{"report_id":"f76944e0-f11b-48f8-8c0d-9a3fcfd1916d","version":6,"status":"done","tags":[],"date":"2026-03-27T19:00:06Z","url":{"schema":"http","addr":"sendit.cloud","fqdn":"sendit.cloud","domain":"sendit.cloud","tld":"cloud"},"ip":{"addr":"104.21.77.24","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"send.now/","fqdn":"send.now","domain":"send.now","tld":"now"},"title":"Send files now","dom":{"size":344,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (344), with no line terminators","md5":"61fadb32a0a707a6a80a5d59bf41a83a","sha1":"988837ce6f38ca1ffdcc8712b212ae857c2bfb01","sha256":"97aa4daa20a621c3e9f64ce824e89e05399da6328e8ff2dd4d952f0b4262769b","sha512":"9507420b2a40c925c1f98dcc9907715fd994d4364fab73160f57798cd4abbe03dc42104eea7dcca81ca9e0b716df1c0c501180684f278fe588fe213959882e7b","ssdeep":"","tlshash":"a6e026ea5c79c83475f4228620f5e39c1a60a6a0b721d68492d9d87eae20fd38c9295c","dom_hash":"domhashfa92bf49a0529f3ae8099507699ba65b","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"sendit.cloud","fqdn":"sendit.cloud","domain":"sendit.cloud","tld":"cloud"},"ip":{"addr":"104.21.77.24","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null,"user":{"user_id":"akbkyowd9geqr98"}},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-05-01T19:00:06Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":3}},"detection":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"send.now","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"o.send.now","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"sendit.cloud","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null},"summary":[{"fqdn":"send.now","ip":{"addr":"104.26.10.65","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2024-09-30","domain_rank":61963,"first_seen":"2024-12-15T12:43:14.84156Z","last_seen":"2026-03-22T08:08:06.192736Z","alert_count":21,"request_count":21,"received_data":898901,"sent_data":11702,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"jQuery:3.7.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"Cloudflare Browser Insights","description":"Cloudflare Browser Insights is a tool that measures the performance of websites from the perspective of users.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Analytics","RUM"]}]},{"fqdn":"send.cm","ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2019-03-18","domain_rank":292412,"first_seen":"2019-08-16T09:13:47Z","last_seen":"2026-01-22T05:32:21.308138Z","alert_count":0,"request_count":1,"received_data":20478,"sent_data":476,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"static.cloudflareinsights.com","ip":{"addr":"104.16.80.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2019-08-30","domain_rank":4073,"first_seen":"2019-09-24T14:34:56Z","last_seen":"2026-03-22T22:41:55.494839Z","alert_count":0,"request_count":1,"received_data":31542,"sent_data":494,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"o.send.now","ip":{"addr":"104.26.10.65","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2024-09-30","domain_rank":3856097,"first_seen":"2025-03-16T12:16:22.57397Z","last_seen":"2026-03-22T08:08:06.454294Z","alert_count":2,"request_count":2,"received_data":69550,"sent_data":1258,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"sendit.cloud","ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2016-07-16","domain_rank":1439212,"first_seen":"2017-01-29T09:18:22Z","last_seen":"2025-03-23T06:30:50.115315Z","alert_count":1,"request_count":1,"received_data":20349,"sent_data":481,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"send.now/","fqdn":"send.now","domain":"send.now","tld":"now"},"ip":{"addr":"104.26.10.65","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"a9aadfb269935896eb601af36c745b17","sha1":"fe6b29284a1a5de8ac07d135bcb9d694e6ee2e3b","sha256":"4a42695866bdae320e99725d34e8222a5efb25ed8d177ab88ec19f2a0bac3c33","sha512":"d0a7fe9ab677fca3a37fbfe282f6e18b6b9efaaeb72501ce8bd4f0c21867b81829aff98153cd1ac037e379439ec561fb8bdcf484dcff002e4e00ba8324dcb95f","ssdeep":"","tlshash":"f1a011ca0080280a32f332c2ab23b308b8ab00fa0c80300002020830322a32fc23afca","size":86,"data":"","first_seen":"2023-03-14T07:13:49Z","last_seen":"2026-03-27T19:29:07.748378Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"send.now/","fqdn":"send.now","domain":"send.now","tld":"now"},"ip":{"addr":"104.26.10.65","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"28d3c66e8f4a2b16fccbb37897832b17","sha1":"1ed207861fa92162b3a434e41c398f1be47aba3f","sha256":"d28f6f8838f5c985c092f5f1e858996d03e998281c5aa89411411759e5715b85","sha512":"084f8a9123beb353c53d37b08d446d2cadf501e43c29afd796e8c7a5b16bee12ee41fd76b4a51a977a2ce5217649723f45144eb3d1c261eac4be111a64fb59ff","ssdeep":"","tlshash":"eff08b21998b0dfc2273501f3efe896573f738075451c0013e4ce4169f62ec28640788","size":566,"data":"","first_seen":"2025-10-14T20:51:22.466829Z","last_seen":"2026-03-27T19:29:07.748892Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"send.now/lib/perfect-scrollbar/perfect-scrollbar.min.js","fqdn":"send.now","domain":"send.now","tld":"now"},"ip":{"addr":"104.26.10.65","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"dbc272345501609fd4321f81b9a93488","sha1":"2eaf86992c53aeba05df9c9a3447f5802a94c023","sha256":"07af4b6893a4003b620a19eb00c285bc0caa6f33374e1a6be84c86b5588e146f","sha512":"81c2d78287654095915e1032bdbe542cd94101cbe3bae7da3814608322c2b42a9ecfef635bb3313f722cffdb1eac8775626359d0bc757b087dcf6c41c3065e2a","ssdeep":"384:AjrqCEASwOMjYuDT9HFuRaEusAurZ3R82x8emzfRO3hLIHn+w8zUdlpEm:AqCvScjnuRaEusJw3LJ","tlshash":"68926498361134b841ff65aed49f434e33364053f74e08e8a558cff86a74bb52266b2a","size":20187,"data":"","first_seen":"2025-02-07T01:31:37.83569Z","last_seen":"2026-04-03T21:52:34.008958Z","times_seen":82,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"send.now/","fqdn":"send.now","domain":"send.now","tld":"now"},"ip":{"addr":"104.26.10.65","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"1cad7ccc133d67ed551e05b706627b97","sha1":"c58ef991ef96ec83656bb0b800e0d34b087d814c","sha256":"878a8048615650a81b0079761408c68198e2560d14a80124d59bacbb716edb68","sha512":"923080b241e9a7fcfc64d59c4666487f6384f1d16aa910a779c91e01fc640234bb395dfd09bd8e3460ea8a26907f4c30199ed4745cdee17f42957a6d138fde8d","ssdeep":"","tlshash":"e4d023e737db097047ff7176255d23da773180896c0452043d5c1fd05f11d5065b5982","size":225,"data":"","first_seen":"2025-10-14T20:51:22.471813Z","last_seen":"2026-03-27T19:29:07.749477Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.cloudflareinsights.com/beacon.min.js/v8c78df7c7c0f484497ecbca7046644da1771523124516","fqdn":"static.cloudflareinsights.com","domain":"cloudflareinsights.com","tld":"com"},"ip":{"addr":"104.16.80.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"4f67ea9205c3ca7c9e04582d3b9bdd1d","sha1":"d3b68ad3eb88d3db3d843211d4905143c3bff281","sha256":"4b77eae349a8cbcea7133cf3640a64ebf1f69d54d8f6469d7be6fdc188ca4ca4","sha512":"f034bbae022b026821045c28393ba371fe83f6b5ef1fcc66f0943525ad3587d417f04cd795d8accee7d86b82057ca74b50a4d3ae74855cb0e4504393ad943c42","ssdeep":"384:BXi1f+hZCIy1f84QDRuT9WKw00QmLnivMt+BERzR0c744BKJKe0620vFjOkcXo9g:+V584QlIrw6OPIJJtFjj09N","tlshash":"bce218eeb591b13603f7a072447f210b733ab56264494408e21bd6c22c78eeed257fad","size":31169,"data":"","first_seen":"2026-02-19T19:35:51.221473Z","last_seen":"2026-04-05T06:53:57.811919Z","times_seen":27745,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"send.now/static/js/jquery-3.7.1.min.js","fqdn":"send.now","domain":"send.now","tld":"now"},"ip":{"addr":"104.26.10.65","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"2c872dbe60f4ba70fb85356113d8b35e","sha1":"ee48592d1fff952fcf06ce0b666ed4785493afdc","sha256":"fc9a93dd241f6b045cbff0481cf4e1901becd0e12fb45166a8f17f95823f0b1a","sha512":"bf6089ed4698cb8270a8b0c8ad9508ff886a7a842278e98064d5c1790ca3a36d5d69d9f047ef196882554fc104da2c88eb5395f1ee8cf0f3f6ff8869408350fe","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKr:sHNwcv9VBQpLl88SMBQ47GKr","tlshash":"3983f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","size":87533,"data":"","first_seen":"2023-08-31T16:03:19Z","last_seen":"2026-04-05T06:38:10.990341Z","times_seen":136525,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"o.send.now/m.js","fqdn":"o.send.now","domain":"send.now","tld":"now"},"ip":{"addr":"104.26.10.65","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"b032bad4d0d4a7048ffb383d9ecca10c","sha1":"b79ca8828403f0094f8af46ddff72681d3ca7e1b","sha256":"643dc9512a4efa9959a6475a7e7fcdf906b492aedd5c423e83867f8f153dd13e","sha512":"3d80873cc8e92fac5db40bcaec79386d04bcf9135b48747bfdfc0961c054072a476b81f3e75e148f0063525cef414613997a26a13c76d23c6b9bb3a639c4a081","ssdeep":"1536:ATgnSINAJrRJqerEKlFXhuXEjmlMNfwS9h2BLy1z71B8I6fJIKIQaFLa:AT+Z2fucXYy1PGJ9d5","tlshash":"d063d8ce72c2753a4bcb6075a43f114ab27e9caa1448c4b4e62ac4f6383491d657bf7c","size":67976,"data":"","first_seen":"2026-02-09T02:52:16.040273Z","last_seen":"2026-04-05T06:53:46.257602Z","times_seen":954,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"send.now/cdn-cgi/challenge-platform/scripts/jsd/main.js","fqdn":"send.now","domain":"send.now","tld":"now"},"ip":{"addr":"104.26.10.65","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"5a46a1efe3b45b31483a35639353932a","sha1":"1774db8e4789e4646d8601012f0ffc49cbb581ed","sha256":"ffb66455b464757773c52a763d1fc3c1461cd41864216192c9f14460ebdf0df4","sha512":"3b12d4f84036b579f1427aa3f2c89821488a6bcf18a6071c7d656c553caa99628f056d841a406cc04fb6dbe6290f99f4e240b57adbe5f2deedf5418b24d6da9b","ssdeep":"768:/BYO1g5YRX15j38X3QaTtWVBC18vJHtQZ:/BYewYRX15T8nQ0tWVBc8vJNQZ","tlshash":"54c2b5cb7ec7743bd331a4bd007b38cbe2e9ac50e1945959c220d9a8f972788555ae1c","size":28095,"data":"","first_seen":"2026-03-25T07:47:22.371981Z","last_seen":"2026-04-02T14:49:33.072204Z","times_seen":576,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"send.now/lib/bootstrap/js/bootstrap.bundle.min.js","fqdn":"send.now","domain":"send.now","tld":"now"},"ip":{"addr":"104.26.10.65","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"a454220fc07088bf1fdd19313b6bfd50","sha1":"265a733cb7fbc481fd2510a659a85ad55c93c895","sha256":"7f3145c87d3570154f633975e8a4f8d30aa38603edaba145501e9c90ddbe186c","sha512":"4ea980874fec49bc12b9504e0c46a002889421e191a3cbbde5ae35cf29067eae623e43bda227bc20a0a0c7bc80af56df8818d97ae6a98cb80c769f5432909561","ssdeep":"768:59YDXypxHVIg3Xeh2p0NH04UX+TG9qTXAdQ+fZMQnOwkqUNFJUIU7lW0+YVxiM+A:59YeHqTEZChY223CzWpV0ea7In","tlshash":"7273d60a7240b472069fa066907f460fb23b68daa50b815cf56cd8dd1d7cd99326bf7c","size":78635,"data":"","first_seen":"2023-03-07T01:02:59Z","last_seen":"2026-04-05T06:43:15.408193Z","times_seen":9825,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"about","addr":"about:blank","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"bde8acfbdbc080bb6945fd3d762664b5","sha1":"eb23b91a9978a31af98abc21f309410c6573f4b8","sha256":"31325f87780bcf5c3362088729b51deaba819b3ca9282413bd740d45c4f97607","sha512":"1031a3dbf96bb43fbd0964035d1fff26bc4a6fea998fed9c2179958e6f5c3331a8d074d42b2ad815aeeea9927540a88a12334168e59b268e8d4dff3c1d7f783e","ssdeep":"","tlshash":"06d023951c75c83071dd014720f5e39825b0669077215680d1ddcc6f7e31dd344b555c","size":217,"data":"","first_seen":"2026-03-27T19:00:08.701838Z","last_seen":"2026-03-27T19:00:08.701838Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"send.now/","fqdn":"send.now","domain":"send.now","tld":"now"},"ip":{"addr":"104.26.10.65","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"5a237e4462f2a3119ef5ed8790c2b9cf","sha1":"a2227aa9e3d96cca6afe6f306d01add4017c021a","sha256":"aa534f2ab24b1179f6dd966a84f76cb15121f47a185e3f26349339caf3ac6612","sha512":"76f6942ad54d369ababa720a038ed33975db5ee6b7cb7741660597406a9331ffe485b94b5991a8dae7cef1cf1d032b77b5e123635921f0f9d3b0865fed425c4d","ssdeep":"","tlshash":"b1e04814eed522a9a535a880c4265216c73d4178d1311929c1bc02d7ba1d3ac6e6bcda","size":347,"data":"","first_seen":"2024-08-20T09:49:19.853599Z","last_seen":"2026-03-27T19:29:07.750052Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"send.now/","fqdn":"send.now","domain":"send.now","tld":"now"},"ip":{"addr":"104.26.10.65","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"9e7849a74742f5b262b162182f493185","sha1":"2cc0b2167e12dd505450e5c29420268c623ce723","sha256":"5b3a1e1f42dd52e96421ffbc4a1284f906dc6c4676a722c8028ed1488904b9e3","sha512":"b28a9ff9fd5e268c84c438257581682a2a22e343cfdf21763f771bc40bad9b2af718f8bdd5526dfa682c0ce4d615c613c5f87d4286b3cd0d8eb46f69225b60c7","ssdeep":"","tlshash":"d12121e971f3d445837674dc405b1e14733f28d7620e6522f99d0accd5464a8b2636fd","size":1235,"data":"","first_seen":"2026-03-27T19:00:08.703862Z","last_seen":"2026-03-27T19:00:08.703862Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"send.now/","fqdn":"send.now","domain":"send.now","tld":"now"},"ip":{"addr":"104.26.10.65","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"274c31e53cfa7511a50d09f65b1ad70a","sha1":"419a7077b5bde42d1cbf42589095ef386dae080b","sha256":"afeace257d4b928e60675394cae3afdbbf636d58fea2354bdd9f9d384aced0b3","sha512":"91162477dac815d5cce89d9e61ef057cf264169b849a28fb5b2a9eb37ec5147e7343b9bae4be1deeec432bf7e2868c5f2f96366a59bd2ad2c3b37a425bc14722","ssdeep":"","tlshash":"59e0d80966942a78907e373a287fe5c46d3b40b92e99b91c446d894089d04c60422ad6","size":355,"data":"","first_seen":"2024-08-20T09:49:19.852029Z","last_seen":"2026-03-27T19:29:07.751451Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"send.now/","fqdn":"send.now","domain":"send.now","tld":"now"},"ip":{"addr":"104.26.10.65","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"48063e5b5b4552870e61bc6bf5035d49","sha1":"1f4a1e0f997f494e48cec0a0c8018f56898d82fb","sha256":"b6ba081f59568165298b37f0ba34ae51348e3ab138ee3c14e861b6662472d1a4","sha512":"e885f5f1ac61153849625f987bd81a2b43d6d9945323c4b8f9fa42231b72a3de33de5cc219a1c429f56d5d058a89e9363bb3e5904f44a357e452b478a14fba74","ssdeep":"","tlshash":"0fa0241ff0317c0711730441c05375cc3d357000d0c5d03004f447c1003440d335101c","size":76,"data":"","first_seen":"2025-10-14T20:51:22.493324Z","last_seen":"2026-03-27T19:29:07.752062Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"send.now/","fqdn":"send.now","domain":"send.now","tld":"now"},"ip":{"addr":"104.26.10.65","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"2b966a664e368512ea01214e8666b4a0","sha1":"be4d314b35d24de5d1a8d0fbd109cf1ae6ff6e32","sha256":"3c449b87a68eca19059da7358846f7fac3f45169bb51c420dc1a644bd9155546","sha512":"31d22507029dccdf6b25c39e71a805fa20bd7205cad918ae8a2e327f44a61ef6fc66b2c9e7a6a1912cc6fdb16e976ad2379f585b69f3db19bb053ef2c06c4532","ssdeep":"","tlshash":"d21100753e2a5534c6c5908b31bee7a83d3260617a029084c3accc285d28e8314efcbe","size":902,"data":"","first_seen":"2026-03-27T19:00:08.706871Z","last_seen":"2026-03-27T19:00:08.706871Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"send.now/lib/feather-icons/feather.min.js","fqdn":"send.now","domain":"send.now","tld":"now"},"ip":{"addr":"104.26.10.65","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"44dee7fbafd7dc2404fa62713a8398c2","sha1":"34f8691360e3548d1c9c18534cb0ec38b5c63154","sha256":"a90582369e8cfed7b41dca4758e2fbe09fccf55b89f0cd0b7d46efd0745db831","sha512":"d3988fbbec86ff2eee85a651a75f2a0803a87af68764a5f3fe53c942c9000c8a05c61b7ea87bc23086486cb856c56cace342b373b094b77dd92d6f6b00ecb38a","ssdeep":"768:mN1kXq52ecoJV9+Os+HNsojRuhcEdDXesLqxxiT9/J0s/vz55tr/4SRBHK:mNf+OgRJK","tlshash":"98531c367d4dba9ed00743e61a1f6166235f22fff98c4214e05d02b0c9276d7ee67a28","size":65962,"data":"","first_seen":"2023-03-07T12:04:44Z","last_seen":"2026-04-03T21:52:33.99039Z","times_seen":201,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"send.now/static/js/up.m.js","fqdn":"send.now","domain":"send.now","tld":"now"},"ip":{"addr":"104.26.10.65","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"3440d105361fe673f89e167ecc207c0d","sha1":"78e74b0434650cf24749317952eca954870eea7f","sha256":"bfe434f7db762ab532f4ea224db12705c1b7ffcba773985b5f670cf7e127c571","sha512":"fd86a3c69c2d0a5923fa9353dd24af4f8202b1b9f0ba3dd303d888a19d84deb228359187ece67f6557a49648fdd21c5fa14f841060b3e921fc3c83fe546bd4fa","ssdeep":"192:g92lxmzg2KpTYVpXzdNKvLaO9nuyxJYYeeyLUeeZHnPCwkKJO:mOxmHKpkVpXzDcL1Ruyx2Yeey4eeZHn0","tlshash":"e212e81d3180a9eb437f30ad11df31052239a96fdc470215b065e4d7ad78e9807abfae","size":9298,"data":"","first_seen":"2025-10-14T20:51:22.416218Z","last_seen":"2026-03-27T19:29:07.730757Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"send.now/assets/js/dashforge.js","fqdn":"send.now","domain":"send.now","tld":"now"},"ip":{"addr":"104.26.10.65","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"4ba129120304b00f9221323180b560d6","sha1":"44502ecabd36fb78bca746a45201451966eedd0c","sha256":"4d65466592dfaca8556a23d05f50a45089e072dbcac3b74a3b65ac8afba603f0","sha512":"4ac7c8487b239dc78bed69d18596c94684ea1abb47ed87225cfb097909505d753097fa96c6a8d21be079688e1f6e7b63657fb338a672c0d937350dbfc4cfc7c3","ssdeep":"","tlshash":"e561bb2671b271a510fb343e4bfbb4503a1a0957c34ed74178be3fe51f0060975a5aaa","size":3370,"data":"","first_seen":"2023-03-08T14:34:43Z","last_seen":"2026-04-03T21:52:33.991595Z","times_seen":46,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null},"http":[{"url":{"schema":"https","addr":"send.now/static/css/upload01.min.css","fqdn":"send.now","domain":"send.now","tld":"now"},"ip":{"addr":"104.26.10.65","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://send.now/","date":"2026-03-27T18:59:45.307Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"send.now","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 16 Mar 2026 10:08:16 GMT","end":"Sun, 14 Jun 2026 11:08:02 GMT"},"fingerprint":{"sha1":"29:92:8B:AB:B8:0A:24:BA:BB:2C:A8:B1:73:A2:0D:91:D6:D8:CA:BE","sha256":"EC:1C:46:18:C6:5D:E9:D7:21:D5:E0:8C:E6:09:56:95:21:E6:67:4E:FA:42:61:BF:B1:FA:1D:F1:C7:50:7E:93"}}},"request":{"raw":"GET /static/css/upload01.min.css HTTP/1.1\r\nHost: send.now\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://send.now/\r\nCookie: lang=english; __cflb=02DiuECtaV5PvrB3dNzShfb1VW7yeG7E769ZqACwV2cYk\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 27 Mar 2026 18:59:45 GMT\r\ncontent-type: text/css; charset=utf-8\r\ncontent-length: 37746\r\nlast-modified: Mon, 01 Apr 2024 12:03:37 GMT\r\netag: \"3c957-61507c7957fb7-gzip\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nexpires: Fri, 27 Mar 2026 19:07:06 GMT\r\ncache-control: max-age=14400\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: X-Requested-With\r\naccept-ranges: bytes\r\npriority: u=2,i=?0\r\nage: 1359\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yJVPl9ZopKOn4KU0t3aQOV0aN%2FaIQy9C036LadB5hFtcbP%2FEGA9SRMLFR1U52opmaDse4Kxpl1Mr3GTf2FktQCDPN%2Fd0U1eeaPlO3lyho1yTbl6cJSLoc84K\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: 9e30a25019f7b4fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":248151,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"84bac18ec6faac6b95e8679e980ff23e","sha1":"8a288af0b15ddc4c9e77c28f751afb8fef09ea8b","sha256":"7980756971373e7a0862baf4d7a9951fdd9913fb665a5ad0d3d5f0c9f78e93f3","sha512":"dfc5a0e58d36b4865fb457dd72913b0460e5f7b147bcd0fc5a4e01e471e83b623ae08c8eb9df1d43b69f88f5e20f0827027724a585acaf23c9c50836f7c74b65","ssdeep":"6144:hlPChaCicQL56uJGrsu9qpQ7qZ5OGjwB6nJ0JE7Ql+YHkekWucVtpcWYQGPPJ6I1:KaCicQL56uJGrsu9qpQ7qZ5OGjwB6nJZ","tlshash":"db34d7d1f591307e6273c16ed4d1bb9a363b8581e72a8bbbf817735886c91c61263f08","first_seen":"2025-07-29T03:43:24.876856Z","last_seen":"2026-04-03T03:37:02.275436Z","times_seen":39,"resource_available":false,"data":null}},"time_used":39,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"send.now","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"send.now/static/css/auth.min.css","fqdn":"send.now","domain":"send.now","tld":"now"},"ip":{"addr":"104.26.10.65","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://send.now/","date":"2026-03-27T18:59:45.309Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"send.now","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 16 Mar 2026 10:08:16 GMT","end":"Sun, 14 Jun 2026 11:08:02 GMT"},"fingerprint":{"sha1":"29:92:8B:AB:B8:0A:24:BA:BB:2C:A8:B1:73:A2:0D:91:D6:D8:CA:BE","sha256":"EC:1C:46:18:C6:5D:E9:D7:21:D5:E0:8C:E6:09:56:95:21:E6:67:4E:FA:42:61:BF:B1:FA:1D:F1:C7:50:7E:93"}}},"request":{"raw":"GET /static/css/auth.min.css HTTP/1.1\r\nHost: send.now\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://send.now/\r\nCookie: lang=english; __cflb=02DiuECtaV5PvrB3dNzShfb1VW7yeG7E769ZqACwV2cYk\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 27 Mar 2026 18:59:45 GMT\r\ncontent-type: text/css; charset=utf-8\r\ncontent-length: 288\r\nlast-modified: Tue, 23 Mar 2021 17:04:40 GMT\r\netag: \"315-5be372d95fefb-gzip\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nexpires: Fri, 27 Mar 2026 19:06:26 GMT\r\ncache-control: max-age=14400\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: X-Requested-With\r\naccept-ranges: bytes\r\npriority: u=2,i=?0\r\nage: 1398\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Wyp06CefTols4%2FTmyATMUxEcrFM25hEL8yYMDJV%2BzBl5ZQ40%2FtoD4KFppXGNir%2B6oQkYlINR5091JclTKCypWTuvqQcVUfsgv%2FPQ0ZFp%2F9dY%2B0AV7clSDT8e\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: 9e30a25019f8b4fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":789,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (789), with no line terminators","md5":"f095cdbc5703353ae870aa6fd1504bb8","sha1":"395b5898fde4cb72dc30e7752bde4e68317fb299","sha256":"d7091a28d7048b34315acc78d543eb1181751aec851df73f83da7d3b07081116","sha512":"530fff551388df39b831e39d7cd92117bb333ea9bc9ce205ea85589171eefb0ed507181a2e46963a0b936f0c857acd4c0f75e8f0c76aebd870437a99462580b6","ssdeep":"","tlshash":"a10149eb2b216e3ee265c12d34f2650a8325d071e70fa2e40c18c22d6fcd35106f15cc","first_seen":"2023-04-10T01:00:03Z","last_seen":"2026-04-03T21:52:34.011737Z","times_seen":211,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"send.now","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"send.now/static/fontawesome/css/all.min.css","fqdn":"send.now","domain":"send.now","tld":"now"},"ip":{"addr":"104.26.10.65","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://send.now/","date":"2026-03-27T18:59:45.310Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"send.now","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 16 Mar 2026 10:08:16 GMT","end":"Sun, 14 Jun 2026 11:08:02 GMT"},"fingerprint":{"sha1":"29:92:8B:AB:B8:0A:24:BA:BB:2C:A8:B1:73:A2:0D:91:D6:D8:CA:BE","sha256":"EC:1C:46:18:C6:5D:E9:D7:21:D5:E0:8C:E6:09:56:95:21:E6:67:4E:FA:42:61:BF:B1:FA:1D:F1:C7:50:7E:93"}}},"request":{"raw":"GET /static/fontawesome/css/all.min.css HTTP/1.1\r\nHost: send.now\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://send.now/\r\nCookie: lang=english; __cflb=02DiuECtaV5PvrB3dNzShfb1VW7yeG7E769ZqACwV2cYk\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 27 Mar 2026 18:59:45 GMT\r\ncontent-type: text/css; charset=utf-8\r\ncontent-length: 11915\r\nlast-modified: Tue, 26 Mar 2024 10:59:16 GMT\r\netag: \"d747-6148e2e60cedf-gzip\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nexpires: Fri, 27 Mar 2026 19:20:23 GMT\r\ncache-control: max-age=14400\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: X-Requested-With\r\naccept-ranges: bytes\r\npriority: u=2,i=?0\r\nage: 562\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GqPDwjfGL7%2FYr8uMR%2BeUCKGKnZxb15UyN0Hddac9nKdPAF6ZH2rvzM6NEMuGgY0halSH1TD9HLWKxpXkN%2BiBxE3mob%2FG7SrOksOaCuIzbxDi8YFbzTczAFDY\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: 9e30a25019f9b4fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":55111,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (54926)","md5":"e4c542a7f6bf6f74fdd8cdf6e8096396","sha1":"3a0571a695a35f238026b9398386dc99d9a0c56d","sha256":"eeb17a45a48aca1d7adbcf04de155dcd0b47cb36ad036310446bb471fea9aaa3","sha512":"80c8d07836842c9d2bc8223e16d22dbac53d3240227c265c1aaefcf45af3922338f43f256c38686946885f8012535f3bc287cc3658012787246eb5ccf6c13a3e","ssdeep":"768:guC31UP18Pq4/vnU63HJXkQCZ/WMQyjJKX719sGsQz5:gu5PWC4/vzH5BCkgc7zsiF","tlshash":"76330ab8e54c41d9a731c44fbf82b2bc61b6f73ce5910d95f00e691c2ad26a811c9fb9","first_seen":"2023-04-05T14:33:33Z","last_seen":"2026-04-05T03:02:44.707355Z","times_seen":21250,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"send.now","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"send.now/static/img/logo.png","fqdn":"send.now","domain":"send.now","tld":"now"},"ip":{"addr":"104.26.10.65","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://send.now/","date":"2026-03-27T18:59:45.313Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"send.now","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 16 Mar 2026 10:08:16 GMT","end":"Sun, 14 Jun 2026 11:08:02 GMT"},"fingerprint":{"sha1":"29:92:8B:AB:B8:0A:24:BA:BB:2C:A8:B1:73:A2:0D:91:D6:D8:CA:BE","sha256":"EC:1C:46:18:C6:5D:E9:D7:21:D5:E0:8C:E6:09:56:95:21:E6:67:4E:FA:42:61:BF:B1:FA:1D:F1:C7:50:7E:93"}}},"request":{"raw":"GET /static/img/logo.png HTTP/1.1\r\nHost: send.now\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://send.now/\r\nCookie: lang=english; __cflb=02DiuECtaV5PvrB3dNzShfb1VW7yeG7E769ZqACwV2cYk\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 27 Mar 2026 18:59:45 GMT\r\ncontent-type: image/png\r\ncontent-length: 4553\r\nlast-modified: Fri, 18 Sep 2020 09:41:38 GMT\r\nvary: Accept-Encoding\r\netag: \"5f6480d2-19ff\"\r\nexpires: Mon, 13 Apr 2026 20:17:03 GMT\r\ncache-control: max-age=2592000\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: X-Requested-With\r\naccept-ranges: bytes\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NZdq4%2FLHcit%2FeN08DS2QpH7qTENK%2FBN36eu7ojAor7LOH%2BFlKurqPmuygtiRJON9kYAoEVTZIImI6tUzQmpJDkTU8QlCVsWBsU92eg6envSOcjea%2Fmn1N5OQ\"}]}\r\ncf-bgj: h2pri,imgq:100\r\npriority: u=4,i=?0\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-polished: ok\r\ncf-cache-status: HIT\r\nage: 1118561\r\ncf-ray: 9e30a25029fcb4fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4553,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 167 x 167, 8-bit/color RGBA, non-interlaced","md5":"1cf937b89b8636825824c0e1dc93e756","sha1":"a741e60c7d68b3aeb78a2a6f012c4d3fc93eaa44","sha256":"7fa37fda33671515f66bf1b9e440146c57ea650a4d101fedd75f4b6b89b15500","sha512":"a3984c0fcbca3c3b5ff7a9976b2019353d3aea7d2a9496b83eb0a91cff193f5a36b4620e09f7c658d0c4a5aa5b374b9dba490536977b29d1836c1c0fde039cf8","ssdeep":"96:BuxpFkAygjUc3lqsKHqFmj8+JHnqKVfehJ6MVZjFi18kOtv/je5zq0B:BcpFDJ3lqpBj8+JHqbh4yFiDOt3YV","tlshash":"82919de10a26d065ffa848130f3a56c00d465cfd75eb9de040059fa4d2613d825cf9f7","first_seen":"2025-04-23T22:36:18.16507Z","last_seen":"2026-04-03T21:52:34.005852Z","times_seen":76,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"send.now","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"send.now/lib/bootstrap/js/bootstrap.bundle.min.js","fqdn":"send.now","domain":"send.now","tld":"now"},"ip":{"addr":"104.26.10.65","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://send.now/","date":"2026-03-27T18:59:45.316Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"send.now","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 16 Mar 2026 10:08:16 GMT","end":"Sun, 14 Jun 2026 11:08:02 GMT"},"fingerprint":{"sha1":"29:92:8B:AB:B8:0A:24:BA:BB:2C:A8:B1:73:A2:0D:91:D6:D8:CA:BE","sha256":"EC:1C:46:18:C6:5D:E9:D7:21:D5:E0:8C:E6:09:56:95:21:E6:67:4E:FA:42:61:BF:B1:FA:1D:F1:C7:50:7E:93"}}},"request":{"raw":"GET /lib/bootstrap/js/bootstrap.bundle.min.js HTTP/1.1\r\nHost: send.now\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://send.now/\r\nCookie: lang=english; __cflb=02DiuECtaV5PvrB3dNzShfb1VW7yeG7E769ZqACwV2cYk\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 27 Mar 2026 18:59:45 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 22230\r\nlast-modified: Thu, 03 Sep 2020 08:39:38 GMT\r\netag: \"1332b-5ae64b14b0680-gzip\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nexpires: Fri, 27 Mar 2026 19:02:44 GMT\r\ncache-control: max-age=14400\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: X-Requested-With\r\naccept-ranges: bytes\r\npriority: u=3,i=?0\r\nage: 1620\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YP5YzZldSKqIP5QvXsggFv%2B1LxFEczYH9v%2B4iMQoTa3oNtdA13njaWsHv0KoY7VdXp1cy41%2Bvxwz25egDCwtFxGxG1Q6zYZdldZaBHxlnS9UBQFDh0eeC1xc\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: 9e30a25029feb4fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":78635,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65297)","md5":"a454220fc07088bf1fdd19313b6bfd50","sha1":"265a733cb7fbc481fd2510a659a85ad55c93c895","sha256":"7f3145c87d3570154f633975e8a4f8d30aa38603edaba145501e9c90ddbe186c","sha512":"4ea980874fec49bc12b9504e0c46a002889421e191a3cbbde5ae35cf29067eae623e43bda227bc20a0a0c7bc80af56df8818d97ae6a98cb80c769f5432909561","ssdeep":"768:59YDXypxHVIg3Xeh2p0NH04UX+TG9qTXAdQ+fZMQnOwkqUNFJUIU7lW0+YVxiM+A:59YeHqTEZChY223CzWpV0ea7In","tlshash":"7273d60a7240b472069fa066907f460fb23b68daa50b815cf56cd8dd1d7cd99326bf7c","first_seen":"2023-03-07T01:02:59Z","last_seen":"2026-04-05T06:43:15.408193Z","times_seen":9825,"resource_available":true,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"send.now","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"send.now/lib/perfect-scrollbar/perfect-scrollbar.min.js","fqdn":"send.now","domain":"send.now","tld":"now"},"ip":{"addr":"104.26.10.65","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://send.now/","date":"2026-03-27T18:59:45.317Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"send.now","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 16 Mar 2026 10:08:16 GMT","end":"Sun, 14 Jun 2026 11:08:02 GMT"},"fingerprint":{"sha1":"29:92:8B:AB:B8:0A:24:BA:BB:2C:A8:B1:73:A2:0D:91:D6:D8:CA:BE","sha256":"EC:1C:46:18:C6:5D:E9:D7:21:D5:E0:8C:E6:09:56:95:21:E6:67:4E:FA:42:61:BF:B1:FA:1D:F1:C7:50:7E:93"}}},"request":{"raw":"GET /lib/perfect-scrollbar/perfect-scrollbar.min.js HTTP/1.1\r\nHost: send.now\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://send.now/\r\nCookie: lang=english; __cflb=02DiuECtaV5PvrB3dNzShfb1VW7yeG7E769ZqACwV2cYk\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 27 Mar 2026 18:59:45 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 6133\r\nlast-modified: Sun, 11 May 2025 13:31:12 GMT\r\netag: \"4edb-634dc368d9da1-gzip\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nexpires: Fri, 27 Mar 2026 19:24:00 GMT\r\ncache-control: max-age=14400\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: X-Requested-With\r\naccept-ranges: bytes\r\npriority: u=3,i=?0\r\nage: 344\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=F5LqEiy8LQAblB97YsOfTyGPixtGNoigawrBMlIh0fOeHR9ttCtZ0S0dNcZXfOhduoq9pu7CXF37L7skg9n4gaXANF6g0WeQgIvxJ6DNcCUDGMuDJiPJ5No3\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: 9e30a25029ffb4fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":20187,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (7730)","md5":"dbc272345501609fd4321f81b9a93488","sha1":"2eaf86992c53aeba05df9c9a3447f5802a94c023","sha256":"07af4b6893a4003b620a19eb00c285bc0caa6f33374e1a6be84c86b5588e146f","sha512":"81c2d78287654095915e1032bdbe542cd94101cbe3bae7da3814608322c2b42a9ecfef635bb3313f722cffdb1eac8775626359d0bc757b087dcf6c41c3065e2a","ssdeep":"384:AjrqCEASwOMjYuDT9HFuRaEusAurZ3R82x8emzfRO3hLIHn+w8zUdlpEm:AqCvScjnuRaEusJw3LJ","tlshash":"68926498361134b841ff65aed49f434e33364053f74e08e8a558cff86a74bb52266b2a","first_seen":"2025-02-07T01:31:37.83569Z","last_seen":"2026-04-03T21:52:34.008958Z","times_seen":82,"resource_available":true,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"send.now","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"send.now/cdn-cgi/challenge-platform/scripts/jsd/main.js","fqdn":"send.now","domain":"send.now","tld":"now"},"ip":{"addr":"104.26.10.65","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://send.now/","date":"2026-03-27T18:59:45.534Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"send.now","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 16 Mar 2026 10:08:16 GMT","end":"Sun, 14 Jun 2026 11:08:02 GMT"},"fingerprint":{"sha1":"29:92:8B:AB:B8:0A:24:BA:BB:2C:A8:B1:73:A2:0D:91:D6:D8:CA:BE","sha256":"EC:1C:46:18:C6:5D:E9:D7:21:D5:E0:8C:E6:09:56:95:21:E6:67:4E:FA:42:61:BF:B1:FA:1D:F1:C7:50:7E:93"}}},"request":{"raw":"GET /cdn-cgi/challenge-platform/scripts/jsd/main.js HTTP/1.1\r\nHost: send.now\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: lang=english; __cflb=02DiuECtaV5PvrB3dNzShfb1VW7yeG7E769ZqACwV2cYk; _pk_id.1.c11f=7b2928e6a673e8d6.1774637986.; _pk_ses.1.c11f=1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 302 Found\r\nlocation: /cdn-cgi/challenge-platform/h/g/scripts/jsd/ea2d291c0fdc/main.js?\r\ncache-control: max-age=300, stale-if-error=10800, stale-while-revalidate=10800, public\r\naccess-control-allow-origin: *\r\ncontent-length: 0\r\ndate: Fri, 27 Mar 2026 18:59:45 GMT\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncf-ray: 9e30a2519a1bb4fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":28095,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-05T06:47:06.202855Z","times_seen":13363998,"resource_available":true,"data":null}},"time_used":4,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"send.now","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"send.cm/","fqdn":"send.cm","domain":"send.cm","tld":"cm"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-27T18:59:44.806Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"send.cm","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Mar 2026 11:34:54 GMT","end":"Mon, 08 Jun 2026 12:33:31 GMT"},"fingerprint":{"sha1":"6E:84:1E:85:E2:8E:BB:F6:7C:44:47:72:F5:8C:DB:17:01:DD:3F:00","sha256":"49:4D:9F:6C:4E:47:6E:8A:B9:AE:BC:95:8F:C9:54:97:5C:2B:A0:FC:E3:70:F2:45:D1:EB:45:8B:9D:E5:AF:37"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: send.cm\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 Moved Permanently\r\ndate: Fri, 27 Mar 2026 18:59:44 GMT\r\ncontent-type: text/html\r\nlocation: https://send.now/\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: X-Requested-With\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qJAxVAuwThvy9qukcO9yv5LK8%2BIkm5LRL3durdI8RoVmCXPjrM6liDaHK3H%2Bjn1M%2BpceLZT5dg9KguLZ8rf0zd9ayiiViEHzAgflsVBKfoJIxXS5hbVl%2BMkK\"}]}\r\ncf-ray: 9e30a24d5d60568a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19838,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-05T06:47:06.202855Z","times_seen":13363998,"resource_available":true,"data":null}},"time_used":170,"timings":{"blocked":54,"dns":37,"connect":1,"send":0,"wait":62,"receive":0,"ssl":14},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"send.now/","fqdn":"send.now","domain":"send.now","tld":"now"},"ip":{"addr":"104.26.10.65","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-27T18:59:44.927Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"send.now","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 16 Mar 2026 10:08:16 GMT","end":"Sun, 14 Jun 2026 11:08:02 GMT"},"fingerprint":{"sha1":"29:92:8B:AB:B8:0A:24:BA:BB:2C:A8:B1:73:A2:0D:91:D6:D8:CA:BE","sha256":"EC:1C:46:18:C6:5D:E9:D7:21:D5:E0:8C:E6:09:56:95:21:E6:67:4E:FA:42:61:BF:B1:FA:1D:F1:C7:50:7E:93"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: send.now\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 27 Mar 2026 18:59:45 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nexpires: Thu, 26 Mar 2026 18:59:45 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: X-Requested-With\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=y%2FavVvYatisDuG2vlydmVUyxPm0XXINqM3oMHPQ%2FSpQ4GZV6SV27cYnWbgigZeFd798JwjjJAQsraj%2FxgNDkApkn7x7LYO9R5NmLrrg11v5ghpoCNWdiI8j5\"}]}\r\ncf-cache-status: DYNAMIC\r\nset-cookie: lang=english; domain=.send.now; path=/\n__cflb=02DiuECtaV5PvrB3dNzShfb1VW7yeG7E769ZqACwV2cYk; HttpOnly; SameSite=None; Secure; Path=/; Expires=Sat, 28 Mar 2026 17:59:45 GMT\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nserver-timing: cfCacheStatus;desc=\"DYNAMIC\", cfEdge;dur=15,cfOrigin;dur=102\r\ncontent-encoding: br\r\ncf-ray: 9e30a24e0fd65688-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"jQuery:3.7.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"Cloudflare Browser Insights","description":"Cloudflare Browser Insights is a tool that measures the performance of websites from the perspective of users.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Analytics","RUM"]}],"data":{"size":19838,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (926)","md5":"3c214ff12d19e23677e18b6bc71f85ab","sha1":"5e92fe3cdffb480eb243456a6067d17df4a42328","sha256":"f89b7bc9228397b8e0aa8665380932b64a8d1f405df778baf70a60415c524872","sha512":"755248e881543c009c225de92f0b6f378b76bf433d58da286d91bef9a0cd06e96c8e87d43b3f59d0b0268cbe000ed31511a160c846c106eaf7f61d50d4719323","ssdeep":"384:HNytDZIaumKsG/lmOBXd9Rsjmd0Acnx/m:8tDZIaENvttdpyx/m","tlshash":"8792c82398e0453b029390c975f5bb1ebab7d00fdb095400b2ec46c96fc6e96d9a379c","first_seen":"2026-03-27T19:00:08.686258Z","last_seen":"2026-03-27T19:00:08.686258Z","times_seen":1,"resource_available":true,"data":null}},"time_used":192,"timings":{"blocked":34,"dns":13,"connect":1,"send":0,"wait":123,"receive":0,"ssl":17},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"send.now","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"send.now/static/js/up.m.js","fqdn":"send.now","domain":"send.now","tld":"now"},"ip":{"addr":"104.26.10.65","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://send.now/","date":"2026-03-27T18:59:45.312Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"send.now","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 16 Mar 2026 10:08:16 GMT","end":"Sun, 14 Jun 2026 11:08:02 GMT"},"fingerprint":{"sha1":"29:92:8B:AB:B8:0A:24:BA:BB:2C:A8:B1:73:A2:0D:91:D6:D8:CA:BE","sha256":"EC:1C:46:18:C6:5D:E9:D7:21:D5:E0:8C:E6:09:56:95:21:E6:67:4E:FA:42:61:BF:B1:FA:1D:F1:C7:50:7E:93"}}},"request":{"raw":"GET /static/js/up.m.js HTTP/1.1\r\nHost: send.now\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://send.now/\r\nCookie: lang=english; __cflb=02DiuECtaV5PvrB3dNzShfb1VW7yeG7E769ZqACwV2cYk\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 27 Mar 2026 18:59:45 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 3567\r\nlast-modified: Sun, 31 Mar 2024 12:04:59 GMT\r\netag: \"2452-614f3ae99cbe8-gzip\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nexpires: Fri, 27 Mar 2026 19:09:40 GMT\r\ncache-control: max-age=14400\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: X-Requested-With\r\naccept-ranges: bytes\r\npriority: u=2,i=?0\r\nage: 1204\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OirSIhGYVizksddXsGNXg6gh33wkcRONPCMnl1tLjT%2BIQzjlg74IRECcoPeMOOcR9Nxo6180Qz2WVcoj%2BrX9AmvaETt9ylX0gJEur638F%2BoMV%2B%2FhGscrEc24\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: 9e30a25019fbb4fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9298,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (9298), with no line terminators","md5":"3440d105361fe673f89e167ecc207c0d","sha1":"78e74b0434650cf24749317952eca954870eea7f","sha256":"bfe434f7db762ab532f4ea224db12705c1b7ffcba773985b5f670cf7e127c571","sha512":"fd86a3c69c2d0a5923fa9353dd24af4f8202b1b9f0ba3dd303d888a19d84deb228359187ece67f6557a49648fdd21c5fa14f841060b3e921fc3c83fe546bd4fa","ssdeep":"192:g92lxmzg2KpTYVpXzdNKvLaO9nuyxJYYeeyLUeeZHnPCwkKJO:mOxmHKpkVpXzDcL1Ruyx2Yeey4eeZHn0","tlshash":"e212e81d3180a9eb437f30ad11df31052239a96fdc470215b065e4d7ad78e9807abfae","first_seen":"2025-10-14T20:51:22.416218Z","last_seen":"2026-03-27T19:29:07.730757Z","times_seen":4,"resource_available":true,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"send.now","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"static.cloudflareinsights.com/beacon.min.js/v8c78df7c7c0f484497ecbca7046644da1771523124516","fqdn":"static.cloudflareinsights.com","domain":"cloudflareinsights.com","tld":"com"},"ip":{"addr":"104.16.80.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://send.now/","date":"2026-03-27T18:59:45.319Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cloudflareinsights.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Feb 2026 14:29:28 GMT","end":"Mon, 18 May 2026 15:29:15 GMT"},"fingerprint":{"sha1":"8B:A9:51:50:78:B2:5E:75:31:54:23:BC:80:D6:CA:53:34:E5:CD:8F","sha256":"AF:D9:FB:4F:B0:E1:BD:80:DF:22:93:A7:4A:99:5B:50:0A:BE:47:59:37:98:C6:BF:C5:DF:8D:8F:F0:8D:FD:23"}}},"request":{"raw":"GET /beacon.min.js/v8c78df7c7c0f484497ecbca7046644da1771523124516 HTTP/1.1\r\nHost: static.cloudflareinsights.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://send.now\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://send.now/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 27 Mar 2026 18:59:45 GMT\r\ncontent-type: text/javascript;charset=UTF-8\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=86400\r\netag: W/\"2026.2.0\"\r\nlast-modified: Thu, 19 Feb 2026 17:45:24 GMT\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncf-ray: 9e30a25048bb8be6-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":31169,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (31169), with no line terminators","md5":"4f67ea9205c3ca7c9e04582d3b9bdd1d","sha1":"d3b68ad3eb88d3db3d843211d4905143c3bff281","sha256":"4b77eae349a8cbcea7133cf3640a64ebf1f69d54d8f6469d7be6fdc188ca4ca4","sha512":"f034bbae022b026821045c28393ba371fe83f6b5ef1fcc66f0943525ad3587d417f04cd795d8accee7d86b82057ca74b50a4d3ae74855cb0e4504393ad943c42","ssdeep":"384:BXi1f+hZCIy1f84QDRuT9WKw00QmLnivMt+BERzR0c744BKJKe0620vFjOkcXo9g:+V584QlIrw6OPIJJtFjj09N","tlshash":"bce218eeb591b13603f7a072447f210b733ab56264494408e21bd6c22c78eeed257fad","first_seen":"2026-02-19T19:35:51.221473Z","last_seen":"2026-04-05T06:53:57.811919Z","times_seen":27745,"resource_available":true,"data":null}},"time_used":43,"timings":{"blocked":10,"dns":2,"connect":1,"send":0,"wait":8,"receive":0,"ssl":19},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"send.now/static/fonts/ibm-plex-sans/complete/woff2/IBMPlexSans-Regular.woff2","fqdn":"send.now","domain":"send.now","tld":"now"},"ip":{"addr":"104.26.10.65","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://send.now/","date":"2026-03-27T18:59:45.463Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"send.now","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 16 Mar 2026 10:08:16 GMT","end":"Sun, 14 Jun 2026 11:08:02 GMT"},"fingerprint":{"sha1":"29:92:8B:AB:B8:0A:24:BA:BB:2C:A8:B1:73:A2:0D:91:D6:D8:CA:BE","sha256":"EC:1C:46:18:C6:5D:E9:D7:21:D5:E0:8C:E6:09:56:95:21:E6:67:4E:FA:42:61:BF:B1:FA:1D:F1:C7:50:7E:93"}}},"request":{"raw":"GET /static/fonts/ibm-plex-sans/complete/woff2/IBMPlexSans-Regular.woff2 HTTP/1.1\r\nHost: send.now\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://send.now/static/css/upload01.min.css\r\nCookie: lang=english; __cflb=02DiuECtaV5PvrB3dNzShfb1VW7yeG7E769ZqACwV2cYk\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 27 Mar 2026 18:59:45 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 56184\r\nlast-modified: Wed, 07 May 2025 13:11:22 GMT\r\netag: \"681b5bfa-db78\"\r\nexpires: Tue, 31 Mar 2026 19:40:32 GMT\r\ncache-control: max-age=2592000\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: X-Requested-With\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\nage: 2243952\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=a0sZHa5Pgn5i6iMP2ZmE4fEOhsGuIQvinZdeOAFPHd9j2S0uJc%2BWykshelQP1vATmvGvwLsD1Pw%2FOL7VsG1aklcpwdjzMKiD1nMe8TGFggrB%2BiGeIiu1w0D6\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nvary: accept-encoding\r\ncf-ray: 9e30a2512a0cb4fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":56184,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 56184, version 3.65","md5":"bb07700dc58a6d40a80c0632e0e09c38","sha1":"1588c41e9e71a29264e9a841b5cd0d74a37b337e","sha256":"dd6cd52bf15d2f5bf7519cd3d876ae2d37306e77d1a95a63e867e6c95ab9c49e","sha512":"ee27f031ed8288646668cdaf197f10415361709e64f8bd877dd902523cece4a7b537542610908a0fb295b34eeaacf2daee5c166540f285298b93133693790b04","ssdeep":"1536:yPpIdbTCFoOKOaWLFhTK7QGOf/Vh4UaW6UVbByf2e:yPmRpv7QGOfcbUTW","tlshash":"5d43f178ce667025bc87b458db35003e976c5b8c74ef1ea0a29e8f41b6ce10e731a536","first_seen":"2023-04-10T19:06:25Z","last_seen":"2026-04-03T21:52:33.989242Z","times_seen":255,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"send.now","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"send.now/cdn-cgi/challenge-platform/h/g/jsd/oneshot/ea2d291c0fdc/0.36707159097325237:1774424211:9_pSV23kWGmNtldQToc5YDBzJFUfKD8QS_h75YB-Zx0/9e30a24e0fd65688","fqdn":"send.now","domain":"send.now","tld":"now"},"ip":{"addr":"104.26.10.65","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://send.now/","date":"2026-03-27T18:59:45.691Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"send.now","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 16 Mar 2026 10:08:16 GMT","end":"Sun, 14 Jun 2026 11:08:02 GMT"},"fingerprint":{"sha1":"29:92:8B:AB:B8:0A:24:BA:BB:2C:A8:B1:73:A2:0D:91:D6:D8:CA:BE","sha256":"EC:1C:46:18:C6:5D:E9:D7:21:D5:E0:8C:E6:09:56:95:21:E6:67:4E:FA:42:61:BF:B1:FA:1D:F1:C7:50:7E:93"}}},"request":{"raw":"POST /cdn-cgi/challenge-platform/h/g/jsd/oneshot/ea2d291c0fdc/0.36707159097325237:1774424211:9_pSV23kWGmNtldQToc5YDBzJFUfKD8QS_h75YB-Zx0/9e30a24e0fd65688 HTTP/1.1\r\nHost: send.now\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 12124\r\nOrigin: https://send.now\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://send.now/\r\nCookie: lang=english; __cflb=02DiuECtaV5PvrB3dNzShfb1VW7yeG7E769ZqACwV2cYk; _pk_id.1.c11f=7b2928e6a673e8d6.1774637986.; _pk_ses.1.c11f=1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":12124,"data":"y6B0QdM7VrkNNMYMNMPDMtuAu0yVuy0MYMtaBu$0fYkGuvPllq83AYkDBWhuk0lS3uc7Z0ktuacoM137eUh8hulbhghuVSn3uMd0MOuPlYMcrBa6$WQUPtBML9POeiQL60usCZB63$6ns6PXEquuy7oa1rnVuW3fM7TE3qjk00fLoEs1aGedCntKC3ouSr3UE0r+DuMTgxirVocVFVNyjZuMx20uZufsvmoM5UXYPsfbWF8B$6sgGXBV0FuMS70ueaW4U5-Dh50uR-vD2Gs5VuuTgKcunfuM-em0zfkaCuk-WK4fcp5DCquu57$091a7Cge2i916y3ua9oYi2$1uumfRVCf8VYaaYaNY3uh+Huq4Cj3uB1Vo9OK-Us3MT9ffo5i2BkAXTAvnemfjszuxBc56PABgHoj5peuuldW6Bu05agZEW0u$Dsd65sd567Aa8srHirLiNc5rFhVjazefu79UBM3jvGBXVnllhlOVAOJyl7X5$Bm3gy9l-P8WTlXzeCwXSxBh9BuYOfdsTHvYQ-xbduu+cGdyNL+fjGCPmPZABPAgLpXXkS0PhENaztoWLiq6jPfkT5DosD0Y+GiVPyLPGYkpnlSRo-2jtRdyrgrMoiE0sJbNGzkG51aUhTn47rKai9$C5MPp3AK3q42Ne1ggXrh56FXRVe7E$0F1GeFmDDE7e$hK5F0dKTnJ0tZ60yuTYuTt$RnH2uRQNMUgdHKKvXtP+kF$WjA102jxm1jKCiydWH072uCpNdeKC1jJl8NtQbbB3hkfmHuk8cUd+dQVKQ3CucyCd0i5Hfv8dw-M0kYA$Wk6l6KX0SbRtly1GB6S1Xid4JKVH61LmuO4PuBLuE47WMrQChdLBYh1VkYdKKy3QuVQoCkOtf04Oyod47r3Tc$y3B$0fNY0dVBPnb5BeM0QCY0ogEKBPKurco836dCqUhdnmuuCFmBs1u0hmTh+dAijmB20kmuJ1$Dr3+ifU2dEt3hd-AUy4y-37T+HlWucVBZM-mBxaz7UFTdULz3QrffjXe03pcky6L6l5X+5t3Ok6VdLu5nlhDTqVjGQULnKDrUMpMULSC$35qak4a9fKWdhdjyo2$uXCDGAVo20lah9L0v3AiLAsFo1TjTkb7yuVtOkMDuengeVJQVe05kslBAun-Cqco61JtHw1h0cykNrJdoZVAe5QVCN3hVB8YsdNlEwVsw43B054yyjEypkar3YuoiCZePl3W5yToWPafkYMTt4Y1dq4J9fkQdQJp6WnzMlCVZrBVOdrCmNGyvwkPr4ryQME0n0V5mr0MaxjzB7sn+voYVAAaq$0r3lCn4r21BdHL0m9sXcDDHNlCWdCjMYYydfodAaCnAYMnozN-2voB0+muXCXYzWM+O33nRJohdsPzh$60k5MXJuUaw7Yh00jYr+vtbBuV6fXM6uxCuNrBA-Vp0rXmfYrCmmzuz-wpn846pvVnQeWu0oBydmlEdwL6HRlvMZGRb$ZO++$ZrXEaHKgjAfy72h0lEjzLBVj57ywiFqmN3xqK1PBFRQZJFh02C$kwzzZh0fu9FeuNYTMu1u9q7oskTM0V3u0BM9EibwLXv8y3+kEhWuLs0bMBMiSmMuq0EM$k7UhCum73BgCbRGkLPoUYx-NglkQ5xuu2vor3vUcukfatjm0CNEkjeBmoU$h$gUx3cOTDr5$$kz4S0hl8m-eSjBY7ZSoB0E4suji0ktNdJYK3Jr373EV04mefMv7ooam2bdWOYqoeMgHZANdE3wenvA7apmB-CYl7vWe77TAPL$+UvoVYgBlkss4Pk7UalYn3pV8poAVMfjKEVCed2KUt+4fKaegHLkWmKd0kuaVoAl2K3MUeJW37X5VM1NrOurTdQN7bo5JYsBXT3CVvkuVqeDO4f0hAoV-maOumvaVVqVKP8-f0$AdYsNupu3xfoV1f8lnnK4tTJiXY0d0MiPVgk4U0B$kB84vivTJWuc0GA2MiegksfHTKg0r30$ns6gQDSsp0vCziXeDxm9Pbnqs0mntGTfOMjKkkGPBq6RLgvTBuyldfau5BXKHaHC42nasB5L4uOGENUWhl7vsGUtSz46jn+kdVL19BXx$4nYNHq3J05Hd1pDRqclth0DYapS1rEoJlqSBs2gBWRhu4X4pgYjZBo+WdsdTlK0uTONdgZygXct+4YfTHjXR0ZxyV5hxcmbMDV4XehE4Qg7GMYq4TcU4dDOX052s$UPQaHU3EgGRBM$jmBlEefp1WfylhDz92z71VMN2SbKon0aRqBGK+R0c-mDlV5Kke+oQ5YoZig-BWYJ34wXWMmJlB4XSAlt4YDrf+EXE84-JNuiNlAdZnrNPmgJEVD5XPBM32$cbLH+i0TTyyB0nH8U7Dyhgy5hAU2BYUcQDaJPv9UeH$58Th8HQY9PxuXsU8gig0URlQX4Bs8o63vxYa3CueE+HiHoVdft2o4tZrajyyiDBU5nnGmGDRauXTGJBGD15HdTno+vpBP84YQdL$gpzOvv3fDdy-PWTMU7GHUalh7HAamNPUrCMQmHyrGOWuzjt4uQmeDeNCuiZomW8Uh$xkskddEXCCu-jVH6PuV6qT+Ynv63BHBoQzGsxnOT+T9KWP7S-8c2yoQgsufaY2beAKuDnEBwAnJMWd9SFR2YyKnrVHYvJLMogigtJUCMwDY7OBDfXwA1vWAhHnNYpn3eSnV8cU2JnWVW9S07RGuoZMzJfx9MX$Y0vffdk86UmvKnm3M$a1Odl8G7Wg0MHBn5UfNuszCZudQsTH2ddBl$U7myWVMBefUbSQgnAe-Tyo+1WxpJDA+iHUowSC8XXG5$a97DfMMdB-2+x$dElGDUVcBMiaLkYrakhtDJgyDzxC46-mpGNZeXqKTkKg05yYeXp+Zf92+u8rrJ3d$tUMuJGyHXwPNtNCG09B8vMKR1$xxkVy+onMNAjLxYfs$u4mUgwN1oR$XttS+Yaa6qkjKZQRgdzSZbjGtx5agSfZfnVEpN+Y+1rriOQk4DufmR$H0NAoeq2hQsbiNpJb3nhBDLaMq$ohLl-Km56hCFlz3FEfSdMD8HYS0-QtUsdTCcU4ef$aY7u-FQ8RPQzAoVa6Sz2xVN2BCzVXavVC+i$UzDT1NntxYh7VjS6cGazyQ5ZDPAonMMyRP151ux7p1B-S7g$XQuDrcfy5m5KOJxnHsWh2nBy593x+n$JXRJ8sWDYMl2bphPl4qr6hgX$$2VZZqDld1h$aNguSX4QQqQMS4Gg3rHpBBU8wvfrvsu89UMgYs8jM-io3HKtHjYKoMkg5XOhdE7cMWCNbgaJX1p++RwGME5xl0Y$MFiyX$m6ytLbpAQl3egfBP6tprhnaFG9P2kr3jA0SL--HL+xlGKzp5jv1+Lzp0-ezbjYHbffXXmQMOYdMM5zQTC04-0u5m+V-jnZre+H1MkxBwxbRCxOlboJBvRL6B1QxZvJYGkpJ-Q0oovaVN3C6JJpHdbOQPVNnZXNu8oGHVvO0LS+YQh7SEg$hT+x0JScxsMBo+VaM3dKxM4QvBYTYkuL25CZuqV6x62afTlyYEd3Y0ftn1Sz21KavaXCn4V13TcWBzV2C5S4J0YzVqMe6yKZnmB3Q3Ak6B$8VNM76nvXbNvHdJvJXNlauYHK+868486vkfuGcnkwM3$nREJThRXBg+uVV7cMn7f4vJx6xYmVmJJ3AOhjfBm+Ygl1S4hRAOVxBcMh3yYmUq39XSbX2aJH$-hJBKKobClMnDoCRUdTv7KD0Cho1kQ7VXKtYp6jCpbY64gzXRn5+BbJgqHPQNcB0J6QJ$bTQ4bthWm9x$6HAugDAsfvcfV+fB$+SUBl1nmlb$hLmqYQfDvrKSujc7VfV1UxllU2SfxO$Wfwm-vwf0kNQJ1+BoSKgj1Tmd6GfwKx0qkjSCKEBwgqMvY4AFJRbtJ8oEMZb-bnXq6AB7HvK8l3HcucRDSch53o0NMCYjcSS$bCl+0rgpf4HkugVr66fhxjuS2-6NKvgthvAOMU23iYY$gToVBGVeb2KlCg6$Yo0tJ12tYvVPkCQuvBf4bS4MbNiFl7Q3$-2tScXUuK$FfqhmVuPcYy4sMWUM3$K12$hcbNCikrV+k6Jq2$hRX73yKaoiURXeQo0iUUl5bvJVsvxUlxcKM0fE33mJCEbTnVPdifVau9oqfV6o05mKuJ1ug7QzxVV7Q7BECO2KPy3UAgMu$dcMSD2d0Sc7krVqkOlrQugVHb$R4ffz$5gKYoSxb7ub6Nn1SKX3sEiCBJ1MMuAo1MRE+bdhKfV3RPu13dkN+9MQxMiskzf5bauWxu$zJaJThU+7BZkakR2ZU1385asc2ni1muXXP+soSzk7kjkhsp2EXdmVPxHLCsSu1nnAYqViY0$nbNo0JM50uUCgkpcOsxgtU4+chssKK4s83CRgv7VXRNHkuYQo0xSnPxlCka6ebKn-5lgHPB5UkqMh4n3ei3HV2RAgYlAxByYfb-hXs-RjxV+ZlFM1xHvdkOsK5uDYAod1A0UB0-SmMY5aludfuFhCXTuHfrff2u9XfhR0UuDj1NuxdN3OmuTe6Z6j9nnzmWo9+Ti06L5xCLsoRQPDdsCmu9XKvA4DkrKD0RS7lPfLADcp3c4v53TL6oDbUb+2xpctgNbbfkkJTjMEkmVmiv+rsQJ0R44rc0idURJZ34h-3K4zmgDQuLoKfknKmmoLocifH0uJ0jMEC89umRgNuZbJ9u6T+cAjkcPYsTBih8hYoc+96yCQotaHAzUXi2+BdScVYiUT2k3Si4laAv+lPt20xBdGKEMt3hbTnBhzuZVvkPkTR8Sfv8vehMuJmz5oRW4m9e4uHlS-H7hQc9XO98YGBw3uAwDA+Ukjx6kChoB2aBdk6oPgQPVAmwfod9ChnCgDAS+tSwDSXGsngUdsdMk7MrSgMHfSgJC1Sk9-HJdvuSC6SCnkAClUMaMHD0hQs$HmJnM4ctHtJCPd6SSuPPh6uhT53bHssecFMUuCBXKfM-ASX1YhuyuNV7aX3ODfX$KO2lVE90iOVpbgin9vBJ9QmuTUQOs0YSD75EDjJH4nkBstaLJ168JSarpCmv3kxNG2oAl5XsvzfvnVukY$9ZPiT3d2J1m1dAbmVoLKv4MWxCThQy2JP$3zfTl+d5MgvrT3Q$oTBsLdaNsw4yTfSHJZ+kX$40GMnhuwKKul3ZSOH8bfVihYcWTWhvTnAtLWmhsmGa+u11Qzb15V59aLCKg6g2cNasTKgnDxmD6ChA2+Mmuv5apkf4hufJSjkdk4VQkZTUManxaFDDdPxegD0aiTC4Cms3DtSUuSmrDLUHCNucAvBi5b+tx1V0x0xfudfTibb$i1fGM4AtbtHOJqk4DElrKwo9PQDDY8X6vr5jAzU1YkBzJMShUUVSH0x9gDfHGJ66LK56sBahxyxnVC9jMN2iMRhnsJC6DPiZgK+1o3s8L8GqVX9$v-cJvFRmkJXtj-l59r4fcMmaBv3gPTbT6xCVRSs$6lDLkeK2hmn4xwGlVW1W$7sBi0vH0BmjknXLCZnmkpJCAg2k6XUmU85umEoPjFMUA85THHssTVs-2B1tivSCgejG6JxyYyRfXb9$iuXLpHovMzouGiDje7n+dlLsaCh35gkaQM3waJdScx+u1hKyc9vFVQQS4Zh4CiA9HyAOJzRzf6PaoWjJAPu6XKymJjk+fO9yScijVoGVX54VHRCHsh3BRu9X6oP054ozuzkFug22JTRyjfo6Q3cgVMy+bGhuaodaPodtSRgqD+M3XZ4OBim02s$C+C$2eAj0V$Lr4-hJtKuScNouXGmlMiMoxASWUtrZkH0dHGj0iWl4cOiZmkkki0t6G2GalUBUGjL$ijLfLrjNjvl5j5kmVPM+2D97b$PdeoBjfTT19q2Zh-XegSR-v-vh5Ts3bV936SJ4C1SB6H6PQ5SRvuLeHifUsp5541rPMPVm9Ri7Rh4rkoPrTU+j0ADuaTKvcaV9K4uWU4LHJ2JDUo+ugDAhLJyU5UVV2mhvg-shANJTR-p9Xgm7Kmftk5oOsrUakrAu0hgfBgVKCkCMTS3M28tn5WiUpD2b0E3ZyGYwu0RuTVf71iGM3EkmmVGuHOpCQFRjasDlTGUYCM3X4nngeV$QUdD$2EJxUXYfeKe9ygVpt4e15YjdVnjGkw9oD7LfjdLv3x4oaW99v-GzGaJHO1SzmfgrTBRC$uNyxPuBtauvLlcmiG5PiraLT7ZLjo2E8r9tXayPjMTvHXoCoOyvgK+yhz4mM1xtg5LjS1b2N9+ROdjsSgTTGu6t9DHzM1Y2HQlQldV1rX9rKSKvXLiLrhRECz2PX3fmPNGUhjfv4ZVqMNmdyTVE4t526P5XpCl5eOu$TDb8TzGn55AUjJrTLNLP5piOMsS5ngsEYZgOf1tOHXvxyVT3bLPjd+hAQyPnsJ9urfpLNEmyhpmZjT65x1JacZpmHpndVPrGMWLBAsLdVnk2Rtx+PjVObw9g6o0-vahzKNV2RE3jy7KZM-D6SudPpxpB02yh8qkqQ$pjP5pjNgjTtNV8VzPL8eQkknuwnB$0jkHMk+p$8fv8AnetaeRmMpeYt6tWc6epJdY7HzSlsJbDkQuGuuGTbNtfvhLrybZmHktgS7LlNx4dpoq5LTC1itLKHdjdMliahRnuvlv+BMnbA1YkGVGw9jVZl5Z+fJd+6MK6sPHeQ9L+ZpyuT5PdAw9ibyvhOQO+Y-gDVTbHvfVKlOCQkmrVUrXPPtsussY7gdtxQRWnCF5liO$6S-uCxD5B0iArZGtN+ANpN6qxo5aTQ4eqU8oGpWeyySDmTdHKvXegtQQsmo-PtDSlLGsJG6bxl+SEjlZeLaaqxaB0$1R+Mbp-tlkrvWvHChk9PpS53m9+S08ct1DW$SrLkDVOWjPalRienAPZbB91211wZoTf6shd8bpr-Ha+sp5EHbDcQcQLXh81tjdCPgMbhPq$aX3Cb4euHVZsHCKRTCgsJiVEC3OaaSLFklQUGMjdgnDRS+DuDM9+-uOFxkHkHUyHAFVUJluuvmndaJrKa9vOiPuVrGoH6Mnx4P8$fb1L9JvsUu8rTDGnMVy$KwyPxdkMRpOXZhUhMpZpjBH8CRvwZkxe+HaTtGUpq2QZkiNfEy+$52fLQUjW2KujeHjJXaN6$NWEq-CsEDWaFp80ZH0G8quNlLpgMd9B1tn2nKzTbSG4Wlue9gumAW2WP0aGebR1d5pQqfhiPMYHXntUHRAo$+SUb7KBYbKKOV$x4MlBdkjl679O0K08qT96ZiDSM1xz5Jc+5+MgiN6+bpC+dMkguroMnbjN75O27FYR7$4TT++mqA+bX8FaMWf1gz3+y+yh3gr01AOlDqMzxkP9ZV+xX9sO5O5vH88TbOsmS5nov53-enrbgnt$Z1lOy4CkB1lvvYa0FTKjUKizfsG-zzEtE0kHpkVgZWWqRw7zBaa4gCqPU+$WU4EnvwiHfvUUMzBVzrOQL7jsLXPVS+EovcqTlG7xegMyUdm59Cl+GWKjUJPnVXzFMUX+d1AncAqGfcdlk+K4mou0pn0if30uo4WsnCV15Yvd$dKu05f3mnN1uq3S4Obulb8rfKAXMf0cPNnmCcu$x7QyLGfKDMvgeVKmOfodhCYWPRJM0KnnPKYyv0QT-5dK5-HLzXwHWqYtEfHko5gHwonTuC$gnzolESpqYl5uybqncuwoBPf8GSx7rPEWuqYtruuC0Mvdy02XuHQGkduZHGOymkMsafG-YYvTtBgHBK0JVE0HJeKQmKakxs4Nw0NWVH$NVKBzBzsqu+3o5vgVz0TN+6kVn3li-o3PauSVBVR$aa1uayKstft4KnkUuj3gmidumMCVCWH8nBW0$VdCkloE3j9ULA$da0bYjWnctVM+UbOa$C3Ef$lMYmfa$jlU7H4arm07X+E43E1tzA2VyVB3c31u-mPomWC7Mrm7ft4VelOVz0R0DHmuAmfTVCNb3ORBqjiuTV-jaCWf8TiPmpsS0Y0W2venkuTkamof-MHC3GUdM-ta2SjOH4GAyVc$esV6n91KUhVr$bKnBxslkVDnF+h3PsXKUY$1hifWoA6KbkwuqVz04ff3kkGXJa$8s8aYglzUVUbMdY8JmfYYDVUKk+3VB5v$zfr+ya2WQsyf3X0CU-kkVa8efY0KnUq3M0rplzmTMlmB1rn9jQAAE+K$RCCupUmYlKAmuNlv8S3dfBvm+mn3o+K7M+tVVSfYHSs3HZYyj$-dTX00my-s-jVqCrCXn78Bxltf5f7SQ0SPUAXVrsfV7DWxJrfxcAuUbkGrWWMJy4VGdCOloRBb+tDnG3jd2EwupPVDKVC$VE0yHdcXKUMmfz4$s0VyXKVamoCZnL0Jf7PiyAOMQnBYA+rEQkfn19nZKxx0EiKAA5gugo-ieB+Dft3SVYuyrDmlPmS1xBWt9r-fp+AhdwYX-BNaZpMufX-oqjK7koMvUodS010z3H3V$MgMwBL31Hqd$OcAVW$A3LB99pou5-BCT14UdmfJd3zEr6ojfTj4xfbXCn5025rWnLXNdRCpuMNxtt$kwd8j7S4d+G+pm40S0Qae7DGrXux0bVoJu2raBk0ThdCWokt+wank1kzP64quAPBE073R$MRqJyuG+fsYPj6H53y3kYke3hm4suy8VVus048uaye+XEUEK40r63i2YSG105FkLuJkYyg6mpAAdSsDfP8tVu2$hTN6DCQ5tPUMuZ$Cuwuu3tYUxAHETtCsW4$ferkS6rNgr+WQs10crno0y0yABUiY5i3aYvg9Kl8nfuVKEuWsBBtlluMAU7gCdVXQltLhzo8WSZDGrrdnMNUJP1Uk5Mgpl2J1hube-ptYAWVw5EuCFBEZ4fQbLuTGOSeS05UY5J6nNHeVotF5wMgMhazrVGZdpEVmS1r3rycuhmzm6UgM2MrfunaHKNKfKk01+BKGfMTuRlh0uuUBkMt3iuXoyQLZ4mHMuOH8OUB0-XoUUm60un+OjrvjoAsn7M39sf7nGlFM867iuUtt4RkxsdByuqHy1QZOUC4a80OdJYB+68fy006uWjxx6Oz0U3tXNVUskRVOBGwT3ed9EmB$Sw5vao9NmcCNuMXzfRGXtfdPz1n$J2ekdmm8gn-F8p3P0+WazftT+3vrKBt+BnkTCjCBY-gnwjuPDuLX5Br5t+rEJWnCnQoaD$OmeRa$mY$u9Pt+evU4BeXMgTido0wsGTmDp36fBdMtXL1UjGZ7fuUkLUTKpXlm7aSVm$u-1lo4sfCr$jpUo1PuuauSr4t+AbdLuE6OR7hM4hac+3Xr5fuce4VC$yBylrb0NMV1Y7Zu50AHm1d1ca1FMWMK0tGQ0h4Co3u0-2+BMTf$$C0KHRYlafzftuRPyHD0fEkWuTBBaejsRMHA4kyaCByYP8uhMWkk4t0VlfGqULhd+TZN1UKG7ytOP6-+YTuuD2TuNdKVLPWuMJmSVi0tnkBCs-GDOUDk443PBuxGK8rEuNu6gbN$PUAlTBCcDu10C3+YfVkZO4tksa6yP$1iAYxYm7v6Tb+EK3HWsifPtxaAZ0SJYYP7FbkABZHUJLu4uftxi+w$kXpSbYN+QDQkiycGhFyt8atPK1eUWhP3MtQb+b5mMzt3S48WGej$LcWBmD+87h+d3W3EDSp+ltF$9PtnuaFe-GSYm1sUcQunNMotb+PJ+u2MF5MJrqBlngkthCEhRtbeLXpc48SaQW39eLX530rYS+GuFeak1cf0ks4HkwTei8cFh60lfrxlYku+7Hkm2gAFyLbAd0U8ZTDlpB09kc6UehDw39yYdHa0NksM3yAA-s+uqJwVwt39+459hthpsnykxi-iVkhhjV50+9LFijQ3Y-VcYUyuQPN+O7REEiZOsg0EC1Nd0-6t-0OihECuKk-GKuHBlXTthTfZztoHC+jQCUTNYu5ov9o8CCULtMNWbe$5dMiHD$t$KMGHJB0UUmVETew9f96VqhhdGjWcmrD-JzBBEVzk0HLm2CYh4rqM76XNVu+KUAdvGmpV7T9uxsV7-C3fO4Pr+WYBK5M-6XVD0+nh6KNcepQHaXLUsedGCMi$qiwns5BKLl2+oQi1uXSrH6YQYX0T-ME5rNvY26fbdMJfCpf-py0vb1TQkuREL0Q-dsC+U$UcKh7N7dO04JaGkR2Mg6HufUJ2tCJ2MHjgj9UTGY9NrwSX1RDaCQUmVFu$c32a-JABBN00XR$2atnunvcmk+NNDaxQt5EJc8DNX-1k++VgEzW4YfgaUcJuS3moyhUE0Ucg6XJQOe9fY9e+Laf+Ww39yMmfud5CtWWyYjdkFQ7gmOt$2VvV$9QJNks20AffnP-JABE+iMDUUxUQzsTLjHmx3eBDLMzt5o$JkrVkJaoS79tQ$ahQHa3XdTEB-NDBflTGcYKCtab8beAdlYswks+kkOVSaZEo6m7WJejkJ$VJkXns9$9EeCatT$ExjDCWVAksZQeXfs96kCf8UKgw6-JsCunjE$3dUTqoidACVnMqEr3foO$DEr71KJr2sgZYAbly9kuHTfNELTAlEDvKcTFdwlY0GODa$rCl49g3-1yTrcAP$gyjS3lkVMMEro++N46Xn6$gz0XK1m$mZ5iKcUS$0Vy3hVHVWJ1TeNOLnZBkP40sLOuYt4ie4aq+S0tEG8a2O15lcjLX25adiQHkWMJLpnfT-CkcTSgmLFsWOxJv5D8CsEh2N8WDNv5LgWLwgsG3prxTmgGhAzf-at1mTyvnLrKzy2tHKDcg$jsKE-SsVtT+gXhx7y-xerXdtvvuKEv$AVB8aVg5TS+Swa2gQakgJYcwWnuWZYkBHZUngdwT3gxapJyLOgbha2Oq5$o$8ARCwDHAqPig5TwOT-x2H09pg5TfVP-aGH09cgHyNVHlxMXF+BQoyVV677$v3DZvT5DVzyx0NTDGgVUSgBLDDgxDs+XUKgd$2eM6Syg2Uq2g1qBoZDz3hV421$WPH6D4g1TpVhvioXp+VQzJooGLnBge9ExV0sdN-agXsDbaPyEdP1WCgaTagDygddzqLdaY-J5TGdpnDt+Tam+6NtRzdll5BLVxxnomHcOYHciKxTyd2KKZDvda8Q25GmiCDMvojwQjU$miC9u8Bjw+sy1Pdl2$gELPSByQPsl4MgyTlQvyy0xl28lFaMn3OZgqsnU83j5QQThKi-9sNKGTM9T421X9eyNjSx55yRcQS4mG9bK5TwDzPfSXPa1QOLGDHLD7OmagxxTyDJPUrZ4ayxKOpKdzK7HtaSYGyKg1vKTgGTOQWCWJJ0tNvRL-QPBbDFSKLH89XvjOxoOd1YVFARgUuFf2Y9WtDLRS8nM+3n-4iECruJU6B2okj5GLEhnyWok7VEuSma$GLX$VutPVgMeMK5E2FJ0wQGocMN+woURuBmehpN-nugj2Y9uBQp73$w0$JQ8cWPX2fLZG8fxm8VMe2an7PCVqGcha7vjoe0nSVBf0uuMR4AYYBtG$KCBeskz12uXuZ0afRsAnfEmj32njoJRKou-dWVjbkf0s-rklncauuVTYl0V3Vf0sf4oqYehfskcsx3Y9TosLuY04kLCgBU6Qfea$T4xfW679qDl5L6uroWoQ3mcHuuaB3lEuufHw-f8b0tj92vX$buQukVevN7U0uJao8bH+QNCGgbL-m8jp43lfMNRV3xtjEmvHuk7xtjpa0$zGvMF-xtvDkuM3uBuL-t8Oi3Min1aMr-fHQ3+Wu4jlRG-NdmYBSUDVYbHuYWO9qvXFQfM$6jK-ryAvYua4zuAGoBfS5GvX$kuuuD5XMXkC-cuYofVvpkTRDu-W0Yk0VNdybuTTjmjrPZHVruPzAu+Vf3aiVA4mMG0Cak2Annp6ZWhd+VeSuFmM3ujRYTaQmMvpj3NBP78HXvVyA5VXRV3KRTAB9lWBmHk7-rtGNCjwMG0CNnqxhpnV3fx38tNbq1go19Tk050SFq2AN1uK8fyHQ3V0k1Gou6zosluMbNoV3uroRuKuu0VcM33PSWmMgfhmXAX0Ba-td2SWtXU3noKXhYsWnQdkG090qaBoVoV3tOREulsp0MeiOMaAeT5aqup0AOV4kLT8j-mnoe4uuMdVq40K01ix4G-rTA3-oCpYR9zvU4Aq2Un1dMqfOouuQRJm0uu"}},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/plain; charset=UTF-8\r\ncf-chl-out-s: CO7W70wVQv4GswMSU6yLsg==$0+65BmhzZXaHU9gbwSmv7w==\r\nset-cookie: cf_clearance=iDsUDnD68UxVmZzHCyb4iBhHAyPEcwK38gouzg4Sq6Y-1774637985-1.2.1.1-_SDlvj43rUfuyP3EOMUCJpD99_uPQjsLun5w6z2xGmQqnzxm0AobrGkSTEyawSYpYPrLb53JCw59nMcQy6xPIx5Scs.4d_6a6f6pXsJOQqlyFJacZ.KUmkoJ1ECPIKNJxTkmnVyOgaXvBCFM09GW981akUwYmEBDtSiXtONZ3bI6GBPv_pwAgjP7UKJWsl1kJ27rEW75gKM1SsL5iaYZXO34A4erhBITElYO6FVOZCY; HttpOnly; SameSite=None; Partitioned; Secure; Path=/; Domain=send.now; Expires=Sat, 27 Mar 2027 18:59:45 GMT\r\ntiming-allow-origin: https://send.now\r\ndate: Fri, 27 Mar 2026 18:59:45 GMT\r\ncontent-length: 0\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\ncf-ray: 9e30a2529a36b4fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-05T06:47:06.202855Z","times_seen":13363998,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"send.now","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"send.now/assets/js/dashforge.js","fqdn":"send.now","domain":"send.now","tld":"now"},"ip":{"addr":"104.26.10.65","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://send.now/","date":"2026-03-27T18:59:45.318Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"send.now","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 16 Mar 2026 10:08:16 GMT","end":"Sun, 14 Jun 2026 11:08:02 GMT"},"fingerprint":{"sha1":"29:92:8B:AB:B8:0A:24:BA:BB:2C:A8:B1:73:A2:0D:91:D6:D8:CA:BE","sha256":"EC:1C:46:18:C6:5D:E9:D7:21:D5:E0:8C:E6:09:56:95:21:E6:67:4E:FA:42:61:BF:B1:FA:1D:F1:C7:50:7E:93"}}},"request":{"raw":"GET /assets/js/dashforge.js HTTP/1.1\r\nHost: send.now\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://send.now/\r\nCookie: lang=english; __cflb=02DiuECtaV5PvrB3dNzShfb1VW7yeG7E769ZqACwV2cYk\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 27 Mar 2026 18:59:45 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 922\r\nlast-modified: Sun, 12 Dec 2021 10:17:54 GMT\r\netag: \"d2a-5d2f044f765a3-gzip\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nexpires: Fri, 27 Mar 2026 19:25:19 GMT\r\ncache-control: max-age=14400\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: X-Requested-With\r\naccept-ranges: bytes\r\npriority: u=3,i=?0\r\nage: 266\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kRsuhyDb5gxISedXiyIeHPCSgl12bfq%2BMIH6hmb14Ch3gSyVyMvKyOVDQWhWyIba2QgDR0j%2B2M1gseSDhY4a%2F2KNLvDP%2BbEnCyn9AMaSnUj93D9d8t4EQA6Y\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: 9e30a2502a00b4fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3370,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text","md5":"4ba129120304b00f9221323180b560d6","sha1":"44502ecabd36fb78bca746a45201451966eedd0c","sha256":"4d65466592dfaca8556a23d05f50a45089e072dbcac3b74a3b65ac8afba603f0","sha512":"4ac7c8487b239dc78bed69d18596c94684ea1abb47ed87225cfb097909505d753097fa96c6a8d21be079688e1f6e7b63657fb338a672c0d937350dbfc4cfc7c3","ssdeep":"","tlshash":"e561bb2671b271a510fb343e4bfbb4503a1a0957c34ed74178be3fe51f0060975a5aaa","first_seen":"2023-03-08T14:34:43Z","last_seen":"2026-04-03T21:52:33.991595Z","times_seen":46,"resource_available":true,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"send.now","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"send.now/lib/@fortawesome/fontawesome-free/css/fa.min.css","fqdn":"send.now","domain":"send.now","tld":"now"},"ip":{"addr":"104.26.10.65","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://send.now/","date":"2026-03-27T18:59:45.304Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"send.now","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 16 Mar 2026 10:08:16 GMT","end":"Sun, 14 Jun 2026 11:08:02 GMT"},"fingerprint":{"sha1":"29:92:8B:AB:B8:0A:24:BA:BB:2C:A8:B1:73:A2:0D:91:D6:D8:CA:BE","sha256":"EC:1C:46:18:C6:5D:E9:D7:21:D5:E0:8C:E6:09:56:95:21:E6:67:4E:FA:42:61:BF:B1:FA:1D:F1:C7:50:7E:93"}}},"request":{"raw":"GET /lib/@fortawesome/fontawesome-free/css/fa.min.css HTTP/1.1\r\nHost: send.now\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://send.now/\r\nCookie: lang=english; __cflb=02DiuECtaV5PvrB3dNzShfb1VW7yeG7E769ZqACwV2cYk\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 27 Mar 2026 18:59:45 GMT\r\ncontent-type: text/css; charset=utf-8\r\ncontent-length: 1679\r\nlast-modified: Mon, 31 Jan 2022 10:52:41 GMT\r\netag: \"1a60-5d6de95650b32-gzip\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nexpires: Fri, 27 Mar 2026 19:27:02 GMT\r\ncache-control: max-age=14400\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: X-Requested-With\r\naccept-ranges: bytes\r\npriority: u=2,i=?0\r\nage: 162\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tKgH4bZv93kqejis4WEgmCdpVGgGAhqeWRkXw%2F7STleUdjdLuh8Tph5cQ6Yv9jsPh1i6kv41RT%2FLkDvsfxVBXx8GHD5zWyJce9gPw%2BSlTaDR4fcfLtrThUKC\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: 9e30a25019f6b4fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6752,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (6752), with no line terminators","md5":"f6663f96baa8238002c5aa862b769f87","sha1":"202a45f99a1b0fbd327f87589968eff85c2be31c","sha256":"88dabccf1f52631259793dee850ec9f483cbb2ed382f6924df73d24576a4798d","sha512":"fcc42331f6a6cc66b1cdab355108fcfcb67255d52005e01a8d78e0e0291e63bd847cbc796f44dad28584073bcfabfab4ccc4b2ea17e7628956353b335a24a544","ssdeep":"48:qwDRCs0+VTvvlTtgZL6qzcsPBd4AQSbZlZSuAT/G8NAin48nP3/YAvlum0oL3cvh:dxpO/zIIZlZ6HAuv/B0oCtuXtyhtCI","tlshash":"58d1fdb9d14c01c6a325c94bbf86b36c72b9f73cd4950d51f21ead4c2de226a02d6f29","first_seen":"2023-04-14T00:25:31Z","last_seen":"2026-04-03T21:52:34.010821Z","times_seen":136,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"send.now","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"send.now/static/js/jquery-3.7.1.min.js","fqdn":"send.now","domain":"send.now","tld":"now"},"ip":{"addr":"104.26.10.65","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://send.now/","date":"2026-03-27T18:59:45.311Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"send.now","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 16 Mar 2026 10:08:16 GMT","end":"Sun, 14 Jun 2026 11:08:02 GMT"},"fingerprint":{"sha1":"29:92:8B:AB:B8:0A:24:BA:BB:2C:A8:B1:73:A2:0D:91:D6:D8:CA:BE","sha256":"EC:1C:46:18:C6:5D:E9:D7:21:D5:E0:8C:E6:09:56:95:21:E6:67:4E:FA:42:61:BF:B1:FA:1D:F1:C7:50:7E:93"}}},"request":{"raw":"GET /static/js/jquery-3.7.1.min.js HTTP/1.1\r\nHost: send.now\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://send.now/\r\nCookie: lang=english; __cflb=02DiuECtaV5PvrB3dNzShfb1VW7yeG7E769ZqACwV2cYk\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 27 Mar 2026 18:59:45 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 30288\r\nlast-modified: Sun, 31 Mar 2024 08:21:41 GMT\r\netag: \"155ed-614f0900814db-gzip\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nexpires: Fri, 27 Mar 2026 19:06:19 GMT\r\ncache-control: max-age=14400\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: X-Requested-With\r\naccept-ranges: bytes\r\npriority: u=2,i=?0\r\nage: 1405\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xPM0H3gf4WVie23THQE3YQH9JJVl48L9p0mRDkPrAwzuUBbH2UbNq4J7iUtCG4AyXPP2LObKU%2BOU2c9wQIJv0c5TP5piueviLDOP3wCafgl1wNnvm3MvZg6r\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: 9e30a25019fab4fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":87533,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65447)","md5":"2c872dbe60f4ba70fb85356113d8b35e","sha1":"ee48592d1fff952fcf06ce0b666ed4785493afdc","sha256":"fc9a93dd241f6b045cbff0481cf4e1901becd0e12fb45166a8f17f95823f0b1a","sha512":"bf6089ed4698cb8270a8b0c8ad9508ff886a7a842278e98064d5c1790ca3a36d5d69d9f047ef196882554fc104da2c88eb5395f1ee8cf0f3f6ff8869408350fe","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKr:sHNwcv9VBQpLl88SMBQ47GKr","tlshash":"3983f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","first_seen":"2023-08-31T16:03:19Z","last_seen":"2026-04-05T06:38:10.990341Z","times_seen":136525,"resource_available":true,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":12,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"send.now","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"send.now/static/css/v04.dark.min.css","fqdn":"send.now","domain":"send.now","tld":"now"},"ip":{"addr":"104.26.10.65","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://send.now/","date":"2026-03-27T18:59:45.404Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"send.now","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 16 Mar 2026 10:08:16 GMT","end":"Sun, 14 Jun 2026 11:08:02 GMT"},"fingerprint":{"sha1":"29:92:8B:AB:B8:0A:24:BA:BB:2C:A8:B1:73:A2:0D:91:D6:D8:CA:BE","sha256":"EC:1C:46:18:C6:5D:E9:D7:21:D5:E0:8C:E6:09:56:95:21:E6:67:4E:FA:42:61:BF:B1:FA:1D:F1:C7:50:7E:93"}}},"request":{"raw":"GET /static/css/v04.dark.min.css HTTP/1.1\r\nHost: send.now\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://send.now/\r\nCookie: lang=english; __cflb=02DiuECtaV5PvrB3dNzShfb1VW7yeG7E769ZqACwV2cYk\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 27 Mar 2026 18:59:45 GMT\r\ncontent-type: text/css; charset=utf-8\r\ncontent-length: 4538\r\nlast-modified: Sat, 01 Mar 2025 10:17:31 GMT\r\netag: \"6796-62f453b1c44e2-gzip\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nexpires: Fri, 27 Mar 2026 19:03:45 GMT\r\ncache-control: max-age=14400\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: X-Requested-With\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\nage: 1559\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uFZodY2vNqn%2FFmFRL94VdlE7%2BApMent4l%2BYEDJtOabUD0K22Oan1myHHg3HXXhDpwuk8oVZtMBKmfiX2Ql8GwrJovfncgY3cNqJVKtbPTWPh0r3182Epcj3H\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: 9e30a250ca05b4fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":26518,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (26518), with no line terminators","md5":"b73c5405697e2715cbdb0ed254a53ed7","sha1":"116e31a5f051e20cb44f18df90a7b15f14ef019d","sha256":"98400f677203ec614a683dd63160a289bc6c02c642653c9a586b31211eeeadcd","sha512":"b4ca1d0eba13ad8543c3994534cec1c8f00f699f17eecec653cd4779939a6f3e3c1a3859387990a4d65e36e0c631b8f3026b2a41706932e6373cad46e66dd895","ssdeep":"768:+wvkqVbh7QBXCA9F+n+XmnLtq2wm9zB7yZotVH4aeC:Q6LtGm5EOtJ4aeC","tlshash":"10c2dab4e482202f35a7853c61d1fa81066bd6d1e80a4f7ab63b74ac97c91d631f3f85","first_seen":"2025-03-17T23:40:29.601378Z","last_seen":"2026-04-03T21:52:34.012574Z","times_seen":44,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"send.now","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"send.now/static/fonts/ibm-plex-sans/complete/woff2/IBMPlexSans-Medium.woff2","fqdn":"send.now","domain":"send.now","tld":"now"},"ip":{"addr":"104.26.10.65","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://send.now/","date":"2026-03-27T18:59:45.450Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"send.now","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 16 Mar 2026 10:08:16 GMT","end":"Sun, 14 Jun 2026 11:08:02 GMT"},"fingerprint":{"sha1":"29:92:8B:AB:B8:0A:24:BA:BB:2C:A8:B1:73:A2:0D:91:D6:D8:CA:BE","sha256":"EC:1C:46:18:C6:5D:E9:D7:21:D5:E0:8C:E6:09:56:95:21:E6:67:4E:FA:42:61:BF:B1:FA:1D:F1:C7:50:7E:93"}}},"request":{"raw":"GET /static/fonts/ibm-plex-sans/complete/woff2/IBMPlexSans-Medium.woff2 HTTP/1.1\r\nHost: send.now\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://send.now/static/css/upload01.min.css\r\nCookie: lang=english; __cflb=02DiuECtaV5PvrB3dNzShfb1VW7yeG7E769ZqACwV2cYk\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 27 Mar 2026 18:59:45 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 59736\r\nlast-modified: Wed, 07 May 2025 13:11:22 GMT\r\nvary: Accept-Encoding\r\netag: \"681b5bfa-e958\"\r\nexpires: Sat, 11 Apr 2026 17:17:38 GMT\r\ncache-control: max-age=2592000\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: X-Requested-With\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\nage: 1302127\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=z%2FnALHKBqPHaiKFIedQNEUBMN9Si9ahJaNVmKpqt0OVIhxHkA4%2B6EAHPfD2eZaIAEACphqQQy5XcGMii%2FnhWRePEnFRTsBJxSIjY9XpPEb3U407RKRCuKwp4\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: 9e30a2511a0ab4fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":59736,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 59736, version 3.65","md5":"d6f5f2a2a3555fa332adee834987b164","sha1":"cb0eb434ca296153c1bcaa5bb0894fd91b83efa2","sha256":"a61c089861e3cd5bb3a48cf80da84cbe10bd65b5ef6a9276fa43f4e8599876cf","sha512":"7a22eaacb9e020c071540941e88990e8b7b1f95c3048ff17abeba62b35f12c99d61551f30b4be0fc30ea3fa7fe6f149b2f0166bad4db2a3d3797afb01dc27a86","ssdeep":"1536:lvFFpYFirPMZRXVHjj88X4zeXlOqBZ3ci8RUyLjasWT:lvbe20Zv/vX4zMOqBZ3cJ/jas+","tlshash":"e74302570f3289bf9040fe3c84b2055095c1f6c5db697fa52b638bd60fa584a613e727","first_seen":"2023-04-10T19:06:25Z","last_seen":"2026-04-03T21:52:34.029308Z","times_seen":258,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":9,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"send.now","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"o.send.now/m.php?action_name=send.now%2FSend%20files%20now\u0026idsite=1\u0026rec=1\u0026r=975489\u0026h=18\u0026m=59\u0026s=45\u0026url=https%3A%2F%2Fsend.now%2F\u0026_id=7b2928e6a673e8d6\u0026_idn=1\u0026send_image=0\u0026_refts=0\u0026pv_id=VYJYPN\u0026pf_net=36\u0026pf_srv=123\u0026pf_tfr=0\u0026pf_dm1=277\u0026uadata=%7B%7D\u0026pdf=1\u0026qt=0\u0026realp=0\u0026wma=0\u0026fla=0\u0026java=0\u0026ag=0\u0026cookie=1\u0026res=1280x1024","fqdn":"o.send.now","domain":"send.now","tld":"now"},"ip":{"addr":"104.26.10.65","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://send.now/","date":"2026-03-27T18:59:45.529Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"send.now","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 16 Mar 2026 10:08:16 GMT","end":"Sun, 14 Jun 2026 11:08:02 GMT"},"fingerprint":{"sha1":"29:92:8B:AB:B8:0A:24:BA:BB:2C:A8:B1:73:A2:0D:91:D6:D8:CA:BE","sha256":"EC:1C:46:18:C6:5D:E9:D7:21:D5:E0:8C:E6:09:56:95:21:E6:67:4E:FA:42:61:BF:B1:FA:1D:F1:C7:50:7E:93"}}},"request":{"raw":"POST /m.php?action_name=send.now%2FSend%20files%20now\u0026idsite=1\u0026rec=1\u0026r=975489\u0026h=18\u0026m=59\u0026s=45\u0026url=https%3A%2F%2Fsend.now%2F\u0026_id=7b2928e6a673e8d6\u0026_idn=1\u0026send_image=0\u0026_refts=0\u0026pv_id=VYJYPN\u0026pf_net=36\u0026pf_srv=123\u0026pf_tfr=0\u0026pf_dm1=277\u0026uadata=%7B%7D\u0026pdf=1\u0026qt=0\u0026realp=0\u0026wma=0\u0026fla=0\u0026java=0\u0026ag=0\u0026cookie=1\u0026res=1280x1024 HTTP/1.1\r\nHost: o.send.now\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded; charset=utf-8\r\nContent-Length: 0\r\nOrigin: https://send.now\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://send.now/\r\nCookie: lang=english; _pk_id.1.c11f=7b2928e6a673e8d6.1774637986.; _pk_ses.1.c11f=1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 204 No Content\r\nserver: cloudflare\r\ndate: Fri, 27 Mar 2026 18:59:45 GMT\r\naccess-control-allow-origin: https://send.now\r\naccess-control-allow-credentials: true\r\nstrict-transport-security: max-age=15768000\r\nreferrer-policy: origin\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\npriority: u=6,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=977M2Lr58drL9eXlQiSonNOtZMWnqRAcmIeBZzOU4h4BXhfNQKbfzscUnuKy7Z38M5jOXp0fxOcqRDZOJm12mdsy%2FZ3hNmx7%2FQ26LbhR3LxkcFFtIBrobq%2BTIVE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e30a2518a18b4fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-05T06:47:06.202855Z","times_seen":13363998,"resource_available":true,"data":null}},"time_used":176,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":176,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"o.send.now","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"send.now/cdn-cgi/rum?","fqdn":"send.now","domain":"send.now","tld":"now"},"ip":{"addr":"104.26.10.65","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://send.now/","date":"2026-03-27T18:59:45.726Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"send.now","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 16 Mar 2026 10:08:16 GMT","end":"Sun, 14 Jun 2026 11:08:02 GMT"},"fingerprint":{"sha1":"29:92:8B:AB:B8:0A:24:BA:BB:2C:A8:B1:73:A2:0D:91:D6:D8:CA:BE","sha256":"EC:1C:46:18:C6:5D:E9:D7:21:D5:E0:8C:E6:09:56:95:21:E6:67:4E:FA:42:61:BF:B1:FA:1D:F1:C7:50:7E:93"}}},"request":{"raw":"POST /cdn-cgi/rum? HTTP/1.1\r\nHost: send.now\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\ncontent-type: application/json\r\nContent-Length: 637\r\nOrigin: https://send.now\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://send.now/\r\nCookie: lang=english; __cflb=02DiuECtaV5PvrB3dNzShfb1VW7yeG7E769ZqACwV2cYk; _pk_id.1.c11f=7b2928e6a673e8d6.1774637986.; _pk_ses.1.c11f=1; cf_clearance=iDsUDnD68UxVmZzHCyb4iBhHAyPEcwK38gouzg4Sq6Y-1774637985-1.2.1.1-_SDlvj43rUfuyP3EOMUCJpD99_uPQjsLun5w6z2xGmQqnzxm0AobrGkSTEyawSYpYPrLb53JCw59nMcQy6xPIx5Scs.4d_6a6f6pXsJOQqlyFJacZ.KUmkoJ1ECPIKNJxTkmnVyOgaXvBCFM09GW981akUwYmEBDtSiXtONZ3bI6GBPv_pwAgjP7UKJWsl1kJ27rEW75gKM1SsL5iaYZXO34A4erhBITElYO6FVOZCY\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":637,"data":"{\"memory\":{},\"resources\":[],\"referrer\":\"\",\"eventType\":1,\"firstPaint\":0,\"firstContentfulPaint\":798,\"startTime\":1774637984692,\"versions\":{\"fl\":\"2024.11.0\",\"js\":\"2026.2.0\",\"timings\":2},\"pageloadId\":\"d2b9a3cd-de32-415c-bd61-1227859cf3ea\",\"location\":\"https://send.now/\",\"nt\":\"navigate\",\"timingsV2\":{\"nextHopProtocol\":\"h2\",\"domainLookupStart\":233,\"domainLookupEnd\":247,\"connectStart\":247,\"connectEnd\":268,\"requestStart\":268,\"responseStart\":391,\"responseEnd\":391,\"domInteractive\":779,\"domComplete\":1004,\"loadEventStart\":1004,\"loadEventEnd\":1005,\"transferSize\":7378,\"decodedBodySize\":19838},\"siteToken\":\"ae163177bd1e45da92c83ca3115f22fa\",\"st\":2}"}},"response":{"raw":"HTTP/3 204 No Content\r\naccess-control-allow-origin: https://send.now\r\naccess-control-allow-methods: POST,OPTIONS\r\naccess-control-max-age: 86400\r\nvary: Origin, accept-encoding\r\naccess-control-allow-credentials: true\r\ncontent-type: text/plain\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YOGvuarrTIIgOtqM4Na8d2r4lKJYqLDzZ2qbYf6NVgRd2fcqqYC0MaZskKX2DYyDm0nYFvwvRRWYfMVbqt0YgXXKlBOvA%2FATHsskGYGmSm%2Fa4kEW4q7vpIFb\"}]}, {\"group\":\"cf-csp-endpoint\",\"max_age\":86400,\"endpoints\":[{\"url\":\"https://csp-reporting.cloudflare.com/cdn-cgi/script_monitor/report?m=Bqfv6g.p_cJ7Sg3uCEXmgxjrEw7FKUQEabFnOvFmSEQ-1774637985.7288752-1.0.1.1-Jmo_oxKmieCQYwUSkm7pdJHXIw1rHUHxYVpSfbdXUuosJKh0wFbzcrD3Dv2AMmo4eBE_OtS63s6niVrbBIpOIF.s8fXmDdhCjXqjWzCkd9C2KZE2myvvGlBHkDY.l8_zzs4gOIjfpGIHM7sMq78Kp4nA4o5nruJAcqT1ondn4Co\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-security-policy-report-only: script-src 'unsafe-inline' 'unsafe-eval'; connect-src 'none'; report-uri https://csp-reporting.cloudflare.com/cdn-cgi/script_monitor/report?m=Bqfv6g.p_cJ7Sg3uCEXmgxjrEw7FKUQEabFnOvFmSEQ-1774637985.7288752-1.0.1.1-Jmo_oxKmieCQYwUSkm7pdJHXIw1rHUHxYVpSfbdXUuosJKh0wFbzcrD3Dv2AMmo4eBE_OtS63s6niVrbBIpOIF.s8fXmDdhCjXqjWzCkd9C2KZE2myvvGlBHkDY.l8_zzs4gOIjfpGIHM7sMq78Kp4nA4o5nruJAcqT1ondn4Co; report-to cf-csp-endpoint\r\ndate: Fri, 27 Mar 2026 18:59:45 GMT\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\ncf-ray: 9e30a252ca3db4fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-05T06:47:06.202855Z","times_seen":13363998,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"send.now","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sendit.cloud/","fqdn":"sendit.cloud","domain":"sendit.cloud","tld":"cloud"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-27T18:59:44.738Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sendit.cloud","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 07 Feb 2026 05:12:33 GMT","end":"Fri, 08 May 2026 06:10:11 GMT"},"fingerprint":{"sha1":"DB:9C:8A:D5:44:09:A0:DE:30:E8:7E:A6:64:C3:22:DD:99:38:49:F9","sha256":"D1:5B:B0:30:F7:66:3B:F5:19:C7:05:1C:79:E5:00:46:49:10:0F:84:19:82:B5:E3:EE:31:71:1C:A8:A1:61:97"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: sendit.cloud\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 Moved Permanently\r\ndate: Fri, 27 Mar 2026 18:59:44 GMT\r\ncontent-length: 0\r\nlocation: https://send.cm/\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IN0PhwFqbZN7B9jgg8tDnOUMi2FLISR8Y35FL%2FGF4OJ4Y0Rk9M4BluIhmlp2MgO46%2FMZ84OEKDCO%2B%2Fd0zLe7pJKrRy%2BfF5Nr8kocxV%2FNUaiKRejkcG78jcisgokYSns%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 9e30a24cfd63c272-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19838,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-05T06:47:06.202855Z","times_seen":13363998,"resource_available":true,"data":null}},"time_used":119,"timings":{"blocked":57,"dns":34,"connect":1,"send":0,"wait":3,"receive":0,"ssl":22},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"sendit.cloud","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"send.now/lib/feather-icons/feather.min.js","fqdn":"send.now","domain":"send.now","tld":"now"},"ip":{"addr":"104.26.10.65","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://send.now/","date":"2026-03-27T18:59:45.314Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"send.now","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 16 Mar 2026 10:08:16 GMT","end":"Sun, 14 Jun 2026 11:08:02 GMT"},"fingerprint":{"sha1":"29:92:8B:AB:B8:0A:24:BA:BB:2C:A8:B1:73:A2:0D:91:D6:D8:CA:BE","sha256":"EC:1C:46:18:C6:5D:E9:D7:21:D5:E0:8C:E6:09:56:95:21:E6:67:4E:FA:42:61:BF:B1:FA:1D:F1:C7:50:7E:93"}}},"request":{"raw":"GET /lib/feather-icons/feather.min.js HTTP/1.1\r\nHost: send.now\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://send.now/\r\nCookie: lang=english; __cflb=02DiuECtaV5PvrB3dNzShfb1VW7yeG7E769ZqACwV2cYk\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 27 Mar 2026 18:59:45 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 17417\r\nlast-modified: Thu, 03 Sep 2020 08:39:38 GMT\r\netag: \"101aa-5ae64b14b0680-gzip\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nexpires: Fri, 27 Mar 2026 19:01:33 GMT\r\ncache-control: max-age=14400\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: X-Requested-With\r\naccept-ranges: bytes\r\npriority: u=3,i=?0\r\nage: 1691\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sWYJEqeljKm8MImUMa6vPeme4YDCKj7a0BFYN95Kp1%2FEP0gTbQvE7QzfWCUuEjyaa0mpMYYaiGWAkFQZKgrD8D%2F7Ls367dXNBxc6%2B6Fk2DcIIy%2FgCUrZ2AwF\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: 9e30a25029fdb4fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":65962,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (62372)","md5":"44dee7fbafd7dc2404fa62713a8398c2","sha1":"34f8691360e3548d1c9c18534cb0ec38b5c63154","sha256":"a90582369e8cfed7b41dca4758e2fbe09fccf55b89f0cd0b7d46efd0745db831","sha512":"d3988fbbec86ff2eee85a651a75f2a0803a87af68764a5f3fe53c942c9000c8a05c61b7ea87bc23086486cb856c56cace342b373b094b77dd92d6f6b00ecb38a","ssdeep":"768:mN1kXq52ecoJV9+Os+HNsojRuhcEdDXesLqxxiT9/J0s/vz55tr/4SRBHK:mNf+OgRJK","tlshash":"98531c367d4dba9ed00743e61a1f6166235f22fff98c4214e05d02b0c9276d7ee67a28","first_seen":"2023-03-07T12:04:44Z","last_seen":"2026-04-03T21:52:33.99039Z","times_seen":201,"resource_available":true,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"send.now","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"o.send.now/m.js","fqdn":"o.send.now","domain":"send.now","tld":"now"},"ip":{"addr":"104.26.10.65","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://send.now/","date":"2026-03-27T18:59:45.416Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"send.now","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 16 Mar 2026 10:08:16 GMT","end":"Sun, 14 Jun 2026 11:08:02 GMT"},"fingerprint":{"sha1":"29:92:8B:AB:B8:0A:24:BA:BB:2C:A8:B1:73:A2:0D:91:D6:D8:CA:BE","sha256":"EC:1C:46:18:C6:5D:E9:D7:21:D5:E0:8C:E6:09:56:95:21:E6:67:4E:FA:42:61:BF:B1:FA:1D:F1:C7:50:7E:93"}}},"request":{"raw":"GET /m.js HTTP/1.1\r\nHost: o.send.now\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://send.now/\r\nCookie: lang=english\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 27 Mar 2026 18:59:45 GMT\r\ncontent-type: application/javascript\r\nvary: accept-encoding\r\nlast-modified: Sun, 08 Mar 2026 11:53:34 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Fri, 27 Mar 2026 19:03:58 GMT\r\ncache-control: public, max-age=14400\r\npragma: public\r\ncontent-encoding: br\r\npriority: u=3,i=?0\r\nage: 3346\r\ncf-cache-status: HIT\r\netag: W/\"69ad633e-10988\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7nE9KEsz34ar9a5jf%2BfFtJGdaIKGvVom7WDEG%2BxP0WBqxmDuf9Qnony%2ByVHm4wSWTnymIPGOq5%2Bs1HzXner3rUaqmyPvc4TnPBSVjgNx%2B3n3Zxj40se0hOz2pdU%3D\"}]}\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: 9e30a250ea07b4fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":67976,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (2923)","md5":"b032bad4d0d4a7048ffb383d9ecca10c","sha1":"b79ca8828403f0094f8af46ddff72681d3ca7e1b","sha256":"643dc9512a4efa9959a6475a7e7fcdf906b492aedd5c423e83867f8f153dd13e","sha512":"3d80873cc8e92fac5db40bcaec79386d04bcf9135b48747bfdfc0961c054072a476b81f3e75e148f0063525cef414613997a26a13c76d23c6b9bb3a639c4a081","ssdeep":"1536:ATgnSINAJrRJqerEKlFXhuXEjmlMNfwS9h2BLy1z71B8I6fJIKIQaFLa:AT+Z2fucXYy1PGJ9d5","tlshash":"d063d8ce72c2753a4bcb6075a43f114ab27e9caa1448c4b4e62ac4f6383491d657bf7c","first_seen":"2026-02-09T02:52:16.040273Z","last_seen":"2026-04-05T06:53:46.257602Z","times_seen":954,"resource_available":true,"data":null}},"time_used":24,"timings":{"blocked":4,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"o.send.now","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"send.now/static/fonts/HelveticaRoundedBold.woff2","fqdn":"send.now","domain":"send.now","tld":"now"},"ip":{"addr":"104.26.10.65","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://send.now/","date":"2026-03-27T18:59:45.469Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"send.now","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 16 Mar 2026 10:08:16 GMT","end":"Sun, 14 Jun 2026 11:08:02 GMT"},"fingerprint":{"sha1":"29:92:8B:AB:B8:0A:24:BA:BB:2C:A8:B1:73:A2:0D:91:D6:D8:CA:BE","sha256":"EC:1C:46:18:C6:5D:E9:D7:21:D5:E0:8C:E6:09:56:95:21:E6:67:4E:FA:42:61:BF:B1:FA:1D:F1:C7:50:7E:93"}}},"request":{"raw":"GET /static/fonts/HelveticaRoundedBold.woff2 HTTP/1.1\r\nHost: send.now\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://send.now/static/css/upload01.min.css\r\nCookie: lang=english; __cflb=02DiuECtaV5PvrB3dNzShfb1VW7yeG7E769ZqACwV2cYk\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 27 Mar 2026 18:59:45 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 16616\r\nlast-modified: Mon, 25 Mar 2024 09:01:16 GMT\r\nvary: Accept-Encoding\r\netag: \"66013d5c-40e8\"\r\nexpires: Tue, 31 Mar 2026 19:40:32 GMT\r\ncache-control: max-age=2592000\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: X-Requested-With\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\nage: 2243952\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=goa75GmOuGnqzid4BsVMT9%2BVRz4ioFNshE5TwRaFH4b6W0iHVdZd%2F2OBYPXp8xCqMYyEWqXwrCzAXwNmGf2Tt7yvox19JKgartLdwsrWigdHs5obBYpyzJ9c\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: 9e30a2512a0db4fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16616,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 16616, version 1.0","md5":"179a4505a363dd81e5edb2eee9b3436f","sha1":"fd888e07deafdc3c1036ca3caf6e85246422700c","sha256":"0edf38ab37e685e56b8edb4036e001af2749d2b21161cc02f0f24e6dea91238b","sha512":"7d0466fb3b6a956f7db32f8b4fc2a4c9a3f48a10b7483d86e95c2a845e03c4a5c35b50e601ef85b807eea9314a4d41c9311e66bf7bfcde7b60d5f74226761574","ssdeep":"384:+ib0sGAMtU4z3jUHMzPnLywm5WGpbFogfB9Nz9ZW9:+irMtU4HDLhjGpbH7ZW9","tlshash":"7a72d08809c791e6da65e67be3f8087b2d1ca303b93006fefcd51a88557ba7c4801835","first_seen":"2024-04-12T14:57:04Z","last_seen":"2026-04-03T21:52:34.028413Z","times_seen":120,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"send.now","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"send.now/favicon.ico","fqdn":"send.now","domain":"send.now","tld":"now"},"ip":{"addr":"104.26.10.65","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://send.now/","date":"2026-03-27T18:59:45.530Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"send.now","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 16 Mar 2026 10:08:16 GMT","end":"Sun, 14 Jun 2026 11:08:02 GMT"},"fingerprint":{"sha1":"29:92:8B:AB:B8:0A:24:BA:BB:2C:A8:B1:73:A2:0D:91:D6:D8:CA:BE","sha256":"EC:1C:46:18:C6:5D:E9:D7:21:D5:E0:8C:E6:09:56:95:21:E6:67:4E:FA:42:61:BF:B1:FA:1D:F1:C7:50:7E:93"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: send.now\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://send.now/\r\nCookie: lang=english; __cflb=02DiuECtaV5PvrB3dNzShfb1VW7yeG7E769ZqACwV2cYk; _pk_id.1.c11f=7b2928e6a673e8d6.1774637986.; _pk_ses.1.c11f=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 27 Mar 2026 18:59:45 GMT\r\ncontent-type: image/vnd.microsoft.icon\r\nvary: accept-encoding\r\nlast-modified: Thu, 03 Sep 2020 08:39:39 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Fri, 27 Mar 2026 19:03:36 GMT\r\ncache-control: max-age=14400\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: X-Requested-With\r\ncontent-encoding: br\r\npriority: u=6,i=?0\r\nage: 1568\r\ncf-cache-status: HIT\r\netag: W/\"fcae-5ae64b15a48c0\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Oq0jyv%2Bc1SoLl8A8Og47L2ZGoIy4fMx5Y459lt8BH7TdtrCKmwRldbptZlZwCKjQ6YrUK26%2BEmlrT7G9OliAeQ8hp2j5RRdrzM7A%2FEicku3%2F8sMo%2BIYga%2FuC\"}]}\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: 9e30a2518a1ab4fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":64686,"size_decoded":0,"mime_type":"image/vnd.microsoft.icon","magic":"MS Windows icon resource - 3 icons, 48x48, 32 bits/pixel, 64x64, 32 bits/pixel","md5":"22dab3b36a487940c539e179b7edd7ea","sha1":"ad1d193daab9eb56c4d27b10e0f0638307c262cc","sha256":"b64c225956915ee8b619ea190276ebe838880d3a16793a5614487e8be5b5d3bf","sha512":"3326fa5ba607358b9199c34fe5855d9e5b8e2ad69362cd7618d911486a5a09dbe8c17c17210a72d8d39bfdeed6748a272695f4a197b2263e2af4b9cfeb17e941","ssdeep":"384:jDnLRP4VW2yRQwksA+32tmtnlAwYGx5wT6sNjjGzrnR1JDyX/uEN4qDiDN37rFSO:lP4V+JlAJSw60INrrFSto","tlshash":"95532be371d4de40e944afb68851e097a231adb9cc51316e32a4ffded57a00a61036bf","first_seen":"2023-05-01T14:45:36Z","last_seen":"2026-04-03T21:52:33.998597Z","times_seen":206,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"send.now","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"send.now/cdn-cgi/challenge-platform/h/g/scripts/jsd/ea2d291c0fdc/main.js?","fqdn":"send.now","domain":"send.now","tld":"now"},"ip":{"addr":"104.26.10.65","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://send.now/","date":"2026-03-27T18:59:45.562Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"send.now","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 16 Mar 2026 10:08:16 GMT","end":"Sun, 14 Jun 2026 11:08:02 GMT"},"fingerprint":{"sha1":"29:92:8B:AB:B8:0A:24:BA:BB:2C:A8:B1:73:A2:0D:91:D6:D8:CA:BE","sha256":"EC:1C:46:18:C6:5D:E9:D7:21:D5:E0:8C:E6:09:56:95:21:E6:67:4E:FA:42:61:BF:B1:FA:1D:F1:C7:50:7E:93"}}},"request":{"raw":"GET /cdn-cgi/challenge-platform/h/g/scripts/jsd/ea2d291c0fdc/main.js? HTTP/1.1\r\nHost: send.now\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: lang=english; __cflb=02DiuECtaV5PvrB3dNzShfb1VW7yeG7E769ZqACwV2cYk; _pk_id.1.c11f=7b2928e6a673e8d6.1774637986.; _pk_ses.1.c11f=1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\ncache-control: max-age=14400, stale-if-error=10800, stale-while-revalidate=10800, public\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\ndate: Fri, 27 Mar 2026 18:59:45 GMT\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncf-ray: 9e30a251ca21b4fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":28095,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"ASCII text, with very long lines (28095), with no line terminators","md5":"5a46a1efe3b45b31483a35639353932a","sha1":"1774db8e4789e4646d8601012f0ffc49cbb581ed","sha256":"ffb66455b464757773c52a763d1fc3c1461cd41864216192c9f14460ebdf0df4","sha512":"3b12d4f84036b579f1427aa3f2c89821488a6bcf18a6071c7d656c553caa99628f056d841a406cc04fb6dbe6290f99f4e240b57adbe5f2deedf5418b24d6da9b","ssdeep":"768:/BYO1g5YRX15j38X3QaTtWVBC18vJHtQZ:/BYewYRX15T8nQ0tWVBc8vJNQZ","tlshash":"54c2b5cb7ec7743bd331a4bd007b38cbe2e9ac50e1945959c220d9a8f972788555ae1c","first_seen":"2026-03-25T07:47:22.371981Z","last_seen":"2026-04-02T14:49:33.072204Z","times_seen":576,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"send.now","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}}]}