{"report_id":"fa579704-8874-4ab9-a8fb-66b5ad1c0f3c","version":0,"status":"done","tags":[],"date":"2026-06-10T11:34:12Z","url":{"schema":"http","addr":"slon.biz/","fqdn":"slon.biz","domain":"slon.biz","tld":"biz"},"ip":{"addr":"172.67.169.11","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"slon.biz/","fqdn":"slon.biz","domain":"slon.biz","tld":"biz"},"title":"Инструменты для агрессивной лидогенерации 🐘 - Slon.biz","dom":{"size":97195,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (973)","md5":"eb305e64946bfee190ead6dab388f901","sha1":"2221b3ceead0d034d6319c116ddae92347886bf7","sha256":"c285bf48cb095259c97bc2ed42fca19f76241bdb6105e51c16188268cd8cb4d9","sha512":"3eeb2a0d542ef16fa0433149b0fc971241c341403ea566a4ea81f6acbe621409416a0c8f10c2e48c5ce55f0329b9ca175bf4abbc6473ebf1f8a7782a7988fbcd","ssdeep":"1536:JbQOJhC3OrWSRJ/46ZXUtVBAZ1sRejTL11ved/nWtsDCuZ5I4K:JQOJhC3O7P/46ZXUtVBATsRejTL11vQg","tlshash":"a89304a055f525ab0143a4d6e914bf0a3da592bfef97460132fc1eea3fe3c61c51b209","dom_hash":"domhash0ea538d3e9ffa4e4a28fbbf94ce0d691","first_seen":"2026-06-10T11:34:17.163677Z","last_seen":"2026-06-10T11:34:17.163677Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"slon.biz/","fqdn":"slon.biz","domain":"slon.biz","tld":"biz"},"ip":{"addr":"172.67.169.11","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-07-15T11:34:12Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-10","alert":"Sinkholed","trigger":"slon.biz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-10","alert":"Sinkholed","trigger":"slon.biz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null},"summary":[{"fqdn":"geo.unioin.com","ip":{"addr":"172.67.204.18","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2020-08-08","domain_rank":0,"first_seen":"2023-05-10T10:47:37Z","last_seen":"2026-03-28T05:09:53.176531Z","alert_count":0,"request_count":1,"received_data":1622,"sent_data":409,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"pixel.unioin.com","ip":{"addr":"172.67.204.18","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2020-08-08","domain_rank":0,"first_seen":"2023-05-10T10:47:37Z","last_seen":"2026-04-22T16:53:42.294511Z","alert_count":0,"request_count":4,"received_data":57676,"sent_data":2193,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]},{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"whitesaas.com","ip":{"addr":"45.12.65.149","port":443,"asn":49505,"as":"JSC Selectel","country":"Russia","country_code":"RU"},"domain_registered":"2015-10-22","domain_rank":104444,"first_seen":"2015-10-25T09:14:13Z","last_seen":"2026-06-05T15:33:33.884506Z","alert_count":0,"request_count":1,"received_data":293,"sent_data":543,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"cdn.jsdelivr.net","ip":{"addr":"104.17.207.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2012-05-16","domain_rank":1678,"first_seen":"2012-09-30T00:15:09Z","last_seen":"2026-06-07T22:44:32.204356Z","alert_count":0,"request_count":8,"received_data":729524,"sent_data":3926,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"slon.biz","ip":{"addr":"172.67.169.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2018-08-31","domain_rank":2112388,"first_seen":"2013-08-23T05:49:05Z","last_seen":"2026-04-22T16:53:42.35449Z","alert_count":68,"request_count":35,"received_data":743509,"sent_data":32497,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]},{"name":"Bootstrap:5.3.8","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"Google Hosted Libraries","description":"Google Hosted Libraries is a stable, reliable, high-speed, globally available content distribution network for the most popular, open-source JavaScript libraries.","website":"https://developers.google.com/speed/libraries","common_platform_enumeration":"","icon":"Google Developers.svg","categories":["CDN"]},{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]},{"name":"jQuery:3.7.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}]},{"fqdn":"ajax.googleapis.com","ip":{"addr":"142.250.178.74","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":3691,"first_seen":"2012-05-22T10:38:03Z","last_seen":"2026-06-08T07:31:13.685477Z","alert_count":0,"request_count":1,"received_data":88517,"sent_data":451,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/bootstrap@5.3.8/dist/js/bootstrap.bundle.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.17.207.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"5cc1b73e70520fa84b1846afe0ec8fb6","sha1":"69f688858b7149c561c4a1fbc496e9e66b3df2fe","sha256":"e4fd49181388c48ec5040bd3fe66f57c29c8e67fcd8502b3354b96ec7ab47cc7","sha512":"1ef3a326b7703690db9062481b664da83955a8ca3beea6ece0c7b871a8741e80eb7e1adb03ef12065667d4aaef010c3b7082cb3c526f770220a61cd098c9be3f","ssdeep":"1536:oH5mi07eR2tgYR6ifTGqghZxBMzFhhX1fhKCywwPesX5L08g:yNwhh+CywwWsXZg","tlshash":"7673d6593245b4730ade85a68037430bf2265898b64b812cb57cadde2a7dcc27277f78","size":80496,"data":"","first_seen":"2025-09-04T15:51:36.009011Z","last_seen":"2026-08-13T17:35:14.930801Z","times_seen":3507,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"slon.biz/assets/js/main.js?v=OWG_YNLb9HaRvUXUR0KmoxXyOj82Kev3rbnOoaEuc_E","fqdn":"slon.biz","domain":"slon.biz","tld":"biz"},"ip":{"addr":"172.67.169.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"b23f53b736f49bcb59633c964f621e57","sha1":"49b26cb4946a516df5aec5e58f4e664ad8a6b44b","sha256":"b55052bd48b248c92f48c74f2a8ae9dcb4b775b3ba0cc164ee0262573cab1fe0","sha512":"6456c2abde46d5f20c2d773eed1e10ac451eb537f5a74997a70cc3c607548f3e1debd1c6dfe061cd92d2ae9b4e86e72089d66536b9786ff86d7d584b04dbd718","ssdeep":"768:HecZq1ybGRS7tfbh6mwWoFWDduYrHXsl01nTYVljQHOf2CidcZcMQ5ZzBv+YCNxU:+4lmOu16Iuf","tlshash":"09d2e868b110247307fb22fba16b778679ba604dfc478004356d8ca51fe6c4b5a73de9","size":28706,"data":"","first_seen":"2026-06-10T11:34:17.19306Z","last_seen":"2026-06-10T11:34:17.19306Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/masonry-layout@4.2.2/dist/masonry.pkgd.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.17.207.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"520e46df77727aaf3d5e799ef241be02","sha1":"d20252cf76c3be8af37a8415d13ad368c762b4d8","sha256":"367d6afdfc741fb48d2d9310e47c3924b693459a74c882c0fc545ec5ed7d55d2","sha512":"25195cbd26405d3f3ee5241002f9255c626ec574e8bb2abca0831a60445941ab01f120431d96946de012b095a9934514adff3d0cfdff69e7cf3eb94c475875c9","ssdeep":"384:cr7mIr/Dh5rA3rzB4rMhr/XWGHW/6rMz1xftF2OUVP4eAnbhfreD6dCBEOav7blM:iSxxGG2/71xftFqVP4eAnI0ROavPSCzo","tlshash":"46b2858f73007425428bf16696af020f7137655c7a4790acba6ad8db1cb984d2037fbd","size":24103,"data":"","first_seen":"2023-03-07T01:02:56Z","last_seen":"2026-08-13T18:32:57.314133Z","times_seen":11258,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"slon.biz/forms/widget.bundle.js?v=185","fqdn":"slon.biz","domain":"slon.biz","tld":"biz"},"ip":{"addr":"172.67.169.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"25296cb5f116a7eabac3a02f5ba9abc2","sha1":"2929f5c3cf431f4eb70b1415c49e1e33dabb6ff2","sha256":"8e6687029b2b6bf5733f5fe3f98026cc12fd2b8dd10000e3d82ef7a00afaa029","sha512":"c9b599e6c6d9461fb397d6c049ce658caa827c93664ca38703753ee55dfe0f1621ad8c705ae4b39a045479b20ca9f2ec11064ad50794323c2e48e66820dff5d0","ssdeep":"3072:G5ypp7aTmN/EnYsxoyiPuJcssM190DS9wB:G0f2m6vJcsF8","tlshash":"2da307e565041b3380973099a66e368c67b6a23d7f4b411064388efd76e8cc6c167fee","size":102476,"data":"","first_seen":"2026-03-28T05:09:55.002084Z","last_seen":"2026-06-10T11:34:17.171916Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pixel.unioin.com/pixel-frame?visitorId=","fqdn":"pixel.unioin.com","domain":"unioin.com","tld":"com"},"ip":{"addr":"172.67.204.18","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"2f67fc8afa87f63434ee3b4d234e2eb9","sha1":"08f64beaae3893382842132685cbdd0f1c1fa5f5","sha256":"fd5aaafea6a94b89955afe7fc9404d42b3da7da4b986445e1c5cf39ecf67da2c","sha512":"a556976169e5aaaaa79b3d00b80548a65268107aef60894a466d6b2722075f898c54b450f81e9a34b97dc3b05b42fdc321370a231d095cfdc73c83267c63113f","ssdeep":"","tlshash":"0d21787de139446900eaa195ab39be8b91df509decc3ccd5a36200c027efb0e25e13e0","size":1258,"data":"","first_seen":"2026-06-07T16:58:30.373322Z","last_seen":"2026-06-10T11:34:17.221622Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"slon.biz/","fqdn":"slon.biz","domain":"slon.biz","tld":"biz"},"ip":{"addr":"172.67.169.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"58fd199d65db1d165bfdaf96a806484f","sha1":"870aa41a5fd34689c720875b3ce068348add7a4b","sha256":"b65665ad1f15d42b20436e3bc4295c91e27da435117ae55d879aa83334ffc7a6","sha512":"d857f4d966c73dd1aa9614d966acb5d3b503120b2de115a45c565111d0a35c0ce4ebf7ae82a6fc6437a7fa54965b1ddae5c4fb73d55e77b822cbca50312ada6a","ssdeep":"","tlshash":"429022b300800028a28880c00002223c82030800fa8008800cc008020af28822080000","size":56,"data":"","first_seen":"2026-03-28T05:09:55.075735Z","last_seen":"2026-06-10T11:34:17.222735Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"slon.biz/","fqdn":"slon.biz","domain":"slon.biz","tld":"biz"},"ip":{"addr":"172.67.169.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"f02f73967bf6bb321eb258bd2dcce897","sha1":"fceec03fa7ba9e8b3275492fa08fe93330750b12","sha256":"7866cbfc667ae8b14b85f6aef388b681ab293f336c205fec4729829e17f14230","sha512":"4a2599c7f0a463bd389992978583ac7e57e93849ec95307bef4e47091ec54cb9c41e13c187b644d9c6ee06adb17309c0a09480c114fb317d0f803c4242483887","ssdeep":"","tlshash":"52c08c587529b0b809d104e20337854e35e3018c780d7c88872e88847f2fa4b86ab45c","size":166,"data":"","first_seen":"2026-03-28T05:09:55.077397Z","last_seen":"2026-06-10T11:34:17.224268Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"slon.biz/","fqdn":"slon.biz","domain":"slon.biz","tld":"biz"},"ip":{"addr":"172.67.169.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"ed4fb4692fcd35980a730aea2db6d852","sha1":"2fccdb171b9d531c23186f390a7dc17bae07d1bb","sha256":"b8ef241197bfa4a1a881f62410b456250725ac0b74efc853e8980746f8485fe8","sha512":"6dc3efddeaf811a2de734e47dda1d2b375d8dffc0d173955df8cfbcef6cd16d664bbbca899539e1f2c4a8a8efc530a609c7e23600b769e4fef7d0006c27ab5d0","ssdeep":"","tlshash":"7ee0a3d634511054097c35f5a2b39104b043181c3445ac20dbfb8891d96e89d446b19c","size":412,"data":"","first_seen":"2026-06-10T11:34:17.225569Z","last_seen":"2026-06-10T11:34:17.225569Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"slon.biz/forms/widget.min.js?channelId=1051","fqdn":"slon.biz","domain":"slon.biz","tld":"biz"},"ip":{"addr":"172.67.169.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9e6599bd50bffaaba4849b3127503159","sha1":"7af7fc553aedb18d2b18241b1d439827c7ff6586","sha256":"026e2e1c072d1ac9cf09744c3a288c71c7004df62c3aafa6da18b7fe9031c7c6","sha512":"4d6ff5f0d087820330949de54f850d1a3267c9c4ac977d96ea68b7d737dbf7cb40a688148b60540c570c5cf7339e0d3986d87c261a023127a4e0e10138bd98f1","ssdeep":"96:O0m/pHRp/06sifUtVaymSJ+ppiVk4Q6U36BGyqyR21OEhg:hm/pfsyUXaDpiVkx36BLR2E","tlshash":"f391082a4d4839b5c2047263ecadfb0ebaec45b53901c40aaccc585aa3f1ee056718c7","size":4419,"data":"","first_seen":"2026-06-10T11:34:17.218875Z","last_seen":"2026-06-10T11:34:17.218875Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/@microsoft/signalr@10.0.0/dist/browser/signalr.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.17.207.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"445cfa557e15d4b3d5b89d30eab08bb1","sha1":"fa5a69aed287f527287534a58a4abf3f71d53308","sha256":"10dd7681421e4638a55a3367a68ac0eac1973be1b4471b91b1b9e2306bb0b050","sha512":"fcdb22dc77d7999b3860cfc8e74137ff8aaeded76f612c0815a35df38282545e090ab4b05f3283c8582ff937518dbc3a9f61191bb107f86211e3b71c85d35bd2","ssdeep":"768:DNH4clHBC+cUcdArbZVzxmMShUeBhQeXvDth2RVkOkQgEhL+MY208OGuJfo1JRVQ:DNHLhhcsrnbUmmEJJOucrzKy","tlshash":"f523b55372a4607a179784d2d9620201e73054a473ca04bcba7c49ffacb56c5b7bbbf2","size":47729,"data":"","first_seen":"2026-03-28T05:09:55.004693Z","last_seen":"2026-07-24T08:37:36.32219Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ajax.googleapis.com/ajax/libs/jquery/3.7.1/jquery.min.js","fqdn":"ajax.googleapis.com","domain":"ajax.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.74","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"2c872dbe60f4ba70fb85356113d8b35e","sha1":"ee48592d1fff952fcf06ce0b666ed4785493afdc","sha256":"fc9a93dd241f6b045cbff0481cf4e1901becd0e12fb45166a8f17f95823f0b1a","sha512":"bf6089ed4698cb8270a8b0c8ad9508ff886a7a842278e98064d5c1790ca3a36d5d69d9f047ef196882554fc104da2c88eb5395f1ee8cf0f3f6ff8869408350fe","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKr:sHNwcv9VBQpLl88SMBQ47GKr","tlshash":"3983f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","size":87533,"data":"","first_seen":"2023-08-31T16:03:19Z","last_seen":"2026-08-13T19:45:10.21121Z","times_seen":185500,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/libphonenumber-js@1/bundle/libphonenumber-max.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.17.207.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"306b437cac09b9c62661c96ed8ddcab7","sha1":"81d1cdebe3e1bff29586b6e0d44f34ccf2e30dc8","sha256":"1be88de940a3432dade2e13ec3c247237c7e197c03a0167176b7e2401d989f69","sha512":"e02ce49aa617046aec95858b90314828b129fece094b448a431e3df5024a167c6423086a162ba7e86312b15f0e1418e1fe56c3fe7725f0b1f65eeb554207ec05","ssdeep":"3072:iOK03o4Pwju2sBjSf55PM2/JANvtG4ZlMAbxI7zjalZxLhe4:iTu2sBytM2/4kgbxIHWlZxLhe4","tlshash":"d034b6fbb740f72b75e63b688916d2ce6acc9cb1e8985048abd3d9cb5c60d22107c715","size":252826,"data":"","first_seen":"2026-06-06T10:26:03.065243Z","last_seen":"2026-06-10T21:04:19.424497Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pixel.unioin.com/cdn-cgi/scripts/7d0fa10a/cloudflare-static/rocket-loader.min.js","fqdn":"pixel.unioin.com","domain":"unioin.com","tld":"com"},"ip":{"addr":"172.67.204.18","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"88a769d2fe35899fd45a332a0a032cc0","sha1":"514c6c1d8475d17e412849a4c90159517d0fa10a","sha256":"ccf00d1923b0131a10e0c6d26f95e5dee6ebf8621a27e83c5a2f68a2e0093142","sha512":"756cc5cd029fc4adc9100d0da2f2b0efb3df0f2bf894fba2824019832fea594edd40a238a5ffacc205572cc0155f5632d70f54e37edc0772460f44c69cb76ab8","ssdeep":"192:3dArCS2Z+j/yQ9TCQxUhW2DPY808LE676SbHDc/7uN0VZG05w:NHSG+j/y2xa3bn7Q+0a0O","tlshash":"7442b79c7e95ba30079b91b1a17ff30f6276605a640bc0a0b05ddcd1a878d8d192bf75","size":12332,"data":"","first_seen":"2023-03-07T01:02:06Z","last_seen":"2026-08-13T19:50:18.160045Z","times_seen":124956,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"slon.biz/","fqdn":"slon.biz","domain":"slon.biz","tld":"biz"},"ip":{"addr":"172.67.169.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"58fd199d65db1d165bfdaf96a806484f","sha1":"870aa41a5fd34689c720875b3ce068348add7a4b","sha256":"b65665ad1f15d42b20436e3bc4295c91e27da435117ae55d879aa83334ffc7a6","sha512":"d857f4d966c73dd1aa9614d966acb5d3b503120b2de115a45c565111d0a35c0ce4ebf7ae82a6fc6437a7fa54965b1ddae5c4fb73d55e77b822cbca50312ada6a","ssdeep":"","tlshash":"429022b300800028a28880c00002223c82030800fa8008800cc008020af28822080000","size":56,"data":"","first_seen":"2026-03-28T05:09:55.075735Z","last_seen":"2026-06-10T11:34:17.222735Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"slon.biz/","fqdn":"slon.biz","domain":"slon.biz","tld":"biz"},"ip":{"addr":"172.67.169.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"f02f73967bf6bb321eb258bd2dcce897","sha1":"fceec03fa7ba9e8b3275492fa08fe93330750b12","sha256":"7866cbfc667ae8b14b85f6aef388b681ab293f336c205fec4729829e17f14230","sha512":"4a2599c7f0a463bd389992978583ac7e57e93849ec95307bef4e47091ec54cb9c41e13c187b644d9c6ee06adb17309c0a09480c114fb317d0f803c4242483887","ssdeep":"","tlshash":"52c08c587529b0b809d104e20337854e35e3018c780d7c88872e88847f2fa4b86ab45c","size":166,"data":"","first_seen":"2026-03-28T05:09:55.077397Z","last_seen":"2026-06-10T11:34:17.224268Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"slon.biz/","fqdn":"slon.biz","domain":"slon.biz","tld":"biz"},"ip":{"addr":"172.67.169.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"ed4fb4692fcd35980a730aea2db6d852","sha1":"2fccdb171b9d531c23186f390a7dc17bae07d1bb","sha256":"b8ef241197bfa4a1a881f62410b456250725ac0b74efc853e8980746f8485fe8","sha512":"6dc3efddeaf811a2de734e47dda1d2b375d8dffc0d173955df8cfbcef6cd16d664bbbca899539e1f2c4a8a8efc530a609c7e23600b769e4fef7d0006c27ab5d0","ssdeep":"","tlshash":"7ee0a3d634511054097c35f5a2b39104b043181c3445ac20dbfb8891d96e89d446b19c","size":412,"data":"","first_seen":"2026-06-10T11:34:17.225569Z","last_seen":"2026-06-10T11:34:17.225569Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"slon.biz/","fqdn":"slon.biz","domain":"slon.biz","tld":"biz"},"ip":{"addr":"172.67.169.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"58fd199d65db1d165bfdaf96a806484f","sha1":"870aa41a5fd34689c720875b3ce068348add7a4b","sha256":"b65665ad1f15d42b20436e3bc4295c91e27da435117ae55d879aa83334ffc7a6","sha512":"d857f4d966c73dd1aa9614d966acb5d3b503120b2de115a45c565111d0a35c0ce4ebf7ae82a6fc6437a7fa54965b1ddae5c4fb73d55e77b822cbca50312ada6a","ssdeep":"","tlshash":"429022b300800028a28880c00002223c82030800fa8008800cc008020af28822080000","size":56,"data":"","first_seen":"2026-03-28T05:09:55.075735Z","last_seen":"2026-06-10T11:34:17.222735Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"slon.biz/","fqdn":"slon.biz","domain":"slon.biz","tld":"biz"},"ip":{"addr":"172.67.169.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"f02f73967bf6bb321eb258bd2dcce897","sha1":"fceec03fa7ba9e8b3275492fa08fe93330750b12","sha256":"7866cbfc667ae8b14b85f6aef388b681ab293f336c205fec4729829e17f14230","sha512":"4a2599c7f0a463bd389992978583ac7e57e93849ec95307bef4e47091ec54cb9c41e13c187b644d9c6ee06adb17309c0a09480c114fb317d0f803c4242483887","ssdeep":"","tlshash":"52c08c587529b0b809d104e20337854e35e3018c780d7c88872e88847f2fa4b86ab45c","size":166,"data":"","first_seen":"2026-03-28T05:09:55.077397Z","last_seen":"2026-06-10T11:34:17.224268Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"slon.biz/","fqdn":"slon.biz","domain":"slon.biz","tld":"biz"},"ip":{"addr":"172.67.169.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"ed4fb4692fcd35980a730aea2db6d852","sha1":"2fccdb171b9d531c23186f390a7dc17bae07d1bb","sha256":"b8ef241197bfa4a1a881f62410b456250725ac0b74efc853e8980746f8485fe8","sha512":"6dc3efddeaf811a2de734e47dda1d2b375d8dffc0d173955df8cfbcef6cd16d664bbbca899539e1f2c4a8a8efc530a609c7e23600b769e4fef7d0006c27ab5d0","ssdeep":"","tlshash":"7ee0a3d634511054097c35f5a2b39104b043181c3445ac20dbfb8891d96e89d446b19c","size":412,"data":"","first_seen":"2026-06-10T11:34:17.225569Z","last_seen":"2026-06-10T11:34:17.225569Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/aspnet-client-validation@0.11.1/dist/aspnet-validation.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.17.207.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"64206a0b12857904caf40d743a9325dc","sha1":"c5f76247d678c0a24e14ca7e1ba869d8f2c6db38","sha256":"533dc84c7a5fec0d77edf9635b3dd382488b380bae1fcf8450f4cdb99fc6acbc","sha512":"ff9d1a0e0bf75dc0f4bab027311a0497e7cded3f42c56062d416ad0bdbd0571e1033f59fd945c546cb275f5897d3873252c6ecdd0ec96701ef53514ee140bb3a","ssdeep":"384:3zmwlX06XpIun5cfIrMbk0W6ZTiwCoASYEjVnBpAcxZxEdOCzJJIMxAROJup4sex:g63K1WeTidUd9xZxpoA2C4/tg9ExcSXX","tlshash":"9e92e9d9738221154ecb55fe509fa14a72bf6928a408005df918d8e22cb5ece2373fb8","size":20681,"data":"","first_seen":"2025-05-28T13:26:38.927847Z","last_seen":"2026-08-11T06:53:45.755534Z","times_seen":838,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/immortal-db@1.1.0/dist/immortal-db.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.17.207.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"54530312c3c2954ae37b0a580c3e6620","sha1":"a4c1f1a0914db3bfc1a24f387591212b63a5f543","sha256":"59944f96e5702f1b513edd112624b4de002cc998a3de8d120b6cff80b61b9051","sha512":"c5edbecc244a90269682a943acc5676b824b2a2bf51fbb9259fc4d69a9de178c34cc9701c5e985c2b4bd4e5d0a6b5cdb84f6a57f92ded9c41e5ad9a697279ce9","ssdeep":"768:bLg8cSjTZnnQ6k18c+pZZq2+7kKNc8Ov7CMLKX:bcwZnn0MrLpGX","tlshash":"ce5374ccb6c2f06607a37570402f540bf1ba6a58b49e8490f726d5d17c7a88ea137fad","size":60965,"data":"","first_seen":"2023-03-13T10:59:44Z","last_seen":"2026-08-10T15:32:58.760263Z","times_seen":457,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pixel.unioin.com/assets/js/fingerprintjs/dist/fp.js?v=uTBHfdZC0rnxS8wRPyyacHLs393Ady9VT9T55PiUUC8","fqdn":"pixel.unioin.com","domain":"unioin.com","tld":"com"},"ip":{"addr":"172.67.204.18","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"98e911fe191b8a81f0f786c796baaf23","sha1":"7aaafeab8e41882af4c9887ccb1ca5c1b1e03f2f","sha256":"13121aea3460ed980003487bff0da5bbcd02177aff9204c5ae37513489ae284a","sha512":"584afb1a16e8b69d04a1658717872e3f63ba5a7edf90746114af929058f3ff5b0d18fc1f79161c74ec172b627574996cf01fdc251b39c293292a3b95526f2899","ssdeep":"384:+eIKds83dOwuFxBEw7LKMWgYRxcsshKs+R6H2ECn54JMJ0wE5EtVtnn6JD8LWIo7:oKKKMWVxuxYjJ0jJ7ICZT2GOm","tlshash":"780308d8b683b068837364b940bf5186b23e2c65784d4512c467e8997db9e1e8237ffc","size":39703,"data":"","first_seen":"2025-08-23T22:18:12.658567Z","last_seen":"2026-06-10T11:34:17.20593Z","times_seen":18,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/bootstrap-icons@1.13.1/font/fonts/bootstrap-icons.woff2?e34853135f9e39acf64315236852cd5a","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.17.207.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://slon.biz/","date":"2026-06-10T11:33:47.222Z","timestamp":1781091227222,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jsdelivr.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 22 Apr 2026 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"65:D9:C4:7E:04:4C:FD:DD:60:E0:CC:18:B5:B7:01:68:B4:2D:C7:34","sha256":"50:6C:A4:F6:ED:74:C7:E9:68:DB:32:56:5A:68:4C:98:ED:01:28:36:F8:13:BA:CC:19:A7:FD:7A:0A:6E:E7:D4"}}},"request":{"raw":"GET /npm/bootstrap-icons@1.13.1/font/fonts/bootstrap-icons.woff2?e34853135f9e39acf64315236852cd5a HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://slon.biz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cdn.jsdelivr.net/npm/bootstrap-icons@1.13.1/font/bootstrap-icons.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 10 Jun 2026 11:33:47 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 134044\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-jsd-version: 1.13.1\r\nx-jsd-version-type: version\r\netag: W/\"20b9c-tEH8/5OeJPoJBqN7d4h4i5/du2g\"\r\naccept-ranges: bytes\r\nx-served-by: cache-fra-eddf8230141-FRA, cache-bma-essb1270025-BMA\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=3,i=?0\r\nage: 2437428\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6vTFp6W95ms6Kab3QUoXi5mFABrRtJY6XMIYQlxeJQ1NW9Z%2BGuJ1z%2BuEK272gFk%2FmyPG6Eq5sNpsry78Cp1RgtpQ9JGqj4HUH%2FnUI6Uq7kSys8L4Dm33L%2BgtVwvD89vklKI%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: a098102a2c9556c0-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":134044,"size_decoded":135174,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 134044, version 1.0","md5":"84a4d15b9e4459b6229a7f1dccc6609c","sha1":"b441fcff939e24fa0906a37b7788788b9fddbb68","sha256":"6c75710364a1ca5604267716f6d28997b26319fdb078cf11e0b42ab66ff2ea61","sha512":"d767814d144b311254de5d248d4a1cd2777209016687c11b3a7791642d90ff267c11d0001fb30435e3767959a2a00d4076e1bc6fad3c7a58cfdb00e5c77c44ce","ssdeep":"3072:tDHos22Zs2P3qithtQxgI+oZzvHB2haro8yYMBX:FHo8s2P3qi1Q+K1hLrxmX","tlshash":"19d3127e338ead54c8b4d32963588c7522ef82c2962bb2235f71523386f94fce485517","first_seen":"2025-05-15T10:27:38.85456Z","last_seen":"2026-08-13T16:48:27.009647Z","times_seen":5779,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":19,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"slon.biz/forms/widget.webcall/sounds/long_good.mp3?v=185","fqdn":"slon.biz","domain":"slon.biz","tld":"biz"},"ip":{"addr":"172.67.169.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://slon.biz/","date":"2026-06-10T11:33:47.313Z","timestamp":1781091227313,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"slon.biz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 06 May 2026 15:48:04 GMT","end":"Tue, 04 Aug 2026 16:46:34 GMT"},"fingerprint":{"sha1":"38:4D:94:42:4B:4C:2F:6C:E3:85:79:42:30:7A:FC:73:71:9C:2E:19","sha256":"33:02:9D:E9:C5:CA:AF:7D:63:1F:18:8E:26:19:D4:87:1A:1E:76:3E:7F:CD:39:C1:37:1C:58:EA:06:01:27:C9"}}},"request":{"raw":"GET /forms/widget.webcall/sounds/long_good.mp3?v=185 HTTP/1.1\r\nHost: slon.biz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: audio/webm,audio/ogg,audio/wav,audio/*;q=0.9,application/ogg;q=0.7,video/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nReferer: https://slon.biz/\r\nRange: bytes=0-\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: .AspNetCore.Antiforgery.Ix643OkwzkY=CfDJ8HRi9EzRANpAplf2nauG7zICIkpORWwJQaqFvBmwgvlkhSiuyijwoiq8Lt-G0_fG_yJHNPgUvRi8teQCuA-Z4eg9dZLiR-DenX7yKRE__4sxT5E-b2k_kDMLg7HFl164t7KkM4D37_Bl3fnd3M8-FEk; .AspNetCore.Session=CfDJ8HRi9EzRANpAplf2nauG7zICqAf8NVwWUZEU1EqZ4ykmFoIiNnUgsI3nexV5xMbfZhIa108IBBa0MabJ4m9nomz3Dl1LFryyv%2BA%2BBPy4z%2FIopaml7M%2FBPnDxj0yNBrXqc6Rpbq4dj74%2FsA1UyXxunMaIibXkwc0al5fim72%2BBDxp\r\nSec-Fetch-Dest: audio\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 206 \r\nserver: cloudflare\r\ndate: Wed, 10 Jun 2026 11:33:47 GMT\r\ncontent-type: audio/mpeg\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1tQHTdaku%2BTsBE0tcH3xM6SK8cOyfOM9BIk0EwFaijRw2jO%2FvXkOb4jQW8IHFAGaWWWkpvZFkORWp6YO3rSkEHGL5ZmSHO4kjIWfobTnT3uDRTt9frHmeLMC%2Bw%3D%3D\"}]}\r\nreferrer-policy: same-origin\r\naccess-control-allow-origin: *\r\ncache-control: public,max-age=31536000\r\netag: \"1dcef86128ad743\"\r\nlast-modified: Fri, 29 May 2026 16:13:23 GMT\r\nstrict-transport-security: max-age=2592000; includeSubDomains\r\nx-content-type-options: nosniff\r\ncontent-range: bytes 0-17602/17603\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncontent-length: 17603\r\ncf-ray: a098102abdad0b51-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":17603,"size_decoded":18474,"mime_type":"audio/mpeg","magic":"Audio file with ID3 version 2.4.0, contains:\n- MPEG ADTS, layer III, v2,  64 kbps, 24 kHz, Stereo","md5":"5e5013b91a5a272f2bddad3f266b4846","sha1":"5330c9a9b8421e5ef5914b9360bf81a754deb056","sha256":"393aebf444930775e454d7e6624572600af09ebe288e258d229fe8303064cc73","sha512":"c3e627b8838b137f277e50827a53403e49f8fbef2ba121f477838d8a73f41df251b74d08a349f6c7f5e36d676b15168631865ce0d1afa01a584df6f7fcc897dd","ssdeep":"192:PW2HGk1etorclQEizGu1e7dKn2rPNbNReBrJuF0851/gj/fmaEUpcL/b:uK1etorc6E0vOR5bowuDOTkcf","tlshash":"7a82eb977320307adf78d3719c64622297c7797e4e5ca68b309e180aafcb8d25cc5e46","first_seen":"2023-05-10T10:48:14Z","last_seen":"2026-06-10T11:34:17.166175Z","times_seen":9,"resource_available":false,"data":null}},"time_used":163,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":163,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-10","alert":"Sinkholed","trigger":"slon.biz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-10","alert":"Sinkholed","trigger":"slon.biz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"slon.biz/forms/widget.webcall/sounds/ru/autoanswer-female-bye.mp3?v=185","fqdn":"slon.biz","domain":"slon.biz","tld":"biz"},"ip":{"addr":"172.67.169.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://slon.biz/","date":"2026-06-10T11:33:47.321Z","timestamp":1781091227321,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"slon.biz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 06 May 2026 15:48:04 GMT","end":"Tue, 04 Aug 2026 16:46:34 GMT"},"fingerprint":{"sha1":"38:4D:94:42:4B:4C:2F:6C:E3:85:79:42:30:7A:FC:73:71:9C:2E:19","sha256":"33:02:9D:E9:C5:CA:AF:7D:63:1F:18:8E:26:19:D4:87:1A:1E:76:3E:7F:CD:39:C1:37:1C:58:EA:06:01:27:C9"}}},"request":{"raw":"GET /forms/widget.webcall/sounds/ru/autoanswer-female-bye.mp3?v=185 HTTP/1.1\r\nHost: slon.biz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: audio/webm,audio/ogg,audio/wav,audio/*;q=0.9,application/ogg;q=0.7,video/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nReferer: https://slon.biz/\r\nRange: bytes=0-\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: .AspNetCore.Antiforgery.Ix643OkwzkY=CfDJ8HRi9EzRANpAplf2nauG7zICIkpORWwJQaqFvBmwgvlkhSiuyijwoiq8Lt-G0_fG_yJHNPgUvRi8teQCuA-Z4eg9dZLiR-DenX7yKRE__4sxT5E-b2k_kDMLg7HFl164t7KkM4D37_Bl3fnd3M8-FEk; .AspNetCore.Session=CfDJ8HRi9EzRANpAplf2nauG7zICqAf8NVwWUZEU1EqZ4ykmFoIiNnUgsI3nexV5xMbfZhIa108IBBa0MabJ4m9nomz3Dl1LFryyv%2BA%2BBPy4z%2FIopaml7M%2FBPnDxj0yNBrXqc6Rpbq4dj74%2FsA1UyXxunMaIibXkwc0al5fim72%2BBDxp\r\nSec-Fetch-Dest: audio\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 206 \r\nserver: cloudflare\r\ndate: Wed, 10 Jun 2026 11:33:47 GMT\r\ncontent-type: audio/mpeg\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=P6PthWT2FOiKz8qYlbCa27I2loy9pU%2BYKSZ1FcC4W7Oh8TsE3GhyWZ7xX6%2F3%2FrR1m68yZ7JqytNesRDV2URrp0h15%2BAf3JZYgkIquQmvTJvWEDaLzesUJVoeQA%3D%3D\"}]}\r\nreferrer-policy: same-origin\r\naccess-control-allow-origin: *\r\ncache-control: public,max-age=31536000\r\netag: \"1dcef86128ac3c0\"\r\nlast-modified: Fri, 29 May 2026 16:13:23 GMT\r\nstrict-transport-security: max-age=2592000; includeSubDomains\r\nx-content-type-options: nosniff\r\ncontent-range: bytes 0-20543/20544\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncontent-length: 20544\r\ncf-ray: a098102acdb60b51-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":20544,"size_decoded":21417,"mime_type":"audio/mpeg","magic":"MPEG ADTS, layer III, v1, 64 kbps, 48 kHz, Monaural","md5":"a99290e97bf7c8eb23e6fcba35a0ca4e","sha1":"e37285851807028eaf4e12e3e53636a990847abd","sha256":"43ea8b0880126451b4ccce84c534b5bc4d39641124d1526b2b2a393daa7eb209","sha512":"5642e187d5803e7aee2aad4fc49ac167aa234ca5f27c5835a176a7920449e513d46c317244576ab27a1b099972f65d0b8e6ef86f88b20997b4efeb0db72aa8d3","ssdeep":"384:L+Ji/CxDnqAbAzhqJqPkTLSGdUJv2lJ4ejG//QdHoerm8mnje1I+K1RxF6:L+m+TyPwLhdUUP4eG/woe0nWTixI","tlshash":"7d92ae870e35831ef2355bbfb95b2554deee89880c2af5c34bd0e99521fb5a15bb0a00","first_seen":"2023-05-10T10:48:15Z","last_seen":"2026-06-10T11:34:17.167688Z","times_seen":9,"resource_available":false,"data":null}},"time_used":124,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":123,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-10","alert":"Sinkholed","trigger":"slon.biz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-10","alert":"Sinkholed","trigger":"slon.biz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"slon.biz/forms/widget.universal/assets/chat-icon-no-bg.svg?v=185","fqdn":"slon.biz","domain":"slon.biz","tld":"biz"},"ip":{"addr":"172.67.169.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://slon.biz/","date":"2026-06-10T11:33:47.514Z","timestamp":1781091227514,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"slon.biz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 06 May 2026 15:48:04 GMT","end":"Tue, 04 Aug 2026 16:46:34 GMT"},"fingerprint":{"sha1":"38:4D:94:42:4B:4C:2F:6C:E3:85:79:42:30:7A:FC:73:71:9C:2E:19","sha256":"33:02:9D:E9:C5:CA:AF:7D:63:1F:18:8E:26:19:D4:87:1A:1E:76:3E:7F:CD:39:C1:37:1C:58:EA:06:01:27:C9"}}},"request":{"raw":"GET /forms/widget.universal/assets/chat-icon-no-bg.svg?v=185 HTTP/1.1\r\nHost: slon.biz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://slon.biz/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: .AspNetCore.Antiforgery.Ix643OkwzkY=CfDJ8HRi9EzRANpAplf2nauG7zICIkpORWwJQaqFvBmwgvlkhSiuyijwoiq8Lt-G0_fG_yJHNPgUvRi8teQCuA-Z4eg9dZLiR-DenX7yKRE__4sxT5E-b2k_kDMLg7HFl164t7KkM4D37_Bl3fnd3M8-FEk; .AspNetCore.Session=CfDJ8HRi9EzRANpAplf2nauG7zICqAf8NVwWUZEU1EqZ4ykmFoIiNnUgsI3nexV5xMbfZhIa108IBBa0MabJ4m9nomz3Dl1LFryyv%2BA%2BBPy4z%2FIopaml7M%2FBPnDxj0yNBrXqc6Rpbq4dj74%2FsA1UyXxunMaIibXkwc0al5fim72%2BBDxp\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 10 Jun 2026 11:33:47 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6QeMziNtDAD4PJPqU5%2FmKTjrhdxrIt7U1T2X1SqO5Tz%2FUZKm9wQEGieYTcKQGQgj1X1giT9Q%2FB0Cb2j%2FAJiNrBMCT3iNQKf4Llip%2BDMVK%2BMXbbcGuyTfzXYQ1w%3D%3D\"}]}\r\npriority: u=5,i\r\naccess-control-allow-origin: *\r\ncache-control: public,max-age=31536000\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Fri, 29 May 2026 16:13:23 GMT\r\nstrict-transport-security: max-age=2592000; includeSubDomains\r\nx-content-type-options: nosniff\r\nreferrer-policy: same-origin\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\netag: W/\"1dcef86128a9014\"\r\ncf-ray: a098102bfdc60b51-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":916,"size_decoded":1341,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"865ada67e1bbfbf46ae88dce22ea5dcb","sha1":"ad0dfe11625c2bb12a8cf5897e976d8826660ac0","sha256":"63d95a7cb9b27365a41ea8eac8520d241913fb37e269d9087dd66e0651cdf986","sha512":"231307612f746fa51e51109a03cc872440c3b7f088c873777725a843a3fd8cb9687ded915f7b84f91b85f06fa67184fac4fa8e51dea15baac0a6e9f072e42223","ssdeep":"","tlshash":"c411cce71d768be884e7ccd8ff6528611206adbe5c3158e5e7a85c5210f26cfe490d12","first_seen":"2025-11-11T10:17:54.002515Z","last_seen":"2026-06-10T11:34:17.169055Z","times_seen":3,"resource_available":false,"data":null}},"time_used":100,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":100,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-10","alert":"Sinkholed","trigger":"slon.biz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-10","alert":"Sinkholed","trigger":"slon.biz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/bootstrap-icons@1.13.1/font/bootstrap-icons.css","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.17.207.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://slon.biz/","date":"2026-06-10T11:33:46.885Z","timestamp":1781091226885,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jsdelivr.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 22 Apr 2026 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"65:D9:C4:7E:04:4C:FD:DD:60:E0:CC:18:B5:B7:01:68:B4:2D:C7:34","sha256":"50:6C:A4:F6:ED:74:C7:E9:68:DB:32:56:5A:68:4C:98:ED:01:28:36:F8:13:BA:CC:19:A7:FD:7A:0A:6E:E7:D4"}}},"request":{"raw":"GET /npm/bootstrap-icons@1.13.1/font/bootstrap-icons.css HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 10 Jun 2026 11:33:46 GMT\r\ncontent-type: text/css; charset=utf-8\r\ncontent-length: 13832\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-jsd-version: 1.13.1\r\nx-jsd-version-type: version\r\netag: W/\"184e4-ptHboTbR5gcHjbMAMHDqs0tR7FA\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\nx-served-by: cache-fra-etou8220088-FRA\r\nx-cache: HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\nage: 2512570\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xhzV%2Fi79DLrS799%2BamjMfF1kM2ke5wE6nsicAFAYUga%2Fm0NYe0N3q%2F89CCUU82jVPVW4FqNCr16SlcH7bkhc9wSWNBCW44ePEpX9%2BmmNbkeA4kqpAiiQcZ7PfpcdRP5%2FJH0%3D\"}]}\r\nserver: cloudflare\r\ncf-ray: a09810282b2e8be6-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":99556,"size_decoded":14941,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"1f041c852155e417017372c978871d14","sha1":"a6d1dba136d1e607078db3003070eab34b51ec50","sha256":"004322721c8557331759bc6ddaacbb689b0f0715d688aec82bd056d2d5b5cc3b","sha512":"bd61eca743ee4f1c1130bb464e76d2ecf0cdb48ef21669a216adb886372aa6ea7f28aee2c7159d5f04667ab1bd82eee979a491215c6915c7c1495ac6cd6705e3","ssdeep":"768:vqnm8OAL1Mzocm4KyH2CJwZwmij34k4RDlWIbWPVUMZ:mOocm4FJwZ5ijINRDlIiw","tlshash":"6aa3efba914f05f9d341e4d92743674693aaba3cd1813c7ad342399ee3c1a188ad73dc","first_seen":"2025-05-11T00:31:32.601303Z","last_seen":"2026-08-13T16:48:27.006868Z","times_seen":2081,"resource_available":false,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":3,"connect":1,"send":0,"wait":7,"receive":0,"ssl":20},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"slon.biz/assets/css/main.css?v=GBcBJBLpsdw7iqIE6NvuCALSX1FSiAg7I46BLa6rG8M","fqdn":"slon.biz","domain":"slon.biz","tld":"biz"},"ip":{"addr":"172.67.169.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://slon.biz/","date":"2026-06-10T11:33:46.887Z","timestamp":1781091226887,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"slon.biz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 06 May 2026 15:48:04 GMT","end":"Tue, 04 Aug 2026 16:46:34 GMT"},"fingerprint":{"sha1":"38:4D:94:42:4B:4C:2F:6C:E3:85:79:42:30:7A:FC:73:71:9C:2E:19","sha256":"33:02:9D:E9:C5:CA:AF:7D:63:1F:18:8E:26:19:D4:87:1A:1E:76:3E:7F:CD:39:C1:37:1C:58:EA:06:01:27:C9"}}},"request":{"raw":"GET /assets/css/main.css?v=GBcBJBLpsdw7iqIE6NvuCALSX1FSiAg7I46BLa6rG8M HTTP/1.1\r\nHost: slon.biz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://slon.biz/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: .AspNetCore.Antiforgery.Ix643OkwzkY=CfDJ8HRi9EzRANpAplf2nauG7zICIkpORWwJQaqFvBmwgvlkhSiuyijwoiq8Lt-G0_fG_yJHNPgUvRi8teQCuA-Z4eg9dZLiR-DenX7yKRE__4sxT5E-b2k_kDMLg7HFl164t7KkM4D37_Bl3fnd3M8-FEk; .AspNetCore.Session=CfDJ8HRi9EzRANpAplf2nauG7zICqAf8NVwWUZEU1EqZ4ykmFoIiNnUgsI3nexV5xMbfZhIa108IBBa0MabJ4m9nomz3Dl1LFryyv%2BA%2BBPy4z%2FIopaml7M%2FBPnDxj0yNBrXqc6Rpbq4dj74%2FsA1UyXxunMaIibXkwc0al5fim72%2BBDxp\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 10 Jun 2026 11:33:46 GMT\r\ncontent-type: text/css; charset=UTF-8\r\naccess-control-allow-origin: *\r\ncache-control: max-age=31536000,immutable\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=d5OwHwOC%2BbftpqyiPvHrw9k6sRMs%2F3%2F2z4OmYch54s5K%2BhhGijIC50%2FeTnaKWOHi0xBPD8er8aISkyCpkB1bcgHQb%2BXAJyoxXF8xoZRm9Z96gebMihYgJL69DQ%3D%3D\"}]}\r\nlast-modified: Fri, 29 May 2026 16:13:23 GMT\r\nstrict-transport-security: max-age=2592000; includeSubDomains\r\nx-content-type-options: nosniff\r\nreferrer-policy: same-origin\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\netag: W/\"G-cyqwxS0bk0OytvZHqxw9cLFAM\"\r\npriority: u=2,i=?0\r\ncf-ray: a09810280d8b0b51-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5785,"size_decoded":2530,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (5785), with no line terminators","md5":"dc067258765dc9dea49bab47a18d35d2","sha1":"39289bcba4236e9f4815e1cbdb02eedb8dd0401b","sha256":"d9878a20bee20cc35778aebf59015e7570804717b289579027659fa9ecda8d8d","sha512":"00b62c1e8abb2a212c7d42148be2395df55ef7b185270a0fb14a3c926bb5ee2802831f05cbdda7d7f4547e5fd53ef7345ad33ffc852bdede90d4e861e2e25424","ssdeep":"96:F4SgPou8zkF+vX3KRZlhoueMsD/+W16UbS9zoKMme2:iSgPou8zkFSnKRZlhoueMS/31tShoW","tlshash":"e1c15436d60135697037da54a2d86a7c272dc127eb130abff12f9a404b877eb5223f46","first_seen":"2025-11-11T10:17:54.01075Z","last_seen":"2026-06-10T11:34:17.170933Z","times_seen":3,"resource_available":false,"data":null}},"time_used":102,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":102,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-10","alert":"Sinkholed","trigger":"slon.biz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-10","alert":"Sinkholed","trigger":"slon.biz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"slon.biz/forms/widget.bundle.js?v=185","fqdn":"slon.biz","domain":"slon.biz","tld":"biz"},"ip":{"addr":"172.67.169.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://slon.biz/","date":"2026-06-10T11:33:47.147Z","timestamp":1781091227147,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"slon.biz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 06 May 2026 15:48:04 GMT","end":"Tue, 04 Aug 2026 16:46:34 GMT"},"fingerprint":{"sha1":"38:4D:94:42:4B:4C:2F:6C:E3:85:79:42:30:7A:FC:73:71:9C:2E:19","sha256":"33:02:9D:E9:C5:CA:AF:7D:63:1F:18:8E:26:19:D4:87:1A:1E:76:3E:7F:CD:39:C1:37:1C:58:EA:06:01:27:C9"}}},"request":{"raw":"GET /forms/widget.bundle.js?v=185 HTTP/1.1\r\nHost: slon.biz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://slon.biz/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: .AspNetCore.Antiforgery.Ix643OkwzkY=CfDJ8HRi9EzRANpAplf2nauG7zICIkpORWwJQaqFvBmwgvlkhSiuyijwoiq8Lt-G0_fG_yJHNPgUvRi8teQCuA-Z4eg9dZLiR-DenX7yKRE__4sxT5E-b2k_kDMLg7HFl164t7KkM4D37_Bl3fnd3M8-FEk; .AspNetCore.Session=CfDJ8HRi9EzRANpAplf2nauG7zICqAf8NVwWUZEU1EqZ4ykmFoIiNnUgsI3nexV5xMbfZhIa108IBBa0MabJ4m9nomz3Dl1LFryyv%2BA%2BBPy4z%2FIopaml7M%2FBPnDxj0yNBrXqc6Rpbq4dj74%2FsA1UyXxunMaIibXkwc0al5fim72%2BBDxp\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 10 Jun 2026 11:33:47 GMT\r\ncontent-type: text/javascript; charset=UTF-8\r\ncache-control: max-age=31536000,immutable\r\npriority: u=3,i=?0\r\nlast-modified: Fri, 29 May 2026 16:13:23 GMT\r\nstrict-transport-security: max-age=2592000; includeSubDomains\r\nx-content-type-options: nosniff\r\nreferrer-policy: same-origin\r\nage: 413729\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\netag: W/\"9WfBSIQ2Hm_touM-by5c4S1s0mw\"\r\ncontent-encoding: zstd\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FGNec0KbW18cXBzYs9mPpIo7%2FtDJ8vctywa71Y9A4saNMce3cWJkhZoE7niQMry7sjxeKXqLgh%2BHyJuVTxBRsFLPBce1uQeBKHKFgRfLBOCwpo%2BSi3gFxmPLAA%3D%3D\"}]}\r\ncf-ray: a0981029ad9c0b51-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":102476,"size_decoded":28430,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (60770), with no line terminators","md5":"25296cb5f116a7eabac3a02f5ba9abc2","sha1":"2929f5c3cf431f4eb70b1415c49e1e33dabb6ff2","sha256":"8e6687029b2b6bf5733f5fe3f98026cc12fd2b8dd10000e3d82ef7a00afaa029","sha512":"c9b599e6c6d9461fb397d6c049ce658caa827c93664ca38703753ee55dfe0f1621ad8c705ae4b39a045479b20ca9f2ec11064ad50794323c2e48e66820dff5d0","ssdeep":"3072:G5ypp7aTmN/EnYsxoyiPuJcssM190DS9wB:G0f2m6vJcsF8","tlshash":"2da307e565041b3380973099a66e368c67b6a23d7f4b411064388efd76e8cc6c167fee","first_seen":"2026-03-28T05:09:55.002084Z","last_seen":"2026-06-10T11:34:17.171916Z","times_seen":7,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":14,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-10","alert":"Sinkholed","trigger":"slon.biz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-10","alert":"Sinkholed","trigger":"slon.biz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"slon.biz/forms/widget.universal/assets/close-icon.svg?v=185","fqdn":"slon.biz","domain":"slon.biz","tld":"biz"},"ip":{"addr":"172.67.169.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://slon.biz/","date":"2026-06-10T11:33:47.512Z","timestamp":1781091227512,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"slon.biz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 06 May 2026 15:48:04 GMT","end":"Tue, 04 Aug 2026 16:46:34 GMT"},"fingerprint":{"sha1":"38:4D:94:42:4B:4C:2F:6C:E3:85:79:42:30:7A:FC:73:71:9C:2E:19","sha256":"33:02:9D:E9:C5:CA:AF:7D:63:1F:18:8E:26:19:D4:87:1A:1E:76:3E:7F:CD:39:C1:37:1C:58:EA:06:01:27:C9"}}},"request":{"raw":"GET /forms/widget.universal/assets/close-icon.svg?v=185 HTTP/1.1\r\nHost: slon.biz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://slon.biz/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: .AspNetCore.Antiforgery.Ix643OkwzkY=CfDJ8HRi9EzRANpAplf2nauG7zICIkpORWwJQaqFvBmwgvlkhSiuyijwoiq8Lt-G0_fG_yJHNPgUvRi8teQCuA-Z4eg9dZLiR-DenX7yKRE__4sxT5E-b2k_kDMLg7HFl164t7KkM4D37_Bl3fnd3M8-FEk; .AspNetCore.Session=CfDJ8HRi9EzRANpAplf2nauG7zICqAf8NVwWUZEU1EqZ4ykmFoIiNnUgsI3nexV5xMbfZhIa108IBBa0MabJ4m9nomz3Dl1LFryyv%2BA%2BBPy4z%2FIopaml7M%2FBPnDxj0yNBrXqc6Rpbq4dj74%2FsA1UyXxunMaIibXkwc0al5fim72%2BBDxp\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 10 Jun 2026 11:33:47 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=aLJ0H18Qht56XFBbxiamtJMpC2DqCIxL80N5tjkjMARRTJOLWGgbbSQ9dk96F3zxYP%2BB%2FG54g4Ndy6rlf6vhCWBSOI6xhWFoajI4M1OjoJkJn6nKKObm4jd4hQ%3D%3D\"}]}\r\npriority: u=5,i\r\naccess-control-allow-origin: *\r\ncache-control: public,max-age=31536000\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Fri, 29 May 2026 16:13:23 GMT\r\nstrict-transport-security: max-age=2592000; includeSubDomains\r\nx-content-type-options: nosniff\r\nreferrer-policy: same-origin\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\netag: W/\"1dcef86128a9215\"\r\ncf-ray: a098102bfdc50b51-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":405,"size_decoded":1060,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"c9b9cfe6e7ce618945a1e7d7ec2460e9","sha1":"08a95ad2c03060ac86fdff3fdb64a5feb8ca8962","sha256":"7932b42cdde97181d89ed6c16a704da4f863991f3de23b7e78905d3a29a7b249","sha512":"24f2d50043bb2cbd113a6fe2d4d95abafc78c15ef8b05070160ac9e21f008297128689feba451b9d1ab00a096910e92a0f6405a9ab583e884090a9294ad4e800","ssdeep":"","tlshash":"cae0e53496e05d789bd443f09e24e39dbdee253e7461a1bac054e6d0f5132c1b0c8cd6","first_seen":"2023-06-14T18:59:50Z","last_seen":"2026-06-10T11:34:17.173246Z","times_seen":4,"resource_available":false,"data":null}},"time_used":429,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":429,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-10","alert":"Sinkholed","trigger":"slon.biz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-10","alert":"Sinkholed","trigger":"slon.biz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"slon.biz/Uploads/Channels/1051/Slon-icon-square.svg?v=185","fqdn":"slon.biz","domain":"slon.biz","tld":"biz"},"ip":{"addr":"172.67.169.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://slon.biz/","date":"2026-06-10T11:33:47.527Z","timestamp":1781091227527,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"slon.biz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 06 May 2026 15:48:04 GMT","end":"Tue, 04 Aug 2026 16:46:34 GMT"},"fingerprint":{"sha1":"38:4D:94:42:4B:4C:2F:6C:E3:85:79:42:30:7A:FC:73:71:9C:2E:19","sha256":"33:02:9D:E9:C5:CA:AF:7D:63:1F:18:8E:26:19:D4:87:1A:1E:76:3E:7F:CD:39:C1:37:1C:58:EA:06:01:27:C9"}}},"request":{"raw":"GET /Uploads/Channels/1051/Slon-icon-square.svg?v=185 HTTP/1.1\r\nHost: slon.biz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://slon.biz/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: .AspNetCore.Antiforgery.Ix643OkwzkY=CfDJ8HRi9EzRANpAplf2nauG7zICIkpORWwJQaqFvBmwgvlkhSiuyijwoiq8Lt-G0_fG_yJHNPgUvRi8teQCuA-Z4eg9dZLiR-DenX7yKRE__4sxT5E-b2k_kDMLg7HFl164t7KkM4D37_Bl3fnd3M8-FEk; .AspNetCore.Session=CfDJ8HRi9EzRANpAplf2nauG7zICqAf8NVwWUZEU1EqZ4ykmFoIiNnUgsI3nexV5xMbfZhIa108IBBa0MabJ4m9nomz3Dl1LFryyv%2BA%2BBPy4z%2FIopaml7M%2FBPnDxj0yNBrXqc6Rpbq4dj74%2FsA1UyXxunMaIibXkwc0al5fim72%2BBDxp\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 10 Jun 2026 11:33:47 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7AyuLRhKJJhKIDxlbKdTzyI4EtUUUgnuQ0hQ2shauAjdT3Jtl8zlLaKmjKdoixCSo9WmpWcQZ7lpn2vzfxXCS8RDBkjrrvRIBG%2BciCzin2BkLouNepyrZE15kg%3D%3D\"}]}\r\npriority: u=5,i\r\naccess-control-allow-origin: *\r\ncache-control: public,max-age=31536000\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Tue, 07 Feb 2023 22:51:46 GMT\r\nstrict-transport-security: max-age=2592000; includeSubDomains\r\nx-content-type-options: nosniff\r\nreferrer-policy: same-origin\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\netag: W/\"1d93b46c13ea7b6\"\r\ncf-ray: a098102c0dcd0b51-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2742,"size_decoded":2185,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"53ec12c9612eda7d55dd419ec2dbf166","sha1":"59203d3e66542dfded40b4ec640e619d54802d34","sha256":"71df57d1af80f8ed39eac077a764383b72878c749c8979a79fa861a4b16478a8","sha512":"7dc2a97f1196d4e1e9bab99058bab7ccc0b0c870ac7c827f94a265240c948f75f0c70c1f0a899fd29a7db9e19c49c399178a1a6708b0e2941329e0d27d1d8c40","ssdeep":"","tlshash":"2751ce7dd358d3b4dc6583788e26b4b4a84e94dea5e0a37c4734c970f6a35eca28c4c5","first_seen":"2025-11-11T10:17:53.980473Z","last_seen":"2026-06-10T11:34:17.174845Z","times_seen":3,"resource_available":false,"data":null}},"time_used":106,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":106,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-10","alert":"Sinkholed","trigger":"slon.biz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-10","alert":"Sinkholed","trigger":"slon.biz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/bootstrap@5.3.8/dist/js/bootstrap.bundle.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.17.207.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://slon.biz/","date":"2026-06-10T11:33:46.890Z","timestamp":1781091226890,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jsdelivr.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 22 Apr 2026 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"65:D9:C4:7E:04:4C:FD:DD:60:E0:CC:18:B5:B7:01:68:B4:2D:C7:34","sha256":"50:6C:A4:F6:ED:74:C7:E9:68:DB:32:56:5A:68:4C:98:ED:01:28:36:F8:13:BA:CC:19:A7:FD:7A:0A:6E:E7:D4"}}},"request":{"raw":"GET /npm/bootstrap@5.3.8/dist/js/bootstrap.bundle.min.js HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 10 Jun 2026 11:33:46 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 24469\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-jsd-version: 5.3.8\r\nx-jsd-version-type: version\r\netag: W/\"13a70-afaIhYtxScVhxKH7xJbp5ms98v4\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\nx-served-by: cache-fra-eddf8230051-FRA, cache-bma-essb1270076-BMA\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\nage: 618404\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=38hxqNam%2FjaEw%2BHk2A%2BSsh2l74BSoNMGhNFv%2BW8diEi0Av5ZVhKbjbr%2Ffln8DVve4EA1KQKVfG9Y%2BIyIow4Lo2DxSAJqpb%2Bf4HxMc6zMGFsO2qFXHnKrCy40GcoCKkn5fuw%3D\"}]}\r\nserver: cloudflare\r\ncf-ray: a09810282b348be6-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":80496,"size_decoded":25624,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65299)","md5":"5cc1b73e70520fa84b1846afe0ec8fb6","sha1":"69f688858b7149c561c4a1fbc496e9e66b3df2fe","sha256":"e4fd49181388c48ec5040bd3fe66f57c29c8e67fcd8502b3354b96ec7ab47cc7","sha512":"1ef3a326b7703690db9062481b664da83955a8ca3beea6ece0c7b871a8741e80eb7e1adb03ef12065667d4aaef010c3b7082cb3c526f770220a61cd098c9be3f","ssdeep":"1536:oH5mi07eR2tgYR6ifTGqghZxBMzFhhX1fhKCywwPesX5L08g:yNwhh+CywwWsXZg","tlshash":"7673d6593245b4730ade85a68037430bf2265898b64b812cb57cadde2a7dcc27277f78","first_seen":"2025-09-04T15:51:36.009011Z","last_seen":"2026-08-13T17:35:14.930801Z","times_seen":3507,"resource_available":true,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":1,"connect":1,"send":0,"wait":7,"receive":0,"ssl":15},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"slon.biz/assets/img/home.svg?v=HSJdCjWgakYtWT5h2L7RCxrFAo5Ft23vU1SQYsRvMvU","fqdn":"slon.biz","domain":"slon.biz","tld":"biz"},"ip":{"addr":"172.67.169.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://slon.biz/","date":"2026-06-10T11:33:46.904Z","timestamp":1781091226904,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"slon.biz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 06 May 2026 15:48:04 GMT","end":"Tue, 04 Aug 2026 16:46:34 GMT"},"fingerprint":{"sha1":"38:4D:94:42:4B:4C:2F:6C:E3:85:79:42:30:7A:FC:73:71:9C:2E:19","sha256":"33:02:9D:E9:C5:CA:AF:7D:63:1F:18:8E:26:19:D4:87:1A:1E:76:3E:7F:CD:39:C1:37:1C:58:EA:06:01:27:C9"}}},"request":{"raw":"GET /assets/img/home.svg?v=HSJdCjWgakYtWT5h2L7RCxrFAo5Ft23vU1SQYsRvMvU HTTP/1.1\r\nHost: slon.biz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://slon.biz/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: .AspNetCore.Antiforgery.Ix643OkwzkY=CfDJ8HRi9EzRANpAplf2nauG7zICIkpORWwJQaqFvBmwgvlkhSiuyijwoiq8Lt-G0_fG_yJHNPgUvRi8teQCuA-Z4eg9dZLiR-DenX7yKRE__4sxT5E-b2k_kDMLg7HFl164t7KkM4D37_Bl3fnd3M8-FEk; .AspNetCore.Session=CfDJ8HRi9EzRANpAplf2nauG7zICqAf8NVwWUZEU1EqZ4ykmFoIiNnUgsI3nexV5xMbfZhIa108IBBa0MabJ4m9nomz3Dl1LFryyv%2BA%2BBPy4z%2FIopaml7M%2FBPnDxj0yNBrXqc6Rpbq4dj74%2FsA1UyXxunMaIibXkwc0al5fim72%2BBDxp\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 10 Jun 2026 11:33:47 GMT\r\ncontent-type: image/svg+xml\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9WQBcT5f9U%2BVylTsjQ6EDxWwtMZ0ejd4JGR%2F8Je0IYQxhxccekVXfWogZj77K9v9NmxPY7xVO7JhpzaeaayuAx%2B2VBDSq2vzqIWQqCb5NhNNkVFqy0hMybtJAg%3D%3D\"}]}\r\naccess-control-allow-origin: *\r\ncache-control: public,max-age=31536000\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Fri, 29 May 2026 16:13:23 GMT\r\nstrict-transport-security: max-age=2592000; includeSubDomains\r\nx-content-type-options: nosniff\r\nreferrer-policy: same-origin\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\netag: W/\"1dcef86128a5086\"\r\ncf-ray: a09810282d900b51-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":49926,"size_decoded":19954,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"c78fc8cb50785bcbe16caa293d5f9130","sha1":"813472d5e9aa257d2098fe9190a156fedabd94a6","sha256":"1d225d0a35a06a462d593e61d8bed10b1ac5028e45b76def53549062c46f32f5","sha512":"5a4daa939893157b08ec4e9ad503592e83376f2dc18922ec807ec4825e6d6de1ff68a76259254e2dd8e006de0b707b798535616fb6402c57746ff0f6c3c5183a","ssdeep":"768:1UPtgfKR51iJqiPX6sK91ZuE4tyd9ZshyQ/IhiCcjt9vQn:1vydd1IE4tydnsX/IhiCSta","tlshash":"3e2384d1f65a3278688703f4ca2954b1395fa0edb71693aca131d3b0f215beed4849bc","first_seen":"2025-11-11T10:17:54.014922Z","last_seen":"2026-06-10T11:34:17.176989Z","times_seen":3,"resource_available":false,"data":null}},"time_used":182,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":134,"receive":47,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-10","alert":"Sinkholed","trigger":"slon.biz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-10","alert":"Sinkholed","trigger":"slon.biz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"slon.biz/forms/widget.universal/sounds/sent.mp3?v=185","fqdn":"slon.biz","domain":"slon.biz","tld":"biz"},"ip":{"addr":"172.67.169.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://slon.biz/","date":"2026-06-10T11:33:47.312Z","timestamp":1781091227312,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"slon.biz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 06 May 2026 15:48:04 GMT","end":"Tue, 04 Aug 2026 16:46:34 GMT"},"fingerprint":{"sha1":"38:4D:94:42:4B:4C:2F:6C:E3:85:79:42:30:7A:FC:73:71:9C:2E:19","sha256":"33:02:9D:E9:C5:CA:AF:7D:63:1F:18:8E:26:19:D4:87:1A:1E:76:3E:7F:CD:39:C1:37:1C:58:EA:06:01:27:C9"}}},"request":{"raw":"GET /forms/widget.universal/sounds/sent.mp3?v=185 HTTP/1.1\r\nHost: slon.biz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: audio/webm,audio/ogg,audio/wav,audio/*;q=0.9,application/ogg;q=0.7,video/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nReferer: https://slon.biz/\r\nRange: bytes=0-\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: .AspNetCore.Antiforgery.Ix643OkwzkY=CfDJ8HRi9EzRANpAplf2nauG7zICIkpORWwJQaqFvBmwgvlkhSiuyijwoiq8Lt-G0_fG_yJHNPgUvRi8teQCuA-Z4eg9dZLiR-DenX7yKRE__4sxT5E-b2k_kDMLg7HFl164t7KkM4D37_Bl3fnd3M8-FEk; .AspNetCore.Session=CfDJ8HRi9EzRANpAplf2nauG7zICqAf8NVwWUZEU1EqZ4ykmFoIiNnUgsI3nexV5xMbfZhIa108IBBa0MabJ4m9nomz3Dl1LFryyv%2BA%2BBPy4z%2FIopaml7M%2FBPnDxj0yNBrXqc6Rpbq4dj74%2FsA1UyXxunMaIibXkwc0al5fim72%2BBDxp\r\nSec-Fetch-Dest: audio\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 206 \r\nserver: cloudflare\r\ndate: Wed, 10 Jun 2026 11:33:47 GMT\r\ncontent-type: audio/mpeg\r\npriority: u=4,i=?0\r\nreferrer-policy: same-origin\r\naccess-control-allow-origin: *\r\ncache-control: public,max-age=31536000\r\netag: \"1dcef86128aae88\"\r\nlast-modified: Fri, 29 May 2026 16:13:23 GMT\r\nstrict-transport-security: max-age=2592000; includeSubDomains\r\nx-content-type-options: nosniff\r\ncontent-range: bytes 0-15623/15624\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BsYOGyO6bqvA37voZUQHQ5V9rJYXd3wU%2FP5vCDHXtaOXbhWSrL%2FBuQiXXLpbU0wmB4x14doYSLLiKfnxHrdfyAbs4NA40BJhsGn87XaGEj3hex%2BU%2Fxa9GWjr%2Fg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-length: 15624\r\ncf-ray: a098102abdac0b51-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":15624,"size_decoded":16499,"mime_type":"audio/mpeg","magic":"Audio file with ID3 version 2.4.0, contains:\n- MPEG ADTS, layer III, v2,  64 kbps, 24 kHz, JntStereo","md5":"6e5864691d4d71b36e3e8c34e4265c2e","sha1":"c5aa58fe938ed30725f5787128a9b9c7a4923550","sha256":"45dcc5d459a09c55279864fda1fd4661c0b629bc37f938a8865de1c3369ffbc9","sha512":"28b8b473b9849fafb70deb516c35d1271d3c0fceff3a99b2f64d440a0b84ab5680062f28adf91b9663865168326699a216ee83f5a280c4a5b57682c14da6974e","ssdeep":"384:4uBMUP4d8O5uSO1weGz1xx4yQQ9OJI2jVb8N0:4aM+GXx4vQ4uwVYW","tlshash":"2d620829f2b128d0f20e79ab64ca5101ccb326cbd9b958c479eecc914f439bd1f0b5a5","first_seen":"2023-04-26T22:26:26Z","last_seen":"2026-06-10T11:34:17.178069Z","times_seen":25,"resource_available":false,"data":null}},"time_used":130,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":130,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-10","alert":"Sinkholed","trigger":"slon.biz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-10","alert":"Sinkholed","trigger":"slon.biz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"slon.biz/forms/widget.universal/assets/phone-icon.svg?v=185","fqdn":"slon.biz","domain":"slon.biz","tld":"biz"},"ip":{"addr":"172.67.169.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://slon.biz/","date":"2026-06-10T11:33:47.516Z","timestamp":1781091227516,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"slon.biz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 06 May 2026 15:48:04 GMT","end":"Tue, 04 Aug 2026 16:46:34 GMT"},"fingerprint":{"sha1":"38:4D:94:42:4B:4C:2F:6C:E3:85:79:42:30:7A:FC:73:71:9C:2E:19","sha256":"33:02:9D:E9:C5:CA:AF:7D:63:1F:18:8E:26:19:D4:87:1A:1E:76:3E:7F:CD:39:C1:37:1C:58:EA:06:01:27:C9"}}},"request":{"raw":"GET /forms/widget.universal/assets/phone-icon.svg?v=185 HTTP/1.1\r\nHost: slon.biz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://slon.biz/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: .AspNetCore.Antiforgery.Ix643OkwzkY=CfDJ8HRi9EzRANpAplf2nauG7zICIkpORWwJQaqFvBmwgvlkhSiuyijwoiq8Lt-G0_fG_yJHNPgUvRi8teQCuA-Z4eg9dZLiR-DenX7yKRE__4sxT5E-b2k_kDMLg7HFl164t7KkM4D37_Bl3fnd3M8-FEk; .AspNetCore.Session=CfDJ8HRi9EzRANpAplf2nauG7zICqAf8NVwWUZEU1EqZ4ykmFoIiNnUgsI3nexV5xMbfZhIa108IBBa0MabJ4m9nomz3Dl1LFryyv%2BA%2BBPy4z%2FIopaml7M%2FBPnDxj0yNBrXqc6Rpbq4dj74%2FsA1UyXxunMaIibXkwc0al5fim72%2BBDxp\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 10 Jun 2026 11:33:47 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vY%2F2faImHM8IX2MRnS7JG6SBQDO0bYzz4eVISOqXjgDuwX1fOt66B3HnACIhL2OxL%2FOdZ04szGvWNoXiWzpxt6hvTTqClkN0F7K%2B2crsTeQVsNtRi7fjEtl6iQ%3D%3D\"}]}\r\npriority: u=5,i\r\naccess-control-allow-origin: *\r\ncache-control: public,max-age=31536000\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Fri, 29 May 2026 16:13:23 GMT\r\nstrict-transport-security: max-age=2592000; includeSubDomains\r\nx-content-type-options: nosniff\r\nreferrer-policy: same-origin\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\netag: W/\"1dcef86128a92f6\"\r\ncf-ray: a098102bfdc80b51-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":374,"size_decoded":1100,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"79d208e30df04cf78566a936262ee159","sha1":"1503d6608640c3ccbf13bf5a150882893e94275f","sha256":"cea32718c2e4c1e798aada41082d5cbecf4906e71a4eb0194c33d42d4a167ed5","sha512":"0c57f6697ddf66664a700bb3f5bba04c6fd78b380082b7b243fb2550ad00408a763698f3b47ca23741610c853c99a8890539880fdf806fd0aa8c1f265e2392ce","ssdeep":"","tlshash":"fae0c0c38b58d600097bc644fdeb39e0f11b648af18db5a4a1d7af12508f6c5b406c74","first_seen":"2025-11-11T10:17:53.978612Z","last_seen":"2026-06-10T11:34:17.178633Z","times_seen":3,"resource_available":false,"data":null}},"time_used":106,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":106,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-10","alert":"Sinkholed","trigger":"slon.biz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-10","alert":"Sinkholed","trigger":"slon.biz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"slon.biz/forms/widget.universal/chatTmpl.html?v=185","fqdn":"slon.biz","domain":"slon.biz","tld":"biz"},"ip":{"addr":"172.67.169.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://slon.biz/","date":"2026-06-10T11:33:47.444Z","timestamp":1781091227444,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"slon.biz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 06 May 2026 15:48:04 GMT","end":"Tue, 04 Aug 2026 16:46:34 GMT"},"fingerprint":{"sha1":"38:4D:94:42:4B:4C:2F:6C:E3:85:79:42:30:7A:FC:73:71:9C:2E:19","sha256":"33:02:9D:E9:C5:CA:AF:7D:63:1F:18:8E:26:19:D4:87:1A:1E:76:3E:7F:CD:39:C1:37:1C:58:EA:06:01:27:C9"}}},"request":{"raw":"GET /forms/widget.universal/chatTmpl.html?v=185 HTTP/1.1\r\nHost: slon.biz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://slon.biz/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: .AspNetCore.Antiforgery.Ix643OkwzkY=CfDJ8HRi9EzRANpAplf2nauG7zICIkpORWwJQaqFvBmwgvlkhSiuyijwoiq8Lt-G0_fG_yJHNPgUvRi8teQCuA-Z4eg9dZLiR-DenX7yKRE__4sxT5E-b2k_kDMLg7HFl164t7KkM4D37_Bl3fnd3M8-FEk; .AspNetCore.Session=CfDJ8HRi9EzRANpAplf2nauG7zICqAf8NVwWUZEU1EqZ4ykmFoIiNnUgsI3nexV5xMbfZhIa108IBBa0MabJ4m9nomz3Dl1LFryyv%2BA%2BBPy4z%2FIopaml7M%2FBPnDxj0yNBrXqc6Rpbq4dj74%2FsA1UyXxunMaIibXkwc0al5fim72%2BBDxp\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 10 Jun 2026 11:33:47 GMT\r\ncontent-type: text/html; charset=UTF-8\r\naccess-control-allow-origin: *\r\ncache-control: max-age=31536000,immutable\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Fri, 29 May 2026 16:13:23 GMT\r\nstrict-transport-security: max-age=2592000; includeSubDomains\r\nx-content-type-options: nosniff\r\nreferrer-policy: same-origin\r\nvary: accept-encoding\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\ncontent-encoding: zstd\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sAZFkV3QDffOLJfVE0ZU5VrVZ6ztWVy%2B%2BrseOsSd4sS1hthnoV3qVpMhW%2FEFXBjfEMxshArbgkOv7u6ia2JXo1jUcy8rSvwZlG8hqawIHlBU%2Bmx5LukS7yxL%2BA%3D%3D\"}]}\r\ncf-ray: a098102b8dbe0b51-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5755,"size_decoded":1981,"mime_type":"text/html; charset=UTF-8","magic":"Unicode text, UTF-8 text, with very long lines (5691), with no line terminators","md5":"7b807869bc57998321d62ceb84de48b9","sha1":"d5340bd22b5c0840266d4d218c577b2df68737df","sha256":"ce8b386d32d62548f3392546094f4c041291371fefb8bc8aeb00692e64de8419","sha512":"363699a3e0babc15cedee8798ec54cef93baa543fbcad3db9397d17327b54a29c5ea27fcf711a0c167d60f167193fb68f8e2dcde74658c5b9ecd3ba3e50650e3","ssdeep":"48:HsilqkOCrll8hks3DDIMsWSD1cV8B25TrLMznYdjE5d8qkvdWqt8o5wIIiI5wo6V:w6UCUwMLQ/s1PJcdPidWh6C49F","tlshash":"cdc178b38186143b4173aed570ae3f3231d6ea49de83145786fc52e83bcde8da991e04","first_seen":"2025-11-11T10:17:54.012744Z","last_seen":"2026-06-10T11:34:17.179663Z","times_seen":3,"resource_available":false,"data":null}},"time_used":45,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":45,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-10","alert":"Sinkholed","trigger":"slon.biz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-10","alert":"Sinkholed","trigger":"slon.biz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"slon.biz/forms/widget.universal/assets/emoji-icon.svg?v=185","fqdn":"slon.biz","domain":"slon.biz","tld":"biz"},"ip":{"addr":"172.67.169.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://slon.biz/","date":"2026-06-10T11:33:47.522Z","timestamp":1781091227522,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"slon.biz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 06 May 2026 15:48:04 GMT","end":"Tue, 04 Aug 2026 16:46:34 GMT"},"fingerprint":{"sha1":"38:4D:94:42:4B:4C:2F:6C:E3:85:79:42:30:7A:FC:73:71:9C:2E:19","sha256":"33:02:9D:E9:C5:CA:AF:7D:63:1F:18:8E:26:19:D4:87:1A:1E:76:3E:7F:CD:39:C1:37:1C:58:EA:06:01:27:C9"}}},"request":{"raw":"GET /forms/widget.universal/assets/emoji-icon.svg?v=185 HTTP/1.1\r\nHost: slon.biz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://slon.biz/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: .AspNetCore.Antiforgery.Ix643OkwzkY=CfDJ8HRi9EzRANpAplf2nauG7zICIkpORWwJQaqFvBmwgvlkhSiuyijwoiq8Lt-G0_fG_yJHNPgUvRi8teQCuA-Z4eg9dZLiR-DenX7yKRE__4sxT5E-b2k_kDMLg7HFl164t7KkM4D37_Bl3fnd3M8-FEk; .AspNetCore.Session=CfDJ8HRi9EzRANpAplf2nauG7zICqAf8NVwWUZEU1EqZ4ykmFoIiNnUgsI3nexV5xMbfZhIa108IBBa0MabJ4m9nomz3Dl1LFryyv%2BA%2BBPy4z%2FIopaml7M%2FBPnDxj0yNBrXqc6Rpbq4dj74%2FsA1UyXxunMaIibXkwc0al5fim72%2BBDxp\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 10 Jun 2026 11:33:47 GMT\r\ncontent-type: image/svg+xml\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=A6FPt0cLtvmFM3blGH%2FdXTs864oHulvifSjMFlmZTp9AGRgdvt9h4jIKxphCfadKg4ZRaOqo7pUwYyesDKhZA42%2BoivI4uh%2ByXPICfjVzp%2Fl3DbBe0s5UrP2bg%3D%3D\"}]}\r\naccess-control-allow-origin: *\r\ncache-control: public,max-age=31536000\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Fri, 29 May 2026 16:13:23 GMT\r\nstrict-transport-security: max-age=2592000; includeSubDomains\r\nx-content-type-options: nosniff\r\nreferrer-policy: same-origin\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\netag: W/\"1dcef86128a9123\"\r\ncf-ray: a098102c0dca0b51-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":675,"size_decoded":1200,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"8506f05a56115e70233a2488aa1205ae","sha1":"cd45a806e6a9fd71d9237497f46ff0bad489a17e","sha256":"4105c83259f243be49b23b150f32ec5689bf99bdf2da14a839f0f039fe54c66d","sha512":"af9ce158e96a191764488804c91c9acf3aa688de53b6fea56b9b2bd4433ca253cf1da50e83a2245d04e15cd4ffc9978d03c40ac0f327dfb8b64a9a28b2a4799d","ssdeep":"","tlshash":"450199f8177b87ec1925cf609b572c7162a4b0db3ec34e4901980e2a55c638bb4cede8","first_seen":"2023-06-14T18:59:50Z","last_seen":"2026-06-10T11:34:17.180771Z","times_seen":4,"resource_available":false,"data":null}},"time_used":126,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":126,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-10","alert":"Sinkholed","trigger":"slon.biz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-10","alert":"Sinkholed","trigger":"slon.biz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"wss","addr":"wss://slon.biz/chat?userId=7d740907-30a5-4070-904c-cd2ec00cc3b5\u0026id=_llJ7ujLGj1X38doGaGxOA","fqdn":"slon.biz","domain":"slon.biz","tld":"biz"},"ip":{"addr":"172.67.169.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://slon.biz/","date":"2026-06-10T11:33:47.952Z","timestamp":1781091227952,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"slon.biz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 06 May 2026 15:48:04 GMT","end":"Tue, 04 Aug 2026 16:46:34 GMT"},"fingerprint":{"sha1":"38:4D:94:42:4B:4C:2F:6C:E3:85:79:42:30:7A:FC:73:71:9C:2E:19","sha256":"33:02:9D:E9:C5:CA:AF:7D:63:1F:18:8E:26:19:D4:87:1A:1E:76:3E:7F:CD:39:C1:37:1C:58:EA:06:01:27:C9"}}},"request":{"raw":"GET /chat?userId=7d740907-30a5-4070-904c-cd2ec00cc3b5\u0026id=_llJ7ujLGj1X38doGaGxOA HTTP/1.1\r\nHost: slon.biz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-WebSocket-Version: 13\r\nOrigin: https://slon.biz\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: ROEdZO1DpA1kHuYQR7iQpQ==\r\nSec-GPC: 1\r\nConnection: Upgrade\r\nCookie: .AspNetCore.Antiforgery.Ix643OkwzkY=CfDJ8HRi9EzRANpAplf2nauG7zICIkpORWwJQaqFvBmwgvlkhSiuyijwoiq8Lt-G0_fG_yJHNPgUvRi8teQCuA-Z4eg9dZLiR-DenX7yKRE__4sxT5E-b2k_kDMLg7HFl164t7KkM4D37_Bl3fnd3M8-FEk; .AspNetCore.Session=CfDJ8HRi9EzRANpAplf2nauG7zICqAf8NVwWUZEU1EqZ4ykmFoIiNnUgsI3nexV5xMbfZhIa108IBBa0MabJ4m9nomz3Dl1LFryyv%2BA%2BBPy4z%2FIopaml7M%2FBPnDxj0yNBrXqc6Rpbq4dj74%2FsA1UyXxunMaIibXkwc0al5fim72%2BBDxp\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 101 Switching Protocols\r\nDate: Wed, 10 Jun 2026 11:33:48 GMT\r\nConnection: upgrade\r\nAccess-Control-Allow-Credentials: true\r\nAccess-Control-Allow-Origin: https://slon.biz\r\nUpgrade: websocket\r\nVary: Origin\r\nStrict-Transport-Security: max-age=2592000; includeSubDomains\r\nX-Content-Type-Options: nosniff\r\nReferrer-Policy: same-origin\r\nSec-WebSocket-Accept: QdvLBjGy6gMMzEN3U/B5RqPoCyg=\r\ncf-cache-status: DYNAMIC\r\nReport-To: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=XAP7ZrdYLSN6aHrFJczMsoJG%2FIg7al4ig0N%2Ff4EebrUqOJfjS6dfGJ4QLxw4IaDwRsV%2Fqhf1wYtVy3oWGx9o7H8qrNbNaMgMkEMSCLlENeINfIZ%2BKIZaD7oAmQ%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nNEL: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nServer: cloudflare\r\nCF-RAY: a098102ede8cb4f9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"101","status_text":"Switching Protocols","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":820,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-13T19:51:56.000454Z","times_seen":17875501,"resource_available":true,"data":null}},"time_used":154,"timings":{"blocked":0,"dns":14,"connect":15,"send":0,"wait":116,"receive":0,"ssl":9},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"slon.biz/forms/img/close.svg?v=185","fqdn":"slon.biz","domain":"slon.biz","tld":"biz"},"ip":{"addr":"172.67.169.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://slon.biz/","date":"2026-06-10T11:33:47.303Z","timestamp":1781091227303,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"slon.biz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 06 May 2026 15:48:04 GMT","end":"Tue, 04 Aug 2026 16:46:34 GMT"},"fingerprint":{"sha1":"38:4D:94:42:4B:4C:2F:6C:E3:85:79:42:30:7A:FC:73:71:9C:2E:19","sha256":"33:02:9D:E9:C5:CA:AF:7D:63:1F:18:8E:26:19:D4:87:1A:1E:76:3E:7F:CD:39:C1:37:1C:58:EA:06:01:27:C9"}}},"request":{"raw":"GET /forms/img/close.svg?v=185 HTTP/1.1\r\nHost: slon.biz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://slon.biz/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: .AspNetCore.Antiforgery.Ix643OkwzkY=CfDJ8HRi9EzRANpAplf2nauG7zICIkpORWwJQaqFvBmwgvlkhSiuyijwoiq8Lt-G0_fG_yJHNPgUvRi8teQCuA-Z4eg9dZLiR-DenX7yKRE__4sxT5E-b2k_kDMLg7HFl164t7KkM4D37_Bl3fnd3M8-FEk; .AspNetCore.Session=CfDJ8HRi9EzRANpAplf2nauG7zICqAf8NVwWUZEU1EqZ4ykmFoIiNnUgsI3nexV5xMbfZhIa108IBBa0MabJ4m9nomz3Dl1LFryyv%2BA%2BBPy4z%2FIopaml7M%2FBPnDxj0yNBrXqc6Rpbq4dj74%2FsA1UyXxunMaIibXkwc0al5fim72%2BBDxp\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 10 Jun 2026 11:33:47 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MGUt9x04%2F3aW48IwveV74ubv9R8xvBa7owUoNhbqrcakyYQ31XMSGvEOANVFNyLw9YFyzOrzQB0T0rP9OoPK%2FQEhTVUWLTnTQAChGm3SjbYPL57%2F3V3qk3ZbXw%3D%3D\"}]}\r\npriority: u=4,i\r\naccess-control-allow-origin: *\r\ncache-control: public,max-age=31536000\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Fri, 29 May 2026 16:13:23 GMT\r\nstrict-transport-security: max-age=2592000; includeSubDomains\r\nx-content-type-options: nosniff\r\nreferrer-policy: same-origin\r\nage: 273492\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\netag: W/\"1dcef86128a91b9\"\r\ncf-ray: a098102aadaa0b51-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":569,"size_decoded":1134,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"380ef7c3eec8bf623341f077b15fd849","sha1":"19afb2920cc721ea13e41b50fd379c9a5e8a2894","sha256":"32f593c962a92d7eb275f1330619283b16442318e885d519caf7510552a3f72a","sha512":"2780fc7032973d0f8981c5b521fb0726e35b025368979352aa0924afea31a7bbd08f85eab3f5fe38a32e85fca563fd74800db00e03dfe09c79765f865aeb7e17","ssdeep":"","tlshash":"95f050f5a38820f65644b7f4cb583f0df8e830fe25a8c55eb2b5174235da096700185c","first_seen":"2023-06-14T18:59:50Z","last_seen":"2026-06-10T11:34:17.183004Z","times_seen":20,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-10","alert":"Sinkholed","trigger":"slon.biz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-10","alert":"Sinkholed","trigger":"slon.biz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ajax.googleapis.com/ajax/libs/jquery/3.7.1/jquery.min.js","fqdn":"ajax.googleapis.com","domain":"ajax.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.74","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://slon.biz/","date":"2026-06-10T11:33:46.888Z","timestamp":1781091226888,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 18 May 2026 18:37:22 GMT","end":"Mon, 10 Aug 2026 18:37:21 GMT"},"fingerprint":{"sha1":"09:D4:FC:2F:81:37:26:42:91:15:6F:27:1B:72:A7:D2:1A:FC:31:72","sha256":"E9:45:95:A3:A1:F2:6E:F0:08:73:C1:35:32:67:E6:72:BB:89:C7:27:C0:8F:D7:48:6F:0A:88:7E:8B:00:2F:B9"}}},"request":{"raw":"GET /ajax/libs/jquery/3.7.1/jquery.min.js HTTP/1.1\r\nHost: ajax.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"hosted-libraries-pushers\"\r\nreport-to: {\"group\":\"hosted-libraries-pushers\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 30462\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 04 Jun 2026 07:51:53 GMT\r\nexpires: Fri, 04 Jun 2027 07:51:53 GMT\r\ncache-control: public, max-age=31536000, stale-while-revalidate=2592000\r\nage: 531713\r\nlast-modified: Tue, 12 Sep 2023 02:38:22 GMT\r\ncontent-type: text/javascript; charset=UTF-8\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":87533,"size_decoded":31446,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (65447)","md5":"2c872dbe60f4ba70fb85356113d8b35e","sha1":"ee48592d1fff952fcf06ce0b666ed4785493afdc","sha256":"fc9a93dd241f6b045cbff0481cf4e1901becd0e12fb45166a8f17f95823f0b1a","sha512":"bf6089ed4698cb8270a8b0c8ad9508ff886a7a842278e98064d5c1790ca3a36d5d69d9f047ef196882554fc104da2c88eb5395f1ee8cf0f3f6ff8869408350fe","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKr:sHNwcv9VBQpLl88SMBQ47GKr","tlshash":"3983f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","first_seen":"2023-08-31T16:03:19Z","last_seen":"2026-08-13T19:45:10.21121Z","times_seen":185500,"resource_available":true,"data":null}},"time_used":81,"timings":{"blocked":-1,"dns":3,"connect":15,"send":0,"wait":15,"receive":15,"ssl":33},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"slon.biz/assets/js/main.js?v=OWG_YNLb9HaRvUXUR0KmoxXyOj82Kev3rbnOoaEuc_E","fqdn":"slon.biz","domain":"slon.biz","tld":"biz"},"ip":{"addr":"172.67.169.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://slon.biz/","date":"2026-06-10T11:33:46.893Z","timestamp":1781091226893,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"slon.biz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 06 May 2026 15:48:04 GMT","end":"Tue, 04 Aug 2026 16:46:34 GMT"},"fingerprint":{"sha1":"38:4D:94:42:4B:4C:2F:6C:E3:85:79:42:30:7A:FC:73:71:9C:2E:19","sha256":"33:02:9D:E9:C5:CA:AF:7D:63:1F:18:8E:26:19:D4:87:1A:1E:76:3E:7F:CD:39:C1:37:1C:58:EA:06:01:27:C9"}}},"request":{"raw":"GET /assets/js/main.js?v=OWG_YNLb9HaRvUXUR0KmoxXyOj82Kev3rbnOoaEuc_E HTTP/1.1\r\nHost: slon.biz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://slon.biz/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: .AspNetCore.Antiforgery.Ix643OkwzkY=CfDJ8HRi9EzRANpAplf2nauG7zICIkpORWwJQaqFvBmwgvlkhSiuyijwoiq8Lt-G0_fG_yJHNPgUvRi8teQCuA-Z4eg9dZLiR-DenX7yKRE__4sxT5E-b2k_kDMLg7HFl164t7KkM4D37_Bl3fnd3M8-FEk; .AspNetCore.Session=CfDJ8HRi9EzRANpAplf2nauG7zICqAf8NVwWUZEU1EqZ4ykmFoIiNnUgsI3nexV5xMbfZhIa108IBBa0MabJ4m9nomz3Dl1LFryyv%2BA%2BBPy4z%2FIopaml7M%2FBPnDxj0yNBrXqc6Rpbq4dj74%2FsA1UyXxunMaIibXkwc0al5fim72%2BBDxp\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 10 Jun 2026 11:33:47 GMT\r\ncontent-type: text/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\ncache-control: max-age=31536000,immutable\r\npriority: u=3,i=?0\r\nlast-modified: Fri, 29 May 2026 16:13:23 GMT\r\nstrict-transport-security: max-age=2592000; includeSubDomains\r\nx-content-type-options: nosniff\r\nreferrer-policy: same-origin\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: MISS\r\netag: W/\"Q7JZ2sRLqg2UZqgjN0EgiVZFqoE\"\r\ncontent-encoding: zstd\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pWV4TtxmzppuwZRZO9J4o97xeCVFfLY4mnMtZK6o%2FPFwuMz1RLhIY3v%2Fu9tk%2FgtcUajqgPMybhifZOL1vfbTRTe%2Fldj1HZ4FkLsPcjHgM%2BnjNPJBoQGER2Pv8g%3D%3D\"}]}\r\ncf-ray: a09810281d8d0b51-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":28706,"size_decoded":9770,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (18444), with CRLF line terminators","md5":"b23f53b736f49bcb59633c964f621e57","sha1":"49b26cb4946a516df5aec5e58f4e664ad8a6b44b","sha256":"b55052bd48b248c92f48c74f2a8ae9dcb4b775b3ba0cc164ee0262573cab1fe0","sha512":"6456c2abde46d5f20c2d773eed1e10ac451eb537f5a74997a70cc3c607548f3e1debd1c6dfe061cd92d2ae9b4e86e72089d66536b9786ff86d7d584b04dbd718","ssdeep":"768:HecZq1ybGRS7tfbh6mwWoFWDduYrHXsl01nTYVljQHOf2CidcZcMQ5ZzBv+YCNxU:+4lmOu16Iuf","tlshash":"09d2e868b110247307fb22fba16b778679ba604dfc478004356d8ca51fe6c4b5a73de9","first_seen":"2026-06-10T11:34:17.19306Z","last_seen":"2026-06-10T11:34:17.19306Z","times_seen":1,"resource_available":true,"data":null}},"time_used":131,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":131,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-10","alert":"Sinkholed","trigger":"slon.biz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-10","alert":"Sinkholed","trigger":"slon.biz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"slon.biz/forms/widget.webcall/css/style.css?v=185","fqdn":"slon.biz","domain":"slon.biz","tld":"biz"},"ip":{"addr":"172.67.169.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://slon.biz/","date":"2026-06-10T11:33:47.268Z","timestamp":1781091227268,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"slon.biz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 06 May 2026 15:48:04 GMT","end":"Tue, 04 Aug 2026 16:46:34 GMT"},"fingerprint":{"sha1":"38:4D:94:42:4B:4C:2F:6C:E3:85:79:42:30:7A:FC:73:71:9C:2E:19","sha256":"33:02:9D:E9:C5:CA:AF:7D:63:1F:18:8E:26:19:D4:87:1A:1E:76:3E:7F:CD:39:C1:37:1C:58:EA:06:01:27:C9"}}},"request":{"raw":"GET /forms/widget.webcall/css/style.css?v=185 HTTP/1.1\r\nHost: slon.biz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://slon.biz/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: .AspNetCore.Antiforgery.Ix643OkwzkY=CfDJ8HRi9EzRANpAplf2nauG7zICIkpORWwJQaqFvBmwgvlkhSiuyijwoiq8Lt-G0_fG_yJHNPgUvRi8teQCuA-Z4eg9dZLiR-DenX7yKRE__4sxT5E-b2k_kDMLg7HFl164t7KkM4D37_Bl3fnd3M8-FEk; .AspNetCore.Session=CfDJ8HRi9EzRANpAplf2nauG7zICqAf8NVwWUZEU1EqZ4ykmFoIiNnUgsI3nexV5xMbfZhIa108IBBa0MabJ4m9nomz3Dl1LFryyv%2BA%2BBPy4z%2FIopaml7M%2FBPnDxj0yNBrXqc6Rpbq4dj74%2FsA1UyXxunMaIibXkwc0al5fim72%2BBDxp\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=0\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 10 Jun 2026 11:33:47 GMT\r\ncontent-type: text/css; charset=UTF-8\r\naccess-control-allow-origin: *\r\ncache-control: max-age=31536000,immutable\r\npriority: u=0,i=?0\r\nlast-modified: Fri, 29 May 2026 16:13:23 GMT\r\nstrict-transport-security: max-age=2592000; includeSubDomains\r\nx-content-type-options: nosniff\r\nreferrer-policy: same-origin\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: MISS\r\netag: W/\"lCzCklERe5r2K1Jpemul0fAV4VY\"\r\ncontent-encoding: zstd\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=V4An3iywrECkUTVQ5rX8D4YY2m9DF8iRiW4VxDiswLlAKkQTR0AMwCCYXgoknx%2BK5Xw%2FQ%2B0fHfQDVNb6GSBnpIf%2BPRWV2QVLayAJjP92S%2FxegCfmKtJ%2B567HKQ%3D%3D\"}]}\r\ncf-ray: a098102a6da30b51-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2842,"size_decoded":1973,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (2842), with no line terminators","md5":"ea26dfc3e8786e82f2cd11f228f4ef01","sha1":"4eed4106b9d5a40f378441d41ee7f176dc7454c8","sha256":"92d9da3986f2adf45fdd887595ad5b689b36b4de917d8eb97776b7ce93bb83d2","sha512":"8c7ea3ecee5ac920a07d77b5af232e29092601d83cbe444c038a94b598193ab4afd2d29bc3df4a122e52cc532aba93af6ee2f1b19a6f2847d32d41e2af2b1902","ssdeep":"","tlshash":"da5120b91a5ec90de0abf247e8d09e9c3026cf03fb231e6eb2a4a45583c55dd25f4745","first_seen":"2025-11-11T10:17:53.996293Z","last_seen":"2026-06-10T11:34:17.19484Z","times_seen":3,"resource_available":false,"data":null}},"time_used":43,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":43,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-10","alert":"Sinkholed","trigger":"slon.biz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-10","alert":"Sinkholed","trigger":"slon.biz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/libphonenumber-js@1/bundle/libphonenumber-max.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.17.207.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://slon.biz/","date":"2026-06-10T11:33:47.546Z","timestamp":1781091227546,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jsdelivr.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 22 Apr 2026 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"65:D9:C4:7E:04:4C:FD:DD:60:E0:CC:18:B5:B7:01:68:B4:2D:C7:34","sha256":"50:6C:A4:F6:ED:74:C7:E9:68:DB:32:56:5A:68:4C:98:ED:01:28:36:F8:13:BA:CC:19:A7:FD:7A:0A:6E:E7:D4"}}},"request":{"raw":"GET /npm/libphonenumber-js@1/bundle/libphonenumber-max.js HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 10 Jun 2026 11:33:47 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 65291\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=604800, s-maxage=43200\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-jsd-version: 1.13.6\r\nx-jsd-version-type: version\r\netag: W/\"3db9a-gdHN6+Phv/KVhrbg1E80zPLjDcg\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\nx-served-by: cache-fra-eddf8230213-FRA, cache-ber1080038-BER\r\nx-cache: HIT, MISS\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AO9F48YA27TbckabiMwT7LylHyFMdivUb157tOd5RRkJMITlFBjxnNsnOcsR5QoFo0dX5R5S4IrDJOyrrBDk92syAiJQ89VS2BNYTs6Qxu9bPY4CRWe5WbgyheDSEcuZaks%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: a098102c2ece56c0-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":252826,"size_decoded":66425,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"306b437cac09b9c62661c96ed8ddcab7","sha1":"81d1cdebe3e1bff29586b6e0d44f34ccf2e30dc8","sha256":"1be88de940a3432dade2e13ec3c247237c7e197c03a0167176b7e2401d989f69","sha512":"e02ce49aa617046aec95858b90314828b129fece094b448a431e3df5024a167c6423086a162ba7e86312b15f0e1418e1fe56c3fe7725f0b1f65eeb554207ec05","ssdeep":"3072:iOK03o4Pwju2sBjSf55PM2/JANvtG4ZlMAbxI7zjalZxLhe4:iTu2sBytM2/4kgbxIHWlZxLhe4","tlshash":"d034b6fbb740f72b75e63b688916d2ce6acc9cb1e8985048abd3d9cb5c60d22107c715","first_seen":"2026-06-06T10:26:03.065243Z","last_seen":"2026-06-10T21:04:19.424497Z","times_seen":5,"resource_available":true,"data":null}},"time_used":43,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":42,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"slon.biz/assets/favicons/favicon.svg?v=ytyOrAU7MnP3wc02pBi633f-OkYg5t2aU54FZ8DM8lw","fqdn":"slon.biz","domain":"slon.biz","tld":"biz"},"ip":{"addr":"172.67.169.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://slon.biz/","date":"2026-06-10T11:33:46.902Z","timestamp":1781091226902,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"slon.biz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 06 May 2026 15:48:04 GMT","end":"Tue, 04 Aug 2026 16:46:34 GMT"},"fingerprint":{"sha1":"38:4D:94:42:4B:4C:2F:6C:E3:85:79:42:30:7A:FC:73:71:9C:2E:19","sha256":"33:02:9D:E9:C5:CA:AF:7D:63:1F:18:8E:26:19:D4:87:1A:1E:76:3E:7F:CD:39:C1:37:1C:58:EA:06:01:27:C9"}}},"request":{"raw":"GET /assets/favicons/favicon.svg?v=ytyOrAU7MnP3wc02pBi633f-OkYg5t2aU54FZ8DM8lw HTTP/1.1\r\nHost: slon.biz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://slon.biz/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: .AspNetCore.Antiforgery.Ix643OkwzkY=CfDJ8HRi9EzRANpAplf2nauG7zICIkpORWwJQaqFvBmwgvlkhSiuyijwoiq8Lt-G0_fG_yJHNPgUvRi8teQCuA-Z4eg9dZLiR-DenX7yKRE__4sxT5E-b2k_kDMLg7HFl164t7KkM4D37_Bl3fnd3M8-FEk; .AspNetCore.Session=CfDJ8HRi9EzRANpAplf2nauG7zICqAf8NVwWUZEU1EqZ4ykmFoIiNnUgsI3nexV5xMbfZhIa108IBBa0MabJ4m9nomz3Dl1LFryyv%2BA%2BBPy4z%2FIopaml7M%2FBPnDxj0yNBrXqc6Rpbq4dj74%2FsA1UyXxunMaIibXkwc0al5fim72%2BBDxp\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 10 Jun 2026 11:33:47 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ouOzMoIs3jdh9NyUQ2o5cnGM1%2BEMwo%2BqL5ae78QkrID2K9xLaiob52%2F86b2bIZv5LuK7OZI%2B2jb88aXwgxzxmq0nUb9NSgsvRPDFI1lXVdDGVqXe6znow6oO8Q%3D%3D\"}]}\r\npriority: u=5,i\r\naccess-control-allow-origin: *\r\ncache-control: public,max-age=31536000\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Fri, 29 May 2026 16:13:23 GMT\r\nstrict-transport-security: max-age=2592000; includeSubDomains\r\nx-content-type-options: nosniff\r\nreferrer-policy: same-origin\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\netag: W/\"1dcef86128a9879\"\r\ncf-ray: a09810282d8f0b51-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3065,"size_decoded":2376,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"7502dc78147f29df1b6ca717fd7cd6c1","sha1":"4b2df312fb08e8fbb6290e6791d9298dc2687e44","sha256":"cadc8eac053b3273f7c1cd36a418badf77fe3a4620e6dd9a539e0567c0ccf25c","sha512":"383598a4ce087144ccc081cc4cfb88ada3c3bbb595f63e7e8864dee05cffed397785bc237174db0b10d81d6d1c7264d9d34571cc1db82d46cd7ed9b0abac500b","ssdeep":"","tlshash":"6251dd7cd358d3b4dc6583789e36b474e84e949e91e0a3788664c870f6a74e8a28c8c5","first_seen":"2025-11-11T10:17:53.968962Z","last_seen":"2026-06-10T11:34:17.197158Z","times_seen":3,"resource_available":false,"data":null}},"time_used":105,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":105,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-10","alert":"Sinkholed","trigger":"slon.biz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-10","alert":"Sinkholed","trigger":"slon.biz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"geo.unioin.com/api/geoip","fqdn":"geo.unioin.com","domain":"unioin.com","tld":"com"},"ip":{"addr":"172.67.204.18","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://slon.biz/","date":"2026-06-10T11:33:47.265Z","timestamp":1781091227265,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"unioin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 25 Apr 2026 21:33:35 GMT","end":"Fri, 24 Jul 2026 22:32:25 GMT"},"fingerprint":{"sha1":"35:9E:CA:71:EA:78:56:93:E1:C0:B9:3C:EA:78:57:12:3E:8C:86:8C","sha256":"C1:18:4A:E3:A4:B4:3E:D1:EF:B4:CE:2A:05:DD:E0:5C:76:BD:DB:F1:12:E8:9E:A4:04:7C:28:A0:59:FE:54:AC"}}},"request":{"raw":"GET /api/geoip HTTP/1.1\r\nHost: geo.unioin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://slon.biz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 10 Jun 2026 11:33:47 GMT\r\ncontent-type: application/json; charset=utf-8\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://slon.biz\r\nvary: Origin\r\nstrict-transport-security: max-age=5184000; includeSubDomains\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: same-origin\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5hxjQPDJZFKYO2l%2FaO5liSLtEG2gCRWhzxFATB3YHsQVpdZ7qstcnkTtfbGNTQuMsmsx%2F87pCAASB224WoSud70L%2BDGizye%2BMqk3i4qjeAIXZ%2BjxACWosu1peuG%2BqYrjbw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\npriority: u=3,i=?0\r\ncf-ray: a098102aaa1f568f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":761,"size_decoded":1264,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"9fc0c383f8597f251f08829a2cd6766b","sha1":"e6001d7c21c7d30e6bc2ca5781856741aded0638","sha256":"203096268e6d8fc69285ade602ad2bb2a6fe55ee81e8bb3a69137b140f872f07","sha512":"f366529bcdc0cac80429cfae694220f3641ad3e5b7a929ad710f792d112fa93a5996cf805a2ce429a8d8010eaa6ba8aec44994cf843eae32b02cf03336beebe5","ssdeep":"","tlshash":"91016d885c4aad7a8fbec1e7444e760b31eb04b1d08bb5020a699e26c24501ea0004b3","first_seen":"2026-06-10T11:34:17.198122Z","last_seen":"2026-06-10T11:34:17.198122Z","times_seen":1,"resource_available":false,"data":null}},"time_used":142,"timings":{"blocked":-1,"dns":23,"connect":14,"send":0,"wait":104,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pixel.unioin.com/pixel-frame?visitorId=","fqdn":"pixel.unioin.com","domain":"unioin.com","tld":"com"},"ip":{"addr":"172.67.204.18","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://slon.biz/","date":"2026-06-10T11:33:47.267Z","timestamp":1781091227267,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"unioin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 25 Apr 2026 21:33:35 GMT","end":"Fri, 24 Jul 2026 22:32:25 GMT"},"fingerprint":{"sha1":"35:9E:CA:71:EA:78:56:93:E1:C0:B9:3C:EA:78:57:12:3E:8C:86:8C","sha256":"C1:18:4A:E3:A4:B4:3E:D1:EF:B4:CE:2A:05:DD:E0:5C:76:BD:DB:F1:12:E8:9E:A4:04:7C:28:A0:59:FE:54:AC"}}},"request":{"raw":"GET /pixel-frame?visitorId= HTTP/1.1\r\nHost: pixel.unioin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 10 Jun 2026 11:33:47 GMT\r\ncontent-type: text/html; charset=utf-8\r\nserver: cloudflare\r\ncache-control: no-cache,no-store\r\nexpires: -1\r\npragma: no-cache\r\nset-cookie: .AspNetCore.Session=CfDJ8HRi9EzRANpAplf2nauG7zLzHlugF1QhAMdg1Rr24p6agFozIrYYL5fs1nYmdGaKhmyIumCmtfLjdwmgd7lMBn7SaVdc7muki0D1eJFgjcjFaEdu0d5oN%2BBTYEbGrLBnNY2qtrkRgzvm5k81TX7b9xj1XR%2BozrwR4eE97NQG20wK; path=/; samesite=lax; httponly\r\nstrict-transport-security: max-age=5184000; includeSubDomains\r\nx-content-type-options: nosniff\r\nreferrer-policy: same-origin\r\naccept-ch: Sec-CH-Prefers-Reduced-Motion, Device-Memory\r\ncritical-ch: Sec-CH-Prefers-Reduced-Motion, Device-Memory\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3MKzPoi9KnGbzZkj3s0mU%2FnK4JpE8rExHtP5g4A3WxDnCSShdooUOJdq2Oqx1C7XEVn9PksSSTns8UZrubVnjtS125rynTpWDuOmj59nc%2FkLHlM%2Bs7WvpIDkWzJlaeMuwmut\"}]}\r\ncf-cache-status: DYNAMIC\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a098102a9c0d35a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]},{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1886,"size_decoded":2060,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (1327), with CRLF line terminators","md5":"dd2f53c02ac9273ee82a5af1336794ad","sha1":"c90342b244b41aa7e498d61c434b6f15fc237ad0","sha256":"c529a97572f05c2b331c7414d3cade66014a5c21cb27a907a79d86c152af1b50","sha512":"1640b62f7f7ea3bf0e1204cfb1ded26b272d1973f5b6c40ef800680b4cec89f431efbd5cbfb32580bf3038c84bdc1932241e6cd145fe85d2626a900d61a4c4d0","ssdeep":"","tlshash":"0a41e33d9825881600d550e59775fd8f90df604aecc2cdc9b39640925b6fb8e1ad26e4","first_seen":"2026-06-10T11:34:17.199049Z","last_seen":"2026-06-10T11:34:17.199049Z","times_seen":1,"resource_available":false,"data":null}},"time_used":133,"timings":{"blocked":0,"dns":14,"connect":1,"send":0,"wait":105,"receive":0,"ssl":13},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"slon.biz/forms/widget.webcall/sounds/error.mp3?v=185","fqdn":"slon.biz","domain":"slon.biz","tld":"biz"},"ip":{"addr":"172.67.169.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://slon.biz/","date":"2026-06-10T11:33:47.316Z","timestamp":1781091227316,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"slon.biz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 06 May 2026 15:48:04 GMT","end":"Tue, 04 Aug 2026 16:46:34 GMT"},"fingerprint":{"sha1":"38:4D:94:42:4B:4C:2F:6C:E3:85:79:42:30:7A:FC:73:71:9C:2E:19","sha256":"33:02:9D:E9:C5:CA:AF:7D:63:1F:18:8E:26:19:D4:87:1A:1E:76:3E:7F:CD:39:C1:37:1C:58:EA:06:01:27:C9"}}},"request":{"raw":"GET /forms/widget.webcall/sounds/error.mp3?v=185 HTTP/1.1\r\nHost: slon.biz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: audio/webm,audio/ogg,audio/wav,audio/*;q=0.9,application/ogg;q=0.7,video/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nReferer: https://slon.biz/\r\nRange: bytes=0-\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: .AspNetCore.Antiforgery.Ix643OkwzkY=CfDJ8HRi9EzRANpAplf2nauG7zICIkpORWwJQaqFvBmwgvlkhSiuyijwoiq8Lt-G0_fG_yJHNPgUvRi8teQCuA-Z4eg9dZLiR-DenX7yKRE__4sxT5E-b2k_kDMLg7HFl164t7KkM4D37_Bl3fnd3M8-FEk; .AspNetCore.Session=CfDJ8HRi9EzRANpAplf2nauG7zICqAf8NVwWUZEU1EqZ4ykmFoIiNnUgsI3nexV5xMbfZhIa108IBBa0MabJ4m9nomz3Dl1LFryyv%2BA%2BBPy4z%2FIopaml7M%2FBPnDxj0yNBrXqc6Rpbq4dj74%2FsA1UyXxunMaIibXkwc0al5fim72%2BBDxp\r\nSec-Fetch-Dest: audio\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 206 \r\nserver: cloudflare\r\ndate: Wed, 10 Jun 2026 11:33:47 GMT\r\ncontent-type: audio/mpeg\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2XcIjBm21Gd5mRg2iUCnlD5dxJto%2F5yd%2FWRvMN0yHXAmSoAeueTB2FHvvc6jy5Aw8sknyFCzHvYA9qoh%2FDhMx3vbck3SS%2F6Tvsw%2BVgSj7CHZ%2BHgWJj0SOG7OVg%3D%3D\"}]}\r\nreferrer-policy: same-origin\r\naccess-control-allow-origin: *\r\ncache-control: public,max-age=31536000\r\netag: \"1dcef86128a8585\"\r\nlast-modified: Fri, 29 May 2026 16:13:23 GMT\r\nstrict-transport-security: max-age=2592000; includeSubDomains\r\nx-content-type-options: nosniff\r\ncontent-range: bytes 0-5636/5637\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncontent-length: 5637\r\ncf-ray: a098102abdb00b51-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5637,"size_decoded":6511,"mime_type":"audio/mpeg","magic":"Audio file with ID3 version 2.4.0, contains: MPEG ADTS, layer III, v1, 64 kbps, 44.1 kHz, Stereo","md5":"45c7aefc6583080507962ef456195950","sha1":"202c0a9433919c9672e91a7e110ded2cf630cdbf","sha256":"c3cebfeb65e178f08ae8e32793371def076f99595f55411eef42f530612251d8","sha512":"a6a515eddf7938155ca8c18a7533caee378c2647d9f7be5c92fed46aed17e0a38fc8f5ef8e884deb1174b0f8f8c7290d0471e116411a1600f5f09ef99c26d7b7","ssdeep":"96:RDGXC6bbeeQsSJflxGT1vSA44WFyGzhRVZCPEWfZteMcW5s5s5ssppppp:4betsa9xGZvSAzWFymhRVZC8Wfb1","tlshash":"c3c1b462afa1008ef58b1b3eb1afe934c3c1685db815ecde94044b4011ef8917f3a56d","first_seen":"2023-05-10T10:48:14Z","last_seen":"2026-06-10T11:34:17.199918Z","times_seen":9,"resource_available":false,"data":null}},"time_used":100,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":100,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-10","alert":"Sinkholed","trigger":"slon.biz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-10","alert":"Sinkholed","trigger":"slon.biz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pixel.unioin.com/cdn-cgi/scripts/7d0fa10a/cloudflare-static/rocket-loader.min.js","fqdn":"pixel.unioin.com","domain":"unioin.com","tld":"com"},"ip":{"addr":"172.67.204.18","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://pixel.unioin.com/pixel-frame?visitorId=","date":"2026-06-10T11:33:47.530Z","timestamp":1781091227530,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"unioin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 25 Apr 2026 21:33:35 GMT","end":"Fri, 24 Jul 2026 22:32:25 GMT"},"fingerprint":{"sha1":"35:9E:CA:71:EA:78:56:93:E1:C0:B9:3C:EA:78:57:12:3E:8C:86:8C","sha256":"C1:18:4A:E3:A4:B4:3E:D1:EF:B4:CE:2A:05:DD:E0:5C:76:BD:DB:F1:12:E8:9E:A4:04:7C:28:A0:59:FE:54:AC"}}},"request":{"raw":"GET /cdn-cgi/scripts/7d0fa10a/cloudflare-static/rocket-loader.min.js HTTP/1.1\r\nHost: pixel.unioin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://pixel.unioin.com/pixel-frame?visitorId=\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: application/javascript\r\nexpires: Fri, 12 Jun 2026 11:33:47 GMT\r\ncache-control: public\r\nvary: accept-encoding\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MlmxJFi9MJPX3Rj0%2BG%2BpcMM7rQYplxYzRuM64GYsSwx1DDZxThjDXL4yZkxLfy7eya9bk6DH4RxYvhN94ar5V%2FA81Ka%2FR%2Ft9%2FNgmSd%2BYUAJ3cAfkb2lcRkvjSZEyYyoxLDBg\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ndate: Wed, 10 Jun 2026 11:33:47 GMT\r\nserver: cloudflare\r\ncf-ray: a098102c0c5f0883-OSL\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12332,"size_decoded":4755,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (12331)","md5":"88a769d2fe35899fd45a332a0a032cc0","sha1":"514c6c1d8475d17e412849a4c90159517d0fa10a","sha256":"ccf00d1923b0131a10e0c6d26f95e5dee6ebf8621a27e83c5a2f68a2e0093142","sha512":"756cc5cd029fc4adc9100d0da2f2b0efb3df0f2bf894fba2824019832fea594edd40a238a5ffacc205572cc0155f5632d70f54e37edc0772460f44c69cb76ab8","ssdeep":"192:3dArCS2Z+j/yQ9TCQxUhW2DPY808LE676SbHDc/7uN0VZG05w:NHSG+j/y2xa3bn7Q+0a0O","tlshash":"7442b79c7e95ba30079b91b1a17ff30f6276605a640bc0a0b05ddcd1a878d8d192bf75","first_seen":"2023-03-07T01:02:06Z","last_seen":"2026-08-13T19:50:18.160045Z","times_seen":124956,"resource_available":true,"data":null}},"time_used":4,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"slon.biz/forms/widget.universal/assets/chat-icon.svg?v=185","fqdn":"slon.biz","domain":"slon.biz","tld":"biz"},"ip":{"addr":"172.67.169.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://slon.biz/","date":"2026-06-10T11:33:47.519Z","timestamp":1781091227519,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"slon.biz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 06 May 2026 15:48:04 GMT","end":"Tue, 04 Aug 2026 16:46:34 GMT"},"fingerprint":{"sha1":"38:4D:94:42:4B:4C:2F:6C:E3:85:79:42:30:7A:FC:73:71:9C:2E:19","sha256":"33:02:9D:E9:C5:CA:AF:7D:63:1F:18:8E:26:19:D4:87:1A:1E:76:3E:7F:CD:39:C1:37:1C:58:EA:06:01:27:C9"}}},"request":{"raw":"GET /forms/widget.universal/assets/chat-icon.svg?v=185 HTTP/1.1\r\nHost: slon.biz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://slon.biz/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: .AspNetCore.Antiforgery.Ix643OkwzkY=CfDJ8HRi9EzRANpAplf2nauG7zICIkpORWwJQaqFvBmwgvlkhSiuyijwoiq8Lt-G0_fG_yJHNPgUvRi8teQCuA-Z4eg9dZLiR-DenX7yKRE__4sxT5E-b2k_kDMLg7HFl164t7KkM4D37_Bl3fnd3M8-FEk; .AspNetCore.Session=CfDJ8HRi9EzRANpAplf2nauG7zICqAf8NVwWUZEU1EqZ4ykmFoIiNnUgsI3nexV5xMbfZhIa108IBBa0MabJ4m9nomz3Dl1LFryyv%2BA%2BBPy4z%2FIopaml7M%2FBPnDxj0yNBrXqc6Rpbq4dj74%2FsA1UyXxunMaIibXkwc0al5fim72%2BBDxp\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 10 Jun 2026 11:33:47 GMT\r\ncontent-type: image/svg+xml\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=om2KQyPmil1kVUvlCyISUbXupVfGCqu1BsjgNjxGEbm%2F4hFi8HVEWMF%2BAr%2FNQcOH9l%2Bqz5UotlWdY2FrKmPPic80AMgyuoZD4Djbg3dnpjdWnsAvTA0eP1J1pw%3D%3D\"}]}\r\naccess-control-allow-origin: *\r\ncache-control: public,max-age=31536000\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Fri, 29 May 2026 16:13:23 GMT\r\nstrict-transport-security: max-age=2592000; includeSubDomains\r\nx-content-type-options: nosniff\r\nreferrer-policy: same-origin\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\netag: W/\"1dcef86128a90de\"\r\ncf-ray: a098102bfdc90b51-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":862,"size_decoded":1316,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"c5c355b5a946e46c0f56cdee9f0bf92e","sha1":"3f6d6b36e41b9568bcb6103f3a22983326c248c9","sha256":"534149f64a2c6a06336fdbed7148a2c6aa6e9e709d9f8538af9170a3686e31f9","sha512":"98d6f8e1b292f92c5c90f9239042781a0f0e98272637e172114fa1743ba855b043b8ae217bcb77803986df666b93909a2f5b891d36fccd2e104581e8a3f5adbe","ssdeep":"","tlshash":"8611cccc353c40cc3c5a4a45e7ee391d003ee4cb52c70a4ab7864fcab8681caeacc985","first_seen":"2023-08-28T03:56:16Z","last_seen":"2026-06-10T11:34:17.201372Z","times_seen":4,"resource_available":false,"data":null}},"time_used":421,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":421,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-10","alert":"Sinkholed","trigger":"slon.biz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-10","alert":"Sinkholed","trigger":"slon.biz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/aspnet-client-validation@0.11.1/dist/aspnet-validation.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.17.207.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://slon.biz/","date":"2026-06-10T11:33:46.891Z","timestamp":1781091226891,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jsdelivr.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 22 Apr 2026 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"65:D9:C4:7E:04:4C:FD:DD:60:E0:CC:18:B5:B7:01:68:B4:2D:C7:34","sha256":"50:6C:A4:F6:ED:74:C7:E9:68:DB:32:56:5A:68:4C:98:ED:01:28:36:F8:13:BA:CC:19:A7:FD:7A:0A:6E:E7:D4"}}},"request":{"raw":"GET /npm/aspnet-client-validation@0.11.1/dist/aspnet-validation.min.js HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 10 Jun 2026 11:33:46 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 6734\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-jsd-version: 0.11.1\r\nx-jsd-version-type: version\r\netag: W/\"50c9-xfdiR9Z4wKJOFMp+G6hp2PLG2zg\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\nx-served-by: cache-fra-eddf8230053-FRA, cache-bma-essb1270054-BMA\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2PdMZ2uivMeEfQkWDYtKb6%2BH3cCNyBIJgQel4Mm%2F%2Bh62MyxX%2BqjhbKxXI5KApiWroTudgbdLEfTkwxt6Qfu46uY3vtb0SEWaQea%2BhnCBNZkHlkiaaU%2B5PjppC2LrrCfb1CE%3D\"}]}\r\nserver: cloudflare\r\ncf-ray: a09810282b328be6-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":20681,"size_decoded":7873,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (20631)","md5":"64206a0b12857904caf40d743a9325dc","sha1":"c5f76247d678c0a24e14ca7e1ba869d8f2c6db38","sha256":"533dc84c7a5fec0d77edf9635b3dd382488b380bae1fcf8450f4cdb99fc6acbc","sha512":"ff9d1a0e0bf75dc0f4bab027311a0497e7cded3f42c56062d416ad0bdbd0571e1033f59fd945c546cb275f5897d3873252c6ecdd0ec96701ef53514ee140bb3a","ssdeep":"384:3zmwlX06XpIun5cfIrMbk0W6ZTiwCoASYEjVnBpAcxZxEdOCzJJIMxAROJup4sex:g63K1WeTidUd9xZxpoA2C4/tg9ExcSXX","tlshash":"9e92e9d9738221154ecb55fe509fa14a72bf6928a408005df918d8e22cb5ece2373fb8","first_seen":"2025-05-28T13:26:38.927847Z","last_seen":"2026-08-11T06:53:45.755534Z","times_seen":838,"resource_available":true,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":1,"connect":1,"send":0,"wait":18,"receive":0,"ssl":16},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"slon.biz/api/channels/view","fqdn":"slon.biz","domain":"slon.biz","tld":"biz"},"ip":{"addr":"172.67.169.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://slon.biz/","date":"2026-06-10T11:33:47.300Z","timestamp":1781091227300,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"slon.biz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 06 May 2026 15:48:04 GMT","end":"Tue, 04 Aug 2026 16:46:34 GMT"},"fingerprint":{"sha1":"38:4D:94:42:4B:4C:2F:6C:E3:85:79:42:30:7A:FC:73:71:9C:2E:19","sha256":"33:02:9D:E9:C5:CA:AF:7D:63:1F:18:8E:26:19:D4:87:1A:1E:76:3E:7F:CD:39:C1:37:1C:58:EA:06:01:27:C9"}}},"request":{"raw":"POST /api/channels/view HTTP/1.1\r\nHost: slon.biz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://slon.biz/\r\nContent-Type: multipart/form-data; boundary=----geckoformboundaryae2911b2edeb9a80d134d05c209f0696\r\nContent-Length: 174\r\nOrigin: https://slon.biz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: .AspNetCore.Antiforgery.Ix643OkwzkY=CfDJ8HRi9EzRANpAplf2nauG7zICIkpORWwJQaqFvBmwgvlkhSiuyijwoiq8Lt-G0_fG_yJHNPgUvRi8teQCuA-Z4eg9dZLiR-DenX7yKRE__4sxT5E-b2k_kDMLg7HFl164t7KkM4D37_Bl3fnd3M8-FEk; .AspNetCore.Session=CfDJ8HRi9EzRANpAplf2nauG7zICqAf8NVwWUZEU1EqZ4ykmFoIiNnUgsI3nexV5xMbfZhIa108IBBa0MabJ4m9nomz3Dl1LFryyv%2BA%2BBPy4z%2FIopaml7M%2FBPnDxj0yNBrXqc6Rpbq4dj74%2FsA1UyXxunMaIibXkwc0al5fim72%2BBDxp\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 204 \r\nserver: cloudflare\r\ndate: Wed, 10 Jun 2026 11:33:47 GMT\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://slon.biz\r\nvary: Origin\r\nstrict-transport-security: max-age=2592000; includeSubDomains\r\nx-content-type-options: nosniff\r\nreferrer-policy: same-origin\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HeuXfAo2cINkSopgljHOc24Hu%2FQBV1Zc7SEUoCU5hH09WdotLrHTyy%2Fuwn9gxmo%2BwDLr2Ona0m09XWs3atEzNeiUvYoURiaHPT2QB35yilPxWylRynRrTrdRaA%3D%3D\"}]}\r\npriority: u=6,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a098102aada80b51-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":1868,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-13T19:51:56.000454Z","times_seen":17875501,"resource_available":true,"data":null}},"time_used":52,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":52,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-10","alert":"Sinkholed","trigger":"slon.biz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-10","alert":"Sinkholed","trigger":"slon.biz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pixel.unioin.com/pixel?Id=6e7d1eee72119916b2f71dece33b0abc","fqdn":"pixel.unioin.com","domain":"unioin.com","tld":"com"},"ip":{"addr":"172.67.204.18","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://pixel.unioin.com/pixel-frame?visitorId=","date":"2026-06-10T11:33:47.923Z","timestamp":1781091227923,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"unioin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 25 Apr 2026 21:33:35 GMT","end":"Fri, 24 Jul 2026 22:32:25 GMT"},"fingerprint":{"sha1":"35:9E:CA:71:EA:78:56:93:E1:C0:B9:3C:EA:78:57:12:3E:8C:86:8C","sha256":"C1:18:4A:E3:A4:B4:3E:D1:EF:B4:CE:2A:05:DD:E0:5C:76:BD:DB:F1:12:E8:9E:A4:04:7C:28:A0:59:FE:54:AC"}}},"request":{"raw":"GET /pixel?Id=6e7d1eee72119916b2f71dece33b0abc HTTP/1.1\r\nHost: pixel.unioin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://pixel.unioin.com/pixel-frame?visitorId=\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: _immortal|VisitorId=6e7d1eee72119916b2f71dece33b0abc\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 202 \r\nserver: cloudflare\r\ndate: Wed, 10 Jun 2026 11:33:47 GMT\r\npriority: u=4,i=?0\r\ncache-control: no-cache,no-store\r\nexpires: -1\r\npragma: no-cache\r\nset-cookie: VisitorId=6e7d1eee72119916b2f71dece33b0abc; expires=Tue, 10 Jun 2036 11:33:47 GMT; path=/; secure; samesite=none\n.AspNetCore.Session=CfDJ8HRi9EzRANpAplf2nauG7zIO%2BypL52Nd1QNfBaIOcGmLTGuWUFGXBurzjpJpQzJnSKufWJ%2FYRRpXRlBkDXKkgoaIrX3t95RoNGs4zWaiQGIeqT9u1gNYKntpnHVmj0hbqON64NI6BHmd0i6fr681aClUturlJMR6NWfLcA5eAQ4h; path=/; samesite=lax; httponly\r\nstrict-transport-security: max-age=5184000; includeSubDomains\r\nx-content-type-options: nosniff\r\nreferrer-policy: same-origin\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=G32pV65U915zKW3H2%2BuDxib8gN2Fa%2FYKHM0tec%2BsvpsHInTKJdzhaIqxyk43izOv1Qmf%2BodSxOFHRdMl7gI7pwFHYtEs8bx2sVGyLv6DJFZndzlS%2B%2BMNbfjA7Tlp4Wc%2FM2Uq\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a098102e8cbe0883-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"202","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":1082,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-13T19:51:56.000454Z","times_seen":17875501,"resource_available":true,"data":null}},"time_used":38,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":38,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"slon.biz/api/projects/view","fqdn":"slon.biz","domain":"slon.biz","tld":"biz"},"ip":{"addr":"172.67.169.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://slon.biz/","date":"2026-06-10T11:33:47.302Z","timestamp":1781091227302,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"slon.biz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 06 May 2026 15:48:04 GMT","end":"Tue, 04 Aug 2026 16:46:34 GMT"},"fingerprint":{"sha1":"38:4D:94:42:4B:4C:2F:6C:E3:85:79:42:30:7A:FC:73:71:9C:2E:19","sha256":"33:02:9D:E9:C5:CA:AF:7D:63:1F:18:8E:26:19:D4:87:1A:1E:76:3E:7F:CD:39:C1:37:1C:58:EA:06:01:27:C9"}}},"request":{"raw":"POST /api/projects/view HTTP/1.1\r\nHost: slon.biz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://slon.biz/\r\nContent-Type: multipart/form-data; boundary=----geckoformboundaryd7b98aca8f784cc43fce67092302d9b\r\nContent-Length: 172\r\nOrigin: https://slon.biz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: .AspNetCore.Antiforgery.Ix643OkwzkY=CfDJ8HRi9EzRANpAplf2nauG7zICIkpORWwJQaqFvBmwgvlkhSiuyijwoiq8Lt-G0_fG_yJHNPgUvRi8teQCuA-Z4eg9dZLiR-DenX7yKRE__4sxT5E-b2k_kDMLg7HFl164t7KkM4D37_Bl3fnd3M8-FEk; .AspNetCore.Session=CfDJ8HRi9EzRANpAplf2nauG7zICqAf8NVwWUZEU1EqZ4ykmFoIiNnUgsI3nexV5xMbfZhIa108IBBa0MabJ4m9nomz3Dl1LFryyv%2BA%2BBPy4z%2FIopaml7M%2FBPnDxj0yNBrXqc6Rpbq4dj74%2FsA1UyXxunMaIibXkwc0al5fim72%2BBDxp\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 204 \r\nserver: cloudflare\r\ndate: Wed, 10 Jun 2026 11:33:48 GMT\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://slon.biz\r\nvary: Origin\r\nstrict-transport-security: max-age=2592000; includeSubDomains\r\nx-content-type-options: nosniff\r\nreferrer-policy: same-origin\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lQ9wKEluh5NdMi0QBUofUcjqifHmppc2FV3cENfRG%2FfjQ1E42BFq9LpC78w%2Bbu1vshhUEFqYT1s6YUH8yq4HHv4%2FM3MdUjKBWnm0%2FXOwmHfX%2F1q9CrJcdbsk9g%3D%3D\"}]}\r\npriority: u=6,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a098102aada90b51-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":1869,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-13T19:51:56.000454Z","times_seen":17875501,"resource_available":true,"data":null}},"time_used":1303,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1303,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-10","alert":"Sinkholed","trigger":"slon.biz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-10","alert":"Sinkholed","trigger":"slon.biz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"slon.biz/forms/widget.universal/css/style.css?v=185","fqdn":"slon.biz","domain":"slon.biz","tld":"biz"},"ip":{"addr":"172.67.169.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://slon.biz/","date":"2026-06-10T11:33:47.443Z","timestamp":1781091227443,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"slon.biz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 06 May 2026 15:48:04 GMT","end":"Tue, 04 Aug 2026 16:46:34 GMT"},"fingerprint":{"sha1":"38:4D:94:42:4B:4C:2F:6C:E3:85:79:42:30:7A:FC:73:71:9C:2E:19","sha256":"33:02:9D:E9:C5:CA:AF:7D:63:1F:18:8E:26:19:D4:87:1A:1E:76:3E:7F:CD:39:C1:37:1C:58:EA:06:01:27:C9"}}},"request":{"raw":"GET /forms/widget.universal/css/style.css?v=185 HTTP/1.1\r\nHost: slon.biz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://slon.biz/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: .AspNetCore.Antiforgery.Ix643OkwzkY=CfDJ8HRi9EzRANpAplf2nauG7zICIkpORWwJQaqFvBmwgvlkhSiuyijwoiq8Lt-G0_fG_yJHNPgUvRi8teQCuA-Z4eg9dZLiR-DenX7yKRE__4sxT5E-b2k_kDMLg7HFl164t7KkM4D37_Bl3fnd3M8-FEk; .AspNetCore.Session=CfDJ8HRi9EzRANpAplf2nauG7zICqAf8NVwWUZEU1EqZ4ykmFoIiNnUgsI3nexV5xMbfZhIa108IBBa0MabJ4m9nomz3Dl1LFryyv%2BA%2BBPy4z%2FIopaml7M%2FBPnDxj0yNBrXqc6Rpbq4dj74%2FsA1UyXxunMaIibXkwc0al5fim72%2BBDxp\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=0\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 10 Jun 2026 11:33:48 GMT\r\ncontent-type: text/css; charset=UTF-8\r\naccess-control-allow-origin: *\r\ncache-control: max-age=31536000,immutable\r\npriority: u=0,i=?0\r\nlast-modified: Fri, 29 May 2026 16:13:23 GMT\r\nstrict-transport-security: max-age=2592000; includeSubDomains\r\nx-content-type-options: nosniff\r\nreferrer-policy: same-origin\r\nage: 375816\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\netag: W/\"sM_uL8MvDzrxC4CwkFYZVPQUIVk\"\r\ncontent-encoding: zstd\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZtFWCkrgXgbzxaR%2FfI9iHD9CGspO9wKGjO25SNM7FE7eaSlb%2FKdr5IyBuhXMQ9bPnnQjwr49oCLLmCrDxCrsFIMRg5u3RtKRjayjNo87RXef8iQHLdJIZGJjZg%3D%3D\"}]}\r\ncf-ray: a098102b8dbd0b51-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":32226,"size_decoded":10680,"mime_type":"text/css; charset=UTF-8","magic":"Unicode text, UTF-8 text, with very long lines (32224), with no line terminators","md5":"ce67daff3f3e411d658fb9237005c549","sha1":"e4ef7b3eef5aef2c2936563e23bbfea901c549d8","sha256":"e2a1169f16f7f1e0fc387ffeaee6ad696929b2194d464837cbd3dc6fffad7310","sha512":"0243b6154220371f7790b4035da3f96e05feae928f4b0309f0b3a143544bdfe7d66a4ea553e2d186f87abcd8a34e27c679edfc0ea635429d6a9e2b2d5869bf5a","ssdeep":"768:r6NyX1TS/GtrJBZughQTU4/gcz83ihzQq8I6k/:+Nk1TSubBZuwQTOczx/","tlshash":"61e2d832d5c6141a3137df27a5d8b96da128d402f9530afef27912fdc98e09e2a23794","first_seen":"2025-11-11T10:17:54.000456Z","last_seen":"2026-06-10T11:34:17.202854Z","times_seen":3,"resource_available":false,"data":null}},"time_used":1163,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1163,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-10","alert":"Sinkholed","trigger":"slon.biz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-10","alert":"Sinkholed","trigger":"slon.biz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"slon.biz/forms/widget.webcall/sounds/ru/autoanswer-female-welcome.mp3?v=185","fqdn":"slon.biz","domain":"slon.biz","tld":"biz"},"ip":{"addr":"172.67.169.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://slon.biz/","date":"2026-06-10T11:33:47.317Z","timestamp":1781091227317,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"slon.biz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 06 May 2026 15:48:04 GMT","end":"Tue, 04 Aug 2026 16:46:34 GMT"},"fingerprint":{"sha1":"38:4D:94:42:4B:4C:2F:6C:E3:85:79:42:30:7A:FC:73:71:9C:2E:19","sha256":"33:02:9D:E9:C5:CA:AF:7D:63:1F:18:8E:26:19:D4:87:1A:1E:76:3E:7F:CD:39:C1:37:1C:58:EA:06:01:27:C9"}}},"request":{"raw":"GET /forms/widget.webcall/sounds/ru/autoanswer-female-welcome.mp3?v=185 HTTP/1.1\r\nHost: slon.biz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: audio/webm,audio/ogg,audio/wav,audio/*;q=0.9,application/ogg;q=0.7,video/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nReferer: https://slon.biz/\r\nRange: bytes=0-\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: .AspNetCore.Antiforgery.Ix643OkwzkY=CfDJ8HRi9EzRANpAplf2nauG7zICIkpORWwJQaqFvBmwgvlkhSiuyijwoiq8Lt-G0_fG_yJHNPgUvRi8teQCuA-Z4eg9dZLiR-DenX7yKRE__4sxT5E-b2k_kDMLg7HFl164t7KkM4D37_Bl3fnd3M8-FEk; .AspNetCore.Session=CfDJ8HRi9EzRANpAplf2nauG7zICqAf8NVwWUZEU1EqZ4ykmFoIiNnUgsI3nexV5xMbfZhIa108IBBa0MabJ4m9nomz3Dl1LFryyv%2BA%2BBPy4z%2FIopaml7M%2FBPnDxj0yNBrXqc6Rpbq4dj74%2FsA1UyXxunMaIibXkwc0al5fim72%2BBDxp\r\nSec-Fetch-Dest: audio\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 206 \r\nserver: cloudflare\r\ndate: Wed, 10 Jun 2026 11:33:47 GMT\r\ncontent-type: audio/mpeg\r\npriority: u=4,i=?0\r\nreferrer-policy: same-origin\r\naccess-control-allow-origin: *\r\ncache-control: public,max-age=31536000\r\netag: \"1dcef86128aaa80\"\r\nlast-modified: Fri, 29 May 2026 16:13:23 GMT\r\nstrict-transport-security: max-age=2592000; includeSubDomains\r\nx-content-type-options: nosniff\r\ncontent-range: bytes 0-14591/14592\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=j1SLCx397U2nD2DR4cOvGJ83OMJpJP8pQLwYGtj4pbS0rCjPsL1cf%2FCkaZGCXc0h%2BxccCNNmrWMVi7v64ACtwyWdTWqQlKIl9ubtOIq2%2BiLfP3rUc2VthBb%2FSQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-length: 14592\r\ncf-ray: a098102abdb30b51-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":14592,"size_decoded":15465,"mime_type":"audio/mpeg","magic":"MPEG ADTS, layer III, v1, 64 kbps, 48 kHz, Monaural","md5":"0998928ef69ba52ca81c6d47e58dfc9d","sha1":"4f7295e014a3b6b766799dc76495abc5469623e9","sha256":"f5d5c0309bc90dfbb36d8e2e6bf9ff74ee0b10e0eba0842ff9db6156d80ac0ce","sha512":"cba977b7961b1419d1982ca7b75fe5f87f700451c28a0e55705a0c006c6763d3850f35f2f4bca99dfc90321f315789296a0fcc3c834167f269d4a90bba29b3c1","ssdeep":"384:LjO652rX4LK7P1C6ELLoCeNiTJL584qF+F3Ue:LjLAX4eE6oVegTJpqF+l","tlshash":"49628c87840023bdf4973bbf32876ae5cd1e2a184523bc96bbd2764505eb8897f94096","first_seen":"2023-05-10T10:48:15Z","last_seen":"2026-06-10T11:34:17.203782Z","times_seen":9,"resource_available":false,"data":null}},"time_used":129,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":128,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-10","alert":"Sinkholed","trigger":"slon.biz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-10","alert":"Sinkholed","trigger":"slon.biz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"slon.biz/forms/widget.webcall/sounds/ru/autoanswer-female-ask-phone.mp3?v=185","fqdn":"slon.biz","domain":"slon.biz","tld":"biz"},"ip":{"addr":"172.67.169.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://slon.biz/","date":"2026-06-10T11:33:47.320Z","timestamp":1781091227320,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"slon.biz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 06 May 2026 15:48:04 GMT","end":"Tue, 04 Aug 2026 16:46:34 GMT"},"fingerprint":{"sha1":"38:4D:94:42:4B:4C:2F:6C:E3:85:79:42:30:7A:FC:73:71:9C:2E:19","sha256":"33:02:9D:E9:C5:CA:AF:7D:63:1F:18:8E:26:19:D4:87:1A:1E:76:3E:7F:CD:39:C1:37:1C:58:EA:06:01:27:C9"}}},"request":{"raw":"GET /forms/widget.webcall/sounds/ru/autoanswer-female-ask-phone.mp3?v=185 HTTP/1.1\r\nHost: slon.biz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: audio/webm,audio/ogg,audio/wav,audio/*;q=0.9,application/ogg;q=0.7,video/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nReferer: https://slon.biz/\r\nRange: bytes=0-\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: .AspNetCore.Antiforgery.Ix643OkwzkY=CfDJ8HRi9EzRANpAplf2nauG7zICIkpORWwJQaqFvBmwgvlkhSiuyijwoiq8Lt-G0_fG_yJHNPgUvRi8teQCuA-Z4eg9dZLiR-DenX7yKRE__4sxT5E-b2k_kDMLg7HFl164t7KkM4D37_Bl3fnd3M8-FEk; .AspNetCore.Session=CfDJ8HRi9EzRANpAplf2nauG7zICqAf8NVwWUZEU1EqZ4ykmFoIiNnUgsI3nexV5xMbfZhIa108IBBa0MabJ4m9nomz3Dl1LFryyv%2BA%2BBPy4z%2FIopaml7M%2FBPnDxj0yNBrXqc6Rpbq4dj74%2FsA1UyXxunMaIibXkwc0al5fim72%2BBDxp\r\nSec-Fetch-Dest: audio\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 206 \r\nserver: cloudflare\r\ndate: Wed, 10 Jun 2026 11:33:47 GMT\r\ncontent-type: audio/mpeg\r\npriority: u=4,i=?0\r\nreferrer-policy: same-origin\r\naccess-control-allow-origin: *\r\ncache-control: public,max-age=31536000\r\netag: \"1dcef86128aa380\"\r\nlast-modified: Fri, 29 May 2026 16:13:23 GMT\r\nstrict-transport-security: max-age=2592000; includeSubDomains\r\nx-content-type-options: nosniff\r\ncontent-range: bytes 0-12287/12288\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PyLkQAaHgHyyPQbFFvejZZRgWZDqQJV9Ke89aaVDHUJCRcS99GovivIckwlOtOq7otYGpDQLWHePzoWidhEHWzoREF3Bc9q%2BMvWLYX7w0V2jqiN2W7Nb9Y3ZWA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-length: 12288\r\ncf-ray: a098102abdb50b51-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":12288,"size_decoded":13155,"mime_type":"audio/mpeg","magic":"MPEG ADTS, layer III, v1, 64 kbps, 48 kHz, Monaural","md5":"6ba321a00970b73ea7d305ca9679d5d9","sha1":"38636fb4ff59d4a62ecf195a449aa4141dfccabe","sha256":"40e71f96ccf4cf425fedcc22ca1b7e95d895fbbf14bc91853ff2794f0cd123bb","sha512":"424669acfef72385c063b1f699651aedddef92bbf79b93629641b6a5e426308d6d9d7fa634c4f7fb2a58ed419df48098e5aaceae41821c1c718b9bec97ab69c8","ssdeep":"192:LIAIPyLVUP7FJ4I4HbCN8J+QXmIjGWeHaLtOj5aweLd9p132v5S6dGax1L15rW:LIFXDbuHbJ88VqWpPwMdEx9Gaxr5i","tlshash":"8842bef3ac180741e9e39f7599c47f568dbdc0c048859af0b5d29bc431f4ebc265a295","first_seen":"2023-05-10T10:48:14Z","last_seen":"2026-06-10T11:34:17.204724Z","times_seen":9,"resource_available":false,"data":null}},"time_used":125,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":124,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-10","alert":"Sinkholed","trigger":"slon.biz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-10","alert":"Sinkholed","trigger":"slon.biz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pixel.unioin.com/assets/js/fingerprintjs/dist/fp.js?v=uTBHfdZC0rnxS8wRPyyacHLs393Ady9VT9T55PiUUC8","fqdn":"pixel.unioin.com","domain":"unioin.com","tld":"com"},"ip":{"addr":"172.67.204.18","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://pixel.unioin.com/pixel-frame?visitorId=","date":"2026-06-10T11:33:47.551Z","timestamp":1781091227551,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"unioin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 25 Apr 2026 21:33:35 GMT","end":"Fri, 24 Jul 2026 22:32:25 GMT"},"fingerprint":{"sha1":"35:9E:CA:71:EA:78:56:93:E1:C0:B9:3C:EA:78:57:12:3E:8C:86:8C","sha256":"C1:18:4A:E3:A4:B4:3E:D1:EF:B4:CE:2A:05:DD:E0:5C:76:BD:DB:F1:12:E8:9E:A4:04:7C:28:A0:59:FE:54:AC"}}},"request":{"raw":"GET /assets/js/fingerprintjs/dist/fp.js?v=uTBHfdZC0rnxS8wRPyyacHLs393Ady9VT9T55PiUUC8 HTTP/1.1\r\nHost: pixel.unioin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://pixel.unioin.com/pixel-frame?visitorId=\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 10 Jun 2026 11:33:47 GMT\r\ncontent-type: text/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\ncache-control: max-age=31536000,immutable\r\npriority: u=1,i=?0\r\nlast-modified: Fri, 29 May 2026 16:13:23 GMT\r\nstrict-transport-security: max-age=5184000; includeSubDomains\r\nx-content-type-options: nosniff\r\nreferrer-policy: same-origin\r\nage: 531792\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\netag: W/\"c_t6aBTVolofrQSA8mEWv9DYva4\"\r\ncontent-encoding: zstd\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wwzF%2BGeU8SLfL5SruJpy7A9awF65yXo8DAhs4j%2BQOokkt26NzqgG55PyKXBxwCQpRT6qzZ58%2BZXX9xXZ68ZjvOyMF3%2BikSowhk7d2M0hBAjS%2FArmIgIF1kch%2FVeH50%2B9Hz%2BC\"}]}\r\ncf-ray: a098102c3c630883-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":39703,"size_decoded":18715,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (39696), with no line terminators","md5":"98e911fe191b8a81f0f786c796baaf23","sha1":"7aaafeab8e41882af4c9887ccb1ca5c1b1e03f2f","sha256":"13121aea3460ed980003487bff0da5bbcd02177aff9204c5ae37513489ae284a","sha512":"584afb1a16e8b69d04a1658717872e3f63ba5a7edf90746114af929058f3ff5b0d18fc1f79161c74ec172b627574996cf01fdc251b39c293292a3b95526f2899","ssdeep":"384:+eIKds83dOwuFxBEw7LKMWgYRxcsshKs+R6H2ECn54JMJ0wE5EtVtnn6JD8LWIo7:oKKKMWVxuxYjJ0jJ7ICZT2GOm","tlshash":"780308d8b683b068837364b940bf5186b23e2c65784d4512c467e8997db9e1e8237ffc","first_seen":"2025-08-23T22:18:12.658567Z","last_seen":"2026-06-10T11:34:17.20593Z","times_seen":18,"resource_available":true,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"slon.biz/forms/widget.webcall/sounds/ru/autoanswer-female-ask-region.mp3?v=185","fqdn":"slon.biz","domain":"slon.biz","tld":"biz"},"ip":{"addr":"172.67.169.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://slon.biz/","date":"2026-06-10T11:33:47.319Z","timestamp":1781091227319,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"slon.biz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 06 May 2026 15:48:04 GMT","end":"Tue, 04 Aug 2026 16:46:34 GMT"},"fingerprint":{"sha1":"38:4D:94:42:4B:4C:2F:6C:E3:85:79:42:30:7A:FC:73:71:9C:2E:19","sha256":"33:02:9D:E9:C5:CA:AF:7D:63:1F:18:8E:26:19:D4:87:1A:1E:76:3E:7F:CD:39:C1:37:1C:58:EA:06:01:27:C9"}}},"request":{"raw":"GET /forms/widget.webcall/sounds/ru/autoanswer-female-ask-region.mp3?v=185 HTTP/1.1\r\nHost: slon.biz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: audio/webm,audio/ogg,audio/wav,audio/*;q=0.9,application/ogg;q=0.7,video/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nReferer: https://slon.biz/\r\nRange: bytes=0-\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: .AspNetCore.Antiforgery.Ix643OkwzkY=CfDJ8HRi9EzRANpAplf2nauG7zICIkpORWwJQaqFvBmwgvlkhSiuyijwoiq8Lt-G0_fG_yJHNPgUvRi8teQCuA-Z4eg9dZLiR-DenX7yKRE__4sxT5E-b2k_kDMLg7HFl164t7KkM4D37_Bl3fnd3M8-FEk; .AspNetCore.Session=CfDJ8HRi9EzRANpAplf2nauG7zICqAf8NVwWUZEU1EqZ4ykmFoIiNnUgsI3nexV5xMbfZhIa108IBBa0MabJ4m9nomz3Dl1LFryyv%2BA%2BBPy4z%2FIopaml7M%2FBPnDxj0yNBrXqc6Rpbq4dj74%2FsA1UyXxunMaIibXkwc0al5fim72%2BBDxp\r\nSec-Fetch-Dest: audio\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 206 \r\nserver: cloudflare\r\ndate: Wed, 10 Jun 2026 11:33:47 GMT\r\ncontent-type: audio/mpeg\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2ArkDI988fSsDLViwUP0W1gsuvfFEleYCB18IDvt7%2B4BWsX7nnUXUjp2EBSXxDXRoP0sJAc6J1cnA96fX2%2BDutrt4ZReXxWOmGoPC11a1F7fmKYPURzEzlcNOw%3D%3D\"}]}\r\nreferrer-policy: same-origin\r\naccess-control-allow-origin: *\r\ncache-control: public,max-age=31536000\r\netag: \"1dcef86128aa340\"\r\nlast-modified: Fri, 29 May 2026 16:13:23 GMT\r\nstrict-transport-security: max-age=2592000; includeSubDomains\r\nx-content-type-options: nosniff\r\ncontent-range: bytes 0-12479/12480\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncontent-length: 12480\r\ncf-ray: a098102abdb40b51-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12480,"size_decoded":13349,"mime_type":"audio/mpeg","magic":"MPEG ADTS, layer III, v1, 64 kbps, 48 kHz, Monaural","md5":"dd2fbf37d8a08bf1d436a64afac185f7","sha1":"4736c0d96e8d3cd91aaa299f99f322d9855027c0","sha256":"3b59de9e4fbc009b7d281765df91bf211f841f30afad40650ffbee91f7715c5f","sha512":"77c451c69c8d1f76a84d3be7b871ac90cb10bf8ed40c5a7ca1b0ce9cfe321bfa568f27ad245bc9bd826d1059cfc8eb508c594e89f6dac247c0550f2ec9096a92","ssdeep":"192:LokafdodHKJaINzPK+mXjArsNdFOpsJKAVHbROkcTM6/VMx/rZyxIquTTVx:LokafkK9NzPKNXVJzdmlKJNywNx","tlshash":"a042af401d84239ff06247bab14f4552cca67f1c2e97994ef88018c54dafeef579e581","first_seen":"2023-05-10T10:48:14Z","last_seen":"2026-06-10T11:34:17.207248Z","times_seen":9,"resource_available":false,"data":null}},"time_used":123,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":123,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-10","alert":"Sinkholed","trigger":"slon.biz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-10","alert":"Sinkholed","trigger":"slon.biz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"slon.biz/chat/negotiate?userId=7d740907-30a5-4070-904c-cd2ec00cc3b5\u0026negotiateVersion=1","fqdn":"slon.biz","domain":"slon.biz","tld":"biz"},"ip":{"addr":"172.67.169.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://slon.biz/","date":"2026-06-10T11:33:47.593Z","timestamp":1781091227593,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"slon.biz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 06 May 2026 15:48:04 GMT","end":"Tue, 04 Aug 2026 16:46:34 GMT"},"fingerprint":{"sha1":"38:4D:94:42:4B:4C:2F:6C:E3:85:79:42:30:7A:FC:73:71:9C:2E:19","sha256":"33:02:9D:E9:C5:CA:AF:7D:63:1F:18:8E:26:19:D4:87:1A:1E:76:3E:7F:CD:39:C1:37:1C:58:EA:06:01:27:C9"}}},"request":{"raw":"POST /chat/negotiate?userId=7d740907-30a5-4070-904c-cd2ec00cc3b5\u0026negotiateVersion=1 HTTP/1.1\r\nHost: slon.biz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://slon.biz/\r\nX-Requested-With: XMLHttpRequest\r\nX-SignalR-User-Agent: Microsoft SignalR/10.0 (10.0.0; Unknown OS; Browser; Unknown Runtime Version)\r\nOrigin: https://slon.biz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: .AspNetCore.Antiforgery.Ix643OkwzkY=CfDJ8HRi9EzRANpAplf2nauG7zICIkpORWwJQaqFvBmwgvlkhSiuyijwoiq8Lt-G0_fG_yJHNPgUvRi8teQCuA-Z4eg9dZLiR-DenX7yKRE__4sxT5E-b2k_kDMLg7HFl164t7KkM4D37_Bl3fnd3M8-FEk; .AspNetCore.Session=CfDJ8HRi9EzRANpAplf2nauG7zICqAf8NVwWUZEU1EqZ4ykmFoIiNnUgsI3nexV5xMbfZhIa108IBBa0MabJ4m9nomz3Dl1LFryyv%2BA%2BBPy4z%2FIopaml7M%2FBPnDxj0yNBrXqc6Rpbq4dj74%2FsA1UyXxunMaIibXkwc0al5fim72%2BBDxp\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 10 Jun 2026 11:33:47 GMT\r\ncontent-type: application/json\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://slon.biz\r\nvary: Origin\r\nstrict-transport-security: max-age=2592000; includeSubDomains\r\nx-content-type-options: nosniff\r\nreferrer-policy: same-origin\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\ncontent-encoding: zstd\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wYOt6WIuGyZbUDgD11qyX8C190R9PCzPnEDQ7BnMmDyffogldqNjsABVF4CHbCA9RDg%2BChXXMpR5cjvRzMGTRCllu60bC5v4OyXReiiswa9fWzyanuGVbH26vg%3D%3D\"}]}\r\ncf-ray: a098102c7dd00b51-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":316,"size_decoded":997,"mime_type":"application/json","magic":"JSON text data","md5":"01faf3141e58c1c85a1b214d44dccb75","sha1":"3031f5c46660e6ad93d1f9c71b7d25e3ece237ad","sha256":"8248f91d3fdf1b6d9b67d9d357573314fc03adf2a23304158a00d73277763368","sha512":"5ef006d264adfc8750e8a4ef0147aa701ba701517efd66973e9b4a71944b9902ba72724e2006ef2bc8dfe300afccc63a75190e1c6436e5b2cec83949f773d3d2","ssdeep":"","tlshash":"7fe0268ccd86687950421a51b1c20c0b77bcc26102410114b3f00d4f1b1beae12c69db","first_seen":"2026-06-10T11:34:17.208798Z","last_seen":"2026-06-10T11:34:17.208798Z","times_seen":1,"resource_available":false,"data":null}},"time_used":346,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":346,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-10","alert":"Sinkholed","trigger":"slon.biz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-10","alert":"Sinkholed","trigger":"slon.biz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"whitesaas.com/api?action=load\u0026code=f6c6aa5a17e19898d539ece7375f46cb\u0026url=https%253A%252F%252Flocalhost%253A44361\u0026visitorId=false\u0026callback=cbkcallback","fqdn":"whitesaas.com","domain":"whitesaas.com","tld":"com"},"ip":{"addr":"45.12.65.149","port":443,"asn":49505,"as":"JSC Selectel","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://slon.biz/","date":"2026-06-10T11:33:47.925Z","timestamp":1781091227925,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.whitesaas.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R6 AlphaSSL CA 2025","organization":"GlobalSign nv-sa"},"validity":{"start":"Fri, 27 Jun 2025 09:31:24 GMT","end":"Wed, 29 Jul 2026 09:31:23 GMT"},"fingerprint":{"sha1":"C4:FC:87:2C:44:8D:6A:09:D4:DB:69:41:78:7F:6F:68:6C:9F:C9:14","sha256":"FD:EC:A4:3D:7A:A7:08:CF:B8:7B:AA:57:61:CD:21:48:CE:39:40:96:71:4A:9C:9B:F3:2C:2F:05:C8:39:40:7D"}}},"request":{"raw":"GET /api?action=load\u0026code=f6c6aa5a17e19898d539ece7375f46cb\u0026url=https%253A%252F%252Flocalhost%253A44361\u0026visitorId=false\u0026callback=cbkcallback HTTP/1.1\r\nHost: whitesaas.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 10 Jun 2026 11:33:48 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nvary: Accept-Encoding\r\nset-cookie: chat_offline_on_start=0; expires=Wed, 10-Jun-2026 10:33:48 GMT; Max-Age=0\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":313,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-13T19:51:56.000454Z","times_seen":17875501,"resource_available":true,"data":null}},"time_used":103,"timings":{"blocked":-1,"dns":3,"connect":19,"send":0,"wait":34,"receive":0,"ssl":46},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"slon.biz/api/leads","fqdn":"slon.biz","domain":"slon.biz","tld":"biz"},"ip":{"addr":"172.67.169.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://slon.biz/","date":"2026-06-10T11:33:57.966Z","timestamp":1781091237966,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"slon.biz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 06 May 2026 15:48:04 GMT","end":"Tue, 04 Aug 2026 16:46:34 GMT"},"fingerprint":{"sha1":"38:4D:94:42:4B:4C:2F:6C:E3:85:79:42:30:7A:FC:73:71:9C:2E:19","sha256":"33:02:9D:E9:C5:CA:AF:7D:63:1F:18:8E:26:19:D4:87:1A:1E:76:3E:7F:CD:39:C1:37:1C:58:EA:06:01:27:C9"}}},"request":{"raw":"POST /api/leads HTTP/1.1\r\nHost: slon.biz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://slon.biz/\r\nContent-Type: application/x-www-form-urlencoded;charset=UTF-8\r\nContent-Length: 450\r\nOrigin: https://slon.biz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: .AspNetCore.Antiforgery.Ix643OkwzkY=CfDJ8HRi9EzRANpAplf2nauG7zICIkpORWwJQaqFvBmwgvlkhSiuyijwoiq8Lt-G0_fG_yJHNPgUvRi8teQCuA-Z4eg9dZLiR-DenX7yKRE__4sxT5E-b2k_kDMLg7HFl164t7KkM4D37_Bl3fnd3M8-FEk; .AspNetCore.Session=CfDJ8HRi9EzRANpAplf2nauG7zICqAf8NVwWUZEU1EqZ4ykmFoIiNnUgsI3nexV5xMbfZhIa108IBBa0MabJ4m9nomz3Dl1LFryyv%2BA%2BBPy4z%2FIopaml7M%2FBPnDxj0yNBrXqc6Rpbq4dj74%2FsA1UyXxunMaIibXkwc0al5fim72%2BBDxp\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 422 \r\nserver: cloudflare\r\ndate: Wed, 10 Jun 2026 11:33:58 GMT\r\ncontent-type: application/json; charset=utf-8\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://slon.biz\r\nvary: Origin\r\nstrict-transport-security: max-age=2592000; includeSubDomains\r\nx-content-type-options: nosniff\r\nreferrer-policy: same-origin\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qwBLeojQT10AiAxgYKkPM3pJa8L50aaO00Vvm5tYTTxTxC78lxo%2Ff0kuqv8cxVYwsta9vpCwhIEdDq9rSo5BPxntZuxdDECuuoqjTUMNhsE%2BrnJ%2FcV8WknuI7g%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: a098106d48950b51-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"422","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":85,"size_decoded":879,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"e6a3ba1ca2f81f52f5a592be1d47b8a6","sha1":"9a0197f6a1d680e848c0c699b6d94f3b95b0fca0","sha256":"4cd95ef71cd1ddca1c834db55294159992b3ad4e40f3fd534aabd2ab0df152e0","sha512":"503d90d189c171e04a6436b1db1263f2487ba87a12b843b956d655abcfc8a4b4f5614ef97321950c9cee4e51b8c816656958e4b997deac0b9c105d9e7fefafad","ssdeep":"","tlshash":"4aa0124001d12cae0301800f98102c061ac406e67e74d442045c046d62331c1c409219","first_seen":"2025-06-07T20:30:04.551437Z","last_seen":"2026-06-10T11:34:17.210148Z","times_seen":18,"resource_available":false,"data":null}},"time_used":45,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":45,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-10","alert":"Sinkholed","trigger":"slon.biz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-10","alert":"Sinkholed","trigger":"slon.biz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/masonry-layout@4.2.2/dist/masonry.pkgd.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.17.207.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://slon.biz/","date":"2026-06-10T11:33:47.168Z","timestamp":1781091227168,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jsdelivr.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 22 Apr 2026 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"65:D9:C4:7E:04:4C:FD:DD:60:E0:CC:18:B5:B7:01:68:B4:2D:C7:34","sha256":"50:6C:A4:F6:ED:74:C7:E9:68:DB:32:56:5A:68:4C:98:ED:01:28:36:F8:13:BA:CC:19:A7:FD:7A:0A:6E:E7:D4"}}},"request":{"raw":"GET /npm/masonry-layout@4.2.2/dist/masonry.pkgd.min.js HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 10 Jun 2026 11:33:47 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 7629\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-jsd-version: 4.2.2\r\nx-jsd-version-type: version\r\netag: W/\"5e27-0gJSz3bDvorzeoQV0TrTaMditNg\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\nx-served-by: cache-fra-etou8220111-FRA\r\nx-cache: HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=3,i=?0\r\nage: 2353437\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NZ249crHsN912TkzJqcAVJ4Bbu9ivIc1boVBJWWm5J0jxvu%2FUrdKUJHQyyS31CCw7XPWJQHMQTnuj%2FTTGxN9qIdVPNZARhvFBF2c3VxllUCew1lMB5I%2FUhExJ9jq8vMIYBg%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: a0981029cc4c56c0-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":24103,"size_decoded":8768,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (23966)","md5":"520e46df77727aaf3d5e799ef241be02","sha1":"d20252cf76c3be8af37a8415d13ad368c762b4d8","sha256":"367d6afdfc741fb48d2d9310e47c3924b693459a74c882c0fc545ec5ed7d55d2","sha512":"25195cbd26405d3f3ee5241002f9255c626ec574e8bb2abca0831a60445941ab01f120431d96946de012b095a9934514adff3d0cfdff69e7cf3eb94c475875c9","ssdeep":"384:cr7mIr/Dh5rA3rzB4rMhr/XWGHW/6rMz1xftF2OUVP4eAnbhfreD6dCBEOav7blM:iSxxGG2/71xftFqVP4eAnI0ROavPSCzo","tlshash":"46b2858f73007425428bf16696af020f7137655c7a4790acba6ad8db1cb984d2037fbd","first_seen":"2023-03-07T01:02:56Z","last_seen":"2026-08-13T18:32:57.314133Z","times_seen":11258,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"slon.biz/forms/widget.universal/sounds/notification.mp3?v=185","fqdn":"slon.biz","domain":"slon.biz","tld":"biz"},"ip":{"addr":"172.67.169.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://slon.biz/","date":"2026-06-10T11:33:47.310Z","timestamp":1781091227310,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"slon.biz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 06 May 2026 15:48:04 GMT","end":"Tue, 04 Aug 2026 16:46:34 GMT"},"fingerprint":{"sha1":"38:4D:94:42:4B:4C:2F:6C:E3:85:79:42:30:7A:FC:73:71:9C:2E:19","sha256":"33:02:9D:E9:C5:CA:AF:7D:63:1F:18:8E:26:19:D4:87:1A:1E:76:3E:7F:CD:39:C1:37:1C:58:EA:06:01:27:C9"}}},"request":{"raw":"GET /forms/widget.universal/sounds/notification.mp3?v=185 HTTP/1.1\r\nHost: slon.biz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: audio/webm,audio/ogg,audio/wav,audio/*;q=0.9,application/ogg;q=0.7,video/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nReferer: https://slon.biz/\r\nRange: bytes=0-\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: .AspNetCore.Antiforgery.Ix643OkwzkY=CfDJ8HRi9EzRANpAplf2nauG7zICIkpORWwJQaqFvBmwgvlkhSiuyijwoiq8Lt-G0_fG_yJHNPgUvRi8teQCuA-Z4eg9dZLiR-DenX7yKRE__4sxT5E-b2k_kDMLg7HFl164t7KkM4D37_Bl3fnd3M8-FEk; .AspNetCore.Session=CfDJ8HRi9EzRANpAplf2nauG7zICqAf8NVwWUZEU1EqZ4ykmFoIiNnUgsI3nexV5xMbfZhIa108IBBa0MabJ4m9nomz3Dl1LFryyv%2BA%2BBPy4z%2FIopaml7M%2FBPnDxj0yNBrXqc6Rpbq4dj74%2FsA1UyXxunMaIibXkwc0al5fim72%2BBDxp\r\nSec-Fetch-Dest: audio\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 206 \r\nserver: cloudflare\r\ndate: Wed, 10 Jun 2026 11:33:47 GMT\r\ncontent-type: audio/mpeg\r\npriority: u=4,i=?0\r\nreferrer-policy: same-origin\r\naccess-control-allow-origin: *\r\ncache-control: public,max-age=31536000\r\netag: \"1dcef86128a83fb\"\r\nlast-modified: Fri, 29 May 2026 16:13:23 GMT\r\nstrict-transport-security: max-age=2592000; includeSubDomains\r\nx-content-type-options: nosniff\r\ncontent-range: bytes 0-4218/4219\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fjemMOUPVbeHW518Bmqv0AJ3LkiBhuXBWcR7OpydD%2Bf2f%2FostP1uVeS13N4HIDNCJmz5RzCAvUMhAPZjTmuNZhuGfn9U3ktcJyzvVyvGpbkBpK0bSmHTLP4zEA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-length: 4219\r\ncf-ray: a098102aadab0b51-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4219,"size_decoded":5085,"mime_type":"audio/mpeg","magic":"Audio file with ID3 version 2.3.0, contains: MPEG ADTS, layer III, v1, 128 kbps, 44.1 kHz, Monaural","md5":"0d062b33a8b60acb2a497afe63666b16","sha1":"287f92ba7b3400651df3feb698eb0f1379612f87","sha256":"f8c8cfbd54ff27e4f7857c5831bd4a04dc1255f391d848f2d471a3658594f470","sha512":"0a1328912742c6b5d5f9891de86fb980fb92a05ea33dd091d05472a12de0e666662e23e1b8f26fa00c131b9f14c14255abbdd5516ce3ebddb068dff16880b4d6","ssdeep":"48:ujHBrZ2DXxRoTh5Oq4Au/4AE5PMRhP2ALVXCtF1w2hGA04vKt7gJTYeH:udrcrUhsq4AuwAEghuBbyAa7cT5H","tlshash":"b7913b809f66a995fc8bd375808b8307dbe60e2e5d4294f1e2c3f2570277416b3699a0","first_seen":"2023-04-26T22:26:26Z","last_seen":"2026-06-10T11:34:17.211697Z","times_seen":25,"resource_available":false,"data":null}},"time_used":102,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":102,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-10","alert":"Sinkholed","trigger":"slon.biz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-10","alert":"Sinkholed","trigger":"slon.biz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/immortal-db@1.1.0/dist/immortal-db.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.17.207.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://pixel.unioin.com/pixel-frame?visitorId=","date":"2026-06-10T11:33:47.553Z","timestamp":1781091227553,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jsdelivr.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 22 Apr 2026 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"65:D9:C4:7E:04:4C:FD:DD:60:E0:CC:18:B5:B7:01:68:B4:2D:C7:34","sha256":"50:6C:A4:F6:ED:74:C7:E9:68:DB:32:56:5A:68:4C:98:ED:01:28:36:F8:13:BA:CC:19:A7:FD:7A:0A:6E:E7:D4"}}},"request":{"raw":"GET /npm/immortal-db@1.1.0/dist/immortal-db.min.js HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 10 Jun 2026 11:33:47 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 19803\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-jsd-version: 1.1.0\r\nx-jsd-version-type: version\r\netag: W/\"ee25-pMHxoJFNs7/Bok84dZEhK2Ol9UM\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\nx-served-by: cache-fra-eddf8230087-FRA\r\nx-cache: HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=1,i=?0\r\nage: 1991363\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6HoRgTMj4LBWiUhH988hviOEvoAWq%2FnLpo1fw6aJkONuv9OTn3wOJhx3i62%2F9O7XzkpJjcSc8yYTmjzVwUDkWTnrLkeKxsGBlFQ%2B22BSsgYFhgJ%2BPonGEn%2FfMVKCI7SS4OM%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: a098102c3edb56c0-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":60965,"size_decoded":20947,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (43474)","md5":"54530312c3c2954ae37b0a580c3e6620","sha1":"a4c1f1a0914db3bfc1a24f387591212b63a5f543","sha256":"59944f96e5702f1b513edd112624b4de002cc998a3de8d120b6cff80b61b9051","sha512":"c5edbecc244a90269682a943acc5676b824b2a2bf51fbb9259fc4d69a9de178c34cc9701c5e985c2b4bd4e5d0a6b5cdb84f6a57f92ded9c41e5ad9a697279ce9","ssdeep":"768:bLg8cSjTZnnQ6k18c+pZZq2+7kKNc8Ov7CMLKX:bcwZnn0MrLpGX","tlshash":"ce5374ccb6c2f06607a37570402f540bf1ba6a58b49e8490f726d5d17c7a88ea137fad","first_seen":"2023-03-13T10:59:44Z","last_seen":"2026-08-10T15:32:58.760263Z","times_seen":457,"resource_available":true,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"slon.biz/assets/css/bootstrap.theme.css?v=mE3ojJD-0rufAAhbOc5kXDvEw668IudO1GhzPWQ5guE","fqdn":"slon.biz","domain":"slon.biz","tld":"biz"},"ip":{"addr":"172.67.169.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://slon.biz/","date":"2026-06-10T11:33:46.883Z","timestamp":1781091226883,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"slon.biz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 06 May 2026 15:48:04 GMT","end":"Tue, 04 Aug 2026 16:46:34 GMT"},"fingerprint":{"sha1":"38:4D:94:42:4B:4C:2F:6C:E3:85:79:42:30:7A:FC:73:71:9C:2E:19","sha256":"33:02:9D:E9:C5:CA:AF:7D:63:1F:18:8E:26:19:D4:87:1A:1E:76:3E:7F:CD:39:C1:37:1C:58:EA:06:01:27:C9"}}},"request":{"raw":"GET /assets/css/bootstrap.theme.css?v=mE3ojJD-0rufAAhbOc5kXDvEw668IudO1GhzPWQ5guE HTTP/1.1\r\nHost: slon.biz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://slon.biz/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: .AspNetCore.Antiforgery.Ix643OkwzkY=CfDJ8HRi9EzRANpAplf2nauG7zICIkpORWwJQaqFvBmwgvlkhSiuyijwoiq8Lt-G0_fG_yJHNPgUvRi8teQCuA-Z4eg9dZLiR-DenX7yKRE__4sxT5E-b2k_kDMLg7HFl164t7KkM4D37_Bl3fnd3M8-FEk; .AspNetCore.Session=CfDJ8HRi9EzRANpAplf2nauG7zICqAf8NVwWUZEU1EqZ4ykmFoIiNnUgsI3nexV5xMbfZhIa108IBBa0MabJ4m9nomz3Dl1LFryyv%2BA%2BBPy4z%2FIopaml7M%2FBPnDxj0yNBrXqc6Rpbq4dj74%2FsA1UyXxunMaIibXkwc0al5fim72%2BBDxp\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 10 Jun 2026 11:33:46 GMT\r\ncontent-type: text/css; charset=UTF-8\r\naccess-control-allow-origin: *\r\ncache-control: max-age=31536000,immutable\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zcuHG7s5oV1uIyjW%2BQIGj1ETsJByh0McJaKWffeP4M03yfa1qw9%2FlosHK29BYw50oxjQdSOmvWNVl%2F1Rk9DqN%2BcUV8gKLJjwHACJJA3KVuIIhefiUL9GPp2cFw%3D%3D\"}]}\r\nlast-modified: Fri, 29 May 2026 16:13:23 GMT\r\nstrict-transport-security: max-age=2592000; includeSubDomains\r\nx-content-type-options: nosniff\r\nreferrer-policy: same-origin\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\netag: W/\"rkqcoKi4g07Dy7E2oSRx7ezkyJA\"\r\npriority: u=2,i=?0\r\ncf-ray: a09810280d8a0b51-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":236880,"size_decoded":36039,"mime_type":"text/css; charset=UTF-8","magic":"Unicode text, UTF-8 text, with very long lines (65337)","md5":"bf97b4ea44aba8b60a5d684c34c8f548","sha1":"6c764a0806ba9e42ae116d73d0bca8b8132f65f8","sha256":"6c7c18e3a6174769487e049e63f24d996dd0e5f5155ed31bacf694d3cc9a250c","sha512":"0c5c7d2776178483ea35120798dd0e5585d1074919caf997b1573fb0a0ef8b1ff5e19e888e5524eb134d27cd6d1543f8e6034ebf7f269e98ce40aa24e1e3ad75","ssdeep":"1536:VnHLV9xfQvCvGvh7lzltizgK1uZsYBJk6gVxDwpz600I4xV:Vnx9xf5EK1unRgVxDwpz600I4xV","tlshash":"a63472e6f590357d9ca7c1499684fefd896f6989cb120da6f003776807cabd309229cc","first_seen":"2025-11-11T10:17:53.96402Z","last_seen":"2026-06-10T11:34:17.21277Z","times_seen":3,"resource_available":false,"data":null}},"time_used":217,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":105,"receive":112,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-10","alert":"Sinkholed","trigger":"slon.biz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-10","alert":"Sinkholed","trigger":"slon.biz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/@microsoft/signalr@10.0.0/dist/browser/signalr.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.17.207.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://slon.biz/","date":"2026-06-10T11:33:47.548Z","timestamp":1781091227548,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jsdelivr.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 22 Apr 2026 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"65:D9:C4:7E:04:4C:FD:DD:60:E0:CC:18:B5:B7:01:68:B4:2D:C7:34","sha256":"50:6C:A4:F6:ED:74:C7:E9:68:DB:32:56:5A:68:4C:98:ED:01:28:36:F8:13:BA:CC:19:A7:FD:7A:0A:6E:E7:D4"}}},"request":{"raw":"GET /npm/@microsoft/signalr@10.0.0/dist/browser/signalr.min.js HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 10 Jun 2026 11:33:47 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 14200\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-jsd-version: 10.0.0\r\nx-jsd-version-type: version\r\netag: W/\"ba71-+lpprtKH9ScodTSlikq/P3HVMwg\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\nx-served-by: cache-fra-eddf8230084-FRA, cache-ber1080057-BER\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=3,i=?0\r\nage: 1973331\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=s2A0s1ezeqPsAYZ%2F3cbfmxkBgRU5fxz8SJi%2FEMSu%2FIDEOexjsEaLQ00d04hAID8aCofOqja2nX1d0nOZ6Im4j5H5655BEyS%2FdWNg2Fzvj4zj%2Fa3m7Fhat9kik%2BWTwWflXb4%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: a098102c2ed156c0-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":47729,"size_decoded":15374,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (47689)","md5":"445cfa557e15d4b3d5b89d30eab08bb1","sha1":"fa5a69aed287f527287534a58a4abf3f71d53308","sha256":"10dd7681421e4638a55a3367a68ac0eac1973be1b4471b91b1b9e2306bb0b050","sha512":"fcdb22dc77d7999b3860cfc8e74137ff8aaeded76f612c0815a35df38282545e090ab4b05f3283c8582ff937518dbc3a9f61191bb107f86211e3b71c85d35bd2","ssdeep":"768:DNH4clHBC+cUcdArbZVzxmMShUeBhQeXvDth2RVkOkQgEhL+MY208OGuJfo1JRVQ:DNHLhhcsrnbUmmEJJOucrzKy","tlshash":"f523b55372a4607a179784d2d9620201e73054a473ca04bcba7c49ffacb56c5b7bbbf2","first_seen":"2026-03-28T05:09:55.004693Z","last_seen":"2026-07-24T08:37:36.32219Z","times_seen":6,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"slon.biz/","fqdn":"slon.biz","domain":"slon.biz","tld":"biz"},"ip":{"addr":"172.67.169.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-06-10T11:33:46.317Z","timestamp":1781091226317,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"slon.biz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 06 May 2026 15:48:04 GMT","end":"Tue, 04 Aug 2026 16:46:34 GMT"},"fingerprint":{"sha1":"38:4D:94:42:4B:4C:2F:6C:E3:85:79:42:30:7A:FC:73:71:9C:2E:19","sha256":"33:02:9D:E9:C5:CA:AF:7D:63:1F:18:8E:26:19:D4:87:1A:1E:76:3E:7F:CD:39:C1:37:1C:58:EA:06:01:27:C9"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: slon.biz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 10 Jun 2026 11:33:46 GMT\r\ncontent-type: text/html; charset=utf-8\r\ncache-control: no-cache,no-store\r\nexpires: -1\r\npragma: no-cache\r\nset-cookie: .AspNetCore.Antiforgery.Ix643OkwzkY=CfDJ8HRi9EzRANpAplf2nauG7zICIkpORWwJQaqFvBmwgvlkhSiuyijwoiq8Lt-G0_fG_yJHNPgUvRi8teQCuA-Z4eg9dZLiR-DenX7yKRE__4sxT5E-b2k_kDMLg7HFl164t7KkM4D37_Bl3fnd3M8-FEk; path=/; samesite=strict; httponly\n.AspNetCore.Session=CfDJ8HRi9EzRANpAplf2nauG7zICqAf8NVwWUZEU1EqZ4ykmFoIiNnUgsI3nexV5xMbfZhIa108IBBa0MabJ4m9nomz3Dl1LFryyv%2BA%2BBPy4z%2FIopaml7M%2FBPnDxj0yNBrXqc6Rpbq4dj74%2FsA1UyXxunMaIibXkwc0al5fim72%2BBDxp; path=/; samesite=lax; httponly\r\nstrict-transport-security: max-age=2592000; includeSubDomains\r\nx-content-type-options: nosniff\r\nreferrer-policy: same-origin\r\nx-frame-options: SAMEORIGIN\r\npriority: u=0,i\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=eyKYJ%2B6jbXYJ2OSHt0nmkNAtQgPqXI73jVJx77MA76fdeJwUqPJBiONnDCrLdEd5qD51NVPO0vM6megqmEyU953YGJe5u%2BuEET%2FY9sbpS9phaWsHEmYiJAh93g%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\nvary: accept-encoding\r\ncf-ray: a0981024bd770b51-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Bootstrap:5.3.8","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"Google Hosted Libraries","description":"Google Hosted Libraries is a stable, reliable, high-speed, globally available content distribution network for the most popular, open-source JavaScript libraries.","website":"https://developers.google.com/speed/libraries","common_platform_enumeration":"","icon":"Google Developers.svg","categories":["CDN"]},{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]},{"name":"jQuery:3.7.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}],"data":{"size":87837,"size_decoded":17307,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (973), with CRLF line terminators","md5":"051e9699c6d151dfbcb9dce8a20b91ac","sha1":"b4bce7206e2b7823786696ac2e4ab67e87cb313e","sha256":"5902bd78e342009e83e5d5171e6bb0807ce6582906ce823f331ca9f43d4a04a9","sha512":"98913d183db4b0b732acd83e607e5ba38432b51c9153bbf9827c073409000769ad37d1d6b53201127b800121c3049f1846bbda974be0f0f2debf60eaa930a281","ssdeep":"1536:0gQDElKPl5G46c3ww2VaSXUtFztplQT2jDKHvUa6wstZ:DQDElKPl5G4ZZ2VaSXUtFztLQT2jDKHk","tlshash":"e983e16055d969ab0133909ad904af09fda681bfeb57560532fc2fab3ff3c20c61b245","first_seen":"2026-06-10T11:34:17.214562Z","last_seen":"2026-06-10T11:34:17.214562Z","times_seen":1,"resource_available":false,"data":null}},"time_used":189,"timings":{"blocked":-1,"dns":25,"connect":14,"send":0,"wait":134,"receive":15,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-10","alert":"Sinkholed","trigger":"slon.biz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-10","alert":"Sinkholed","trigger":"slon.biz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"slon.biz/forms/widget.webcall/sounds/hangup.mp3?v=185","fqdn":"slon.biz","domain":"slon.biz","tld":"biz"},"ip":{"addr":"172.67.169.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://slon.biz/","date":"2026-06-10T11:33:47.314Z","timestamp":1781091227314,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"slon.biz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 06 May 2026 15:48:04 GMT","end":"Tue, 04 Aug 2026 16:46:34 GMT"},"fingerprint":{"sha1":"38:4D:94:42:4B:4C:2F:6C:E3:85:79:42:30:7A:FC:73:71:9C:2E:19","sha256":"33:02:9D:E9:C5:CA:AF:7D:63:1F:18:8E:26:19:D4:87:1A:1E:76:3E:7F:CD:39:C1:37:1C:58:EA:06:01:27:C9"}}},"request":{"raw":"GET /forms/widget.webcall/sounds/hangup.mp3?v=185 HTTP/1.1\r\nHost: slon.biz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: audio/webm,audio/ogg,audio/wav,audio/*;q=0.9,application/ogg;q=0.7,video/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nReferer: https://slon.biz/\r\nRange: bytes=0-\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: .AspNetCore.Antiforgery.Ix643OkwzkY=CfDJ8HRi9EzRANpAplf2nauG7zICIkpORWwJQaqFvBmwgvlkhSiuyijwoiq8Lt-G0_fG_yJHNPgUvRi8teQCuA-Z4eg9dZLiR-DenX7yKRE__4sxT5E-b2k_kDMLg7HFl164t7KkM4D37_Bl3fnd3M8-FEk; .AspNetCore.Session=CfDJ8HRi9EzRANpAplf2nauG7zICqAf8NVwWUZEU1EqZ4ykmFoIiNnUgsI3nexV5xMbfZhIa108IBBa0MabJ4m9nomz3Dl1LFryyv%2BA%2BBPy4z%2FIopaml7M%2FBPnDxj0yNBrXqc6Rpbq4dj74%2FsA1UyXxunMaIibXkwc0al5fim72%2BBDxp\r\nSec-Fetch-Dest: audio\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 206 \r\nserver: cloudflare\r\ndate: Wed, 10 Jun 2026 11:33:47 GMT\r\ncontent-type: audio/mpeg\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZxbZGGirkPfBVdheYUBbXYUqpKFR5sTj738oog3sAF8FUS0FLrYjqttKq951Adih5gvuVYNF%2BsJMwoFUYiJxzs4KZwSI2J7hxn915tobn%2BlzLaUJraGQIMFPhg%3D%3D\"}]}\r\nreferrer-policy: same-origin\r\naccess-control-allow-origin: *\r\ncache-control: public,max-age=31536000\r\netag: \"1dcef86128a8862\"\r\nlast-modified: Fri, 29 May 2026 16:13:23 GMT\r\nstrict-transport-security: max-age=2592000; includeSubDomains\r\nx-content-type-options: nosniff\r\ncontent-range: bytes 0-7137/7138\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncontent-length: 7138\r\ncf-ray: a098102abdaf0b51-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7138,"size_decoded":8004,"mime_type":"audio/mpeg","magic":"Audio file with ID3 version 2.4.0, contains:\n- MPEG ADTS, layer III, v2,  64 kbps, 24 kHz, Stereo","md5":"661d81bdff6e813e9d40ac8f3a9a573d","sha1":"f37cfb8ab06e885defa550e73858b0c3da211d2a","sha256":"fbfaaeb3fa5740f9f7d52e5f298b12f62863275b12eb1edbefabe51f00bbc66e","sha512":"5715dc0d76f4c49dd10f7cc3a6858bbc1bfb1c4f0e5f8e06bf5981ef0f3818de53cd60c63658fe409ede69fb5b1c79311f57dc6037b981cc281a6de90be78a25","ssdeep":"96:pxBktgOkoowqYvYQZdZHIqHBIHBiHZyiH1/2RB5lf4UxO30albwvee9F4S89aHpI:pxSttkD4NGhiEiQRBn7FuZSySLi","tlshash":"1de11a23b6b078d0d58ce73a6dc9120917932ed7c9c9a8c4fbce0805afa72e24c458c6","first_seen":"2023-05-10T10:48:14Z","last_seen":"2026-06-10T11:34:17.215676Z","times_seen":9,"resource_available":false,"data":null}},"time_used":158,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":158,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-10","alert":"Sinkholed","trigger":"slon.biz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-10","alert":"Sinkholed","trigger":"slon.biz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"slon.biz/forms/widget.webcall/sounds/ru/autoanswer-female-ask-name.mp3?v=185","fqdn":"slon.biz","domain":"slon.biz","tld":"biz"},"ip":{"addr":"172.67.169.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://slon.biz/","date":"2026-06-10T11:33:47.318Z","timestamp":1781091227318,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"slon.biz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 06 May 2026 15:48:04 GMT","end":"Tue, 04 Aug 2026 16:46:34 GMT"},"fingerprint":{"sha1":"38:4D:94:42:4B:4C:2F:6C:E3:85:79:42:30:7A:FC:73:71:9C:2E:19","sha256":"33:02:9D:E9:C5:CA:AF:7D:63:1F:18:8E:26:19:D4:87:1A:1E:76:3E:7F:CD:39:C1:37:1C:58:EA:06:01:27:C9"}}},"request":{"raw":"GET /forms/widget.webcall/sounds/ru/autoanswer-female-ask-name.mp3?v=185 HTTP/1.1\r\nHost: slon.biz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: audio/webm,audio/ogg,audio/wav,audio/*;q=0.9,application/ogg;q=0.7,video/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nReferer: https://slon.biz/\r\nRange: bytes=0-\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: .AspNetCore.Antiforgery.Ix643OkwzkY=CfDJ8HRi9EzRANpAplf2nauG7zICIkpORWwJQaqFvBmwgvlkhSiuyijwoiq8Lt-G0_fG_yJHNPgUvRi8teQCuA-Z4eg9dZLiR-DenX7yKRE__4sxT5E-b2k_kDMLg7HFl164t7KkM4D37_Bl3fnd3M8-FEk; .AspNetCore.Session=CfDJ8HRi9EzRANpAplf2nauG7zICqAf8NVwWUZEU1EqZ4ykmFoIiNnUgsI3nexV5xMbfZhIa108IBBa0MabJ4m9nomz3Dl1LFryyv%2BA%2BBPy4z%2FIopaml7M%2FBPnDxj0yNBrXqc6Rpbq4dj74%2FsA1UyXxunMaIibXkwc0al5fim72%2BBDxp\r\nSec-Fetch-Dest: audio\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 206 \r\nserver: cloudflare\r\ndate: Wed, 10 Jun 2026 11:33:48 GMT\r\ncontent-type: audio/mpeg\r\npriority: u=4,i=?0\r\nreferrer-policy: same-origin\r\naccess-control-allow-origin: *\r\ncache-control: public,max-age=31536000\r\netag: \"1dcef86128ab800\"\r\nlast-modified: Fri, 29 May 2026 16:13:23 GMT\r\nstrict-transport-security: max-age=2592000; includeSubDomains\r\nx-content-type-options: nosniff\r\ncontent-range: bytes 0-11135/11136\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=k34fzjbNlrl9WNGqbW9Pic0MHdi7vmswERZUyYnge7IdtggEx9GIKP7dYfgp%2Fi%2BKhRuWEvMtuevGu7lHQxdl9GONOdtZ3UhXWGO4HEtLHe6t7RwUJ4Q8Q4mo3A%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-length: 11136\r\ncf-ray: a098102abdb20b51-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11136,"size_decoded":12005,"mime_type":"audio/mpeg","magic":"MPEG ADTS, layer III, v1, 64 kbps, 48 kHz, Monaural","md5":"2fb67f29ac81e8b27dc0840b0e976781","sha1":"b91f795b725d2cd04d5a330b37eb58a8dd85b46d","sha256":"c3ff97bf740fd7bb51cef6d21c6970ee5fc8b9ec0ee55c2c166ecac0b673ba0c","sha512":"ebfd533e7ae9c0d0a0dec7abe545d4f331e3af3a48156858bc0f143f63e619644eb7ebf26edd10dfd2ad30b013a7aa63bb7888a4b9f8f1614acf762be5ffabaa","ssdeep":"192:LZfobPvNFmJYdky1fDowtXG48j+LPzHYjcE9Qjpe/utkdQpYYH/loFLQv:LyLvLyYoaXG4ZPjYgPKkgeXRv","tlshash":"ea32af072a178327f1001377954667c8fc285956a6576f7972c03fe190ef5e62f37a90","first_seen":"2023-05-10T10:48:15Z","last_seen":"2026-06-10T11:34:17.217086Z","times_seen":9,"resource_available":false,"data":null}},"time_used":1288,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1288,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-10","alert":"Sinkholed","trigger":"slon.biz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-10","alert":"Sinkholed","trigger":"slon.biz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"slon.biz/forms/widget.universal/assets/send-icon.svg?v=185","fqdn":"slon.biz","domain":"slon.biz","tld":"biz"},"ip":{"addr":"172.67.169.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://slon.biz/","date":"2026-06-10T11:33:47.524Z","timestamp":1781091227524,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"slon.biz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 06 May 2026 15:48:04 GMT","end":"Tue, 04 Aug 2026 16:46:34 GMT"},"fingerprint":{"sha1":"38:4D:94:42:4B:4C:2F:6C:E3:85:79:42:30:7A:FC:73:71:9C:2E:19","sha256":"33:02:9D:E9:C5:CA:AF:7D:63:1F:18:8E:26:19:D4:87:1A:1E:76:3E:7F:CD:39:C1:37:1C:58:EA:06:01:27:C9"}}},"request":{"raw":"GET /forms/widget.universal/assets/send-icon.svg?v=185 HTTP/1.1\r\nHost: slon.biz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://slon.biz/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: .AspNetCore.Antiforgery.Ix643OkwzkY=CfDJ8HRi9EzRANpAplf2nauG7zICIkpORWwJQaqFvBmwgvlkhSiuyijwoiq8Lt-G0_fG_yJHNPgUvRi8teQCuA-Z4eg9dZLiR-DenX7yKRE__4sxT5E-b2k_kDMLg7HFl164t7KkM4D37_Bl3fnd3M8-FEk; .AspNetCore.Session=CfDJ8HRi9EzRANpAplf2nauG7zICqAf8NVwWUZEU1EqZ4ykmFoIiNnUgsI3nexV5xMbfZhIa108IBBa0MabJ4m9nomz3Dl1LFryyv%2BA%2BBPy4z%2FIopaml7M%2FBPnDxj0yNBrXqc6Rpbq4dj74%2FsA1UyXxunMaIibXkwc0al5fim72%2BBDxp\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 10 Jun 2026 11:33:47 GMT\r\ncontent-type: image/svg+xml\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4US%2BBtgKonJ%2BHVBr8d%2FcRdGvu7f4txjRz05May7W8oedISW7w%2BeS63RA7kKqsw3kaVdRs4MSlGlbVqMlsCNDKe5ZOUpDIK7W7%2Fq9UD9KBYpx4kZy2i0shiBgtg%3D%3D\"}]}\r\naccess-control-allow-origin: *\r\ncache-control: public,max-age=31536000\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Fri, 29 May 2026 16:13:23 GMT\r\nstrict-transport-security: max-age=2592000; includeSubDomains\r\nx-content-type-options: nosniff\r\nreferrer-policy: same-origin\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\netag: W/\"1dcef86128a92cd\"\r\ncf-ray: a098102c0dcb0b51-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":333,"size_decoded":1089,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"f02778af2d8e59e060fcd4e513c59f42","sha1":"f0300ee9469e07b9705a0b1a401107b6d71e90ae","sha256":"adf982c8ca898c3a7553b6cc4b1b56a51ba6f4a799acb8107d4e39526cd212af","sha512":"2ee5950983604d970509e739b7cbe58fa009cb8cf0f2f00afd2b038999c12dbb0dd663bad82477949215ba2476db1b4fdafbc936b1367bdf8ee58311d1ec539b","ssdeep":"","tlshash":"fce02dc0a60780d9f020cff9fab37b404203b077a7f400656b791d034800a527f03994","first_seen":"2023-06-14T18:59:50Z","last_seen":"2026-06-10T11:34:17.217985Z","times_seen":5,"resource_available":false,"data":null}},"time_used":102,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":102,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-10","alert":"Sinkholed","trigger":"slon.biz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-10","alert":"Sinkholed","trigger":"slon.biz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"slon.biz/forms/widget.min.js?channelId=1051","fqdn":"slon.biz","domain":"slon.biz","tld":"biz"},"ip":{"addr":"172.67.169.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://slon.biz/","date":"2026-06-10T11:33:46.895Z","timestamp":1781091226895,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"slon.biz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 06 May 2026 15:48:04 GMT","end":"Tue, 04 Aug 2026 16:46:34 GMT"},"fingerprint":{"sha1":"38:4D:94:42:4B:4C:2F:6C:E3:85:79:42:30:7A:FC:73:71:9C:2E:19","sha256":"33:02:9D:E9:C5:CA:AF:7D:63:1F:18:8E:26:19:D4:87:1A:1E:76:3E:7F:CD:39:C1:37:1C:58:EA:06:01:27:C9"}}},"request":{"raw":"GET /forms/widget.min.js?channelId=1051 HTTP/1.1\r\nHost: slon.biz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://slon.biz/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: .AspNetCore.Antiforgery.Ix643OkwzkY=CfDJ8HRi9EzRANpAplf2nauG7zICIkpORWwJQaqFvBmwgvlkhSiuyijwoiq8Lt-G0_fG_yJHNPgUvRi8teQCuA-Z4eg9dZLiR-DenX7yKRE__4sxT5E-b2k_kDMLg7HFl164t7KkM4D37_Bl3fnd3M8-FEk; .AspNetCore.Session=CfDJ8HRi9EzRANpAplf2nauG7zICqAf8NVwWUZEU1EqZ4ykmFoIiNnUgsI3nexV5xMbfZhIa108IBBa0MabJ4m9nomz3Dl1LFryyv%2BA%2BBPy4z%2FIopaml7M%2FBPnDxj0yNBrXqc6Rpbq4dj74%2FsA1UyXxunMaIibXkwc0al5fim72%2BBDxp\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 10 Jun 2026 11:33:47 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KRDCQS8sGi2r%2BIA4HYaIZm2opSpC%2Fxu%2Fz9fqrvR4id8ak%2BYMXdX2%2BGsCa3gY98wlbcmz6gWQ2wuWhDPZzJg%2Fg7EXebp9HYSn2jpSBW%2FXToz7JGkAA7Aa4i9f%2FA%3D%3D\"}]}\r\ncache-control: no-cache,no-store,must-revalidate\r\nstrict-transport-security: max-age=2592000; includeSubDomains\r\nx-content-type-options: nosniff\r\nreferrer-policy: same-origin\r\npriority: u=3,i=?0\r\ncf-cache-status: BYPASS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a09810282d8e0b51-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4419,"size_decoded":3037,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (4259), with no line terminators","md5":"9e6599bd50bffaaba4849b3127503159","sha1":"7af7fc553aedb18d2b18241b1d439827c7ff6586","sha256":"026e2e1c072d1ac9cf09744c3a288c71c7004df62c3aafa6da18b7fe9031c7c6","sha512":"4d6ff5f0d087820330949de54f850d1a3267c9c4ac977d96ea68b7d737dbf7cb40a688148b60540c570c5cf7339e0d3986d87c261a023127a4e0e10138bd98f1","ssdeep":"96:O0m/pHRp/06sifUtVaymSJ+ppiVk4Q6U36BGyqyR21OEhg:hm/pfsyUXaDpiVkx36BLR2E","tlshash":"f391082a4d4839b5c2047263ecadfb0ebaec45b53901c40aaccc585aa3f1ee056718c7","first_seen":"2026-06-10T11:34:17.218875Z","last_seen":"2026-06-10T11:34:17.218875Z","times_seen":1,"resource_available":true,"data":null}},"time_used":113,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":113,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-10","alert":"Sinkholed","trigger":"slon.biz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-10","alert":"Sinkholed","trigger":"slon.biz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"slon.biz/forms/widget.webcall/sounds/connecting.mp3?v=185","fqdn":"slon.biz","domain":"slon.biz","tld":"biz"},"ip":{"addr":"172.67.169.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://slon.biz/","date":"2026-06-10T11:33:47.314Z","timestamp":1781091227314,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"slon.biz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 06 May 2026 15:48:04 GMT","end":"Tue, 04 Aug 2026 16:46:34 GMT"},"fingerprint":{"sha1":"38:4D:94:42:4B:4C:2F:6C:E3:85:79:42:30:7A:FC:73:71:9C:2E:19","sha256":"33:02:9D:E9:C5:CA:AF:7D:63:1F:18:8E:26:19:D4:87:1A:1E:76:3E:7F:CD:39:C1:37:1C:58:EA:06:01:27:C9"}}},"request":{"raw":"GET /forms/widget.webcall/sounds/connecting.mp3?v=185 HTTP/1.1\r\nHost: slon.biz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: audio/webm,audio/ogg,audio/wav,audio/*;q=0.9,application/ogg;q=0.7,video/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nReferer: https://slon.biz/\r\nRange: bytes=0-\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: .AspNetCore.Antiforgery.Ix643OkwzkY=CfDJ8HRi9EzRANpAplf2nauG7zICIkpORWwJQaqFvBmwgvlkhSiuyijwoiq8Lt-G0_fG_yJHNPgUvRi8teQCuA-Z4eg9dZLiR-DenX7yKRE__4sxT5E-b2k_kDMLg7HFl164t7KkM4D37_Bl3fnd3M8-FEk; .AspNetCore.Session=CfDJ8HRi9EzRANpAplf2nauG7zICqAf8NVwWUZEU1EqZ4ykmFoIiNnUgsI3nexV5xMbfZhIa108IBBa0MabJ4m9nomz3Dl1LFryyv%2BA%2BBPy4z%2FIopaml7M%2FBPnDxj0yNBrXqc6Rpbq4dj74%2FsA1UyXxunMaIibXkwc0al5fim72%2BBDxp\r\nSec-Fetch-Dest: audio\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 206 \r\nserver: cloudflare\r\ndate: Wed, 10 Jun 2026 11:33:48 GMT\r\ncontent-type: audio/mpeg\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4UMCwVYDs%2FMo9CT7Ec%2BfQL7mKJBlGRUWrLtT3S5QWTJYWhcozq4kOYs56F0P8dN%2BGE9M3Hoc5%2Fk%2FD1bcfBNt6qrnNsUfwl1YfwEc9iBJssIJ6xUkpgO8tLJrsQ%3D%3D\"}]}\r\nreferrer-policy: same-origin\r\naccess-control-allow-origin: *\r\ncache-control: public,max-age=31536000\r\netag: \"1dcef86128af22f\"\r\nlast-modified: Fri, 29 May 2026 16:13:23 GMT\r\nstrict-transport-security: max-age=2592000; includeSubDomains\r\nx-content-type-options: nosniff\r\ncontent-range: bytes 0-25006/25007\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncontent-length: 25007\r\ncf-ray: a098102abdae0b51-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":25007,"size_decoded":25882,"mime_type":"audio/mpeg","magic":"Audio file with ID3 version 2.4.0, contains: MPEG ADTS, layer III, v1, 64 kbps, 44.1 kHz, Stereo","md5":"d246f3dc1865018004ae70261d8ad4ed","sha1":"4d7e373cc2200761d1c0e3cf0ce1544fe32f2755","sha256":"13f07d65b588d6995a75c569a6f64e48781213cbabbcb2bfc3a42395eda2f41a","sha512":"396613b29a2d3e064d9e319c2b9fff6c71e761c0632133b8a7453de0729e4caac9464fde0ed0721c5b5bcdc70e3702638a39f6c7b3681b5dd7c99e11f1a2a661","ssdeep":"384:EWCXA50Xn+bN+f8Qx9lkYiZjcYVeGgf7EtbKl4Sd20OBfd7vyYpErz1YJEhpB1On:X/UQgf69SIt3yOWz1XnBlnej","tlshash":"63b2be0039f02990e5483bfba4e54e09cab221d696d0cdccf7cd6a52af622f429bd304","first_seen":"2023-05-10T10:48:14Z","last_seen":"2026-06-10T11:34:17.220504Z","times_seen":9,"resource_available":false,"data":null}},"time_used":1457,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1455,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-10","alert":"Sinkholed","trigger":"slon.biz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-10","alert":"Sinkholed","trigger":"slon.biz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}}]}