf9f213f6923efde71e179a785c3560a6cf59871347bc8c99703a9600bff5f0ada773c497b8889","ssdeep":"192:rUd8UUqRDM4QFBOy36FzlA4e1fFBl6PpFEB+tpMZKrKKLHPsfU+xZ4J:r48UUqhMJFBOyqFJAtfFBlCFN49+UfJA","tlshash":"f23218039845c7da5529d3f8be131dad0e4f5b18e885aaef15278e6fbd814160cdf02c","first_seen":"2026-05-15T05:58:11.076782Z","last_seen":"2026-06-22T07:36:21.399919Z","times_seen":7,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":12,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-23","alert":"Sinkholed","trigger":"clearshaven.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-23","alert":"Phishing Block","trigger":"clearshaven.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-23","alert":"Sinkholed","trigger":"clearshaven.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Facebook","verdict":"phishing","severity":"medium","comment":"Resource associated with Facebook phishing","tags":["meta","facebook","phishing","social"],"meta":null}]}},{"url":{"schema":"https","addr":"clearshaven.com/lander/baykarai_post_new_creo_tizer/form/js/libs/intlTelInput.js","fqdn":"clearshaven.com","domain":"clearshaven.com","tld":"com"},"ip":{"addr":"172.67.203.238","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://clearshaven.com/","date":"2026-05-23T13:25:55.670Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"clearshaven.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Apr 2026 11:27:24 GMT","end":"Tue, 07 Jul 2026 11:27:23 GMT"},"fingerprint":{"sha1":"DC:89:A1:EF:92:53:03:EF:FF:61:53:2C:8C:EE:71:76:0B:BB:A3:9A","sha256":"CF:3B:DD:36:E5:61:52:73:B2:A3:90:0B:59:27:8B:3C:A0:B4:72:4C:94:17:C5:AF:6B:64:D1:54:A2:2E:C7:7A"}}},"request":{"raw":"GET /lander/baykarai_post_new_creo_tizer/form/js/libs/intlTelInput.js HTTP/1.1\r\nHost: clearshaven.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://clearshaven.com/lander/baykarai_post_new_creo_tizer/form/js/libs.js\r\nCookie: _subid=1sjos4f2nr1lq; 502d3=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjE1NDU0XCI6MTc3OTU0Mjc1NX0sXCJjYW1wYWlnbnNcIjp7XCIzMzMwXCI6MTc3OTU0Mjc1NX0sXCJ0aW1lXCI6MTc3OTU0Mjc1NX0ifQ.Ye4K8KtvxT925lLk1p7GLWgtysWEEooHZZfU2LDVP-E; _token=uuid_1sjos4f2nr1lq_1sjos4f2nr1lq6a11aae3394675.63059918\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 23 May 2026 13:25:55 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bt09GHuSXOLxyN8n2axkZ6ObtUZjtMvC9uvnCbA6y2zwVI7MW37Vh8DA2pAO4EedmVIr9deeYuviDrnGHzKK0q5YtrcukyMDXmJH2pKiqf8nNGowWsLy4xe7Oax7ZLxAttk%3D\"}]}\r\npriority: u=3,i=?0\r\nlast-modified: Wed, 18 Feb 2026 06:46:55 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Tue, 02 Jun 2026 06:30:31 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\ncontent-encoding: br\r\nage: 24923\r\ncf-cache-status: HIT\r\netag: W/\"6995605f-87c4\"\r\ncf-ray: a00463aeeae4b4fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":34756,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (34020), with no line terminators","md5":"c79a1dd02df4c628a56f3835471fc932","sha1":"f2fa8f443e3b91187c8c786c5242c60a65364bf9","sha256":"b31fd662513a7c7f7c90c8df2a060f319219e380c774326322034acb0d7b2116","sha512":"a245ebd8efa3f512a4aeac9c3fc88fe7cb2593d1bd8e67225f88b01dd52ef866dd44adf931fb20913b35877ca81f630d48587cf9dcc21749f22d376f45023594","ssdeep":"768:AqDnUfAow5D45YiLpJonAuN1dlfJLKgHJAV:lo5JoAuN1U","tlshash":"3cf2c89d7344533be8fac196b89b014b2aee35141a84c89c787dcfcc4aa8ed5b567334","first_seen":"2024-06-06T14:03:54Z","last_seen":"2026-07-04T03:35:56.592968Z","times_seen":92,"resource_available":true,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-23","alert":"Phishing Block","trigger":"clearshaven.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-23","alert":"Sinkholed","trigger":"clearshaven.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-23","alert":"Sinkholed","trigger":"clearshaven.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Facebook","verdict":"phishing","severity":"medium","comment":"Resource associated with Facebook phishing","tags":["meta","facebook","phishing","social"],"meta":null}]}},{"url":{"schema":"https","addr":"clearshaven.com/lander/baykarai_post_new_creo_tizer/index/fa-solid-900.woff2","fqdn":"clearshaven.com","domain":"clearshaven.com","tld":"com"},"ip":{"addr":"172.67.203.238","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://clearshaven.com/","date":"2026-05-23T13:25:55.782Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"clearshaven.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Apr 2026 11:27:24 GMT","end":"Tue, 07 Jul 2026 11:27:23 GMT"},"fingerprint":{"sha1":"DC:89:A1:EF:92:53:03:EF:FF:61:53:2C:8C:EE:71:76:0B:BB:A3:9A","sha256":"CF:3B:DD:36:E5:61:52:73:B2:A3:90:0B:59:27:8B:3C:A0:B4:72:4C:94:17:C5:AF:6B:64:D1:54:A2:2E:C7:7A"}}},"request":{"raw":"GET /lander/baykarai_post_new_creo_tizer/index/fa-solid-900.woff2 HTTP/1.1\r\nHost: clearshaven.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://clearshaven.com/lander/baykarai_post_new_creo_tizer/index/all(1).min.css\r\nCookie: _subid=1sjos4f2nr1lq; 502d3=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjE1NDU0XCI6MTc3OTU0Mjc1NX0sXCJjYW1wYWlnbnNcIjp7XCIzMzMwXCI6MTc3OTU0Mjc1NX0sXCJ0aW1lXCI6MTc3OTU0Mjc1NX0ifQ.Ye4K8KtvxT925lLk1p7GLWgtysWEEooHZZfU2LDVP-E; _token=uuid_1sjos4f2nr1lq_1sjos4f2nr1lq6a11aae3394675.63059918\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\nserver: cloudflare\r\ndate: Sat, 23 May 2026 13:25:55 GMT\r\ncontent-type: text/html\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 43\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6keqKrGXlWlH%2BeWrO1PMTZBxN5Nhe2XKSXaz7ebfmNQLtaBC2jA1DSMB1d0jns9LbUqKhM%2BhM9YL69UmK3DIxW6407WsQ6tgw2pOoWOYzd6Z9smgxo%2BS6Hqbu7LO4QoyE%2Fs%3D\"}]}\r\ncf-ray: a00463afaaf5b4fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":146,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"8eec510e57f5f732fd2cce73df7b73ef","sha1":"3c0af39ecb3753c5fee3b53d063c7286019eac3b","sha256":"55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0","sha512":"73bbf698482132b5fd60a0b58926fddec9055f8095a53bc52714e211e9340c3419736ceafd6b279667810114d306bfccdcfcddf51c0b67fe9e3c73c54583e574","ssdeep":"","tlshash":"b7c02b2d35133c4cc563313423c37140c0d6833b687a41110400c00371cf2998ec3397","first_seen":"2023-03-07T12:05:15Z","last_seen":"2026-08-04T08:31:18.797433Z","times_seen":546310,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-23","alert":"Sinkholed","trigger":"clearshaven.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-23","alert":"Phishing Block","trigger":"clearshaven.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-23","alert":"Sinkholed","trigger":"clearshaven.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Facebook","verdict":"phishing","severity":"medium","comment":"Resource associated with Facebook phishing","tags":["meta","facebook","phishing","social"],"meta":null}]}},{"url":{"schema":"https","addr":"clearshaven.com/lander/baykarai_post_new_creo_tizer/index/all(1).min.css","fqdn":"clearshaven.com","domain":"clearshaven.com","tld":"com"},"ip":{"addr":"172.67.203.238","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://clearshaven.com/","date":"2026-05-23T13:25:55.470Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"clearshaven.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Apr 2026 11:27:24 GMT","end":"Tue, 07 Jul 2026 11:27:23 GMT"},"fingerprint":{"sha1":"DC:89:A1:EF:92:53:03:EF:FF:61:53:2C:8C:EE:71:76:0B:BB:A3:9A","sha256":"CF:3B:DD:36:E5:61:52:73:B2:A3:90:0B:59:27:8B:3C:A0:B4:72:4C:94:17:C5:AF:6B:64:D1:54:A2:2E:C7:7A"}}},"request":{"raw":"GET /lander/baykarai_post_new_creo_tizer/index/all(1).min.css HTTP/1.1\r\nHost: clearshaven.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://clearshaven.com/\r\nCookie: _subid=1sjos4f2nr1lq; 502d3=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjE1NDU0XCI6MTc3OTU0Mjc1NX0sXCJjYW1wYWlnbnNcIjp7XCIzMzMwXCI6MTc3OTU0Mjc1NX0sXCJ0aW1lXCI6MTc3OTU0Mjc1NX0ifQ.Ye4K8KtvxT925lLk1p7GLWgtysWEEooHZZfU2LDVP-E; _token=uuid_1sjos4f2nr1lq_1sjos4f2nr1lq6a11aae3394675.63059918\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 23 May 2026 13:25:55 GMT\r\ncontent-type: text/css\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vqvFk%2B2qFrlEaWK%2F3z%2F1fsSeRYCkxS4kkO1gBeRH4eeN%2FmK0j3bQYa9857R1eW1rXpxE9ufSmLw9V4IvJEHyKFmLqtCO4Zsm1%2FdKTZ4Xsu3c2ikd0JkuI8UTbazASqT844E%3D\"}]}\r\npriority: u=2,i=?0\r\nlast-modified: Wed, 18 Feb 2026 06:46:55 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Mon, 01 Jun 2026 14:09:13 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\ncontent-encoding: br\r\nage: 83802\r\ncf-cache-status: HIT\r\netag: W/\"6995605f-18d11\"\r\ncf-ray: a00463ad8ab9b4fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":101649,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65317)","md5":"fd074441145a0d67e39b6116e22ef1b8","sha1":"50596f136a04402ae60fac109ba317514a3f3f8f","sha256":"ca46e812cd014e035d566ba7f1cbd30a889f5117a4a2b516bcf3c39108df50c9","sha512":"122a3d26c2ab2053b1aae424c85c83d5f822c205411abe679d67e5c55804979c3929cefee4d31e81a39fd5f20219e55226d447cd8bc3868be5c95c4e2da6cb14","ssdeep":"1536:RUMVM6MVMkMVM9MVMNMVMispLZdz+WnQcnlFwLb3esGUde7c0:oZdzRQcnlFkesGUY7c0","tlshash":"f3a3b7f9e44c05d97732c44bab95b37c65b6f738d5810ca9f02f580c1ad26a822c6f7a","first_seen":"2026-02-27T03:08:58.339406Z","last_seen":"2026-06-22T07:36:21.39227Z","times_seen":8,"resource_available":false,"data":null}},"time_used":60,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":25,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-23","alert":"Sinkholed","trigger":"clearshaven.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-23","alert":"Sinkholed","trigger":"clearshaven.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-23","alert":"Phishing Block","trigger":"clearshaven.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Facebook","verdict":"phishing","severity":"medium","comment":"Resource associated with Facebook phishing","tags":["meta","facebook","phishing","social"],"meta":null}]}},{"url":{"schema":"https","addr":"clearshaven.com/lander/baykarai_post_new_creo_tizer/index/arrrrow.png","fqdn":"clearshaven.com","domain":"clearshaven.com","tld":"com"},"ip":{"addr":"172.67.203.238","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://clearshaven.com/","date":"2026-05-23T13:25:55.483Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"clearshaven.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Apr 2026 11:27:24 GMT","end":"Tue, 07 Jul 2026 11:27:23 GMT"},"fingerprint":{"sha1":"DC:89:A1:EF:92:53:03:EF:FF:61:53:2C:8C:EE:71:76:0B:BB:A3:9A","sha256":"CF:3B:DD:36:E5:61:52:73:B2:A3:90:0B:59:27:8B:3C:A0:B4:72:4C:94:17:C5:AF:6B:64:D1:54:A2:2E:C7:7A"}}},"request":{"raw":"GET /lander/baykarai_post_new_creo_tizer/index/arrrrow.png HTTP/1.1\r\nHost: clearshaven.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://clearshaven.com/\r\nCookie: _subid=1sjos4f2nr1lq; 502d3=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjE1NDU0XCI6MTc3OTU0Mjc1NX0sXCJjYW1wYWlnbnNcIjp7XCIzMzMwXCI6MTc3OTU0Mjc1NX0sXCJ0aW1lXCI6MTc3OTU0Mjc1NX0ifQ.Ye4K8KtvxT925lLk1p7GLWgtysWEEooHZZfU2LDVP-E; _token=uuid_1sjos4f2nr1lq_1sjos4f2nr1lq6a11aae3394675.63059918\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 23 May 2026 13:25:55 GMT\r\ncontent-type: image/png\r\ncontent-length: 1942\r\npriority: u=4,i=?0\r\nlast-modified: Wed, 18 Feb 2026 06:46:55 GMT\r\netag: \"6995605f-796\"\r\nexpires: Mon, 01 Jun 2026 14:09:13 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 83801\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2F0A%2FWTgdg7R%2FX90y0BKk4oLf6toVUYYXoUZ11jG1q4GeGtyaFFBTQEyxEqK6yWMLiTx7%2FDdvqzFsue8hnmTpDHJQbQRw%2FHSTw6BReNOm0wmpSXsOvkkzRtbZ2iX5M%2BZWAjk%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a00463ad9ac5b4fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1942,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 225 x 225, 8-bit colormap, non-interlaced","md5":"b4dbae93cce9965ee562a3ad1d7df247","sha1":"b41fe6d2bff8d1a877d87041696410e692920ae9","sha256":"245888f001bf59c1b3e14be94fd825cbeffe832bc3d383c330f4f6da7c3cab56","sha512":"6e48dadbb303a302c1319f92cd02d469f8eb977e85ef669965dafed4e3b85a2b7a741a54dabf42e9b1bc47e7ed50a48c0dab5a5e0f99a6a9aff90ed195d1e93e","ssdeep":"","tlshash":"cc413bef4ae1b175b979a6270319bea73c1737000c2bd7bf97494d82e6299c0b721d08","first_seen":"2024-10-30T16:26:10.405149Z","last_seen":"2026-06-22T07:36:21.397752Z","times_seen":11,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-23","alert":"Sinkholed","trigger":"clearshaven.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-23","alert":"Sinkholed","trigger":"clearshaven.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-23","alert":"Phishing Block","trigger":"clearshaven.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Facebook","verdict":"phishing","severity":"medium","comment":"Resource associated with Facebook phishing","tags":["meta","facebook","phishing","social"],"meta":null}]}},{"url":{"schema":"https","addr":"clearshaven.com/lander/baykarai_post_new_creo_tizer/index/fa-brands-400.woff2","fqdn":"clearshaven.com","domain":"clearshaven.com","tld":"com"},"ip":{"addr":"172.67.203.238","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://clearshaven.com/","date":"2026-05-23T13:25:55.833Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"clearshaven.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Apr 2026 11:27:24 GMT","end":"Tue, 07 Jul 2026 11:27:23 GMT"},"fingerprint":{"sha1":"DC:89:A1:EF:92:53:03:EF:FF:61:53:2C:8C:EE:71:76:0B:BB:A3:9A","sha256":"CF:3B:DD:36:E5:61:52:73:B2:A3:90:0B:59:27:8B:3C:A0:B4:72:4C:94:17:C5:AF:6B:64:D1:54:A2:2E:C7:7A"}}},"request":{"raw":"GET /lander/baykarai_post_new_creo_tizer/index/fa-brands-400.woff2 HTTP/1.1\r\nHost: clearshaven.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://clearshaven.com/lander/baykarai_post_new_creo_tizer/index/all(1).min.css\r\nCookie: _subid=1sjos4f2nr1lq; 502d3=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjE1NDU0XCI6MTc3OTU0Mjc1NX0sXCJjYW1wYWlnbnNcIjp7XCIzMzMwXCI6MTc3OTU0Mjc1NX0sXCJ0aW1lXCI6MTc3OTU0Mjc1NX0ifQ.Ye4K8KtvxT925lLk1p7GLWgtysWEEooHZZfU2LDVP-E; _token=uuid_1sjos4f2nr1lq_1sjos4f2nr1lq6a11aae3394675.63059918\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\nserver: cloudflare\r\ndate: Sat, 23 May 2026 13:25:55 GMT\r\ncontent-type: text/html\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 43\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XVRb9FJYTIHwa%2FFuVdnRSlbCwxK9b8g7I2l0oBJyOdC9Eqj9BlxS3rNcEe9AzuO06JBl8SbIuJSGnMIUo2XA6SdbndtuBBLu%2F%2FxPUS42MHlHWr8wT14ejgAT8sOiQiW3xMI%3D\"}]}\r\ncf-ray: a00463affb18b4fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":146,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"8eec510e57f5f732fd2cce73df7b73ef","sha1":"3c0af39ecb3753c5fee3b53d063c7286019eac3b","sha256":"55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0","sha512":"73bbf698482132b5fd60a0b58926fddec9055f8095a53bc52714e211e9340c3419736ceafd6b279667810114d306bfccdcfcddf51c0b67fe9e3c73c54583e574","ssdeep":"","tlshash":"b7c02b2d35133c4cc563313423c37140c0d6833b687a41110400c00371cf2998ec3397","first_seen":"2023-03-07T12:05:15Z","last_seen":"2026-08-04T08:31:18.797433Z","times_seen":546310,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-23","alert":"Sinkholed","trigger":"clearshaven.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-23","alert":"Phishing Block","trigger":"clearshaven.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-23","alert":"Sinkholed","trigger":"clearshaven.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Facebook","verdict":"phishing","severity":"medium","comment":"Resource associated with Facebook phishing","tags":["meta","facebook","phishing","social"],"meta":null}]}},{"url":{"schema":"https","addr":"clearshaven.com/lander/baykarai_post_new_creo_tizer/form/img/flags.png","fqdn":"clearshaven.com","domain":"clearshaven.com","tld":"com"},"ip":{"addr":"172.67.203.238","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://clearshaven.com/","date":"2026-05-23T13:25:55.983Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"clearshaven.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Apr 2026 11:27:24 GMT","end":"Tue, 07 Jul 2026 11:27:23 GMT"},"fingerprint":{"sha1":"DC:89:A1:EF:92:53:03:EF:FF:61:53:2C:8C:EE:71:76:0B:BB:A3:9A","sha256":"CF:3B:DD:36:E5:61:52:73:B2:A3:90:0B:59:27:8B:3C:A0:B4:72:4C:94:17:C5:AF:6B:64:D1:54:A2:2E:C7:7A"}}},"request":{"raw":"GET /lander/baykarai_post_new_creo_tizer/form/img/flags.png HTTP/1.1\r\nHost: clearshaven.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://clearshaven.com/lander/baykarai_post_new_creo_tizer/form/css/intlTelInput.css\r\nCookie: _subid=1sjos4f2nr1lq; 502d3=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjE1NDU0XCI6MTc3OTU0Mjc1NX0sXCJjYW1wYWlnbnNcIjp7XCIzMzMwXCI6MTc3OTU0Mjc1NX0sXCJ0aW1lXCI6MTc3OTU0Mjc1NX0ifQ.Ye4K8KtvxT925lLk1p7GLWgtysWEEooHZZfU2LDVP-E; _token=uuid_1sjos4f2nr1lq_1sjos4f2nr1lq6a11aae3394675.63059918\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 23 May 2026 13:25:55 GMT\r\ncontent-type: image/png\r\ncontent-length: 70857\r\npriority: u=4,i=?0\r\nlast-modified: Wed, 18 Feb 2026 06:46:55 GMT\r\netag: \"6995605f-114c9\"\r\nexpires: Mon, 01 Jun 2026 14:09:14 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 83801\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=h1nahrgYVbTIE9OAPz4P6tuI3dCbxcC5nOVEhwm7F5h2VDtOR5J4LhKALzjYQXekzbaJ6w5ChCC%2FmrFwetlZzrZNDnQ2PdaYT7%2FtFC0amOrPI8FGLwbutX0M1dCNU4qOI4c%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a00463b0eb3db4fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":70857,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 5652 x 15, 8-bit/color RGBA, non-interlaced","md5":"416250f60d785a2e02f17e054d2e4e44","sha1":"21572c9751e5a3dc20395befa0fcb349c32c4811","sha256":"0a012cf808a24573168308916092d2d4bd3f2b4af8e16b59167013cc77acee55","sha512":"cf1e7acf47464f00d206e9149475e22b8ea5a31727fa16344cd151384d850b83ece5e9abe4ac62861dba0dc3d3410955611d94665b60e2faa0c3d7a3d7c88404","ssdeep":"1536:cBBfgWxg7McnRdaRx9krb5LhxHG1gmvlpWUZA1eog3e7xr:Lg+3n3ax9kHV3Wgmdg2A1Y3elr","tlshash":"9763019797adf1d82a92274bef801109ae6c2b3d5d7c1da372cf1d532ae12c306c8586","first_seen":"2023-04-05T15:31:12Z","last_seen":"2026-08-04T08:30:50.610545Z","times_seen":25325,"resource_available":false,"data":null}},"time_used":42,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":15,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-23","alert":"Phishing Block","trigger":"clearshaven.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-23","alert":"Sinkholed","trigger":"clearshaven.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-23","alert":"Sinkholed","trigger":"clearshaven.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Facebook","verdict":"phishing","severity":"medium","comment":"Resource associated with Facebook phishing","tags":["meta","facebook","phishing","social"],"meta":null}]}},{"url":{"schema":"https","addr":"clearshaven.com/lander/baykarai_post_new_creo_tizer/webfonts/fa-solid-900.woff2","fqdn":"clearshaven.com","domain":"clearshaven.com","tld":"com"},"ip":{"addr":"172.67.203.238","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://clearshaven.com/","date":"2026-05-23T13:25:56.061Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"clearshaven.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Apr 2026 11:27:24 GMT","end":"Tue, 07 Jul 2026 11:27:23 GMT"},"fingerprint":{"sha1":"DC:89:A1:EF:92:53:03:EF:FF:61:53:2C:8C:EE:71:76:0B:BB:A3:9A","sha256":"CF:3B:DD:36:E5:61:52:73:B2:A3:90:0B:59:27:8B:3C:A0:B4:72:4C:94:17:C5:AF:6B:64:D1:54:A2:2E:C7:7A"}}},"request":{"raw":"GET /lander/baykarai_post_new_creo_tizer/webfonts/fa-solid-900.woff2 HTTP/1.1\r\nHost: clearshaven.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://clearshaven.com/lander/baykarai_post_new_creo_tizer/index/all.min.css\r\nCookie: _subid=1sjos4f2nr1lq; 502d3=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjE1NDU0XCI6MTc3OTU0Mjc1NX0sXCJjYW1wYWlnbnNcIjp7XCIzMzMwXCI6MTc3OTU0Mjc1NX0sXCJ0aW1lXCI6MTc3OTU0Mjc1NX0ifQ.Ye4K8KtvxT925lLk1p7GLWgtysWEEooHZZfU2LDVP-E; _token=uuid_1sjos4f2nr1lq_1sjos4f2nr1lq6a11aae3394675.63059918; pixel=null; token=uuid_1sjos4f2nr1lq_1sjos4f2nr1lq6a11aae3394675.63059918; subid=1sjos4f2nr1lq; aff=55; flow=null\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\nserver: cloudflare\r\ndate: Sat, 23 May 2026 13:25:56 GMT\r\ncontent-type: text/html\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 43\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VyRjT7yMCvpuI7jpMe4K0wO0Z2lO%2Fma6qorb0gMhv0wTFyPtnVk0uH1mHMRRdgaI8UoeI5DXBy7AaO3qrbqMF62ujRAo8W8gCZSR6c5SNTRmoAuiBKQeevHJfCXifAPgwnc%3D\"}]}\r\ncf-ray: a00463b15b41b4fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":146,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"8eec510e57f5f732fd2cce73df7b73ef","sha1":"3c0af39ecb3753c5fee3b53d063c7286019eac3b","sha256":"55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0","sha512":"73bbf698482132b5fd60a0b58926fddec9055f8095a53bc52714e211e9340c3419736ceafd6b279667810114d306bfccdcfcddf51c0b67fe9e3c73c54583e574","ssdeep":"","tlshash":"b7c02b2d35133c4cc563313423c37140c0d6833b687a41110400c00371cf2998ec3397","first_seen":"2023-03-07T12:05:15Z","last_seen":"2026-08-04T08:31:18.797433Z","times_seen":546310,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-23","alert":"Sinkholed","trigger":"clearshaven.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-23","alert":"Phishing Block","trigger":"clearshaven.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-23","alert":"Sinkholed","trigger":"clearshaven.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Facebook","verdict":"phishing","severity":"medium","comment":"Resource associated with Facebook phishing","tags":["meta","facebook","phishing","social"],"meta":null}]}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/font-awesome/6.4.0/webfonts/fa-brands-400.woff2","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://clearshaven.com/","date":"2026-05-23T13:25:56.067Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 12 May 2026 03:46:57 GMT","end":"Mon, 10 Aug 2026 04:46:42 GMT"},"fingerprint":{"sha1":"95:12:1E:0A:F6:69:8B:FC:A0:08:DA:67:1A:A4:D1:9D:87:F5:E9:07","sha256":"F3:4A:39:63:C7:6A:CE:66:1A:B4:62:2C:E9:92:82:9A:81:78:1B:CC:3F:D5:2D:0A:6D:D6:89:D9:F6:66:7B:BC"}}},"request":{"raw":"GET /ajax/libs/font-awesome/6.4.0/webfonts/fa-brands-400.woff2 HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://clearshaven.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cdnjs.cloudflare.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 23 May 2026 13:25:56 GMT\r\ncontent-type: application/octet-stream; charset=utf-8\r\ncontent-length: 108020\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\netag: \"6421d693-1a5f4\"\r\nlast-modified: Mon, 27 Mar 2023 17:46:59 GMT\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/kv\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 751810\r\nexpires: Thu, 13 May 2027 13:25:56 GMT\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=15780000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=a10uyna6h929r6j5WL8L7QM7dpQhVhGp40nLghIXca2b0tq6Oxgg58IZ9Az2%2FYFNqeRwP4nn6JKr8t%2BBXrsJZQcL%2FVDXeKZCF4Z8b3RUjubf6xb6TsA%2BqoWl2lJTNBDKUJ0Xkr%2Bu\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\ncf-ray: a00463b16a520b06-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":108020,"size_decoded":0,"mime_type":"application/octet-stream; charset=utf-8","magic":"Web Open Font Format (Version 2), TrueType, length 108020, version 772.256","md5":"8b0ddedbb27cbc9971c8667caa8a0cc1","sha1":"4350f9ba93384634faf35f41c503c99c767f1069","sha256":"748332090c4b8e20f95d0ff59f0be20fa9c889359d3b36d4b886d73376054207","sha512":"d3b4791b988fcfd9911a2158163d0c44d6797650890b5d4ac769417e09d8fc2c67edc595be8e7927de0519a85eeb3577d0c7e385bdc99d762c7a6cfbad021b39","ssdeep":"3072:MUdDCdwgz0kLytDzAUhcJz8zfleLXsg4OEpUtbeONfQfG:1d+dNBBh8zflIWGP9Qe","tlshash":"8db312128031ef76fd4aa621de6b1807b03da30b67f249a9ded46a37c050997b471b4f","first_seen":"2023-04-09T20:30:06Z","last_seen":"2026-08-04T07:29:59.952814Z","times_seen":24071,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":16,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"clearshaven.com/lander/baykarai_post_new_creo_tizer/index/person.png","fqdn":"clearshaven.com","domain":"clearshaven.com","tld":"com"},"ip":{"addr":"172.67.203.238","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://clearshaven.com/","date":"2026-05-23T13:25:55.495Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"clearshaven.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Apr 2026 11:27:24 GMT","end":"Tue, 07 Jul 2026 11:27:23 GMT"},"fingerprint":{"sha1":"DC:89:A1:EF:92:53:03:EF:FF:61:53:2C:8C:EE:71:76:0B:BB:A3:9A","sha256":"CF:3B:DD:36:E5:61:52:73:B2:A3:90:0B:59:27:8B:3C:A0:B4:72:4C:94:17:C5:AF:6B:64:D1:54:A2:2E:C7:7A"}}},"request":{"raw":"GET /lander/baykarai_post_new_creo_tizer/index/person.png HTTP/1.1\r\nHost: clearshaven.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://clearshaven.com/\r\nCookie: _subid=1sjos4f2nr1lq; 502d3=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjE1NDU0XCI6MTc3OTU0Mjc1NX0sXCJjYW1wYWlnbnNcIjp7XCIzMzMwXCI6MTc3OTU0Mjc1NX0sXCJ0aW1lXCI6MTc3OTU0Mjc1NX0ifQ.Ye4K8KtvxT925lLk1p7GLWgtysWEEooHZZfU2LDVP-E; _token=uuid_1sjos4f2nr1lq_1sjos4f2nr1lq6a11aae3394675.63059918\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 23 May 2026 13:25:55 GMT\r\ncontent-type: image/png\r\ncontent-length: 3921\r\npriority: u=4,i=?0\r\nlast-modified: Wed, 18 Feb 2026 06:46:55 GMT\r\netag: \"6995605f-f51\"\r\nexpires: Mon, 01 Jun 2026 14:09:13 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 83801\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Wgl41o5EueS%2BoTn0PTYRTo1dcN3Ki0Ke6aCNv%2BsNBQM%2F4luaJxdkWptlPP0IPSqkcILUzz0VUGZHHB8zAVCNblnj5wHmPFPfEgpgpHaD%2BwfqXfkJntHKAlmCC89YZ0%2Bxskc%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a00463ad9aceb4fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3921,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 120 x 120, 8-bit/color RGBA, non-interlaced","md5":"187a36186f93782a92158db74dccd9f7","sha1":"5ee4628721be893807158c33db382afc1a34d5cc","sha256":"e2b3fd6d2555f93636d3e3e79557d1b549f651c687f9e4e9b14fd163feb6248a","sha512":"acf6ba4f596ea5623e2a5b3b1401639f417f2652e3bc193a1161aa98261505170f9b6e8cf5ca0087c2a31a22a379571b6d99f40d8cca039d45aeaa31431b2303","ssdeep":"","tlshash":"3b815d205e2f51b6fc7f3b05602eca92d8d82b86870131c4a18ba255b7ab2783561d62","first_seen":"2024-10-30T16:26:10.446383Z","last_seen":"2026-06-22T07:36:21.385188Z","times_seen":13,"resource_available":false,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-23","alert":"Sinkholed","trigger":"clearshaven.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-23","alert":"Phishing Block","trigger":"clearshaven.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-23","alert":"Sinkholed","trigger":"clearshaven.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Facebook","verdict":"phishing","severity":"medium","comment":"Resource associated with Facebook phishing","tags":["meta","facebook","phishing","social"],"meta":null}]}},{"url":{"schema":"https","addr":"clearshaven.com/favicon.ico","fqdn":"clearshaven.com","domain":"clearshaven.com","tld":"com"},"ip":{"addr":"172.67.203.238","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://clearshaven.com/","date":"2026-05-23T13:25:56.124Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"clearshaven.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Apr 2026 11:27:24 GMT","end":"Tue, 07 Jul 2026 11:27:23 GMT"},"fingerprint":{"sha1":"DC:89:A1:EF:92:53:03:EF:FF:61:53:2C:8C:EE:71:76:0B:BB:A3:9A","sha256":"CF:3B:DD:36:E5:61:52:73:B2:A3:90:0B:59:27:8B:3C:A0:B4:72:4C:94:17:C5:AF:6B:64:D1:54:A2:2E:C7:7A"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: clearshaven.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://clearshaven.com/\r\nCookie: _subid=1sjos4f2nr1lq; 502d3=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjE1NDU0XCI6MTc3OTU0Mjc1NX0sXCJjYW1wYWlnbnNcIjp7XCIzMzMwXCI6MTc3OTU0Mjc1NX0sXCJ0aW1lXCI6MTc3OTU0Mjc1NX0ifQ.Ye4K8KtvxT925lLk1p7GLWgtysWEEooHZZfU2LDVP-E; _token=uuid_1sjos4f2nr1lq_1sjos4f2nr1lq6a11aae3394675.63059918; pixel=null; token=uuid_1sjos4f2nr1lq_1sjos4f2nr1lq6a11aae3394675.63059918; subid=1sjos4f2nr1lq; aff=55; flow=null\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\nserver: cloudflare\r\ndate: Sat, 23 May 2026 13:25:56 GMT\r\ncontent-type: text/html\r\nvary: accept-encoding\r\npriority: u=6,i=?0\r\ncontent-encoding: br\r\nage: 43\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=djYcaEQyCa%2FJQAdQEbfWq34sqnWDhD3ACxq7CzKFMThzZBJJu04Md%2FTqhKj0VDuUInnpqhdU3EV1EqBqhaDKyOlZLYZjJlCbpg7LISC9TsFFnlwBuiDidT4OSzMAYxKVjmM%3D\"}]}\r\ncf-ray: a00463b1cb64b4fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":146,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"8eec510e57f5f732fd2cce73df7b73ef","sha1":"3c0af39ecb3753c5fee3b53d063c7286019eac3b","sha256":"55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0","sha512":"73bbf698482132b5fd60a0b58926fddec9055f8095a53bc52714e211e9340c3419736ceafd6b279667810114d306bfccdcfcddf51c0b67fe9e3c73c54583e574","ssdeep":"","tlshash":"b7c02b2d35133c4cc563313423c37140c0d6833b687a41110400c00371cf2998ec3397","first_seen":"2023-03-07T12:05:15Z","last_seen":"2026-08-04T08:31:18.797433Z","times_seen":546310,"resource_available":true,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-23","alert":"Phishing Block","trigger":"clearshaven.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-23","alert":"Sinkholed","trigger":"clearshaven.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-23","alert":"Sinkholed","trigger":"clearshaven.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Facebook","verdict":"phishing","severity":"medium","comment":"Resource associated with Facebook phishing","tags":["meta","facebook","phishing","social"],"meta":null}]}},{"url":{"schema":"https","addr":"clearshaven.com/lander/baykarai_post_new_creo_tizer/index/ava1.jpg","fqdn":"clearshaven.com","domain":"clearshaven.com","tld":"com"},"ip":{"addr":"172.67.203.238","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://clearshaven.com/","date":"2026-05-23T13:25:55.484Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"clearshaven.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Apr 2026 11:27:24 GMT","end":"Tue, 07 Jul 2026 11:27:23 GMT"},"fingerprint":{"sha1":"DC:89:A1:EF:92:53:03:EF:FF:61:53:2C:8C:EE:71:76:0B:BB:A3:9A","sha256":"CF:3B:DD:36:E5:61:52:73:B2:A3:90:0B:59:27:8B:3C:A0:B4:72:4C:94:17:C5:AF:6B:64:D1:54:A2:2E:C7:7A"}}},"request":{"raw":"GET /lander/baykarai_post_new_creo_tizer/index/ava1.jpg HTTP/1.1\r\nHost: clearshaven.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://clearshaven.com/\r\nCookie: _subid=1sjos4f2nr1lq; 502d3=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjE1NDU0XCI6MTc3OTU0Mjc1NX0sXCJjYW1wYWlnbnNcIjp7XCIzMzMwXCI6MTc3OTU0Mjc1NX0sXCJ0aW1lXCI6MTc3OTU0Mjc1NX0ifQ.Ye4K8KtvxT925lLk1p7GLWgtysWEEooHZZfU2LDVP-E; _token=uuid_1sjos4f2nr1lq_1sjos4f2nr1lq6a11aae3394675.63059918\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 23 May 2026 13:25:55 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 40228\r\npriority: u=4,i=?0\r\nlast-modified: Wed, 18 Feb 2026 06:46:55 GMT\r\netag: \"6995605f-9d24\"\r\nexpires: Mon, 01 Jun 2026 14:09:13 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 83801\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qnYIK87VxO5gR6ZPOrSUM55fvCo5Vdtm7Z57jDhSBM%2B%2F7BfaXyVoCzXvxEljpQA03xV4nNsn5D81U5aORUr8Tz%2BkFQF2OScB7Xqsl6ze2syBEkJR1fwFB2CybuAWnK1FUEs%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a00463ad9ac3b4fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":40228,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 608x683, components 3","md5":"97a138337fd14f618aca20db8033bf31","sha1":"81cfd6d0ab863b7a20138159232c793c584de689","sha256":"0fd5e5122ff803e7ccb4fa5a2a45a0985f69dddc2066be22aeee84471115fec7","sha512":"e7e93b2b455e7453440693874bc883a9e27cdde285fc92d7256caff9b6c67a06a00730c9f9ebf09e5e0a4b74e193c81fa59e32f730ac34475822a778d35416cb","ssdeep":"768:MkMEWUXQN1fRjp1QQKw6a1JGq197VAkGrKJu3MhJlgTljx0fnYQFO:g1UXQrfzf6IJnr7VAwR2lV0nYyO","tlshash":"ea03f150cb5e6423f5720e109bd0c57a5e7586d1a7d70b0e3862cfb092f286de992de1","first_seen":"2026-02-27T03:08:58.334337Z","last_seen":"2026-06-22T07:36:21.387824Z","times_seen":10,"resource_available":false,"data":null}},"time_used":67,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":45,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-23","alert":"Phishing Block","trigger":"clearshaven.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-23","alert":"Sinkholed","trigger":"clearshaven.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-23","alert":"Sinkholed","trigger":"clearshaven.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Facebook","verdict":"phishing","severity":"medium","comment":"Resource associated with Facebook phishing","tags":["meta","facebook","phishing","social"],"meta":null}]}},{"url":{"schema":"https","addr":"clearshaven.com/lander/baykarai_post_new_creo_tizer/index/wow.png","fqdn":"clearshaven.com","domain":"clearshaven.com","tld":"com"},"ip":{"addr":"172.67.203.238","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://clearshaven.com/","date":"2026-05-23T13:25:55.480Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"clearshaven.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Apr 2026 11:27:24 GMT","end":"Tue, 07 Jul 2026 11:27:23 GMT"},"fingerprint":{"sha1":"DC:89:A1:EF:92:53:03:EF:FF:61:53:2C:8C:EE:71:76:0B:BB:A3:9A","sha256":"CF:3B:DD:36:E5:61:52:73:B2:A3:90:0B:59:27:8B:3C:A0:B4:72:4C:94:17:C5:AF:6B:64:D1:54:A2:2E:C7:7A"}}},"request":{"raw":"GET /lander/baykarai_post_new_creo_tizer/index/wow.png HTTP/1.1\r\nHost: clearshaven.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://clearshaven.com/\r\nCookie: _subid=1sjos4f2nr1lq; 502d3=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjE1NDU0XCI6MTc3OTU0Mjc1NX0sXCJjYW1wYWlnbnNcIjp7XCIzMzMwXCI6MTc3OTU0Mjc1NX0sXCJ0aW1lXCI6MTc3OTU0Mjc1NX0ifQ.Ye4K8KtvxT925lLk1p7GLWgtysWEEooHZZfU2LDVP-E; _token=uuid_1sjos4f2nr1lq_1sjos4f2nr1lq6a11aae3394675.63059918\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 23 May 2026 13:25:55 GMT\r\ncontent-type: image/png\r\ncontent-length: 9386\r\npriority: u=4,i=?0\r\nlast-modified: Wed, 18 Feb 2026 06:46:55 GMT\r\netag: \"6995605f-24aa\"\r\nexpires: Mon, 01 Jun 2026 14:09:13 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 83801\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7JfR0%2BSBpiOslkaeScWjz4R64yJROaRKnW71Yotf%2F4ENKaACHk85ioH1QPwKI6aNf%2Fzf%2FbRXMMtNA2PX1Ds7NPn%2FuNJlgRo43JEmUz%2FDiPO4K%2BwgbykQR5pjX6fyETXRQAk%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a00463ad9ac4b4fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9386,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 920 x 920, 4-bit colormap, non-interlaced","md5":"b7dbdd7bba9994f21504f535067f5ae4","sha1":"87f790ef3406f7984cc23e78314e18a8776d067c","sha256":"1233045d6bfbc363f143d3f520b8f76fe1c22e393434c4aeac2da76ae600fdfa","sha512":"37ec1dfeb9306211d7f82fdba94006ffc001e89ef085a704cd675b2a3464e2e34a9def098f59cdcac12d495691435f881e8750e7bc9af9cd596edcd4173638db","ssdeep":"192:1vFKGMAwFjJMPaRV0GcMQ2bqB9pWN/Jmi2i4PBv3tAwV:1vFEYaD0GcMQ2bqRWN/ncvAwV","tlshash":"7012aff1744c8841544efdc59eba0d22935fb86a483658e04186fbe29d15e9c72a1b35","first_seen":"2024-10-30T16:26:10.426473Z","last_seen":"2026-06-22T07:36:21.393897Z","times_seen":13,"resource_available":false,"data":null}},"time_used":47,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":26,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-23","alert":"Sinkholed","trigger":"clearshaven.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-23","alert":"Sinkholed","trigger":"clearshaven.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-23","alert":"Phishing Block","trigger":"clearshaven.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Facebook","verdict":"phishing","severity":"medium","comment":"Resource associated with Facebook phishing","tags":["meta","facebook","phishing","social"],"meta":null}]}},{"url":{"schema":"https","addr":"clearshaven.com/lander/baykarai_post_new_creo_tizer/index/ava6.jpg","fqdn":"clearshaven.com","domain":"clearshaven.com","tld":"com"},"ip":{"addr":"172.67.203.238","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://clearshaven.com/","date":"2026-05-23T13:25:55.492Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"clearshaven.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Apr 2026 11:27:24 GMT","end":"Tue, 07 Jul 2026 11:27:23 GMT"},"fingerprint":{"sha1":"DC:89:A1:EF:92:53:03:EF:FF:61:53:2C:8C:EE:71:76:0B:BB:A3:9A","sha256":"CF:3B:DD:36:E5:61:52:73:B2:A3:90:0B:59:27:8B:3C:A0:B4:72:4C:94:17:C5:AF:6B:64:D1:54:A2:2E:C7:7A"}}},"request":{"raw":"GET /lander/baykarai_post_new_creo_tizer/index/ava6.jpg HTTP/1.1\r\nHost: clearshaven.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://clearshaven.com/\r\nCookie: _subid=1sjos4f2nr1lq; 502d3=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjE1NDU0XCI6MTc3OTU0Mjc1NX0sXCJjYW1wYWlnbnNcIjp7XCIzMzMwXCI6MTc3OTU0Mjc1NX0sXCJ0aW1lXCI6MTc3OTU0Mjc1NX0ifQ.Ye4K8KtvxT925lLk1p7GLWgtysWEEooHZZfU2LDVP-E; _token=uuid_1sjos4f2nr1lq_1sjos4f2nr1lq6a11aae3394675.63059918\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 23 May 2026 13:25:55 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 65304\r\npriority: u=4,i=?0\r\nlast-modified: Wed, 18 Feb 2026 06:46:55 GMT\r\netag: \"6995605f-ff18\"\r\nexpires: Mon, 01 Jun 2026 14:09:13 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 83801\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AcJhWaspIMaL5SrVW%2FViPl2tGulEpRF9SbedsyNHzEvaHSB1jBmTOa1bwg7VzCjSPozl%2BfLNPIj5jkqPt8eRTgbtk8P13HxqgcqcwLrQmEeZ63gFQ6AFtFLD9oDtc4AFi2w%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a00463ad9ac9b4fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":65304,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 692x892, components 3","md5":"02f0839928fc2f06866b211e7c8897d3","sha1":"8669261e4901d8d3680079fd67d965793ec2e25a","sha256":"9cb4336c8df67a6b64689a571c265430247c4ec2075b03ea66e1d89ef4c0778d","sha512":"00a66ba1ab8ae2b5710a3ce0fc75d3db402740b6e972dbed7a6d3bc44cc8b95343c3fecd475ed0868178cd871fc1d2ae104689d3e04ea280e13bb947ea3f0a2d","ssdeep":"1536:eQy4/hQ0vPRpbAnh1He7Uw3tMNy7/1qsTWBp3NNWTN393Rpdu:eL4/hQMvye7UwmNyJNWFNWB93Rpw","tlshash":"ec530234f260e352e9b1e31e382ea6145e4c4fa6a926e58d75543a47a400160fbf36f9","first_seen":"2026-02-27T03:08:58.34659Z","last_seen":"2026-06-22T07:36:21.398767Z","times_seen":10,"resource_available":false,"data":null}},"time_used":77,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":50,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-23","alert":"Sinkholed","trigger":"clearshaven.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-23","alert":"Sinkholed","trigger":"clearshaven.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-23","alert":"Phishing Block","trigger":"clearshaven.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Facebook","verdict":"phishing","severity":"medium","comment":"Resource associated with Facebook phishing","tags":["meta","facebook","phishing","social"],"meta":null}]}},{"url":{"schema":"https","addr":"clearshaven.com/lander/baykarai_post_new_creo_tizer/webfonts/fa-brands-400.woff2","fqdn":"clearshaven.com","domain":"clearshaven.com","tld":"com"},"ip":{"addr":"172.67.203.238","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://clearshaven.com/","date":"2026-05-23T13:25:56.064Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"clearshaven.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Apr 2026 11:27:24 GMT","end":"Tue, 07 Jul 2026 11:27:23 GMT"},"fingerprint":{"sha1":"DC:89:A1:EF:92:53:03:EF:FF:61:53:2C:8C:EE:71:76:0B:BB:A3:9A","sha256":"CF:3B:DD:36:E5:61:52:73:B2:A3:90:0B:59:27:8B:3C:A0:B4:72:4C:94:17:C5:AF:6B:64:D1:54:A2:2E:C7:7A"}}},"request":{"raw":"GET /lander/baykarai_post_new_creo_tizer/webfonts/fa-brands-400.woff2 HTTP/1.1\r\nHost: clearshaven.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://clearshaven.com/lander/baykarai_post_new_creo_tizer/index/all.min.css\r\nCookie: _subid=1sjos4f2nr1lq; 502d3=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjE1NDU0XCI6MTc3OTU0Mjc1NX0sXCJjYW1wYWlnbnNcIjp7XCIzMzMwXCI6MTc3OTU0Mjc1NX0sXCJ0aW1lXCI6MTc3OTU0Mjc1NX0ifQ.Ye4K8KtvxT925lLk1p7GLWgtysWEEooHZZfU2LDVP-E; _token=uuid_1sjos4f2nr1lq_1sjos4f2nr1lq6a11aae3394675.63059918; pixel=null; token=uuid_1sjos4f2nr1lq_1sjos4f2nr1lq6a11aae3394675.63059918; subid=1sjos4f2nr1lq; aff=55; flow=null\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\nserver: cloudflare\r\ndate: Sat, 23 May 2026 13:25:56 GMT\r\ncontent-type: text/html\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 43\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PaXUuzw7A3QPZ8MkyI45MrUu65cYTAcH6IibuKriNAGZt6BZkVXYh0MAPP5sYixAF%2BsBYJYrX2GGfFFIWpGvkIfUQaM6wccvOJCPc28ZUDwCxMYBPx9xvbep926d7RvBNNc%3D\"}]}\r\ncf-ray: a00463b16b42b4fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":146,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"8eec510e57f5f732fd2cce73df7b73ef","sha1":"3c0af39ecb3753c5fee3b53d063c7286019eac3b","sha256":"55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0","sha512":"73bbf698482132b5fd60a0b58926fddec9055f8095a53bc52714e211e9340c3419736ceafd6b279667810114d306bfccdcfcddf51c0b67fe9e3c73c54583e574","ssdeep":"","tlshash":"b7c02b2d35133c4cc563313423c37140c0d6833b687a41110400c00371cf2998ec3397","first_seen":"2023-03-07T12:05:15Z","last_seen":"2026-08-04T08:31:18.797433Z","times_seen":546310,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-23","alert":"Sinkholed","trigger":"clearshaven.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-23","alert":"Sinkholed","trigger":"clearshaven.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-23","alert":"Phishing Block","trigger":"clearshaven.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Facebook","verdict":"phishing","severity":"medium","comment":"Resource associated with Facebook phishing","tags":["meta","facebook","phishing","social"],"meta":null}]}},{"url":{"schema":"https","addr":"clearshaven.com/","fqdn":"clearshaven.com","domain":"clearshaven.com","tld":"com"},"ip":{"addr":"172.67.203.238","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-05-23T13:25:55.163Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"clearshaven.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Apr 2026 11:27:24 GMT","end":"Tue, 07 Jul 2026 11:27:23 GMT"},"fingerprint":{"sha1":"DC:89:A1:EF:92:53:03:EF:FF:61:53:2C:8C:EE:71:76:0B:BB:A3:9A","sha256":"CF:3B:DD:36:E5:61:52:73:B2:A3:90:0B:59:27:8B:3C:A0:B4:72:4C:94:17:C5:AF:6B:64:D1:54:A2:2E:C7:7A"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: clearshaven.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 23 May 2026 13:25:55 GMT\r\ncontent-type: text/html; charset=utf-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: no-cache, no-store, must-revalidate\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cx6kl119I4WpU7yhvT%2FaFiyi9lwavk8kzBwsOzcCMQHsEcv4nP8Ko7ZmctcyahelnTWfCEkrFD6iabKgj7qV04kPxEXPR9fwTTnHwpwShwvRXfWUQiiNRvOXb5TIzYNjFW4%3D\"}]}\r\nexpires: Sat, 23 May 2026 13:25:55 GMT\r\nset-cookie: _subid=1sjos4f2nr1lq; expires=Tue, 23 Jun 2026 13:25:55 GMT; path=/\n502d3=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjE1NDU0XCI6MTc3OTU0Mjc1NX0sXCJjYW1wYWlnbnNcIjp7XCIzMzMwXCI6MTc3OTU0Mjc1NX0sXCJ0aW1lXCI6MTc3OTU0Mjc1NX0ifQ.Ye4K8KtvxT925lLk1p7GLWgtysWEEooHZZfU2LDVP-E; expires=Sun, 24 May 2026 13:25:55 GMT; path=/\n_token=uuid_1sjos4f2nr1lq_1sjos4f2nr1lq6a11aae3394675.63059918; expires=Tue, 23 Jun 2026 13:25:55 GMT; path=/\r\nvary: Accept-Encoding\r\nx-powered-by: PHP/7.4.33\r\naccess-control-allow-origin: *\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: a00463abedb256ae-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP:7.4.33","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":35833,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (533)","md5":"7f373ac5c1de83adce5512785052572e","sha1":"5aae4b22fbafafd16f6b234239fb028a5b0d66a5","sha256":"84782542667247a80fd21122bff28994cf08074e9bc405a000c23786f2d5994c","sha512":"7b711ebd0d23518ec4166d8ecb3715299c5ee84d2fd29e591ac1abd68cc8d65c88142e9d400a82348929994ea3df1ba48d1710e57e4979469ee72c0da4a483df","ssdeep":"768:79BXMF1FZDw2F0FpFJDvutoC6XQ/We0IF6FfFoFR:z8HHnSfvDvW0IQ9eT","tlshash":"17f2a72518f350e60193a0e8aff76b1a3eb4a003e505d8047ded57d85fcad8a8da37d8","first_seen":"2026-05-23T13:26:22.284979Z","last_seen":"2026-05-23T13:26:22.284979Z","times_seen":1,"resource_available":false,"data":null}},"time_used":132,"timings":{"blocked":18,"dns":1,"connect":1,"send":0,"wait":92,"receive":0,"ssl":18},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-23","alert":"Sinkholed","trigger":"clearshaven.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-23","alert":"Phishing Block","trigger":"clearshaven.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-23","alert":"Sinkholed","trigger":"clearshaven.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Facebook","verdict":"phishing","severity":"medium","comment":"Resource associated with Facebook phishing","tags":["meta","facebook","phishing","social"],"meta":null}]}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/font-awesome/6.4.0/css/all.min.css","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://clearshaven.com/","date":"2026-05-23T13:25:55.459Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 12 May 2026 03:46:57 GMT","end":"Mon, 10 Aug 2026 04:46:42 GMT"},"fingerprint":{"sha1":"95:12:1E:0A:F6:69:8B:FC:A0:08:DA:67:1A:A4:D1:9D:87:F5:E9:07","sha256":"F3:4A:39:63:C7:6A:CE:66:1A:B4:62:2C:E9:92:82:9A:81:78:1B:CC:3F:D5:2D:0A:6D:D6:89:D9:F6:66:7B:BC"}}},"request":{"raw":"GET /ajax/libs/font-awesome/6.4.0/css/all.min.css HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://clearshaven.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 23 May 2026 13:25:55 GMT\r\ncontent-type: text/css; charset=utf-8\r\ncontent-length: 18752\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"6421d693-4940\"\r\nlast-modified: Mon, 27 Mar 2023 17:46:59 GMT\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/kv\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 917653\r\nexpires: Thu, 13 May 2027 13:25:55 GMT\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=15780000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7KEAVhiGCzbdTKwqrMjd3hOpHVBfi%2B1JEM%2BnhhAN%2BjZGifNdqS%2BnU%2BmATuMYdo1xg2ZwU%2BeCXnRUAhH%2BVKIgak03%2FGG4GKVaizYHF4WT5FNlERCUTO8MQH4yHGe4PgQnH1Fiy34j\"}]}\r\ncf-ray: a00463adaa418deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":102025,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (52276)","md5":"ded1c367363e8b20bdc6a19b8350a737","sha1":"8c06d82739d14b094ff6d9036021a252bd1d985d","sha256":"1edb1725a9ea8ca4dcf2f5508cee183218aa1685e47c1b23056717f754f58ebf","sha512":"89e71d2e66ac925ec2564aa45cd43f647fd72e5bd664e2728fb632eed71e9e6a43d72a404a8ce9993fc4d223ed985201e3a66676d01cf5e341bc7d07fd9a6207","ssdeep":"1536:OwMCMPMCMjMCM4MCMwMCM3sVMX709gbPMfjSFOTyPGuZprfZCl:S709gMGFiyPGuZpfZCl","tlshash":"2ea3a7f9e44c05d97732c44bab95b37c65b6f738d5810ca9f02f580c1ad26a822c6f7a","first_seen":"2023-04-06T15:05:25Z","last_seen":"2026-08-04T07:48:37.169416Z","times_seen":59051,"resource_available":false,"data":null}},"time_used":50,"timings":{"blocked":10,"dns":2,"connect":1,"send":0,"wait":13,"receive":1,"ssl":19},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"clearshaven.com/lander/baykarai_post_new_creo_tizer/index/check-mark-icons-profile-verification-260nw-2427537685.webp","fqdn":"clearshaven.com","domain":"clearshaven.com","tld":"com"},"ip":{"addr":"172.67.203.238","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://clearshaven.com/","date":"2026-05-23T13:25:55.477Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"clearshaven.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Apr 2026 11:27:24 GMT","end":"Tue, 07 Jul 2026 11:27:23 GMT"},"fingerprint":{"sha1":"DC:89:A1:EF:92:53:03:EF:FF:61:53:2C:8C:EE:71:76:0B:BB:A3:9A","sha256":"CF:3B:DD:36:E5:61:52:73:B2:A3:90:0B:59:27:8B:3C:A0:B4:72:4C:94:17:C5:AF:6B:64:D1:54:A2:2E:C7:7A"}}},"request":{"raw":"GET /lander/baykarai_post_new_creo_tizer/index/check-mark-icons-profile-verification-260nw-2427537685.webp HTTP/1.1\r\nHost: clearshaven.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://clearshaven.com/\r\nCookie: _subid=1sjos4f2nr1lq; 502d3=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjE1NDU0XCI6MTc3OTU0Mjc1NX0sXCJjYW1wYWlnbnNcIjp7XCIzMzMwXCI6MTc3OTU0Mjc1NX0sXCJ0aW1lXCI6MTc3OTU0Mjc1NX0ifQ.Ye4K8KtvxT925lLk1p7GLWgtysWEEooHZZfU2LDVP-E; _token=uuid_1sjos4f2nr1lq_1sjos4f2nr1lq6a11aae3394675.63059918\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 23 May 2026 13:25:55 GMT\r\ncontent-type: image/webp\r\ncontent-length: 5696\r\npriority: u=4,i=?0\r\nlast-modified: Wed, 18 Feb 2026 06:46:55 GMT\r\netag: \"6995605f-1640\"\r\nexpires: Mon, 01 Jun 2026 14:09:13 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 83801\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=imNYvqVUZr0FRDpjges7hAKLF1HQjKnZN1bcJoR%2F30Twc14EtiiwNUK1S%2BngNmI9YYEa4LIUwHzmty81sIMwu3WtU7ih%2FbVlTaNhJ4vhhwFbFbUWDmK4VAhVRgUnT%2BI52c4%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a00463ad9ac0b4fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5696,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 260x280, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"5304ed27359555de9de42c17b8ecac9f","sha1":"6c60cde97975252a7a3bcdd6f9f4ba59b31dc033","sha256":"81aa9b56d2c25b314d844fb4cd5cd13404702a1f23fa14fb77e2aafce806942e","sha512":"39b6c17728ad7a3520ddc5215cda042d43db64f8fd05c05ae9d55ec20bbae4985c2d432a77929f87f34ccc240215cbcbe912860c1ec4c87d051bc8f64c2caf99","ssdeep":"96:PfsSKIAcsvVXU5O8Yxnl4o+X+LfuiufXUpAMXIFFzfplK7StRiS+WYTtmd9Hda7j:nsSU5U5dU4o+E2ius2MXIFFzfHJviyYZ","tlshash":"95c18d25bc8d4b93d7861d8b240bd8dee369495e53dccda8650bec2e8a8163c262810b","first_seen":"2024-10-30T16:26:10.402172Z","last_seen":"2026-06-22T07:36:21.40105Z","times_seen":11,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-23","alert":"Sinkholed","trigger":"clearshaven.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-23","alert":"Phishing Block","trigger":"clearshaven.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-23","alert":"Sinkholed","trigger":"clearshaven.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Facebook","verdict":"phishing","severity":"medium","comment":"Resource associated with Facebook phishing","tags":["meta","facebook","phishing","social"],"meta":null}]}},{"url":{"schema":"https","addr":"clearshaven.com/lander/baykarai_post_new_creo_tizer/form/css/intlTelInput.css","fqdn":"clearshaven.com","domain":"clearshaven.com","tld":"com"},"ip":{"addr":"172.67.203.238","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://clearshaven.com/","date":"2026-05-23T13:25:55.665Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"clearshaven.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Apr 2026 11:27:24 GMT","end":"Tue, 07 Jul 2026 11:27:23 GMT"},"fingerprint":{"sha1":"DC:89:A1:EF:92:53:03:EF:FF:61:53:2C:8C:EE:71:76:0B:BB:A3:9A","sha256":"CF:3B:DD:36:E5:61:52:73:B2:A3:90:0B:59:27:8B:3C:A0:B4:72:4C:94:17:C5:AF:6B:64:D1:54:A2:2E:C7:7A"}}},"request":{"raw":"GET /lander/baykarai_post_new_creo_tizer/form/css/intlTelInput.css HTTP/1.1\r\nHost: clearshaven.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://clearshaven.com/lander/baykarai_post_new_creo_tizer/form/css/form.css\r\nCookie: _subid=1sjos4f2nr1lq; 502d3=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjE1NDU0XCI6MTc3OTU0Mjc1NX0sXCJjYW1wYWlnbnNcIjp7XCIzMzMwXCI6MTc3OTU0Mjc1NX0sXCJ0aW1lXCI6MTc3OTU0Mjc1NX0ifQ.Ye4K8KtvxT925lLk1p7GLWgtysWEEooHZZfU2LDVP-E; _token=uuid_1sjos4f2nr1lq_1sjos4f2nr1lq6a11aae3394675.63059918\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 23 May 2026 13:25:55 GMT\r\ncontent-type: text/css\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YReR0RLQ6zsqf9gURMDH2KHv71i4dCaGQDNXfL%2BmlZ7vAUCa3LEwjxYlqZd%2FbxjsjsZQLYYogX8nVprLXLiFMK9AAS0wM%2B%2B2M%2BtAQff6Et7iGhxNjHomG%2FOcBiipKf1wBtA%3D\"}]}\r\npriority: u=2,i=?0\r\nlast-modified: Wed, 18 Feb 2026 06:46:55 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Mon, 01 Jun 2026 14:09:13 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\ncontent-encoding: br\r\nage: 83802\r\ncf-cache-status: HIT\r\netag: W/\"6995605f-62a6\"\r\ncf-ray: a00463aedae1b4fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":25254,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"a69aa970266649e0b08c2cb4bc166568","sha1":"d9314a52085a2bb6d284421bb18a4c546ecb73d4","sha256":"ad32b1248207ba91fb945a37d38e7c9deafcba849245872203482db42930d491","sha512":"8315a8c3c328eaaea92dad571ff09c1fc2728920c4b62c0957bf04f83f903f41156ac16cf30297ab5e86f022c3e022764a7a271ebe0b9bfc98d9f488dbe71b9b","ssdeep":"384:HzITF7FWhTmwAmDQTeIcQeIWi7mZlsaAaniXlvhdB:HqF7FWh/Hib","tlshash":"a4b236678bb32945b92bf2a1196406a237375c0bf81a4f2d63d639bddf490e014f37a1","first_seen":"2023-04-05T15:31:11Z","last_seen":"2026-08-04T01:08:43.943718Z","times_seen":29643,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-23","alert":"Sinkholed","trigger":"clearshaven.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-23","alert":"Sinkholed","trigger":"clearshaven.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-23","alert":"Phishing Block","trigger":"clearshaven.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Facebook","verdict":"phishing","severity":"medium","comment":"Resource associated with Facebook phishing","tags":["meta","facebook","phishing","social"],"meta":null}]}}]}