{"report_id":"fdcbc41e-5be0-4774-9613-d7e45c11ece6","version":0,"status":"done","tags":[],"date":"2026-10-10T21:46:55Z","url":{"schema":"http","addr":"cescaa.com/","fqdn":"cescaa.com","domain":"cescaa.com","tld":"com"},"ip":{"addr":"103.169.142.0","port":0,"asn":209242,"as":"Cloudflare London, LLC","country":"Australia","country_code":"AU"},"final":{"url":{"schema":"https","addr":"cescaa.com/","fqdn":"cescaa.com","domain":"cescaa.com","tld":"com"},"title":"Home","dom":{"size":102933,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (62508)","md5":"eea4234c005a0c683932dab3d1d5f3b0","sha1":"dfda3b2bafc8a1843967813f8b7aff577bb341a7","sha256":"52d20bdf96f96a2c5bb08ecc064c465408dd6a54bbcae0fe7828f153906cbdaf","sha512":"a2c82ed91f1f6a6ba8b2e10e77172c10ab3a26311ae86ad11c344b29f8b24995a584853952ce1e8d7a4a6b51850ba55662b3ba752c0921f085747456a88b2ab1","ssdeep":"1536:9iyIHpiohVh/hkhih9hEThih9hahih9hQ0Nu+:9iyIHpiof1+07k07w07S0Nu+","tlshash":"e8a38214261319bb49531867f1433a25d3eed729b3c11884a2f78e5ce7da4ee6b8133b","dom_hash":"domhash5660042b75fca162a0da6d5747079249","first_seen":"2026-10-10T21:47:12.443918Z","last_seen":"2026-10-10T21:47:12.443918Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"cescaa.com/","fqdn":"cescaa.com","domain":"cescaa.com","tld":"com"},"ip":{"addr":"103.169.142.0","port":0,"asn":209242,"as":"Cloudflare London, LLC","country":"Australia","country_code":"AU"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-11-14T21:46:55Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"cescaa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"cescaa.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"cescaa.com","ip":{"addr":"103.169.142.0","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Australia","country_code":"AU"},"domain_registered":"2024-11-21","domain_rank":0,"first_seen":"2026-05-24T14:58:09.57441Z","last_seen":"2026-05-24T14:58:09.57441Z","alert_count":186,"request_count":93,"received_data":7255990,"sent_data":65160,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"cescaa.com/_assets/9387c6b85eab150d.vendor.js","fqdn":"cescaa.com","domain":"cescaa.com","tld":"com"},"ip":{"addr":"103.169.142.0","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Australia","country_code":"AU"},"introduction_type":"scriptElement","is_inline":false,"md5":"3f9bd752bdbd0940ed727240c022a151","sha1":"f5ab910faf54379270c960d327bce7aff2c6226e","sha256":"3efa5da9d8c78cb144e8e1ad5b9c0e48218964a2c011c80b5ab755d90ae3a684","sha512":"3c120101496e1c5b55bb7b07117e27e04a4936c7f92a08ddba1c376ebf13cac198f7ac03dbd9090b07c38a7f580b10606e12eb1c22a36309723f1a06590b42e1","ssdeep":"6144:QB5UYsGygRjjPVaoMHrvZKo+f+5f4YzF0je4awZB/BK34sTIa3N6grg:QPUYsGBDMrvN4Wfogrg","tlshash":"91a4fcc8b291f4b157e761e5402f050bf33a7869704d80a4f268ece56cb998e617bf39","size":453709,"data":"","first_seen":"2025-09-21T19:47:57.560464Z","last_seen":"2026-10-10T21:47:12.513995Z","times_seen":88,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cescaa.com/_assets/eb4f34b17a82c952.js","fqdn":"cescaa.com","domain":"cescaa.com","tld":"com"},"ip":{"addr":"103.169.142.0","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Australia","country_code":"AU"},"introduction_type":"scriptElement","is_inline":false,"md5":"cacfd1d629ae1b6eccc6cd0d1226d1b8","sha1":"8f8d8ee76e650ad6851e67b5800930f03a557206","sha256":"6f94d31d28673c13b94ec8126801f7c241769b4ff95c51b468e36d74ef7cf9f7","sha512":"89a2529c00f9972049363c5e241779d8e5137b882775d756a98c9b485f0e846f2933fa5876a6eb8bebd9d622173d17539192c5832122ce4ae5720543e1960e5c","ssdeep":"49152:jJz/OFavwLg8x1CtojwddXICdyIqzA0tZYqgvgQ9rD9TjwAHn2IVmllLtGqO6JFh:jFUX","tlshash":"45a54b8032e7b05ac262d4e1907f0145f52aec94f00cccbdf6adecea7955d0562bab79","size":2169546,"data":"","first_seen":"2025-10-10T00:55:24.171827Z","last_seen":"2026-10-10T21:47:12.569868Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cescaa.com/_assets/fb24c0b503d63d63.js","fqdn":"cescaa.com","domain":"cescaa.com","tld":"com"},"ip":{"addr":"103.169.142.0","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Australia","country_code":"AU"},"introduction_type":"scriptElement","is_inline":false,"md5":"95d6afeaa1115016d282aee47db9a07f","sha1":"d6f5864d0cc2a38c0d295714d80387063084131f","sha256":"d6c502e66421eb1b1a8ab04b3a0be5711c55fa96880c714de837988a90c5aa06","sha512":"c2c03ae38b818a9c63f20c19f6a4a3a1aeb46caa72219614c84685844df170135292c993a671f753947882bb82edbfd8dd89899b1cc923a8c9af1508481059ec","ssdeep":"768:/KjmnWUPjo4QXJvWXiTTV+apPAT5Hu6oro2fNYDtOtmR5gN/0SEBfVqwlNhgEfix:Sjwb/aekr/NYDtOtmLg0SEBfVqwlNhl+","tlshash":"2c13a68572a7f45a8bb1d5d1403b1187f2296ce0f00c98fcf6a99dd2ba51c16d1baf38","size":43605,"data":"","first_seen":"2025-10-10T00:55:24.037997Z","last_seen":"2026-10-10T21:47:12.495937Z","times_seen":17,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cescaa.com/_assets/9724a3eb1d0b8334.js","fqdn":"cescaa.com","domain":"cescaa.com","tld":"com"},"ip":{"addr":"103.169.142.0","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Australia","country_code":"AU"},"introduction_type":"scriptElement","is_inline":false,"md5":"c67522d7b4d7b2fee7c86d1de1868419","sha1":"389653430d949108eeb7f6aaca05500a10cc6a7f","sha256":"4ec0723eb35fd71c5a240afb83c7be73548a2be21af457af551e7db52ed881f5","sha512":"762e446827b02837c3fbb981018578dbc14b4776fd199a4a74b587999c267eb7613dfa538944321ab32e48cf4b508e759f88df222c954d13a312983933c045ff","ssdeep":"192:jW6Tteys4uC5Y/NvH8xQxCoNbIYzzl1+hnjQqkxOSqU7bRI22nDzVE8jkU0:ykds4s/NkxWhbrzZ1q8qkFqU7bB+VD0","tlshash":"3812d908711d3113916be4e9902f190da922e864b30ce9ecbaa8ddda9d71c17276d73d","size":9861,"data":"","first_seen":"2025-10-10T00:55:24.162912Z","last_seen":"2026-10-10T21:47:12.516926Z","times_seen":17,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cescaa.com/_assets/da7aea494c53f9d7.js","fqdn":"cescaa.com","domain":"cescaa.com","tld":"com"},"ip":{"addr":"103.169.142.0","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Australia","country_code":"AU"},"introduction_type":"scriptElement","is_inline":false,"md5":"a2188afd89a49f1b5c3aaf1d3b46a985","sha1":"83e67755b8d909ae896943acdf7229209b1f0abd","sha256":"132964742836d959a19d4d6cf76e2910a9cd2fe048ddf98fbe38a7a4f24c7f4a","sha512":"df89a6c6536d1b7d129e74518bb4e9e77ee416024cbe270ae4e8ab115c520ddf5e5596572176cd304fbb5243727a1b61fc97828786cba8551037bb572b86319f","ssdeep":"96:Lsfw0gndBXnRNnVH1cwxqckv/ceVHv4cwugqD5GNXZPY7k+A5rIL:LsNgndBXjVH1ZxqXhVHv4Z3qQzPY7k+F","tlshash":"c5a1d89cf4a2b1578b2990e0427f4c692587bf10a80829ddf1f90cc966ea54da737778","size":4796,"data":"","first_seen":"2025-10-10T00:55:24.155395Z","last_seen":"2026-10-10T21:47:12.449995Z","times_seen":17,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cescaa.com/_assets/8b151872c2943599.s4le6a.vendor.js","fqdn":"cescaa.com","domain":"cescaa.com","tld":"com"},"ip":{"addr":"103.169.142.0","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Australia","country_code":"AU"},"introduction_type":"scriptElement","is_inline":false,"md5":"90d274470f498844ef68fda22b7cb3d3","sha1":"0b2daf885a94104e02b529238d939e56f3df27e8","sha256":"fa4657d50d2b80d018cd7e903c0d5256616ceaa9a19b31f2d08d36b5140dd387","sha512":"28901d714899ea328fd86a23af0613a60f7d1b37998cbc81e570ea2181ac3cef18363abc471d9b8c401f83c81794be7973a979c8ec8f4362d7a14172d37c47eb","ssdeep":"3072:1ROYsFEYVYxAs2vLhp+xUjPYrJ5ZmKmJEwulHaMYzvVPR6:mEYVYh2Fp+WbY1gEVYzvVPR6","tlshash":"f83419dc3995f1616ab352b740af1407b33d392b280d4960b211fcd9b8b845ea17bfad","size":248257,"data":"","first_seen":"2025-09-08T11:36:21.437322Z","last_seen":"2026-10-10T21:47:12.550927Z","times_seen":184,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cescaa.com/_assets/6465c0a8cc767404.js","fqdn":"cescaa.com","domain":"cescaa.com","tld":"com"},"ip":{"addr":"103.169.142.0","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Australia","country_code":"AU"},"introduction_type":"scriptElement","is_inline":false,"md5":"05366aedb60457b47ad0f837aa13f576","sha1":"b2600b4ebbb96a3963e1f5d47884e25622588067","sha256":"a8d90f0686a3f940ccf1cc1f398898bf22ac3805529ee50b7fa2ed29135a8cd9","sha512":"e0671ed64e7b3ba3bcd8ccd623a17ec4d8b6241300e881fe6ae8eeee43d6adec6f1e3dab50ebf226e8fa3213293187eb809f0db1190de7012d763f1b4cf56782","ssdeep":"","tlshash":"50f0d89c7c67bd07702bb4e0500f5d254b1be5a1ec49aec9f052986419f384dc313f20","size":649,"data":"","first_seen":"2025-10-10T00:55:24.022641Z","last_seen":"2026-10-10T21:47:12.563586Z","times_seen":17,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cescaa.com/_assets/1e5dd1c96ce202e3.js","fqdn":"cescaa.com","domain":"cescaa.com","tld":"com"},"ip":{"addr":"103.169.142.0","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Australia","country_code":"AU"},"introduction_type":"scriptElement","is_inline":false,"md5":"30e4b1d9a519c7e9d625b163417454b5","sha1":"55a6eca334055c8820c08ef26f1f8f2e2c1fbf84","sha256":"ff42712146a711f657081b0f975f6ba412b7c7f42a3b2222861652f61561cfff","sha512":"5463642457bf74fab5666a0fce295922be08231bee21edf1e68af3343c1b27a079ac65a7c7337af816f2adf7ee512d3b4a951624899d28765a6cacfe6757a43b","ssdeep":"","tlshash":"8fe0e5947d66bd07309f20e4814e2a24032be7727c59aec5b0719c5508f398d8323e64","size":412,"data":"","first_seen":"2025-07-01T23:02:20.446204Z","last_seen":"2026-10-10T21:47:12.532378Z","times_seen":519,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cescaa.com/_assets/c1ad8d21ac431176.js","fqdn":"cescaa.com","domain":"cescaa.com","tld":"com"},"ip":{"addr":"103.169.142.0","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Australia","country_code":"AU"},"introduction_type":"scriptElement","is_inline":false,"md5":"6eb8ff5476e181905ba18d29c13190f3","sha1":"affb871141c92057cde3e7d5c82282e36f0fb917","sha256":"50d66064e722df7d317a23765e70f8e9ecfabbd61e8e8cc81265b37339f1df66","sha512":"4ece9864cda715da96d1e7f6519f7020d127eab2ebc2502b64b35d6c75e55137a3ddb2a839d763d02ae332af551b309d0b72126fe4234d9551f0b60affb65edc","ssdeep":"","tlshash":"c711801cbe6aba27505a21f0401f1a25062b9261ac4eabd9b1b95ce844f344dd722fb5","size":864,"data":"","first_seen":"2025-10-10T00:55:24.13174Z","last_seen":"2026-10-10T21:47:12.519248Z","times_seen":17,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cescaa.com/_assets/6d708af84f85a6a6.js","fqdn":"cescaa.com","domain":"cescaa.com","tld":"com"},"ip":{"addr":"103.169.142.0","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Australia","country_code":"AU"},"introduction_type":"scriptElement","is_inline":false,"md5":"7c4b6f27f9ef9e9ce4b6b25eeb367fed","sha1":"e03578185430579ad47ea2b8db0f92a74a2020fe","sha256":"b76778b695b60ae850c9733b85fb0fe65f23ed4fd48ecf6916ff15a3cd8555f6","sha512":"40ecef88199185707d1c7d48bc689abcff41a48869e72193457668e9240dfdc6bb7e88467ea15fe8a2955eee970469bbfa7afa77cce53320eff6a992ec1ad665","ssdeep":"","tlshash":"6231ec587cee2e06b016b3e0817f19265a9ea279f857bcca94244d5d0835c0e472ef79","size":1516,"data":"","first_seen":"2025-10-10T00:55:24.133406Z","last_seen":"2026-10-10T21:47:12.555577Z","times_seen":17,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cescaa.com/_assets/eebc1a25dc225384.js","fqdn":"cescaa.com","domain":"cescaa.com","tld":"com"},"ip":{"addr":"103.169.142.0","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Australia","country_code":"AU"},"introduction_type":"scriptElement","is_inline":false,"md5":"b7f0a8d07b58b96a8ee313aa05c45a96","sha1":"a698d30be2ea638d798fa13b860133a986ff08d2","sha256":"fde384b3f4d3cab5db44e8117f583a042e93fa550152cd1361bcc1c5ca7d3b5d","sha512":"9d16b66a5739d7936330b77b70db5814a4527cc3585373475792b711f4bf781b267e5a6b581be388e618e7bad53e1a26cb4a8e43778525539b6181f75584cc5a","ssdeep":"768:D9dzfN7VJ0+JYXnJXriTdTjN8u1t0TKs1VjE6UBcPHO40Az1pf+JKRG+d2HUd4V:Zd7N7cXQsTjVj7PH+AzeJKRlx4V","tlshash":"53e21a99b1da306dd3b74988202f5206a9291d25f00d9df1f63c96fa1d70d0eb23af6d","size":31412,"data":"","first_seen":"2025-10-10T00:55:24.153941Z","last_seen":"2026-10-10T21:47:12.527221Z","times_seen":17,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cescaa.com/_assets/4b4870ee5cf37f1d.js","fqdn":"cescaa.com","domain":"cescaa.com","tld":"com"},"ip":{"addr":"103.169.142.0","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Australia","country_code":"AU"},"introduction_type":"scriptElement","is_inline":false,"md5":"e2ca18d70eb25aa71ce47846fcc1a70a","sha1":"9972e924ee857c467fa3c82ad77ccf1c67a94262","sha256":"6d16e4ca5bc97d2bcd4dec98273e4afa9b5da428708a25df0ed4af917330bd21","sha512":"7e660f9a0a09fce12722f5c089104738a21d19b43a4692dd1ca0f160c158020d57ca90b5e874b69f8044ce286c1a6b14d79504dbe486a42cf18655665a5e4009","ssdeep":"384:/sYmde8tWr65Ce6KRawg1BVRAqQyA2A/oaQVXAFyAPsCiDxX6gLUa7Rzc3y8Pcix:/sskJR5g1Bb4yAPsCKMWhqB","tlshash":"d0a3a55aeba71cad97617c79cd75f9acb4cf3ca180b0d2b50e74849b9c1412fc86e821","size":103070,"data":"","first_seen":"2025-10-10T00:55:24.128847Z","last_seen":"2026-10-10T21:47:12.567038Z","times_seen":17,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cescaa.com/_assets/1699aa8480ddc861.strings.js","fqdn":"cescaa.com","domain":"cescaa.com","tld":"com"},"ip":{"addr":"103.169.142.0","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Australia","country_code":"AU"},"introduction_type":"scriptElement","is_inline":false,"md5":"7cbe2b15e9d09061940d82760cc04d91","sha1":"697ad94f406d2a7f4379820a59a553356e23473e","sha256":"1779e8ff628da7e996df75820a2be41d256d215e9c3ec776321a79511c5833cb","sha512":"17021b2dcd080c3ec364a2c4098bc2b57ff20716e2e96224302cee84100bbfc74247ec1772bf9ea19d6d32985035de27cd04ea76b07f7036f7d9f96db9473752","ssdeep":"384:bpXhswlgxe75VPsOSRV0A5Ic1DR6xkI0PCX29B:1KaIezZg9wxn2j","tlshash":"5d62a305f242d12cc2424e8e267eaef4f91bc16997a013b5fc59c568a36387c7bb78d0","size":15380,"data":"","first_seen":"2025-09-27T01:50:48.446156Z","last_seen":"2026-10-10T21:47:12.533345Z","times_seen":40,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cescaa.com/_assets/9a9d2935a08d2ba3.en.js","fqdn":"cescaa.com","domain":"cescaa.com","tld":"com"},"ip":{"addr":"103.169.142.0","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Australia","country_code":"AU"},"introduction_type":"scriptElement","is_inline":false,"md5":"f724012587f7df7b53a9c94f3af65672","sha1":"cc62b459bbc303ddaa4c76a468ae8ddfbd4d950e","sha256":"cc7814171cf2e62068f48b042b2de56a7f729ff8f1292b553d5482e0966ed4f7","sha512":"ff7dee24b60a65d6e8fe65b86f32ae7a452a899698ff5daf3a20def0530eb905a33674e4d7274140f2364314c0cbe5228e987e8174fa84a463de158a0e31884e","ssdeep":"","tlshash":"c1d05e6600d1dbf4ff7f1fbdc39629862d0247000496e6ac8471428537b8c43cba0598","size":259,"data":"","first_seen":"2025-09-03T09:35:06.490607Z","last_seen":"2026-10-10T21:47:12.552834Z","times_seen":55,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cescaa.com/_assets/4e43ff722876b949.runtime.js","fqdn":"cescaa.com","domain":"cescaa.com","tld":"com"},"ip":{"addr":"103.169.142.0","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Australia","country_code":"AU"},"introduction_type":"scriptElement","is_inline":false,"md5":"34c584a86ac7564eb3c5d15ddbccedc7","sha1":"10ed79f84dbb1bfc5b0bb7595e4e9cdcf4f7a382","sha256":"b7a628a574fa8d94171380017f6a5ea743c2e4a46d4103bd2461f4eeeeb8afc3","sha512":"ab87026609b84b3d6d0ea983d8aa1474d225a9250c701a7e6e392be77d080da3306336fd8189c92eb6d552391e720b8504a1f6030c8b66ddf618799f517695f5","ssdeep":"768:la7P3F0p7fFAGFDSDFAoPgue5Ezy99WKUWj/5yg6CvYoYGeCxL/tTS0v:la7CLPOg1dfAoHjpSq","tlshash":"63e2b4e936f340a2d1d12ee87859c04b388d5ce9249d1790dbdb79e8fb54b72e433862","size":31267,"data":"","first_seen":"2025-10-10T00:55:24.108666Z","last_seen":"2026-10-10T21:47:12.538206Z","times_seen":17,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cescaa.com/_assets/97b1cac31995460c.js","fqdn":"cescaa.com","domain":"cescaa.com","tld":"com"},"ip":{"addr":"103.169.142.0","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Australia","country_code":"AU"},"introduction_type":"scriptElement","is_inline":false,"md5":"02efa161e6636681b11b77b92159a2ce","sha1":"49fcb93cb37df59db6445739995708f1e1801519","sha256":"79582424c6c09f560cac85d6451f16019054b99f1f99104eda32cc7f724a4e10","sha512":"0badcd182a6bdd06248151e40e192fec1ef04e6a6ca0504716f1b0ae4dbe9adb9f6c06e935ee5f8bd550402a357e8d36ecfe49bd2885035d8679df8d725f8b6b","ssdeep":"","tlshash":"e5e0e5947d56fd0b309f20e0800e2a24071be6726c59aec6b071885508f394d8323e64","size":409,"data":"","first_seen":"2025-07-01T23:02:20.455824Z","last_seen":"2026-10-10T21:47:12.554883Z","times_seen":519,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cescaa.com/_assets/cac67018060c51df.js","fqdn":"cescaa.com","domain":"cescaa.com","tld":"com"},"ip":{"addr":"103.169.142.0","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Australia","country_code":"AU"},"introduction_type":"scriptElement","is_inline":false,"md5":"ffd116cf3c16f390168b28fba7f53eec","sha1":"daeff1075096aba89347debc775184f664693d6a","sha256":"8b324de3d261ed9041b2bf2d4021efcc00157908259e3ab52df88f2548e8bbbf","sha512":"0a53d0973a0bf483f443c03f5c7eaec01c9a483abef64aac1c5b4134d956c85ccda155227daaeccc2faf13b2e15b6a271e3e94a5f6623088fca75ce9ab376bd0","ssdeep":"96:8swiA9Jw/xIeeBcM7XuZSojwk+lVlrYYaAtunCR9QYwc8QXejuW4iiraUBTqBtTJ:8s/ATxeJQXoSOw5lrSnUQFQXeSWViWUO","tlshash":"efc1fee471dbb507836970aa407b4583ef5e6dd0f44c89fdf89898c63e228128136fb9","size":5622,"data":"","first_seen":"2025-10-10T00:55:24.142791Z","last_seen":"2026-10-10T21:47:12.540094Z","times_seen":17,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cescaa.com/_assets/06102bb3a47c3258.js","fqdn":"cescaa.com","domain":"cescaa.com","tld":"com"},"ip":{"addr":"103.169.142.0","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Australia","country_code":"AU"},"introduction_type":"scriptElement","is_inline":false,"md5":"da67116942de55009782452e135953d7","sha1":"8146938a423d5273fc3b9e7f3a83dbc86e7a7d2c","sha256":"42795e08efddba17702a907046cfcc8d3c7738f52280edc363b189f155757c40","sha512":"cccf34ce08584fe16b56309f7292d0def4ab143df20a49de32649b70556a712ced6cbffd8b2051392ef939c51eb80d8b532ee955781f38ab5378f237870e4224","ssdeep":"384:pBQY0lvoxZClJRK29x/e7E7InCf7EDcjpfLjOV38CcfVav:pB30lvoxclJg29xGLnCfbU39cfI","tlshash":"1582d782269e7c6755a1a4d0d02f7230914af151b101ecfbba6ceecde7fb5089264b72","size":18023,"data":"","first_seen":"2025-10-10T00:55:24.125729Z","last_seen":"2026-10-10T21:47:12.530545Z","times_seen":17,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cescaa.com/_assets/ccb12a183b91b652.js","fqdn":"cescaa.com","domain":"cescaa.com","tld":"com"},"ip":{"addr":"103.169.142.0","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Australia","country_code":"AU"},"introduction_type":"scriptElement","is_inline":false,"md5":"68ffbf4de093e0380e843b89e4a1cbdd","sha1":"317aec06bdc7bfdadf1dcf3a95504cf8fbd42c4b","sha256":"04f62c95ae31d45116b6ac41534f6868856febbaec871a08571f2e11d7af54fc","sha512":"ac26de73e5699c808368b3afecd4dab2a0647321ee37826ede2bc4b0f508a8109a2df5fbfae57b0229944cb6631c153eaa160d39e8a3f0a73a2d8423dd9ef736","ssdeep":"768:xsNtGibxcZXPxWCjI+41nenMwfKu0j/4df48dNgWpl1NIRnumyIbTJ+5Glm4O1HK:ONtGibxYXPxWCjI/wyu0jE7rNpl1NIBz","tlshash":"5a13f819b0a6a43dc57698c9c0bf218575169c0cb208dcfcb77e9ddb2ca484172beb79","size":43919,"data":"","first_seen":"2025-10-10T00:55:24.157091Z","last_seen":"2026-10-10T21:47:12.548111Z","times_seen":17,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"cescaa.com/_assets/media/db83feb22f5aeabf2e6510d3190d46c7.svg","fqdn":"cescaa.com","domain":"cescaa.com","tld":"com"},"ip":{"addr":"103.169.142.0","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cescaa.com/","date":"2026-10-10T21:46:14.735Z","timestamp":1791668774735,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cescaa.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Sun, 06 Sep 2026 05:47:48 GMT","end":"Sat, 05 Dec 2026 06:46:40 GMT"},"fingerprint":{"sha1":"ED:EA:92:85:3E:13:4B:14:B2:3D:68:46:E8:43:9C:6B:3C:F1:32:DA","sha256":"7A:0F:F6:5D:4D:CF:B3:61:47:C4:54:6B:D7:C9:B4:11:9F:99:60:9F:7A:33:B6:FE:12:75:A1:FE:A9:B9:B5:C2"}}},"request":{"raw":"GET /_assets/media/db83feb22f5aeabf2e6510d3190d46c7.svg HTTP/1.1\r\nHost: cescaa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://cescaa.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __cf_bm=vOuBaFobJJHt2JGkBfxmwK60G8D6IyQVMT5sk6zLfGg-1791668772.3255684-1.0.1.1-TAeZ3m9ziTdsOy9Dm3_qgMAR5jdBCC6nmmHTtsbfUUqjEn8lVxafvHJfJTehEhGew0b7N7p3DDyOcvnHPJBbuySlYAJtMylSNpIXNhpFAi83EvkhJnIeNPGbMG63_vXj\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"__cf_bm","value":"vOuBaFobJJHt2JGkBfxmwK60G8D6IyQVMT5sk6zLfGg-1791668772.3255684-1.0.1.1-TAeZ3m9ziTdsOy9Dm3_qgMAR5jdBCC6nmmHTtsbfUUqjEn8lVxafvHJfJTehEhGew0b7N7p3DDyOcvnHPJBbuySlYAJtMylSNpIXNhpFAi83EvkhJnIeNPGbMG63_vXj"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 10 Oct 2026 21:46:14 GMT\r\ncontent-type: image/svg+xml\r\ncache-control: public, max-age=604800, immutable\r\nstrict-transport-security: max-age=31536000\r\nx-deployment-id: 0f99e4b75af14702f37d466a7129023b9b25e5159a3104342517539ef44a4f3a\r\nx-robots-tag: none\r\nvary: accept-encoding\r\nexpect-ct: max-age=86400, enforce\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\npriority: u=5,i\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: a488d1121cd523eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":942,"size_decoded":1192,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"5fff4f20317db9be7b10185d40466915","sha1":"fd8e16f8449415e4a056e35f75c0cac0c6d64a80","sha256":"cd7e7160ca0d0c3191f6ae719a179e808fa32a627bed10ec06fc8ad890ece259","sha512":"11bb22a83e531734a9c138a92673cbc73f1bd8a663c742c00ab6250e0de6098fcc22a7bb484bbe1e46dd1fc6c0b5b6a91498fe8b9eb36981604863b44988d64c","ssdeep":"","tlshash":"ce111405630a46a0ebc9cb8283f889516139d04ae8d0d2dcea6b1b46e4215f11f20d7d","first_seen":"2025-09-15T15:29:26.870804Z","last_seen":"2026-10-10T21:47:12.448078Z","times_seen":14,"resource_available":false,"data":null}},"time_used":121,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":121,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"cescaa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"cescaa.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cescaa.com/_assets/da7aea494c53f9d7.js","fqdn":"cescaa.com","domain":"cescaa.com","tld":"com"},"ip":{"addr":"103.169.142.0","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cescaa.com/","date":"2026-10-10T21:46:13.814Z","timestamp":1791668773814,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cescaa.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Sun, 06 Sep 2026 05:47:48 GMT","end":"Sat, 05 Dec 2026 06:46:40 GMT"},"fingerprint":{"sha1":"ED:EA:92:85:3E:13:4B:14:B2:3D:68:46:E8:43:9C:6B:3C:F1:32:DA","sha256":"7A:0F:F6:5D:4D:CF:B3:61:47:C4:54:6B:D7:C9:B4:11:9F:99:60:9F:7A:33:B6:FE:12:75:A1:FE:A9:B9:B5:C2"}}},"request":{"raw":"GET /_assets/da7aea494c53f9d7.js HTTP/1.1\r\nHost: cescaa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://cescaa.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __cf_bm=vOuBaFobJJHt2JGkBfxmwK60G8D6IyQVMT5sk6zLfGg-1791668772.3255684-1.0.1.1-TAeZ3m9ziTdsOy9Dm3_qgMAR5jdBCC6nmmHTtsbfUUqjEn8lVxafvHJfJTehEhGew0b7N7p3DDyOcvnHPJBbuySlYAJtMylSNpIXNhpFAi83EvkhJnIeNPGbMG63_vXj\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"__cf_bm","value":"vOuBaFobJJHt2JGkBfxmwK60G8D6IyQVMT5sk6zLfGg-1791668772.3255684-1.0.1.1-TAeZ3m9ziTdsOy9Dm3_qgMAR5jdBCC6nmmHTtsbfUUqjEn8lVxafvHJfJTehEhGew0b7N7p3DDyOcvnHPJBbuySlYAJtMylSNpIXNhpFAi83EvkhJnIeNPGbMG63_vXj"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 10 Oct 2026 21:46:13 GMT\r\ncontent-type: application/javascript\r\ncache-control: public, max-age=604800, immutable\r\nstrict-transport-security: max-age=31536000\r\nx-deployment-id: 0f99e4b75af14702f37d466a7129023b9b25e5159a3104342517539ef44a4f3a\r\nx-robots-tag: none\r\nvary: accept-encoding\r\nexpect-ct: max-age=86400, enforce\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\npriority: u=3,i=?0\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: a488d10c5e4423eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4796,"size_decoded":2726,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (939)","md5":"a2188afd89a49f1b5c3aaf1d3b46a985","sha1":"83e67755b8d909ae896943acdf7229209b1f0abd","sha256":"132964742836d959a19d4d6cf76e2910a9cd2fe048ddf98fbe38a7a4f24c7f4a","sha512":"df89a6c6536d1b7d129e74518bb4e9e77ee416024cbe270ae4e8ab115c520ddf5e5596572176cd304fbb5243727a1b61fc97828786cba8551037bb572b86319f","ssdeep":"96:Lsfw0gndBXnRNnVH1cwxqckv/ceVHv4cwugqD5GNXZPY7k+A5rIL:LsNgndBXjVH1ZxqXhVHv4Z3qQzPY7k+F","tlshash":"c5a1d89cf4a2b1578b2990e0427f4c692587bf10a80829ddf1f90cc966ea54da737778","first_seen":"2025-10-10T00:55:24.155395Z","last_seen":"2026-10-10T21:47:12.449995Z","times_seen":17,"resource_available":true,"data":null}},"time_used":118,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":118,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"cescaa.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"cescaa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cescaa.com/_assets/48f7024d7de3a1d6.ltr.css","fqdn":"cescaa.com","domain":"cescaa.com","tld":"com"},"ip":{"addr":"103.169.142.0","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://cescaa.com/","date":"2026-10-10T21:46:13.828Z","timestamp":1791668773828,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cescaa.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Sun, 06 Sep 2026 05:47:48 GMT","end":"Sat, 05 Dec 2026 06:46:40 GMT"},"fingerprint":{"sha1":"ED:EA:92:85:3E:13:4B:14:B2:3D:68:46:E8:43:9C:6B:3C:F1:32:DA","sha256":"7A:0F:F6:5D:4D:CF:B3:61:47:C4:54:6B:D7:C9:B4:11:9F:99:60:9F:7A:33:B6:FE:12:75:A1:FE:A9:B9:B5:C2"}}},"request":{"raw":"GET /_assets/48f7024d7de3a1d6.ltr.css HTTP/1.1\r\nHost: cescaa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://cescaa.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __cf_bm=vOuBaFobJJHt2JGkBfxmwK60G8D6IyQVMT5sk6zLfGg-1791668772.3255684-1.0.1.1-TAeZ3m9ziTdsOy9Dm3_qgMAR5jdBCC6nmmHTtsbfUUqjEn8lVxafvHJfJTehEhGew0b7N7p3DDyOcvnHPJBbuySlYAJtMylSNpIXNhpFAi83EvkhJnIeNPGbMG63_vXj\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"__cf_bm","value":"vOuBaFobJJHt2JGkBfxmwK60G8D6IyQVMT5sk6zLfGg-1791668772.3255684-1.0.1.1-TAeZ3m9ziTdsOy9Dm3_qgMAR5jdBCC6nmmHTtsbfUUqjEn8lVxafvHJfJTehEhGew0b7N7p3DDyOcvnHPJBbuySlYAJtMylSNpIXNhpFAi83EvkhJnIeNPGbMG63_vXj"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 10 Oct 2026 21:46:13 GMT\r\ncontent-type: text/css\r\ncache-control: public, max-age=604800, immutable\r\nstrict-transport-security: max-age=31536000\r\nx-deployment-id: 0f99e4b75af14702f37d466a7129023b9b25e5159a3104342517539ef44a4f3a\r\nx-robots-tag: none\r\nvary: accept-encoding\r\nexpect-ct: max-age=86400, enforce\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\npriority: u=2,i=?0\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: a488d10c6e8f23eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5618,"size_decoded":2312,"mime_type":"text/css","magic":"ASCII text, with very long lines (5555)","md5":"82923bbd2b2e706048b39be28da081e2","sha1":"9ab68d9cec40c29762b1992f556f4892641dfde5","sha256":"f69b6f0dd7b3a312b71062d0829359bad6bc4a494552cfba4bb1c718a0eb94fe","sha512":"ccc3a1eae49a2c33930bd5066810935119e62ca6cd5a2769d4a81ead415c65b4e8e1f02b7f013b40fac24f582285278cbe987dbe173be2c3d80b2ffc0ee3e5e0","ssdeep":"96:+yWP35ipZ63aZjWRl/FRCiXCWDkfpjTxVHQgvaNMrJaNOwN8NOcv4yiEsURAnH:+Xf5iD63aWDRC0tD+RzaNCJaNOwN8NOD","tlshash":"b3c188ad4751b63d7427972aa6d0ee4d01732050bd6243eef4a4f2758ac35bc14df88d","first_seen":"2025-08-20T13:28:01.996257Z","last_seen":"2026-10-10T21:47:12.45511Z","times_seen":142,"resource_available":true,"data":null}},"time_used":121,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":121,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"cescaa.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"cescaa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cescaa.com/_assets/fonts/5c612a870b96ecbc73de2d0a0f12bbc9.woff2","fqdn":"cescaa.com","domain":"cescaa.com","tld":"com"},"ip":{"addr":"103.169.142.0","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://cescaa.com/","date":"2026-10-10T21:46:14.027Z","timestamp":1791668774027,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cescaa.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Sun, 06 Sep 2026 05:47:48 GMT","end":"Sat, 05 Dec 2026 06:46:40 GMT"},"fingerprint":{"sha1":"ED:EA:92:85:3E:13:4B:14:B2:3D:68:46:E8:43:9C:6B:3C:F1:32:DA","sha256":"7A:0F:F6:5D:4D:CF:B3:61:47:C4:54:6B:D7:C9:B4:11:9F:99:60:9F:7A:33:B6:FE:12:75:A1:FE:A9:B9:B5:C2"}}},"request":{"raw":"GET /_assets/fonts/5c612a870b96ecbc73de2d0a0f12bbc9.woff2 HTTP/1.1\r\nHost: cescaa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nReferer: https://cescaa.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __cf_bm=vOuBaFobJJHt2JGkBfxmwK60G8D6IyQVMT5sk6zLfGg-1791668772.3255684-1.0.1.1-TAeZ3m9ziTdsOy9Dm3_qgMAR5jdBCC6nmmHTtsbfUUqjEn8lVxafvHJfJTehEhGew0b7N7p3DDyOcvnHPJBbuySlYAJtMylSNpIXNhpFAi83EvkhJnIeNPGbMG63_vXj\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"__cf_bm","value":"vOuBaFobJJHt2JGkBfxmwK60G8D6IyQVMT5sk6zLfGg-1791668772.3255684-1.0.1.1-TAeZ3m9ziTdsOy9Dm3_qgMAR5jdBCC6nmmHTtsbfUUqjEn8lVxafvHJfJTehEhGew0b7N7p3DDyOcvnHPJBbuySlYAJtMylSNpIXNhpFAi83EvkhJnIeNPGbMG63_vXj"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 10 Oct 2026 21:46:14 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 54252\r\ncache-control: public, max-age=604800, immutable\r\nstrict-transport-security: max-age=31536000\r\nx-deployment-id: 0f99e4b75af14702f37d466a7129023b9b25e5159a3104342517539ef44a4f3a\r\nx-robots-tag: none\r\nvary: accept-encoding\r\nexpect-ct: max-age=86400, enforce\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\ncf-ray: a488d10da95823eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":54252,"size_decoded":54893,"mime_type":"application/octet-stream","magic":"Web Open Font Format (Version 2), CFF, length 54252, version 1.393","md5":"ed08ceadeedb5461059386ddb069c28c","sha1":"b27ff8b21dac87646967afd269afd172fa43de69","sha256":"7d91f25ad3011801a1561726d7e46e86f5e342e93f222233ad4d03b6bd260bbd","sha512":"3831704619973926a5f6d2022364858ff375ff5a1a4ad0f797223b7c202b9e4762ef2c15ba6e36df9ff478c8449728077d58f8c086b9bdd7377faf2ef2885f77","ssdeep":"1536:IUOqaDd66lBBFLCD95lqfi+6d+K0umxiBUn:F5yY6lU95lqfl611miUn","tlshash":"2433010cdd4ba3074bbb94b4863d1dec29400a63becfeb2e9c5039da15de58986d1a34","first_seen":"2025-10-11T08:21:36.730369Z","last_seen":"2026-10-10T21:47:12.459084Z","times_seen":6,"resource_available":false,"data":null}},"time_used":125,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":124,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"cescaa.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"cescaa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cescaa.com/_assets/fonts/673cfd68bc7f23224a573c827b4dd620.woff2","fqdn":"cescaa.com","domain":"cescaa.com","tld":"com"},"ip":{"addr":"103.169.142.0","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://cescaa.com/","date":"2026-10-10T21:46:14.182Z","timestamp":1791668774182,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cescaa.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Sun, 06 Sep 2026 05:47:48 GMT","end":"Sat, 05 Dec 2026 06:46:40 GMT"},"fingerprint":{"sha1":"ED:EA:92:85:3E:13:4B:14:B2:3D:68:46:E8:43:9C:6B:3C:F1:32:DA","sha256":"7A:0F:F6:5D:4D:CF:B3:61:47:C4:54:6B:D7:C9:B4:11:9F:99:60:9F:7A:33:B6:FE:12:75:A1:FE:A9:B9:B5:C2"}}},"request":{"raw":"GET /_assets/fonts/673cfd68bc7f23224a573c827b4dd620.woff2 HTTP/1.1\r\nHost: cescaa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nReferer: https://cescaa.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __cf_bm=vOuBaFobJJHt2JGkBfxmwK60G8D6IyQVMT5sk6zLfGg-1791668772.3255684-1.0.1.1-TAeZ3m9ziTdsOy9Dm3_qgMAR5jdBCC6nmmHTtsbfUUqjEn8lVxafvHJfJTehEhGew0b7N7p3DDyOcvnHPJBbuySlYAJtMylSNpIXNhpFAi83EvkhJnIeNPGbMG63_vXj\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"__cf_bm","value":"vOuBaFobJJHt2JGkBfxmwK60G8D6IyQVMT5sk6zLfGg-1791668772.3255684-1.0.1.1-TAeZ3m9ziTdsOy9Dm3_qgMAR5jdBCC6nmmHTtsbfUUqjEn8lVxafvHJfJTehEhGew0b7N7p3DDyOcvnHPJBbuySlYAJtMylSNpIXNhpFAi83EvkhJnIeNPGbMG63_vXj"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 10 Oct 2026 21:46:14 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 53080\r\ncache-control: public, max-age=604800, immutable\r\nstrict-transport-security: max-age=31536000\r\nx-deployment-id: 0f99e4b75af14702f37d466a7129023b9b25e5159a3104342517539ef44a4f3a\r\nx-robots-tag: none\r\nvary: accept-encoding\r\nexpect-ct: max-age=86400, enforce\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\ncf-ray: a488d10eabac23eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":53080,"size_decoded":53721,"mime_type":"application/octet-stream","magic":"Web Open Font Format (Version 2), CFF, length 53080, version 1.393","md5":"04433c9644d7b2a4e893f52976c4a99e","sha1":"d0a060c25a1e59ef229f5fd4b2e0c2909a56d553","sha256":"ec7e5c9fe8b9304c6ab5ec7f394447cf04ccfaf1eeecdccdf6c3ed73741f932b","sha512":"a54c455851806ec8408e7ff52c40f410747fa10260338cdb1c4881c5e9f04ef37667d0d259ce32957be16f35ffe503475a77d84ee395ba5bfa24a47be6817e67","ssdeep":"1536:S9zqpN2OeGJBHnyF3qU4SrtdGg+8MeiFGBah:lL1g6U4kWkMeiFGi","tlshash":"ae33f1ef4994c644718b8fb676e95b262076c14da5aacf0431ff98887c60704e8f6e1b","first_seen":"2025-10-11T08:21:36.727378Z","last_seen":"2026-10-10T21:47:12.473461Z","times_seen":4,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"cescaa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"cescaa.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cescaa.com/_assets/fonts/e44a76124d0e53c15573a43751bda1dc.woff2","fqdn":"cescaa.com","domain":"cescaa.com","tld":"com"},"ip":{"addr":"103.169.142.0","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://cescaa.com/","date":"2026-10-10T21:46:14.228Z","timestamp":1791668774228,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cescaa.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Sun, 06 Sep 2026 05:47:48 GMT","end":"Sat, 05 Dec 2026 06:46:40 GMT"},"fingerprint":{"sha1":"ED:EA:92:85:3E:13:4B:14:B2:3D:68:46:E8:43:9C:6B:3C:F1:32:DA","sha256":"7A:0F:F6:5D:4D:CF:B3:61:47:C4:54:6B:D7:C9:B4:11:9F:99:60:9F:7A:33:B6:FE:12:75:A1:FE:A9:B9:B5:C2"}}},"request":{"raw":"GET /_assets/fonts/e44a76124d0e53c15573a43751bda1dc.woff2 HTTP/1.1\r\nHost: cescaa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nReferer: https://cescaa.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __cf_bm=vOuBaFobJJHt2JGkBfxmwK60G8D6IyQVMT5sk6zLfGg-1791668772.3255684-1.0.1.1-TAeZ3m9ziTdsOy9Dm3_qgMAR5jdBCC6nmmHTtsbfUUqjEn8lVxafvHJfJTehEhGew0b7N7p3DDyOcvnHPJBbuySlYAJtMylSNpIXNhpFAi83EvkhJnIeNPGbMG63_vXj\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"__cf_bm","value":"vOuBaFobJJHt2JGkBfxmwK60G8D6IyQVMT5sk6zLfGg-1791668772.3255684-1.0.1.1-TAeZ3m9ziTdsOy9Dm3_qgMAR5jdBCC6nmmHTtsbfUUqjEn8lVxafvHJfJTehEhGew0b7N7p3DDyOcvnHPJBbuySlYAJtMylSNpIXNhpFAi83EvkhJnIeNPGbMG63_vXj"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 10 Oct 2026 21:46:14 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 51760\r\ncache-control: public, max-age=604800, immutable\r\nstrict-transport-security: max-age=31536000\r\nx-deployment-id: 0f99e4b75af14702f37d466a7129023b9b25e5159a3104342517539ef44a4f3a\r\nx-robots-tag: none\r\nvary: accept-encoding\r\nexpect-ct: max-age=86400, enforce\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\ncf-ray: a488d10eec5223eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":51760,"size_decoded":52401,"mime_type":"application/octet-stream","magic":"Web Open Font Format (Version 2), CFF, length 51760, version 1.393","md5":"83c4f958dac8837aa60859d214f16e44","sha1":"dbf3a429034a016d8a399db27af6341b7d747289","sha256":"3f947cf511bb13f29650c3956ff65b84419f3d4ec719cd2a41163aa7dc9f0773","sha512":"3642325459c0102784a5e966808504454b3ac0f65ffad1954710dbea17fa46d5722af3723f83bc79319e30074e02a830bb2e6de9c6495081b77cdabaa90f569e","ssdeep":"1536:VivFXIgmL8w5oPI1xxiUGwKt3UA3wzOBfOS:Vi9XIhouPiRAzOBfL","tlshash":"9233f20f4fa9473a5802e82d5b804ca682c318a356e00bef52dcb68c571bb75f865df7","first_seen":"2025-10-08T09:36:53.284909Z","last_seen":"2026-10-10T21:47:12.489305Z","times_seen":4,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"cescaa.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"cescaa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cescaa.com/_assets/media/dab3a6c9fd02014fc9ee54ebc08d6ece.svg","fqdn":"cescaa.com","domain":"cescaa.com","tld":"com"},"ip":{"addr":"103.169.142.0","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cescaa.com/","date":"2026-10-10T21:46:14.738Z","timestamp":1791668774738,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cescaa.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Sun, 06 Sep 2026 05:47:48 GMT","end":"Sat, 05 Dec 2026 06:46:40 GMT"},"fingerprint":{"sha1":"ED:EA:92:85:3E:13:4B:14:B2:3D:68:46:E8:43:9C:6B:3C:F1:32:DA","sha256":"7A:0F:F6:5D:4D:CF:B3:61:47:C4:54:6B:D7:C9:B4:11:9F:99:60:9F:7A:33:B6:FE:12:75:A1:FE:A9:B9:B5:C2"}}},"request":{"raw":"GET /_assets/media/dab3a6c9fd02014fc9ee54ebc08d6ece.svg HTTP/1.1\r\nHost: cescaa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://cescaa.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __cf_bm=vOuBaFobJJHt2JGkBfxmwK60G8D6IyQVMT5sk6zLfGg-1791668772.3255684-1.0.1.1-TAeZ3m9ziTdsOy9Dm3_qgMAR5jdBCC6nmmHTtsbfUUqjEn8lVxafvHJfJTehEhGew0b7N7p3DDyOcvnHPJBbuySlYAJtMylSNpIXNhpFAi83EvkhJnIeNPGbMG63_vXj\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"__cf_bm","value":"vOuBaFobJJHt2JGkBfxmwK60G8D6IyQVMT5sk6zLfGg-1791668772.3255684-1.0.1.1-TAeZ3m9ziTdsOy9Dm3_qgMAR5jdBCC6nmmHTtsbfUUqjEn8lVxafvHJfJTehEhGew0b7N7p3DDyOcvnHPJBbuySlYAJtMylSNpIXNhpFAi83EvkhJnIeNPGbMG63_vXj"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 10 Oct 2026 21:46:14 GMT\r\ncontent-type: image/svg+xml\r\ncache-control: public, max-age=604800, immutable\r\nstrict-transport-security: max-age=31536000\r\nx-deployment-id: 0f99e4b75af14702f37d466a7129023b9b25e5159a3104342517539ef44a4f3a\r\nx-robots-tag: none\r\nvary: accept-encoding\r\nexpect-ct: max-age=86400, enforce\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\npriority: u=5,i\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: a488d1121cec23eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":682,"size_decoded":1062,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"c299c737497b1287595b028db504592e","sha1":"23fdbc589b63d8377bda62574a318017f2118139","sha256":"530f792490ddc3fa4a0f99c53f89be0f5b2e1cf77456d0071f4f9c8fee5cf32e","sha512":"ee0165d10a764d83aa6db6da5d81c8e51cb656642be119ad7dffbb6b76a5ecc45967c0bf670dd7d80daf3a7b14c1ec49bf731269354c2f0406fd4a33ae463b91","ssdeep":"","tlshash":"af0123d4a27588e017da8b7ad7fcfac46330398c2eac814d73e52952bc1d1ed4e6e581","first_seen":"2025-10-11T08:21:36.780676Z","last_seen":"2026-10-10T21:47:12.492313Z","times_seen":4,"resource_available":false,"data":null}},"time_used":125,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":125,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"cescaa.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"cescaa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cescaa.com/_assets/fb24c0b503d63d63.js","fqdn":"cescaa.com","domain":"cescaa.com","tld":"com"},"ip":{"addr":"103.169.142.0","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cescaa.com/","date":"2026-10-10T21:46:13.819Z","timestamp":1791668773819,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cescaa.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Sun, 06 Sep 2026 05:47:48 GMT","end":"Sat, 05 Dec 2026 06:46:40 GMT"},"fingerprint":{"sha1":"ED:EA:92:85:3E:13:4B:14:B2:3D:68:46:E8:43:9C:6B:3C:F1:32:DA","sha256":"7A:0F:F6:5D:4D:CF:B3:61:47:C4:54:6B:D7:C9:B4:11:9F:99:60:9F:7A:33:B6:FE:12:75:A1:FE:A9:B9:B5:C2"}}},"request":{"raw":"GET /_assets/fb24c0b503d63d63.js HTTP/1.1\r\nHost: cescaa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://cescaa.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __cf_bm=vOuBaFobJJHt2JGkBfxmwK60G8D6IyQVMT5sk6zLfGg-1791668772.3255684-1.0.1.1-TAeZ3m9ziTdsOy9Dm3_qgMAR5jdBCC6nmmHTtsbfUUqjEn8lVxafvHJfJTehEhGew0b7N7p3DDyOcvnHPJBbuySlYAJtMylSNpIXNhpFAi83EvkhJnIeNPGbMG63_vXj\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"__cf_bm","value":"vOuBaFobJJHt2JGkBfxmwK60G8D6IyQVMT5sk6zLfGg-1791668772.3255684-1.0.1.1-TAeZ3m9ziTdsOy9Dm3_qgMAR5jdBCC6nmmHTtsbfUUqjEn8lVxafvHJfJTehEhGew0b7N7p3DDyOcvnHPJBbuySlYAJtMylSNpIXNhpFAi83EvkhJnIeNPGbMG63_vXj"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 10 Oct 2026 21:46:13 GMT\r\ncontent-type: application/javascript\r\ncache-control: public, max-age=604800, immutable\r\nstrict-transport-security: max-age=31536000\r\nx-deployment-id: 0f99e4b75af14702f37d466a7129023b9b25e5159a3104342517539ef44a4f3a\r\nx-robots-tag: none\r\nvary: accept-encoding\r\nexpect-ct: max-age=86400, enforce\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\npriority: u=3,i=?0\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: a488d10c5e5a23eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":43605,"size_decoded":15039,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1168)","md5":"95d6afeaa1115016d282aee47db9a07f","sha1":"d6f5864d0cc2a38c0d295714d80387063084131f","sha256":"d6c502e66421eb1b1a8ab04b3a0be5711c55fa96880c714de837988a90c5aa06","sha512":"c2c03ae38b818a9c63f20c19f6a4a3a1aeb46caa72219614c84685844df170135292c993a671f753947882bb82edbfd8dd89899b1cc923a8c9af1508481059ec","ssdeep":"768:/KjmnWUPjo4QXJvWXiTTV+apPAT5Hu6oro2fNYDtOtmR5gN/0SEBfVqwlNhgEfix:Sjwb/aekr/NYDtOtmLg0SEBfVqwlNhl+","tlshash":"2c13a68572a7f45a8bb1d5d1403b1187f2296ce0f00c98fcf6a99dd2ba51c16d1baf38","first_seen":"2025-10-10T00:55:24.037997Z","last_seen":"2026-10-10T21:47:12.495937Z","times_seen":17,"resource_available":true,"data":null}},"time_used":128,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":128,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"cescaa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"cescaa.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cescaa.com/_assets/fonts/673cfd68bc7f23224a573c827b4dd620.woff2","fqdn":"cescaa.com","domain":"cescaa.com","tld":"com"},"ip":{"addr":"103.169.142.0","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://cescaa.com/","date":"2026-10-10T21:46:14.187Z","timestamp":1791668774187,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cescaa.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Sun, 06 Sep 2026 05:47:48 GMT","end":"Sat, 05 Dec 2026 06:46:40 GMT"},"fingerprint":{"sha1":"ED:EA:92:85:3E:13:4B:14:B2:3D:68:46:E8:43:9C:6B:3C:F1:32:DA","sha256":"7A:0F:F6:5D:4D:CF:B3:61:47:C4:54:6B:D7:C9:B4:11:9F:99:60:9F:7A:33:B6:FE:12:75:A1:FE:A9:B9:B5:C2"}}},"request":{"raw":"GET /_assets/fonts/673cfd68bc7f23224a573c827b4dd620.woff2 HTTP/1.1\r\nHost: cescaa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nReferer: https://cescaa.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __cf_bm=vOuBaFobJJHt2JGkBfxmwK60G8D6IyQVMT5sk6zLfGg-1791668772.3255684-1.0.1.1-TAeZ3m9ziTdsOy9Dm3_qgMAR5jdBCC6nmmHTtsbfUUqjEn8lVxafvHJfJTehEhGew0b7N7p3DDyOcvnHPJBbuySlYAJtMylSNpIXNhpFAi83EvkhJnIeNPGbMG63_vXj\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"__cf_bm","value":"vOuBaFobJJHt2JGkBfxmwK60G8D6IyQVMT5sk6zLfGg-1791668772.3255684-1.0.1.1-TAeZ3m9ziTdsOy9Dm3_qgMAR5jdBCC6nmmHTtsbfUUqjEn8lVxafvHJfJTehEhGew0b7N7p3DDyOcvnHPJBbuySlYAJtMylSNpIXNhpFAi83EvkhJnIeNPGbMG63_vXj"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 10 Oct 2026 21:46:14 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 53080\r\ncache-control: public, max-age=604800, immutable\r\nstrict-transport-security: max-age=31536000\r\nx-deployment-id: 0f99e4b75af14702f37d466a7129023b9b25e5159a3104342517539ef44a4f3a\r\nx-robots-tag: none\r\nvary: accept-encoding\r\nexpect-ct: max-age=86400, enforce\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\ncf-ray: a488d10eabc323eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":53080,"size_decoded":53721,"mime_type":"application/octet-stream","magic":"Web Open Font Format (Version 2), CFF, length 53080, version 1.393","md5":"04433c9644d7b2a4e893f52976c4a99e","sha1":"d0a060c25a1e59ef229f5fd4b2e0c2909a56d553","sha256":"ec7e5c9fe8b9304c6ab5ec7f394447cf04ccfaf1eeecdccdf6c3ed73741f932b","sha512":"a54c455851806ec8408e7ff52c40f410747fa10260338cdb1c4881c5e9f04ef37667d0d259ce32957be16f35ffe503475a77d84ee395ba5bfa24a47be6817e67","ssdeep":"1536:S9zqpN2OeGJBHnyF3qU4SrtdGg+8MeiFGBah:lL1g6U4kWkMeiFGi","tlshash":"ae33f1ef4994c644718b8fb676e95b262076c14da5aacf0431ff98887c60704e8f6e1b","first_seen":"2025-10-11T08:21:36.727378Z","last_seen":"2026-10-10T21:47:12.473461Z","times_seen":4,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"cescaa.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"cescaa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cescaa.com/_assets/fonts/673cfd68bc7f23224a573c827b4dd620.woff2","fqdn":"cescaa.com","domain":"cescaa.com","tld":"com"},"ip":{"addr":"103.169.142.0","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://cescaa.com/","date":"2026-10-10T21:46:14.190Z","timestamp":1791668774190,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cescaa.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Sun, 06 Sep 2026 05:47:48 GMT","end":"Sat, 05 Dec 2026 06:46:40 GMT"},"fingerprint":{"sha1":"ED:EA:92:85:3E:13:4B:14:B2:3D:68:46:E8:43:9C:6B:3C:F1:32:DA","sha256":"7A:0F:F6:5D:4D:CF:B3:61:47:C4:54:6B:D7:C9:B4:11:9F:99:60:9F:7A:33:B6:FE:12:75:A1:FE:A9:B9:B5:C2"}}},"request":{"raw":"GET /_assets/fonts/673cfd68bc7f23224a573c827b4dd620.woff2 HTTP/1.1\r\nHost: cescaa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nReferer: https://cescaa.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __cf_bm=vOuBaFobJJHt2JGkBfxmwK60G8D6IyQVMT5sk6zLfGg-1791668772.3255684-1.0.1.1-TAeZ3m9ziTdsOy9Dm3_qgMAR5jdBCC6nmmHTtsbfUUqjEn8lVxafvHJfJTehEhGew0b7N7p3DDyOcvnHPJBbuySlYAJtMylSNpIXNhpFAi83EvkhJnIeNPGbMG63_vXj\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"__cf_bm","value":"vOuBaFobJJHt2JGkBfxmwK60G8D6IyQVMT5sk6zLfGg-1791668772.3255684-1.0.1.1-TAeZ3m9ziTdsOy9Dm3_qgMAR5jdBCC6nmmHTtsbfUUqjEn8lVxafvHJfJTehEhGew0b7N7p3DDyOcvnHPJBbuySlYAJtMylSNpIXNhpFAi83EvkhJnIeNPGbMG63_vXj"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 10 Oct 2026 21:46:14 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 53080\r\ncache-control: public, max-age=604800, immutable\r\nstrict-transport-security: max-age=31536000\r\nx-deployment-id: 0f99e4b75af14702f37d466a7129023b9b25e5159a3104342517539ef44a4f3a\r\nx-robots-tag: none\r\nvary: accept-encoding\r\nexpect-ct: max-age=86400, enforce\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\ncf-ray: a488d10ebbd723eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":53080,"size_decoded":53721,"mime_type":"application/octet-stream","magic":"Web Open Font Format (Version 2), CFF, length 53080, version 1.393","md5":"04433c9644d7b2a4e893f52976c4a99e","sha1":"d0a060c25a1e59ef229f5fd4b2e0c2909a56d553","sha256":"ec7e5c9fe8b9304c6ab5ec7f394447cf04ccfaf1eeecdccdf6c3ed73741f932b","sha512":"a54c455851806ec8408e7ff52c40f410747fa10260338cdb1c4881c5e9f04ef37667d0d259ce32957be16f35ffe503475a77d84ee395ba5bfa24a47be6817e67","ssdeep":"1536:S9zqpN2OeGJBHnyF3qU4SrtdGg+8MeiFGBah:lL1g6U4kWkMeiFGi","tlshash":"ae33f1ef4994c644718b8fb676e95b262076c14da5aacf0431ff98887c60704e8f6e1b","first_seen":"2025-10-11T08:21:36.727378Z","last_seen":"2026-10-10T21:47:12.473461Z","times_seen":4,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"cescaa.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"cescaa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cescaa.com/_assets/fonts/1101f812d8310a0639775c29afe1af81.woff2","fqdn":"cescaa.com","domain":"cescaa.com","tld":"com"},"ip":{"addr":"103.169.142.0","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://cescaa.com/","date":"2026-10-10T21:46:14.248Z","timestamp":1791668774248,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cescaa.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Sun, 06 Sep 2026 05:47:48 GMT","end":"Sat, 05 Dec 2026 06:46:40 GMT"},"fingerprint":{"sha1":"ED:EA:92:85:3E:13:4B:14:B2:3D:68:46:E8:43:9C:6B:3C:F1:32:DA","sha256":"7A:0F:F6:5D:4D:CF:B3:61:47:C4:54:6B:D7:C9:B4:11:9F:99:60:9F:7A:33:B6:FE:12:75:A1:FE:A9:B9:B5:C2"}}},"request":{"raw":"GET /_assets/fonts/1101f812d8310a0639775c29afe1af81.woff2 HTTP/1.1\r\nHost: cescaa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nReferer: https://cescaa.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __cf_bm=vOuBaFobJJHt2JGkBfxmwK60G8D6IyQVMT5sk6zLfGg-1791668772.3255684-1.0.1.1-TAeZ3m9ziTdsOy9Dm3_qgMAR5jdBCC6nmmHTtsbfUUqjEn8lVxafvHJfJTehEhGew0b7N7p3DDyOcvnHPJBbuySlYAJtMylSNpIXNhpFAi83EvkhJnIeNPGbMG63_vXj\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"__cf_bm","value":"vOuBaFobJJHt2JGkBfxmwK60G8D6IyQVMT5sk6zLfGg-1791668772.3255684-1.0.1.1-TAeZ3m9ziTdsOy9Dm3_qgMAR5jdBCC6nmmHTtsbfUUqjEn8lVxafvHJfJTehEhGew0b7N7p3DDyOcvnHPJBbuySlYAJtMylSNpIXNhpFAi83EvkhJnIeNPGbMG63_vXj"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 10 Oct 2026 21:46:14 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 51616\r\ncache-control: public, max-age=604800, immutable\r\nstrict-transport-security: max-age=31536000\r\nx-deployment-id: 0f99e4b75af14702f37d466a7129023b9b25e5159a3104342517539ef44a4f3a\r\nx-robots-tag: none\r\nvary: accept-encoding\r\nexpect-ct: max-age=86400, enforce\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\ncf-ray: a488d10f0ca423eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":51616,"size_decoded":52257,"mime_type":"application/octet-stream","magic":"Web Open Font Format (Version 2), CFF, length 51616, version 1.393","md5":"1f08068188b13a30a9c52169f7f97918","sha1":"6c8eebda3283fc53fea03b644583df3dae966628","sha256":"b1cb4cd4e0d5aec7f5cbbdd0c123d559c37f2d3ae75b1e9188c4ca221ff55025","sha512":"b47bed9104a6b978007ff3f1c75df338159b1e2bb01cc1d391b92e129d6544b668cfa0818c79eca5009e387cf3ff92e70c5506f9000f1144c0187e87fa82206f","ssdeep":"1536:jufH9kxHzaip66BVH7v4V2CSFLsyJ9m+w88FMjG:Cv2J3NVbv4VwLsQz2","tlshash":"173302b082377135fdc02197b95da7e8782bcc9e0dee57434b63ad81aa5460393e4cb2","first_seen":"2025-10-08T09:36:53.279817Z","last_seen":"2026-10-10T21:47:12.498858Z","times_seen":4,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"cescaa.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"cescaa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cescaa.com/_assets/fonts/5c612a870b96ecbc73de2d0a0f12bbc9.woff2","fqdn":"cescaa.com","domain":"cescaa.com","tld":"com"},"ip":{"addr":"103.169.142.0","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://cescaa.com/","date":"2026-10-10T21:46:14.277Z","timestamp":1791668774277,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cescaa.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Sun, 06 Sep 2026 05:47:48 GMT","end":"Sat, 05 Dec 2026 06:46:40 GMT"},"fingerprint":{"sha1":"ED:EA:92:85:3E:13:4B:14:B2:3D:68:46:E8:43:9C:6B:3C:F1:32:DA","sha256":"7A:0F:F6:5D:4D:CF:B3:61:47:C4:54:6B:D7:C9:B4:11:9F:99:60:9F:7A:33:B6:FE:12:75:A1:FE:A9:B9:B5:C2"}}},"request":{"raw":"GET /_assets/fonts/5c612a870b96ecbc73de2d0a0f12bbc9.woff2 HTTP/1.1\r\nHost: cescaa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nReferer: https://cescaa.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __cf_bm=vOuBaFobJJHt2JGkBfxmwK60G8D6IyQVMT5sk6zLfGg-1791668772.3255684-1.0.1.1-TAeZ3m9ziTdsOy9Dm3_qgMAR5jdBCC6nmmHTtsbfUUqjEn8lVxafvHJfJTehEhGew0b7N7p3DDyOcvnHPJBbuySlYAJtMylSNpIXNhpFAi83EvkhJnIeNPGbMG63_vXj\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"__cf_bm","value":"vOuBaFobJJHt2JGkBfxmwK60G8D6IyQVMT5sk6zLfGg-1791668772.3255684-1.0.1.1-TAeZ3m9ziTdsOy9Dm3_qgMAR5jdBCC6nmmHTtsbfUUqjEn8lVxafvHJfJTehEhGew0b7N7p3DDyOcvnHPJBbuySlYAJtMylSNpIXNhpFAi83EvkhJnIeNPGbMG63_vXj"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 10 Oct 2026 21:46:14 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 54252\r\ncache-control: public, max-age=604800, immutable\r\nstrict-transport-security: max-age=31536000\r\nx-deployment-id: 0f99e4b75af14702f37d466a7129023b9b25e5159a3104342517539ef44a4f3a\r\nx-robots-tag: none\r\nvary: accept-encoding\r\nexpect-ct: max-age=86400, enforce\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\ncf-ray: a488d10f3d3d23eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":54252,"size_decoded":54893,"mime_type":"application/octet-stream","magic":"Web Open Font Format (Version 2), CFF, length 54252, version 1.393","md5":"ed08ceadeedb5461059386ddb069c28c","sha1":"b27ff8b21dac87646967afd269afd172fa43de69","sha256":"7d91f25ad3011801a1561726d7e46e86f5e342e93f222233ad4d03b6bd260bbd","sha512":"3831704619973926a5f6d2022364858ff375ff5a1a4ad0f797223b7c202b9e4762ef2c15ba6e36df9ff478c8449728077d58f8c086b9bdd7377faf2ef2885f77","ssdeep":"1536:IUOqaDd66lBBFLCD95lqfi+6d+K0umxiBUn:F5yY6lU95lqfl611miUn","tlshash":"2433010cdd4ba3074bbb94b4863d1dec29400a63becfeb2e9c5039da15de58986d1a34","first_seen":"2025-10-11T08:21:36.730369Z","last_seen":"2026-10-10T21:47:12.459084Z","times_seen":6,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"cescaa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"cescaa.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cescaa.com/_assets/media/db83feb22f5aeabf2e6510d3190d46c7.svg","fqdn":"cescaa.com","domain":"cescaa.com","tld":"com"},"ip":{"addr":"103.169.142.0","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://cescaa.com/","date":"2026-10-10T21:46:14.884Z","timestamp":1791668774884,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cescaa.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Sun, 06 Sep 2026 05:47:48 GMT","end":"Sat, 05 Dec 2026 06:46:40 GMT"},"fingerprint":{"sha1":"ED:EA:92:85:3E:13:4B:14:B2:3D:68:46:E8:43:9C:6B:3C:F1:32:DA","sha256":"7A:0F:F6:5D:4D:CF:B3:61:47:C4:54:6B:D7:C9:B4:11:9F:99:60:9F:7A:33:B6:FE:12:75:A1:FE:A9:B9:B5:C2"}}},"request":{"raw":"GET /_assets/media/db83feb22f5aeabf2e6510d3190d46c7.svg HTTP/1.1\r\nHost: cescaa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://cescaa.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __cf_bm=vOuBaFobJJHt2JGkBfxmwK60G8D6IyQVMT5sk6zLfGg-1791668772.3255684-1.0.1.1-TAeZ3m9ziTdsOy9Dm3_qgMAR5jdBCC6nmmHTtsbfUUqjEn8lVxafvHJfJTehEhGew0b7N7p3DDyOcvnHPJBbuySlYAJtMylSNpIXNhpFAi83EvkhJnIeNPGbMG63_vXj\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"__cf_bm","value":"vOuBaFobJJHt2JGkBfxmwK60G8D6IyQVMT5sk6zLfGg-1791668772.3255684-1.0.1.1-TAeZ3m9ziTdsOy9Dm3_qgMAR5jdBCC6nmmHTtsbfUUqjEn8lVxafvHJfJTehEhGew0b7N7p3DDyOcvnHPJBbuySlYAJtMylSNpIXNhpFAi83EvkhJnIeNPGbMG63_vXj"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 10 Oct 2026 21:46:14 GMT\r\ncontent-type: image/svg+xml\r\ncache-control: public, max-age=604800, immutable\r\nstrict-transport-security: max-age=31536000\r\nx-deployment-id: 0f99e4b75af14702f37d466a7129023b9b25e5159a3104342517539ef44a4f3a\r\nx-robots-tag: none\r\nvary: accept-encoding\r\nexpect-ct: max-age=86400, enforce\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\npriority: u=3,i=?0\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: a488d1130f9b23eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":942,"size_decoded":1195,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"5fff4f20317db9be7b10185d40466915","sha1":"fd8e16f8449415e4a056e35f75c0cac0c6d64a80","sha256":"cd7e7160ca0d0c3191f6ae719a179e808fa32a627bed10ec06fc8ad890ece259","sha512":"11bb22a83e531734a9c138a92673cbc73f1bd8a663c742c00ab6250e0de6098fcc22a7bb484bbe1e46dd1fc6c0b5b6a91498fe8b9eb36981604863b44988d64c","ssdeep":"","tlshash":"ce111405630a46a0ebc9cb8283f889516139d04ae8d0d2dcea6b1b46e4215f11f20d7d","first_seen":"2025-09-15T15:29:26.870804Z","last_seen":"2026-10-10T21:47:12.448078Z","times_seen":14,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"cescaa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"cescaa.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cescaa.com/_assets/fonts/673cfd68bc7f23224a573c827b4dd620.woff2","fqdn":"cescaa.com","domain":"cescaa.com","tld":"com"},"ip":{"addr":"103.169.142.0","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://cescaa.com/","date":"2026-10-10T21:46:14.181Z","timestamp":1791668774181,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cescaa.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Sun, 06 Sep 2026 05:47:48 GMT","end":"Sat, 05 Dec 2026 06:46:40 GMT"},"fingerprint":{"sha1":"ED:EA:92:85:3E:13:4B:14:B2:3D:68:46:E8:43:9C:6B:3C:F1:32:DA","sha256":"7A:0F:F6:5D:4D:CF:B3:61:47:C4:54:6B:D7:C9:B4:11:9F:99:60:9F:7A:33:B6:FE:12:75:A1:FE:A9:B9:B5:C2"}}},"request":{"raw":"GET /_assets/fonts/673cfd68bc7f23224a573c827b4dd620.woff2 HTTP/1.1\r\nHost: cescaa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nReferer: https://cescaa.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __cf_bm=vOuBaFobJJHt2JGkBfxmwK60G8D6IyQVMT5sk6zLfGg-1791668772.3255684-1.0.1.1-TAeZ3m9ziTdsOy9Dm3_qgMAR5jdBCC6nmmHTtsbfUUqjEn8lVxafvHJfJTehEhGew0b7N7p3DDyOcvnHPJBbuySlYAJtMylSNpIXNhpFAi83EvkhJnIeNPGbMG63_vXj\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"__cf_bm","value":"vOuBaFobJJHt2JGkBfxmwK60G8D6IyQVMT5sk6zLfGg-1791668772.3255684-1.0.1.1-TAeZ3m9ziTdsOy9Dm3_qgMAR5jdBCC6nmmHTtsbfUUqjEn8lVxafvHJfJTehEhGew0b7N7p3DDyOcvnHPJBbuySlYAJtMylSNpIXNhpFAi83EvkhJnIeNPGbMG63_vXj"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 10 Oct 2026 21:46:14 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 53080\r\ncache-control: public, max-age=604800, immutable\r\nstrict-transport-security: max-age=31536000\r\nx-deployment-id: 0f99e4b75af14702f37d466a7129023b9b25e5159a3104342517539ef44a4f3a\r\nx-robots-tag: none\r\nvary: accept-encoding\r\nexpect-ct: max-age=86400, enforce\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\ncf-ray: a488d10eaba723eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":53080,"size_decoded":53721,"mime_type":"application/octet-stream","magic":"Web Open Font Format (Version 2), CFF, length 53080, version 1.393","md5":"04433c9644d7b2a4e893f52976c4a99e","sha1":"d0a060c25a1e59ef229f5fd4b2e0c2909a56d553","sha256":"ec7e5c9fe8b9304c6ab5ec7f394447cf04ccfaf1eeecdccdf6c3ed73741f932b","sha512":"a54c455851806ec8408e7ff52c40f410747fa10260338cdb1c4881c5e9f04ef37667d0d259ce32957be16f35ffe503475a77d84ee395ba5bfa24a47be6817e67","ssdeep":"1536:S9zqpN2OeGJBHnyF3qU4SrtdGg+8MeiFGBah:lL1g6U4kWkMeiFGi","tlshash":"ae33f1ef4994c644718b8fb676e95b262076c14da5aacf0431ff98887c60704e8f6e1b","first_seen":"2025-10-11T08:21:36.727378Z","last_seen":"2026-10-10T21:47:12.473461Z","times_seen":4,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"cescaa.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"cescaa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cescaa.com/_assets/fonts/5c411d01677832c1b6f80e11045c3e17.woff2","fqdn":"cescaa.com","domain":"cescaa.com","tld":"com"},"ip":{"addr":"103.169.142.0","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://cescaa.com/","date":"2026-10-10T21:46:14.258Z","timestamp":1791668774258,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cescaa.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Sun, 06 Sep 2026 05:47:48 GMT","end":"Sat, 05 Dec 2026 06:46:40 GMT"},"fingerprint":{"sha1":"ED:EA:92:85:3E:13:4B:14:B2:3D:68:46:E8:43:9C:6B:3C:F1:32:DA","sha256":"7A:0F:F6:5D:4D:CF:B3:61:47:C4:54:6B:D7:C9:B4:11:9F:99:60:9F:7A:33:B6:FE:12:75:A1:FE:A9:B9:B5:C2"}}},"request":{"raw":"GET /_assets/fonts/5c411d01677832c1b6f80e11045c3e17.woff2 HTTP/1.1\r\nHost: cescaa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nReferer: https://cescaa.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __cf_bm=vOuBaFobJJHt2JGkBfxmwK60G8D6IyQVMT5sk6zLfGg-1791668772.3255684-1.0.1.1-TAeZ3m9ziTdsOy9Dm3_qgMAR5jdBCC6nmmHTtsbfUUqjEn8lVxafvHJfJTehEhGew0b7N7p3DDyOcvnHPJBbuySlYAJtMylSNpIXNhpFAi83EvkhJnIeNPGbMG63_vXj\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"__cf_bm","value":"vOuBaFobJJHt2JGkBfxmwK60G8D6IyQVMT5sk6zLfGg-1791668772.3255684-1.0.1.1-TAeZ3m9ziTdsOy9Dm3_qgMAR5jdBCC6nmmHTtsbfUUqjEn8lVxafvHJfJTehEhGew0b7N7p3DDyOcvnHPJBbuySlYAJtMylSNpIXNhpFAi83EvkhJnIeNPGbMG63_vXj"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 10 Oct 2026 21:46:14 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 53200\r\ncache-control: public, max-age=604800, immutable\r\nstrict-transport-security: max-age=31536000\r\nx-deployment-id: 0f99e4b75af14702f37d466a7129023b9b25e5159a3104342517539ef44a4f3a\r\nx-robots-tag: none\r\nvary: accept-encoding\r\nexpect-ct: max-age=86400, enforce\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\ncf-ray: a488d10f1cd523eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":53200,"size_decoded":53841,"mime_type":"application/octet-stream","magic":"Web Open Font Format (Version 2), CFF, length 53200, version 1.393","md5":"1dd71e9221adf3dce1f6d63d98234b40","sha1":"94ffd37ad6799e3f6a79ac43ef675bf13460f5d7","sha256":"51de067a32600ef07c4f813625211e4596e03ea2ba5b9a86886dbc946b3ac091","sha512":"5e7742e8e83d5d7cc71550abc18959d0f6c1a9e4f09a314c845c19eb18a06ba6006a04e7babb1396f5f4f7aa8df3d5f13df824d2bd9fd375702e54caaeb50c43","ssdeep":"1536:/25ut3oUaeM/Q+kDDSLQpW+kjCDDqU061Fp:/iut3LM/Q+kDDSLgW+9DuU06x","tlshash":"1a3302c8f77dc1dadf8d044fe30e4ac5582c28f91d4c2da6558db290ae18fe96b4469c","first_seen":"2025-10-11T08:21:36.724182Z","last_seen":"2026-10-10T21:47:12.500644Z","times_seen":4,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"cescaa.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"cescaa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cescaa.com/_assets/media/9e329e6e083b177fd0ddf9c818a5789b.svg","fqdn":"cescaa.com","domain":"cescaa.com","tld":"com"},"ip":{"addr":"103.169.142.0","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cescaa.com/","date":"2026-10-10T21:46:14.732Z","timestamp":1791668774732,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cescaa.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Sun, 06 Sep 2026 05:47:48 GMT","end":"Sat, 05 Dec 2026 06:46:40 GMT"},"fingerprint":{"sha1":"ED:EA:92:85:3E:13:4B:14:B2:3D:68:46:E8:43:9C:6B:3C:F1:32:DA","sha256":"7A:0F:F6:5D:4D:CF:B3:61:47:C4:54:6B:D7:C9:B4:11:9F:99:60:9F:7A:33:B6:FE:12:75:A1:FE:A9:B9:B5:C2"}}},"request":{"raw":"GET /_assets/media/9e329e6e083b177fd0ddf9c818a5789b.svg HTTP/1.1\r\nHost: cescaa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://cescaa.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __cf_bm=vOuBaFobJJHt2JGkBfxmwK60G8D6IyQVMT5sk6zLfGg-1791668772.3255684-1.0.1.1-TAeZ3m9ziTdsOy9Dm3_qgMAR5jdBCC6nmmHTtsbfUUqjEn8lVxafvHJfJTehEhGew0b7N7p3DDyOcvnHPJBbuySlYAJtMylSNpIXNhpFAi83EvkhJnIeNPGbMG63_vXj\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"__cf_bm","value":"vOuBaFobJJHt2JGkBfxmwK60G8D6IyQVMT5sk6zLfGg-1791668772.3255684-1.0.1.1-TAeZ3m9ziTdsOy9Dm3_qgMAR5jdBCC6nmmHTtsbfUUqjEn8lVxafvHJfJTehEhGew0b7N7p3DDyOcvnHPJBbuySlYAJtMylSNpIXNhpFAi83EvkhJnIeNPGbMG63_vXj"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 10 Oct 2026 21:46:14 GMT\r\ncontent-type: image/svg+xml\r\ncache-control: public, max-age=604800, immutable\r\nstrict-transport-security: max-age=31536000\r\nx-deployment-id: 0f99e4b75af14702f37d466a7129023b9b25e5159a3104342517539ef44a4f3a\r\nx-robots-tag: none\r\nvary: accept-encoding\r\nexpect-ct: max-age=86400, enforce\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\npriority: u=5,i\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: a488d1121cc123eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":548,"size_decoded":998,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"a70611f86fd907a84f5c100bd7694d28","sha1":"a37087f06faf75f79119b916c7208558f00a72ab","sha256":"5f3eb41ecfc56749850f76c0af6eb9648d3766f9d978fa8c4f36371f8f9bba9a","sha512":"96372d8d6a40b7d8079c68982cdadd7895a70df517d0846d4f67cc16935f2f9280d2bd4e9b132a71b287c850f4826c3e2b0b1403ea0ee9442318029620d7f850","ssdeep":"","tlshash":"0ff0c0e49319c421c65de76d73f8cc02936a74c065d590ecf8e42e5236165852f2694d","first_seen":"2025-10-11T08:21:36.774425Z","last_seen":"2026-10-10T21:47:12.502722Z","times_seen":5,"resource_available":false,"data":null}},"time_used":131,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":131,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"cescaa.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"cescaa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cescaa.com/_assets/fonts/5c411d01677832c1b6f80e11045c3e17.woff2","fqdn":"cescaa.com","domain":"cescaa.com","tld":"com"},"ip":{"addr":"103.169.142.0","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://cescaa.com/","date":"2026-10-10T21:46:14.025Z","timestamp":1791668774025,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cescaa.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Sun, 06 Sep 2026 05:47:48 GMT","end":"Sat, 05 Dec 2026 06:46:40 GMT"},"fingerprint":{"sha1":"ED:EA:92:85:3E:13:4B:14:B2:3D:68:46:E8:43:9C:6B:3C:F1:32:DA","sha256":"7A:0F:F6:5D:4D:CF:B3:61:47:C4:54:6B:D7:C9:B4:11:9F:99:60:9F:7A:33:B6:FE:12:75:A1:FE:A9:B9:B5:C2"}}},"request":{"raw":"GET /_assets/fonts/5c411d01677832c1b6f80e11045c3e17.woff2 HTTP/1.1\r\nHost: cescaa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nReferer: https://cescaa.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __cf_bm=vOuBaFobJJHt2JGkBfxmwK60G8D6IyQVMT5sk6zLfGg-1791668772.3255684-1.0.1.1-TAeZ3m9ziTdsOy9Dm3_qgMAR5jdBCC6nmmHTtsbfUUqjEn8lVxafvHJfJTehEhGew0b7N7p3DDyOcvnHPJBbuySlYAJtMylSNpIXNhpFAi83EvkhJnIeNPGbMG63_vXj\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"__cf_bm","value":"vOuBaFobJJHt2JGkBfxmwK60G8D6IyQVMT5sk6zLfGg-1791668772.3255684-1.0.1.1-TAeZ3m9ziTdsOy9Dm3_qgMAR5jdBCC6nmmHTtsbfUUqjEn8lVxafvHJfJTehEhGew0b7N7p3DDyOcvnHPJBbuySlYAJtMylSNpIXNhpFAi83EvkhJnIeNPGbMG63_vXj"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 10 Oct 2026 21:46:14 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 53200\r\ncache-control: public, max-age=604800, immutable\r\nstrict-transport-security: max-age=31536000\r\nx-deployment-id: 0f99e4b75af14702f37d466a7129023b9b25e5159a3104342517539ef44a4f3a\r\nx-robots-tag: none\r\nvary: accept-encoding\r\nexpect-ct: max-age=86400, enforce\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\ncf-ray: a488d10da95423eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":53200,"size_decoded":53841,"mime_type":"application/octet-stream","magic":"Web Open Font Format (Version 2), CFF, length 53200, version 1.393","md5":"1dd71e9221adf3dce1f6d63d98234b40","sha1":"94ffd37ad6799e3f6a79ac43ef675bf13460f5d7","sha256":"51de067a32600ef07c4f813625211e4596e03ea2ba5b9a86886dbc946b3ac091","sha512":"5e7742e8e83d5d7cc71550abc18959d0f6c1a9e4f09a314c845c19eb18a06ba6006a04e7babb1396f5f4f7aa8df3d5f13df824d2bd9fd375702e54caaeb50c43","ssdeep":"1536:/25ut3oUaeM/Q+kDDSLQpW+kjCDDqU061Fp:/iut3LM/Q+kDDSLgW+9DuU06x","tlshash":"1a3302c8f77dc1dadf8d044fe30e4ac5582c28f91d4c2da6558db290ae18fe96b4469c","first_seen":"2025-10-11T08:21:36.724182Z","last_seen":"2026-10-10T21:47:12.500644Z","times_seen":4,"resource_available":false,"data":null}},"time_used":127,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":126,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"cescaa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"cescaa.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cescaa.com/_assets/fonts/673cfd68bc7f23224a573c827b4dd620.woff2","fqdn":"cescaa.com","domain":"cescaa.com","tld":"com"},"ip":{"addr":"103.169.142.0","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://cescaa.com/","date":"2026-10-10T21:46:14.166Z","timestamp":1791668774166,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cescaa.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Sun, 06 Sep 2026 05:47:48 GMT","end":"Sat, 05 Dec 2026 06:46:40 GMT"},"fingerprint":{"sha1":"ED:EA:92:85:3E:13:4B:14:B2:3D:68:46:E8:43:9C:6B:3C:F1:32:DA","sha256":"7A:0F:F6:5D:4D:CF:B3:61:47:C4:54:6B:D7:C9:B4:11:9F:99:60:9F:7A:33:B6:FE:12:75:A1:FE:A9:B9:B5:C2"}}},"request":{"raw":"GET /_assets/fonts/673cfd68bc7f23224a573c827b4dd620.woff2 HTTP/1.1\r\nHost: cescaa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nReferer: https://cescaa.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __cf_bm=vOuBaFobJJHt2JGkBfxmwK60G8D6IyQVMT5sk6zLfGg-1791668772.3255684-1.0.1.1-TAeZ3m9ziTdsOy9Dm3_qgMAR5jdBCC6nmmHTtsbfUUqjEn8lVxafvHJfJTehEhGew0b7N7p3DDyOcvnHPJBbuySlYAJtMylSNpIXNhpFAi83EvkhJnIeNPGbMG63_vXj\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"__cf_bm","value":"vOuBaFobJJHt2JGkBfxmwK60G8D6IyQVMT5sk6zLfGg-1791668772.3255684-1.0.1.1-TAeZ3m9ziTdsOy9Dm3_qgMAR5jdBCC6nmmHTtsbfUUqjEn8lVxafvHJfJTehEhGew0b7N7p3DDyOcvnHPJBbuySlYAJtMylSNpIXNhpFAi83EvkhJnIeNPGbMG63_vXj"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 10 Oct 2026 21:46:14 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 53080\r\ncache-control: public, max-age=604800, immutable\r\nstrict-transport-security: max-age=31536000\r\nx-deployment-id: 0f99e4b75af14702f37d466a7129023b9b25e5159a3104342517539ef44a4f3a\r\nx-robots-tag: none\r\nvary: accept-encoding\r\nexpect-ct: max-age=86400, enforce\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\ncf-ray: a488d10e8b6b23eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":53080,"size_decoded":53721,"mime_type":"application/octet-stream","magic":"Web Open Font Format (Version 2), CFF, length 53080, version 1.393","md5":"04433c9644d7b2a4e893f52976c4a99e","sha1":"d0a060c25a1e59ef229f5fd4b2e0c2909a56d553","sha256":"ec7e5c9fe8b9304c6ab5ec7f394447cf04ccfaf1eeecdccdf6c3ed73741f932b","sha512":"a54c455851806ec8408e7ff52c40f410747fa10260338cdb1c4881c5e9f04ef37667d0d259ce32957be16f35ffe503475a77d84ee395ba5bfa24a47be6817e67","ssdeep":"1536:S9zqpN2OeGJBHnyF3qU4SrtdGg+8MeiFGBah:lL1g6U4kWkMeiFGi","tlshash":"ae33f1ef4994c644718b8fb676e95b262076c14da5aacf0431ff98887c60704e8f6e1b","first_seen":"2025-10-11T08:21:36.727378Z","last_seen":"2026-10-10T21:47:12.473461Z","times_seen":4,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"cescaa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"cescaa.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cescaa.com/_assets/fonts/673cfd68bc7f23224a573c827b4dd620.woff2","fqdn":"cescaa.com","domain":"cescaa.com","tld":"com"},"ip":{"addr":"103.169.142.0","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://cescaa.com/","date":"2026-10-10T21:46:14.189Z","timestamp":1791668774189,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cescaa.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Sun, 06 Sep 2026 05:47:48 GMT","end":"Sat, 05 Dec 2026 06:46:40 GMT"},"fingerprint":{"sha1":"ED:EA:92:85:3E:13:4B:14:B2:3D:68:46:E8:43:9C:6B:3C:F1:32:DA","sha256":"7A:0F:F6:5D:4D:CF:B3:61:47:C4:54:6B:D7:C9:B4:11:9F:99:60:9F:7A:33:B6:FE:12:75:A1:FE:A9:B9:B5:C2"}}},"request":{"raw":"GET /_assets/fonts/673cfd68bc7f23224a573c827b4dd620.woff2 HTTP/1.1\r\nHost: cescaa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nReferer: https://cescaa.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __cf_bm=vOuBaFobJJHt2JGkBfxmwK60G8D6IyQVMT5sk6zLfGg-1791668772.3255684-1.0.1.1-TAeZ3m9ziTdsOy9Dm3_qgMAR5jdBCC6nmmHTtsbfUUqjEn8lVxafvHJfJTehEhGew0b7N7p3DDyOcvnHPJBbuySlYAJtMylSNpIXNhpFAi83EvkhJnIeNPGbMG63_vXj\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"__cf_bm","value":"vOuBaFobJJHt2JGkBfxmwK60G8D6IyQVMT5sk6zLfGg-1791668772.3255684-1.0.1.1-TAeZ3m9ziTdsOy9Dm3_qgMAR5jdBCC6nmmHTtsbfUUqjEn8lVxafvHJfJTehEhGew0b7N7p3DDyOcvnHPJBbuySlYAJtMylSNpIXNhpFAi83EvkhJnIeNPGbMG63_vXj"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 10 Oct 2026 21:46:14 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 53080\r\ncache-control: public, max-age=604800, immutable\r\nstrict-transport-security: max-age=31536000\r\nx-deployment-id: 0f99e4b75af14702f37d466a7129023b9b25e5159a3104342517539ef44a4f3a\r\nx-robots-tag: none\r\nvary: accept-encoding\r\nexpect-ct: max-age=86400, enforce\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\ncf-ray: a488d10eabcb23eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":53080,"size_decoded":53721,"mime_type":"application/octet-stream","magic":"Web Open Font Format (Version 2), CFF, length 53080, version 1.393","md5":"04433c9644d7b2a4e893f52976c4a99e","sha1":"d0a060c25a1e59ef229f5fd4b2e0c2909a56d553","sha256":"ec7e5c9fe8b9304c6ab5ec7f394447cf04ccfaf1eeecdccdf6c3ed73741f932b","sha512":"a54c455851806ec8408e7ff52c40f410747fa10260338cdb1c4881c5e9f04ef37667d0d259ce32957be16f35ffe503475a77d84ee395ba5bfa24a47be6817e67","ssdeep":"1536:S9zqpN2OeGJBHnyF3qU4SrtdGg+8MeiFGBah:lL1g6U4kWkMeiFGi","tlshash":"ae33f1ef4994c644718b8fb676e95b262076c14da5aacf0431ff98887c60704e8f6e1b","first_seen":"2025-10-11T08:21:36.727378Z","last_seen":"2026-10-10T21:47:12.473461Z","times_seen":4,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"cescaa.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"cescaa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cescaa.com/_assets/fonts/e44a76124d0e53c15573a43751bda1dc.woff2","fqdn":"cescaa.com","domain":"cescaa.com","tld":"com"},"ip":{"addr":"103.169.142.0","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://cescaa.com/","date":"2026-10-10T21:46:14.220Z","timestamp":1791668774220,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cescaa.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Sun, 06 Sep 2026 05:47:48 GMT","end":"Sat, 05 Dec 2026 06:46:40 GMT"},"fingerprint":{"sha1":"ED:EA:92:85:3E:13:4B:14:B2:3D:68:46:E8:43:9C:6B:3C:F1:32:DA","sha256":"7A:0F:F6:5D:4D:CF:B3:61:47:C4:54:6B:D7:C9:B4:11:9F:99:60:9F:7A:33:B6:FE:12:75:A1:FE:A9:B9:B5:C2"}}},"request":{"raw":"GET /_assets/fonts/e44a76124d0e53c15573a43751bda1dc.woff2 HTTP/1.1\r\nHost: cescaa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nReferer: https://cescaa.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __cf_bm=vOuBaFobJJHt2JGkBfxmwK60G8D6IyQVMT5sk6zLfGg-1791668772.3255684-1.0.1.1-TAeZ3m9ziTdsOy9Dm3_qgMAR5jdBCC6nmmHTtsbfUUqjEn8lVxafvHJfJTehEhGew0b7N7p3DDyOcvnHPJBbuySlYAJtMylSNpIXNhpFAi83EvkhJnIeNPGbMG63_vXj\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"__cf_bm","value":"vOuBaFobJJHt2JGkBfxmwK60G8D6IyQVMT5sk6zLfGg-1791668772.3255684-1.0.1.1-TAeZ3m9ziTdsOy9Dm3_qgMAR5jdBCC6nmmHTtsbfUUqjEn8lVxafvHJfJTehEhGew0b7N7p3DDyOcvnHPJBbuySlYAJtMylSNpIXNhpFAi83EvkhJnIeNPGbMG63_vXj"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 10 Oct 2026 21:46:14 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 51760\r\ncache-control: public, max-age=604800, immutable\r\nstrict-transport-security: max-age=31536000\r\nx-deployment-id: 0f99e4b75af14702f37d466a7129023b9b25e5159a3104342517539ef44a4f3a\r\nx-robots-tag: none\r\nvary: accept-encoding\r\nexpect-ct: max-age=86400, enforce\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\ncf-ray: a488d10edc3b23eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":51760,"size_decoded":52401,"mime_type":"application/octet-stream","magic":"Web Open Font Format (Version 2), CFF, length 51760, version 1.393","md5":"83c4f958dac8837aa60859d214f16e44","sha1":"dbf3a429034a016d8a399db27af6341b7d747289","sha256":"3f947cf511bb13f29650c3956ff65b84419f3d4ec719cd2a41163aa7dc9f0773","sha512":"3642325459c0102784a5e966808504454b3ac0f65ffad1954710dbea17fa46d5722af3723f83bc79319e30074e02a830bb2e6de9c6495081b77cdabaa90f569e","ssdeep":"1536:VivFXIgmL8w5oPI1xxiUGwKt3UA3wzOBfOS:Vi9XIhouPiRAzOBfL","tlshash":"9233f20f4fa9473a5802e82d5b804ca682c318a356e00bef52dcb68c571bb75f865df7","first_seen":"2025-10-08T09:36:53.284909Z","last_seen":"2026-10-10T21:47:12.489305Z","times_seen":4,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"cescaa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"cescaa.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cescaa.com/_assets/fonts/e44a76124d0e53c15573a43751bda1dc.woff2","fqdn":"cescaa.com","domain":"cescaa.com","tld":"com"},"ip":{"addr":"103.169.142.0","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://cescaa.com/","date":"2026-10-10T21:46:14.234Z","timestamp":1791668774234,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cescaa.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Sun, 06 Sep 2026 05:47:48 GMT","end":"Sat, 05 Dec 2026 06:46:40 GMT"},"fingerprint":{"sha1":"ED:EA:92:85:3E:13:4B:14:B2:3D:68:46:E8:43:9C:6B:3C:F1:32:DA","sha256":"7A:0F:F6:5D:4D:CF:B3:61:47:C4:54:6B:D7:C9:B4:11:9F:99:60:9F:7A:33:B6:FE:12:75:A1:FE:A9:B9:B5:C2"}}},"request":{"raw":"GET /_assets/fonts/e44a76124d0e53c15573a43751bda1dc.woff2 HTTP/1.1\r\nHost: cescaa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nReferer: https://cescaa.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __cf_bm=vOuBaFobJJHt2JGkBfxmwK60G8D6IyQVMT5sk6zLfGg-1791668772.3255684-1.0.1.1-TAeZ3m9ziTdsOy9Dm3_qgMAR5jdBCC6nmmHTtsbfUUqjEn8lVxafvHJfJTehEhGew0b7N7p3DDyOcvnHPJBbuySlYAJtMylSNpIXNhpFAi83EvkhJnIeNPGbMG63_vXj\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"__cf_bm","value":"vOuBaFobJJHt2JGkBfxmwK60G8D6IyQVMT5sk6zLfGg-1791668772.3255684-1.0.1.1-TAeZ3m9ziTdsOy9Dm3_qgMAR5jdBCC6nmmHTtsbfUUqjEn8lVxafvHJfJTehEhGew0b7N7p3DDyOcvnHPJBbuySlYAJtMylSNpIXNhpFAi83EvkhJnIeNPGbMG63_vXj"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 10 Oct 2026 21:46:14 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 51760\r\ncache-control: public, max-age=604800, immutable\r\nstrict-transport-security: max-age=31536000\r\nx-deployment-id: 0f99e4b75af14702f37d466a7129023b9b25e5159a3104342517539ef44a4f3a\r\nx-robots-tag: none\r\nvary: accept-encoding\r\nexpect-ct: max-age=86400, enforce\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\ncf-ray: a488d10efc6723eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":51760,"size_decoded":52401,"mime_type":"application/octet-stream","magic":"Web Open Font Format (Version 2), CFF, length 51760, version 1.393","md5":"83c4f958dac8837aa60859d214f16e44","sha1":"dbf3a429034a016d8a399db27af6341b7d747289","sha256":"3f947cf511bb13f29650c3956ff65b84419f3d4ec719cd2a41163aa7dc9f0773","sha512":"3642325459c0102784a5e966808504454b3ac0f65ffad1954710dbea17fa46d5722af3723f83bc79319e30074e02a830bb2e6de9c6495081b77cdabaa90f569e","ssdeep":"1536:VivFXIgmL8w5oPI1xxiUGwKt3UA3wzOBfOS:Vi9XIhouPiRAzOBfL","tlshash":"9233f20f4fa9473a5802e82d5b804ca682c318a356e00bef52dcb68c571bb75f865df7","first_seen":"2025-10-08T09:36:53.284909Z","last_seen":"2026-10-10T21:47:12.489305Z","times_seen":4,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"cescaa.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"cescaa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cescaa.com/_assets/fonts/1101f812d8310a0639775c29afe1af81.woff2","fqdn":"cescaa.com","domain":"cescaa.com","tld":"com"},"ip":{"addr":"103.169.142.0","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://cescaa.com/","date":"2026-10-10T21:46:14.236Z","timestamp":1791668774236,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cescaa.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Sun, 06 Sep 2026 05:47:48 GMT","end":"Sat, 05 Dec 2026 06:46:40 GMT"},"fingerprint":{"sha1":"ED:EA:92:85:3E:13:4B:14:B2:3D:68:46:E8:43:9C:6B:3C:F1:32:DA","sha256":"7A:0F:F6:5D:4D:CF:B3:61:47:C4:54:6B:D7:C9:B4:11:9F:99:60:9F:7A:33:B6:FE:12:75:A1:FE:A9:B9:B5:C2"}}},"request":{"raw":"GET /_assets/fonts/1101f812d8310a0639775c29afe1af81.woff2 HTTP/1.1\r\nHost: cescaa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nReferer: https://cescaa.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __cf_bm=vOuBaFobJJHt2JGkBfxmwK60G8D6IyQVMT5sk6zLfGg-1791668772.3255684-1.0.1.1-TAeZ3m9ziTdsOy9Dm3_qgMAR5jdBCC6nmmHTtsbfUUqjEn8lVxafvHJfJTehEhGew0b7N7p3DDyOcvnHPJBbuySlYAJtMylSNpIXNhpFAi83EvkhJnIeNPGbMG63_vXj\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"__cf_bm","value":"vOuBaFobJJHt2JGkBfxmwK60G8D6IyQVMT5sk6zLfGg-1791668772.3255684-1.0.1.1-TAeZ3m9ziTdsOy9Dm3_qgMAR5jdBCC6nmmHTtsbfUUqjEn8lVxafvHJfJTehEhGew0b7N7p3DDyOcvnHPJBbuySlYAJtMylSNpIXNhpFAi83EvkhJnIeNPGbMG63_vXj"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 10 Oct 2026 21:46:14 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 51616\r\ncache-control: public, max-age=604800, immutable\r\nstrict-transport-security: max-age=31536000\r\nx-deployment-id: 0f99e4b75af14702f37d466a7129023b9b25e5159a3104342517539ef44a4f3a\r\nx-robots-tag: none\r\nvary: accept-encoding\r\nexpect-ct: max-age=86400, enforce\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\ncf-ray: a488d10efc6b23eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":51616,"size_decoded":52257,"mime_type":"application/octet-stream","magic":"Web Open Font Format (Version 2), CFF, length 51616, version 1.393","md5":"1f08068188b13a30a9c52169f7f97918","sha1":"6c8eebda3283fc53fea03b644583df3dae966628","sha256":"b1cb4cd4e0d5aec7f5cbbdd0c123d559c37f2d3ae75b1e9188c4ca221ff55025","sha512":"b47bed9104a6b978007ff3f1c75df338159b1e2bb01cc1d391b92e129d6544b668cfa0818c79eca5009e387cf3ff92e70c5506f9000f1144c0187e87fa82206f","ssdeep":"1536:jufH9kxHzaip66BVH7v4V2CSFLsyJ9m+w88FMjG:Cv2J3NVbv4VwLsQz2","tlshash":"173302b082377135fdc02197b95da7e8782bcc9e0dee57434b63ad81aa5460393e4cb2","first_seen":"2025-10-08T09:36:53.279817Z","last_seen":"2026-10-10T21:47:12.498858Z","times_seen":4,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"cescaa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"cescaa.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cescaa.com/_assets/fonts/5c612a870b96ecbc73de2d0a0f12bbc9.woff2","fqdn":"cescaa.com","domain":"cescaa.com","tld":"com"},"ip":{"addr":"103.169.142.0","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://cescaa.com/","date":"2026-10-10T21:46:14.276Z","timestamp":1791668774276,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cescaa.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Sun, 06 Sep 2026 05:47:48 GMT","end":"Sat, 05 Dec 2026 06:46:40 GMT"},"fingerprint":{"sha1":"ED:EA:92:85:3E:13:4B:14:B2:3D:68:46:E8:43:9C:6B:3C:F1:32:DA","sha256":"7A:0F:F6:5D:4D:CF:B3:61:47:C4:54:6B:D7:C9:B4:11:9F:99:60:9F:7A:33:B6:FE:12:75:A1:FE:A9:B9:B5:C2"}}},"request":{"raw":"GET /_assets/fonts/5c612a870b96ecbc73de2d0a0f12bbc9.woff2 HTTP/1.1\r\nHost: cescaa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nReferer: https://cescaa.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __cf_bm=vOuBaFobJJHt2JGkBfxmwK60G8D6IyQVMT5sk6zLfGg-1791668772.3255684-1.0.1.1-TAeZ3m9ziTdsOy9Dm3_qgMAR5jdBCC6nmmHTtsbfUUqjEn8lVxafvHJfJTehEhGew0b7N7p3DDyOcvnHPJBbuySlYAJtMylSNpIXNhpFAi83EvkhJnIeNPGbMG63_vXj\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"__cf_bm","value":"vOuBaFobJJHt2JGkBfxmwK60G8D6IyQVMT5sk6zLfGg-1791668772.3255684-1.0.1.1-TAeZ3m9ziTdsOy9Dm3_qgMAR5jdBCC6nmmHTtsbfUUqjEn8lVxafvHJfJTehEhGew0b7N7p3DDyOcvnHPJBbuySlYAJtMylSNpIXNhpFAi83EvkhJnIeNPGbMG63_vXj"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 10 Oct 2026 21:46:14 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 54252\r\ncache-control: public, max-age=604800, immutable\r\nstrict-transport-security: max-age=31536000\r\nx-deployment-id: 0f99e4b75af14702f37d466a7129023b9b25e5159a3104342517539ef44a4f3a\r\nx-robots-tag: none\r\nvary: accept-encoding\r\nexpect-ct: max-age=86400, enforce\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\ncf-ray: a488d10f3d3823eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":54252,"size_decoded":54893,"mime_type":"application/octet-stream","magic":"Web Open Font Format (Version 2), CFF, length 54252, version 1.393","md5":"ed08ceadeedb5461059386ddb069c28c","sha1":"b27ff8b21dac87646967afd269afd172fa43de69","sha256":"7d91f25ad3011801a1561726d7e46e86f5e342e93f222233ad4d03b6bd260bbd","sha512":"3831704619973926a5f6d2022364858ff375ff5a1a4ad0f797223b7c202b9e4762ef2c15ba6e36df9ff478c8449728077d58f8c086b9bdd7377faf2ef2885f77","ssdeep":"1536:IUOqaDd66lBBFLCD95lqfi+6d+K0umxiBUn:F5yY6lU95lqfl611miUn","tlshash":"2433010cdd4ba3074bbb94b4863d1dec29400a63becfeb2e9c5039da15de58986d1a34","first_seen":"2025-10-11T08:21:36.730369Z","last_seen":"2026-10-10T21:47:12.459084Z","times_seen":6,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"cescaa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"cescaa.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cescaa.com/_assets/fonts/673cfd68bc7f23224a573c827b4dd620.woff2","fqdn":"cescaa.com","domain":"cescaa.com","tld":"com"},"ip":{"addr":"103.169.142.0","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://cescaa.com/","date":"2026-10-10T21:46:14.175Z","timestamp":1791668774175,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cescaa.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Sun, 06 Sep 2026 05:47:48 GMT","end":"Sat, 05 Dec 2026 06:46:40 GMT"},"fingerprint":{"sha1":"ED:EA:92:85:3E:13:4B:14:B2:3D:68:46:E8:43:9C:6B:3C:F1:32:DA","sha256":"7A:0F:F6:5D:4D:CF:B3:61:47:C4:54:6B:D7:C9:B4:11:9F:99:60:9F:7A:33:B6:FE:12:75:A1:FE:A9:B9:B5:C2"}}},"request":{"raw":"GET /_assets/fonts/673cfd68bc7f23224a573c827b4dd620.woff2 HTTP/1.1\r\nHost: cescaa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nReferer: https://cescaa.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __cf_bm=vOuBaFobJJHt2JGkBfxmwK60G8D6IyQVMT5sk6zLfGg-1791668772.3255684-1.0.1.1-TAeZ3m9ziTdsOy9Dm3_qgMAR5jdBCC6nmmHTtsbfUUqjEn8lVxafvHJfJTehEhGew0b7N7p3DDyOcvnHPJBbuySlYAJtMylSNpIXNhpFAi83EvkhJnIeNPGbMG63_vXj\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"__cf_bm","value":"vOuBaFobJJHt2JGkBfxmwK60G8D6IyQVMT5sk6zLfGg-1791668772.3255684-1.0.1.1-TAeZ3m9ziTdsOy9Dm3_qgMAR5jdBCC6nmmHTtsbfUUqjEn8lVxafvHJfJTehEhGew0b7N7p3DDyOcvnHPJBbuySlYAJtMylSNpIXNhpFAi83EvkhJnIeNPGbMG63_vXj"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 10 Oct 2026 21:46:14 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 53080\r\ncache-control: public, max-age=604800, immutable\r\nstrict-transport-security: max-age=31536000\r\nx-deployment-id: 0f99e4b75af14702f37d466a7129023b9b25e5159a3104342517539ef44a4f3a\r\nx-robots-tag: none\r\nvary: accept-encoding\r\nexpect-ct: max-age=86400, enforce\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\ncf-ray: a488d10e9b9523eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":53080,"size_decoded":53721,"mime_type":"application/octet-stream","magic":"Web Open Font Format (Version 2), CFF, length 53080, version 1.393","md5":"04433c9644d7b2a4e893f52976c4a99e","sha1":"d0a060c25a1e59ef229f5fd4b2e0c2909a56d553","sha256":"ec7e5c9fe8b9304c6ab5ec7f394447cf04ccfaf1eeecdccdf6c3ed73741f932b","sha512":"a54c455851806ec8408e7ff52c40f410747fa10260338cdb1c4881c5e9f04ef37667d0d259ce32957be16f35ffe503475a77d84ee395ba5bfa24a47be6817e67","ssdeep":"1536:S9zqpN2OeGJBHnyF3qU4SrtdGg+8MeiFGBah:lL1g6U4kWkMeiFGi","tlshash":"ae33f1ef4994c644718b8fb676e95b262076c14da5aacf0431ff98887c60704e8f6e1b","first_seen":"2025-10-11T08:21:36.727378Z","last_seen":"2026-10-10T21:47:12.473461Z","times_seen":4,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"cescaa.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"cescaa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cescaa.com/_assets/media/26daf824b795c3ffdbfdb79b2d3c22ab.png","fqdn":"cescaa.com","domain":"cescaa.com","tld":"com"},"ip":{"addr":"103.169.142.0","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cescaa.com/","date":"2026-10-10T21:46:14.729Z","timestamp":1791668774729,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cescaa.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Sun, 06 Sep 2026 05:47:48 GMT","end":"Sat, 05 Dec 2026 06:46:40 GMT"},"fingerprint":{"sha1":"ED:EA:92:85:3E:13:4B:14:B2:3D:68:46:E8:43:9C:6B:3C:F1:32:DA","sha256":"7A:0F:F6:5D:4D:CF:B3:61:47:C4:54:6B:D7:C9:B4:11:9F:99:60:9F:7A:33:B6:FE:12:75:A1:FE:A9:B9:B5:C2"}}},"request":{"raw":"GET /_assets/media/26daf824b795c3ffdbfdb79b2d3c22ab.png HTTP/1.1\r\nHost: cescaa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://cescaa.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __cf_bm=vOuBaFobJJHt2JGkBfxmwK60G8D6IyQVMT5sk6zLfGg-1791668772.3255684-1.0.1.1-TAeZ3m9ziTdsOy9Dm3_qgMAR5jdBCC6nmmHTtsbfUUqjEn8lVxafvHJfJTehEhGew0b7N7p3DDyOcvnHPJBbuySlYAJtMylSNpIXNhpFAi83EvkhJnIeNPGbMG63_vXj\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"__cf_bm","value":"vOuBaFobJJHt2JGkBfxmwK60G8D6IyQVMT5sk6zLfGg-1791668772.3255684-1.0.1.1-TAeZ3m9ziTdsOy9Dm3_qgMAR5jdBCC6nmmHTtsbfUUqjEn8lVxafvHJfJTehEhGew0b7N7p3DDyOcvnHPJBbuySlYAJtMylSNpIXNhpFAi83EvkhJnIeNPGbMG63_vXj"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 10 Oct 2026 21:46:14 GMT\r\ncontent-type: image/png\r\ncontent-length: 880953\r\ncache-control: public, max-age=604800, immutable\r\nstrict-transport-security: max-age=31536000\r\nx-deployment-id: 0f99e4b75af14702f37d466a7129023b9b25e5159a3104342517539ef44a4f3a\r\nx-robots-tag: none\r\nvary: accept-encoding\r\nexpect-ct: max-age=86400, enforce\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\npriority: u=5,i\r\nserver: cloudflare\r\ncf-ray: a488d1120cb623eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":880953,"size_decoded":881577,"mime_type":"image/png","magic":"PNG image data, 800 x 800, 8-bit/color RGB, non-interlaced","md5":"30bf6bb6dbeb70c289fd670871b23a5a","sha1":"60609a9b79c2948520b7aec463b4f8cd795d48c0","sha256":"46d619161f33f266d442e11acdecfb92cda449de8aed96c4daa4e5ab36499a50","sha512":"44275654ac8b545ddd8e637945cc19420a702765a0eb711c3d5721297360bf6b68fec45f0677def8f61ac9b8c024cd2750be30614d54e379aee104bc4ae55708","ssdeep":"24576:Ln3ynf9HplWRcHGQLYAEoqc3HSV4KhanlvztNVCGT:LiOcHCwqSoRhaRBl","tlshash":"6d15339b7dbc857a7701167e25e487f33a4290409cd63aad52e5b0e63e836039f5f306","first_seen":"2026-05-24T14:58:15.555576Z","last_seen":"2026-10-10T21:47:12.504506Z","times_seen":2,"resource_available":false,"data":null}},"time_used":136,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":120,"receive":16,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"cescaa.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"cescaa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cescaa.com/_assets/media/dab3a6c9fd02014fc9ee54ebc08d6ece.svg","fqdn":"cescaa.com","domain":"cescaa.com","tld":"com"},"ip":{"addr":"103.169.142.0","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://cescaa.com/","date":"2026-10-10T21:46:14.889Z","timestamp":1791668774889,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cescaa.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Sun, 06 Sep 2026 05:47:48 GMT","end":"Sat, 05 Dec 2026 06:46:40 GMT"},"fingerprint":{"sha1":"ED:EA:92:85:3E:13:4B:14:B2:3D:68:46:E8:43:9C:6B:3C:F1:32:DA","sha256":"7A:0F:F6:5D:4D:CF:B3:61:47:C4:54:6B:D7:C9:B4:11:9F:99:60:9F:7A:33:B6:FE:12:75:A1:FE:A9:B9:B5:C2"}}},"request":{"raw":"GET /_assets/media/dab3a6c9fd02014fc9ee54ebc08d6ece.svg HTTP/1.1\r\nHost: cescaa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://cescaa.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __cf_bm=vOuBaFobJJHt2JGkBfxmwK60G8D6IyQVMT5sk6zLfGg-1791668772.3255684-1.0.1.1-TAeZ3m9ziTdsOy9Dm3_qgMAR5jdBCC6nmmHTtsbfUUqjEn8lVxafvHJfJTehEhGew0b7N7p3DDyOcvnHPJBbuySlYAJtMylSNpIXNhpFAi83EvkhJnIeNPGbMG63_vXj\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"__cf_bm","value":"vOuBaFobJJHt2JGkBfxmwK60G8D6IyQVMT5sk6zLfGg-1791668772.3255684-1.0.1.1-TAeZ3m9ziTdsOy9Dm3_qgMAR5jdBCC6nmmHTtsbfUUqjEn8lVxafvHJfJTehEhGew0b7N7p3DDyOcvnHPJBbuySlYAJtMylSNpIXNhpFAi83EvkhJnIeNPGbMG63_vXj"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 10 Oct 2026 21:46:14 GMT\r\ncontent-type: image/svg+xml\r\ncache-control: public, max-age=604800, immutable\r\nstrict-transport-security: max-age=31536000\r\nx-deployment-id: 0f99e4b75af14702f37d466a7129023b9b25e5159a3104342517539ef44a4f3a\r\nx-robots-tag: none\r\nvary: accept-encoding\r\nexpect-ct: max-age=86400, enforce\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\npriority: u=3,i=?0\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: a488d1131fb623eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":682,"size_decoded":1065,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"c299c737497b1287595b028db504592e","sha1":"23fdbc589b63d8377bda62574a318017f2118139","sha256":"530f792490ddc3fa4a0f99c53f89be0f5b2e1cf77456d0071f4f9c8fee5cf32e","sha512":"ee0165d10a764d83aa6db6da5d81c8e51cb656642be119ad7dffbb6b76a5ecc45967c0bf670dd7d80daf3a7b14c1ec49bf731269354c2f0406fd4a33ae463b91","ssdeep":"","tlshash":"af0123d4a27588e017da8b7ad7fcfac46330398c2eac814d73e52952bc1d1ed4e6e581","first_seen":"2025-10-11T08:21:36.780676Z","last_seen":"2026-10-10T21:47:12.492313Z","times_seen":4,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"cescaa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"cescaa.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cescaa.com/","fqdn":"cescaa.com","domain":"cescaa.com","tld":"com"},"ip":{"addr":"103.169.142.0","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Australia","country_code":"AU"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-10-10T21:46:12.302Z","timestamp":1791668772302,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cescaa.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Sun, 06 Sep 2026 05:47:48 GMT","end":"Sat, 05 Dec 2026 06:46:40 GMT"},"fingerprint":{"sha1":"ED:EA:92:85:3E:13:4B:14:B2:3D:68:46:E8:43:9C:6B:3C:F1:32:DA","sha256":"7A:0F:F6:5D:4D:CF:B3:61:47:C4:54:6B:D7:C9:B4:11:9F:99:60:9F:7A:33:B6:FE:12:75:A1:FE:A9:B9:B5:C2"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: cescaa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sat, 10 Oct 2026 21:46:12 GMT\r\ncontent-type: text/html\r\nstrict-transport-security: max-age=31536000\r\ncontent-security-policy: frame-ancestors 'self' *.canva.com canva.com *.canva-iris.com canva-iris.com; report-uri https://csp.canva.com/_cspreport?app=websites; base-uri 'self'; object-src 'none'; script-src 'report-sample' 'strict-dynamic' 'nonce-601d51e8-efcf-4b32-b3db-649d07b05329' 'wasm-unsafe-eval' https://www.google.com/recaptcha/api.js;\r\nx-deployment-id: 0f99e4b75af14702f37d466a7129023b9b25e5159a3104342517539ef44a4f3a\r\nx-robots-tag: none\r\nvary: accept-encoding\r\nset-cookie: __cf_bm=vOuBaFobJJHt2JGkBfxmwK60G8D6IyQVMT5sk6zLfGg-1791668772.3255684-1.0.1.1-TAeZ3m9ziTdsOy9Dm3_qgMAR5jdBCC6nmmHTtsbfUUqjEn8lVxafvHJfJTehEhGew0b7N7p3DDyOcvnHPJBbuySlYAJtMylSNpIXNhpFAi83EvkhJnIeNPGbMG63_vXj; HttpOnly; SameSite=None; Secure; Path=/; Domain=cescaa.com; Expires=Sat, 10 Oct 2026 22:16:12 GMT\r\nexpect-ct: max-age=86400, enforce\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: a488d103087c120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":[{"name":"__cf_bm","value":"vOuBaFobJJHt2JGkBfxmwK60G8D6IyQVMT5sk6zLfGg-1791668772.3255684-1.0.1.1-TAeZ3m9ziTdsOy9Dm3_qgMAR5jdBCC6nmmHTtsbfUUqjEn8lVxafvHJfJTehEhGew0b7N7p3DDyOcvnHPJBbuySlYAJtMylSNpIXNhpFAi83EvkhJnIeNPGbMG63_vXj","quoted":false,"path":"/","domain":"cescaa.com","expires":"2026-10-10T22:16:12Z","raw_expires":"Sat, 10 Oct 2026 22:16:12 GMT","secure":true,"http_only":true,"same_site":"None","partitioned":false,"raw":"__cf_bm=vOuBaFobJJHt2JGkBfxmwK60G8D6IyQVMT5sk6zLfGg-1791668772.3255684-1.0.1.1-TAeZ3m9ziTdsOy9Dm3_qgMAR5jdBCC6nmmHTtsbfUUqjEn8lVxafvHJfJTehEhGew0b7N7p3DDyOcvnHPJBbuySlYAJtMylSNpIXNhpFAi83EvkhJnIeNPGbMG63_vXj; HttpOnly; SameSite=None; Secure; Path=/; Domain=cescaa.com; Expires=Sat, 10 Oct 2026 22:16:12 GMT"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":72997,"size_decoded":10019,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (62188)","md5":"66ec3d6a85eef2ad17de22d2f17b2199","sha1":"f31c2c11808e5eebfd3d9db7480eaa02d044fa51","sha256":"e3b704a825611554d29691f8f2d3239bc1161301146f9d49f8bddc590d9dce24","sha512":"6663ae465cfb1a627b8200b11153fcca3ee2ee4dd46b913a266a7a2d7b4ff44086140e3c18fc3364a157843318f8d1b19df7990049af1a2a61303d34eb3a104e","ssdeep":"768:7DZU7hK41h/hkhih9hEThih9hahih9hdpECHYoJi1PJzIGb9kCFrAHoVI7NVsHo:/ZchVh/hkhih9hEThih9hahih9hQ0Nwo","tlshash":"786343092a131abb9c535837e5433821d7dc9a24b3c41485a1f79e1ce6ea4ef2f5533b","first_seen":"2026-10-10T21:47:12.508287Z","last_seen":"2026-10-10T21:47:12.508287Z","times_seen":1,"resource_available":true,"data":null}},"time_used":146,"timings":{"blocked":-1,"dns":4,"connect":1,"send":0,"wait":126,"receive":0,"ssl":14},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"cescaa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"cescaa.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cescaa.com/_assets/9387c6b85eab150d.vendor.js","fqdn":"cescaa.com","domain":"cescaa.com","tld":"com"},"ip":{"addr":"103.169.142.0","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cescaa.com/","date":"2026-10-10T21:46:12.641Z","timestamp":1791668772641,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cescaa.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Sun, 06 Sep 2026 05:47:48 GMT","end":"Sat, 05 Dec 2026 06:46:40 GMT"},"fingerprint":{"sha1":"ED:EA:92:85:3E:13:4B:14:B2:3D:68:46:E8:43:9C:6B:3C:F1:32:DA","sha256":"7A:0F:F6:5D:4D:CF:B3:61:47:C4:54:6B:D7:C9:B4:11:9F:99:60:9F:7A:33:B6:FE:12:75:A1:FE:A9:B9:B5:C2"}}},"request":{"raw":"GET /_assets/9387c6b85eab150d.vendor.js HTTP/1.1\r\nHost: cescaa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://cescaa.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __cf_bm=vOuBaFobJJHt2JGkBfxmwK60G8D6IyQVMT5sk6zLfGg-1791668772.3255684-1.0.1.1-TAeZ3m9ziTdsOy9Dm3_qgMAR5jdBCC6nmmHTtsbfUUqjEn8lVxafvHJfJTehEhGew0b7N7p3DDyOcvnHPJBbuySlYAJtMylSNpIXNhpFAi83EvkhJnIeNPGbMG63_vXj\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"__cf_bm","value":"vOuBaFobJJHt2JGkBfxmwK60G8D6IyQVMT5sk6zLfGg-1791668772.3255684-1.0.1.1-TAeZ3m9ziTdsOy9Dm3_qgMAR5jdBCC6nmmHTtsbfUUqjEn8lVxafvHJfJTehEhGew0b7N7p3DDyOcvnHPJBbuySlYAJtMylSNpIXNhpFAi83EvkhJnIeNPGbMG63_vXj"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 10 Oct 2026 21:46:12 GMT\r\ncontent-type: application/javascript\r\ncache-control: public, max-age=604800, immutable\r\nstrict-transport-security: max-age=31536000\r\nx-deployment-id: 0f99e4b75af14702f37d466a7129023b9b25e5159a3104342517539ef44a4f3a\r\nx-robots-tag: none\r\nvary: accept-encoding\r\nexpect-ct: max-age=86400, enforce\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\npriority: u=1,i=?0\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: a488d1050ae723eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":453709,"size_decoded":124478,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65432)","md5":"3f9bd752bdbd0940ed727240c022a151","sha1":"f5ab910faf54379270c960d327bce7aff2c6226e","sha256":"3efa5da9d8c78cb144e8e1ad5b9c0e48218964a2c011c80b5ab755d90ae3a684","sha512":"3c120101496e1c5b55bb7b07117e27e04a4936c7f92a08ddba1c376ebf13cac198f7ac03dbd9090b07c38a7f580b10606e12eb1c22a36309723f1a06590b42e1","ssdeep":"6144:QB5UYsGygRjjPVaoMHrvZKo+f+5f4YzF0je4awZB/BK34sTIa3N6grg:QPUYsGBDMrvN4Wfogrg","tlshash":"91a4fcc8b291f4b157e761e5402f050bf33a7869704d80a4f268ece56cb998e617bf39","first_seen":"2025-09-21T19:47:57.560464Z","last_seen":"2026-10-10T21:47:12.513995Z","times_seen":88,"resource_available":true,"data":null}},"time_used":138,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":134,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"cescaa.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"cescaa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cescaa.com/_assets/9724a3eb1d0b8334.js","fqdn":"cescaa.com","domain":"cescaa.com","tld":"com"},"ip":{"addr":"103.169.142.0","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cescaa.com/","date":"2026-10-10T21:46:13.835Z","timestamp":1791668773835,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cescaa.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Sun, 06 Sep 2026 05:47:48 GMT","end":"Sat, 05 Dec 2026 06:46:40 GMT"},"fingerprint":{"sha1":"ED:EA:92:85:3E:13:4B:14:B2:3D:68:46:E8:43:9C:6B:3C:F1:32:DA","sha256":"7A:0F:F6:5D:4D:CF:B3:61:47:C4:54:6B:D7:C9:B4:11:9F:99:60:9F:7A:33:B6:FE:12:75:A1:FE:A9:B9:B5:C2"}}},"request":{"raw":"GET /_assets/9724a3eb1d0b8334.js HTTP/1.1\r\nHost: cescaa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://cescaa.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __cf_bm=vOuBaFobJJHt2JGkBfxmwK60G8D6IyQVMT5sk6zLfGg-1791668772.3255684-1.0.1.1-TAeZ3m9ziTdsOy9Dm3_qgMAR5jdBCC6nmmHTtsbfUUqjEn8lVxafvHJfJTehEhGew0b7N7p3DDyOcvnHPJBbuySlYAJtMylSNpIXNhpFAi83EvkhJnIeNPGbMG63_vXj\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"__cf_bm","value":"vOuBaFobJJHt2JGkBfxmwK60G8D6IyQVMT5sk6zLfGg-1791668772.3255684-1.0.1.1-TAeZ3m9ziTdsOy9Dm3_qgMAR5jdBCC6nmmHTtsbfUUqjEn8lVxafvHJfJTehEhGew0b7N7p3DDyOcvnHPJBbuySlYAJtMylSNpIXNhpFAi83EvkhJnIeNPGbMG63_vXj"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 10 Oct 2026 21:46:13 GMT\r\ncontent-type: application/javascript\r\ncache-control: public, max-age=604800, immutable\r\nstrict-transport-security: max-age=31536000\r\nx-deployment-id: 0f99e4b75af14702f37d466a7129023b9b25e5159a3104342517539ef44a4f3a\r\nx-robots-tag: none\r\nvary: accept-encoding\r\nexpect-ct: max-age=86400, enforce\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\npriority: u=3,i=?0\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: a488d10c7eaa23eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":9861,"size_decoded":4775,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1244)","md5":"c67522d7b4d7b2fee7c86d1de1868419","sha1":"389653430d949108eeb7f6aaca05500a10cc6a7f","sha256":"4ec0723eb35fd71c5a240afb83c7be73548a2be21af457af551e7db52ed881f5","sha512":"762e446827b02837c3fbb981018578dbc14b4776fd199a4a74b587999c267eb7613dfa538944321ab32e48cf4b508e759f88df222c954d13a312983933c045ff","ssdeep":"192:jW6Tteys4uC5Y/NvH8xQxCoNbIYzzl1+hnjQqkxOSqU7bRI22nDzVE8jkU0:ykds4s/NkxWhbrzZ1q8qkFqU7bB+VD0","tlshash":"3812d908711d3113916be4e9902f190da922e864b30ce9ecbaa8ddda9d71c17276d73d","first_seen":"2025-10-10T00:55:24.162912Z","last_seen":"2026-10-10T21:47:12.516926Z","times_seen":17,"resource_available":true,"data":null}},"time_used":129,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":129,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"cescaa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"cescaa.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cescaa.com/_assets/fonts/1101f812d8310a0639775c29afe1af81.woff2","fqdn":"cescaa.com","domain":"cescaa.com","tld":"com"},"ip":{"addr":"103.169.142.0","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://cescaa.com/","date":"2026-10-10T21:46:14.029Z","timestamp":1791668774029,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cescaa.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Sun, 06 Sep 2026 05:47:48 GMT","end":"Sat, 05 Dec 2026 06:46:40 GMT"},"fingerprint":{"sha1":"ED:EA:92:85:3E:13:4B:14:B2:3D:68:46:E8:43:9C:6B:3C:F1:32:DA","sha256":"7A:0F:F6:5D:4D:CF:B3:61:47:C4:54:6B:D7:C9:B4:11:9F:99:60:9F:7A:33:B6:FE:12:75:A1:FE:A9:B9:B5:C2"}}},"request":{"raw":"GET /_assets/fonts/1101f812d8310a0639775c29afe1af81.woff2 HTTP/1.1\r\nHost: cescaa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nReferer: https://cescaa.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __cf_bm=vOuBaFobJJHt2JGkBfxmwK60G8D6IyQVMT5sk6zLfGg-1791668772.3255684-1.0.1.1-TAeZ3m9ziTdsOy9Dm3_qgMAR5jdBCC6nmmHTtsbfUUqjEn8lVxafvHJfJTehEhGew0b7N7p3DDyOcvnHPJBbuySlYAJtMylSNpIXNhpFAi83EvkhJnIeNPGbMG63_vXj\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"__cf_bm","value":"vOuBaFobJJHt2JGkBfxmwK60G8D6IyQVMT5sk6zLfGg-1791668772.3255684-1.0.1.1-TAeZ3m9ziTdsOy9Dm3_qgMAR5jdBCC6nmmHTtsbfUUqjEn8lVxafvHJfJTehEhGew0b7N7p3DDyOcvnHPJBbuySlYAJtMylSNpIXNhpFAi83EvkhJnIeNPGbMG63_vXj"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 10 Oct 2026 21:46:14 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 51616\r\ncache-control: public, max-age=604800, immutable\r\nstrict-transport-security: max-age=31536000\r\nx-deployment-id: 0f99e4b75af14702f37d466a7129023b9b25e5159a3104342517539ef44a4f3a\r\nx-robots-tag: none\r\nvary: accept-encoding\r\nexpect-ct: max-age=86400, enforce\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\ncf-ray: a488d10da95f23eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":51616,"size_decoded":52257,"mime_type":"application/octet-stream","magic":"Web Open Font Format (Version 2), CFF, length 51616, version 1.393","md5":"1f08068188b13a30a9c52169f7f97918","sha1":"6c8eebda3283fc53fea03b644583df3dae966628","sha256":"b1cb4cd4e0d5aec7f5cbbdd0c123d559c37f2d3ae75b1e9188c4ca221ff55025","sha512":"b47bed9104a6b978007ff3f1c75df338159b1e2bb01cc1d391b92e129d6544b668cfa0818c79eca5009e387cf3ff92e70c5506f9000f1144c0187e87fa82206f","ssdeep":"1536:jufH9kxHzaip66BVH7v4V2CSFLsyJ9m+w88FMjG:Cv2J3NVbv4VwLsQz2","tlshash":"173302b082377135fdc02197b95da7e8782bcc9e0dee57434b63ad81aa5460393e4cb2","first_seen":"2025-10-08T09:36:53.279817Z","last_seen":"2026-10-10T21:47:12.498858Z","times_seen":4,"resource_available":false,"data":null}},"time_used":121,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":119,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"cescaa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"cescaa.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cescaa.com/_assets/fonts/1101f812d8310a0639775c29afe1af81.woff2","fqdn":"cescaa.com","domain":"cescaa.com","tld":"com"},"ip":{"addr":"103.169.142.0","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://cescaa.com/","date":"2026-10-10T21:46:14.245Z","timestamp":1791668774245,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cescaa.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Sun, 06 Sep 2026 05:47:48 GMT","end":"Sat, 05 Dec 2026 06:46:40 GMT"},"fingerprint":{"sha1":"ED:EA:92:85:3E:13:4B:14:B2:3D:68:46:E8:43:9C:6B:3C:F1:32:DA","sha256":"7A:0F:F6:5D:4D:CF:B3:61:47:C4:54:6B:D7:C9:B4:11:9F:99:60:9F:7A:33:B6:FE:12:75:A1:FE:A9:B9:B5:C2"}}},"request":{"raw":"GET /_assets/fonts/1101f812d8310a0639775c29afe1af81.woff2 HTTP/1.1\r\nHost: cescaa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nReferer: https://cescaa.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __cf_bm=vOuBaFobJJHt2JGkBfxmwK60G8D6IyQVMT5sk6zLfGg-1791668772.3255684-1.0.1.1-TAeZ3m9ziTdsOy9Dm3_qgMAR5jdBCC6nmmHTtsbfUUqjEn8lVxafvHJfJTehEhGew0b7N7p3DDyOcvnHPJBbuySlYAJtMylSNpIXNhpFAi83EvkhJnIeNPGbMG63_vXj\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"__cf_bm","value":"vOuBaFobJJHt2JGkBfxmwK60G8D6IyQVMT5sk6zLfGg-1791668772.3255684-1.0.1.1-TAeZ3m9ziTdsOy9Dm3_qgMAR5jdBCC6nmmHTtsbfUUqjEn8lVxafvHJfJTehEhGew0b7N7p3DDyOcvnHPJBbuySlYAJtMylSNpIXNhpFAi83EvkhJnIeNPGbMG63_vXj"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 10 Oct 2026 21:46:14 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 51616\r\ncache-control: public, max-age=604800, immutable\r\nstrict-transport-security: max-age=31536000\r\nx-deployment-id: 0f99e4b75af14702f37d466a7129023b9b25e5159a3104342517539ef44a4f3a\r\nx-robots-tag: none\r\nvary: accept-encoding\r\nexpect-ct: max-age=86400, enforce\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\ncf-ray: a488d10f0c9923eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":51616,"size_decoded":52257,"mime_type":"application/octet-stream","magic":"Web Open Font Format (Version 2), CFF, length 51616, version 1.393","md5":"1f08068188b13a30a9c52169f7f97918","sha1":"6c8eebda3283fc53fea03b644583df3dae966628","sha256":"b1cb4cd4e0d5aec7f5cbbdd0c123d559c37f2d3ae75b1e9188c4ca221ff55025","sha512":"b47bed9104a6b978007ff3f1c75df338159b1e2bb01cc1d391b92e129d6544b668cfa0818c79eca5009e387cf3ff92e70c5506f9000f1144c0187e87fa82206f","ssdeep":"1536:jufH9kxHzaip66BVH7v4V2CSFLsyJ9m+w88FMjG:Cv2J3NVbv4VwLsQz2","tlshash":"173302b082377135fdc02197b95da7e8782bcc9e0dee57434b63ad81aa5460393e4cb2","first_seen":"2025-10-08T09:36:53.279817Z","last_seen":"2026-10-10T21:47:12.498858Z","times_seen":4,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"cescaa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"cescaa.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cescaa.com/_assets/fonts/5c612a870b96ecbc73de2d0a0f12bbc9.woff2","fqdn":"cescaa.com","domain":"cescaa.com","tld":"com"},"ip":{"addr":"103.169.142.0","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://cescaa.com/","date":"2026-10-10T21:46:14.268Z","timestamp":1791668774268,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cescaa.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Sun, 06 Sep 2026 05:47:48 GMT","end":"Sat, 05 Dec 2026 06:46:40 GMT"},"fingerprint":{"sha1":"ED:EA:92:85:3E:13:4B:14:B2:3D:68:46:E8:43:9C:6B:3C:F1:32:DA","sha256":"7A:0F:F6:5D:4D:CF:B3:61:47:C4:54:6B:D7:C9:B4:11:9F:99:60:9F:7A:33:B6:FE:12:75:A1:FE:A9:B9:B5:C2"}}},"request":{"raw":"GET /_assets/fonts/5c612a870b96ecbc73de2d0a0f12bbc9.woff2 HTTP/1.1\r\nHost: cescaa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nReferer: https://cescaa.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __cf_bm=vOuBaFobJJHt2JGkBfxmwK60G8D6IyQVMT5sk6zLfGg-1791668772.3255684-1.0.1.1-TAeZ3m9ziTdsOy9Dm3_qgMAR5jdBCC6nmmHTtsbfUUqjEn8lVxafvHJfJTehEhGew0b7N7p3DDyOcvnHPJBbuySlYAJtMylSNpIXNhpFAi83EvkhJnIeNPGbMG63_vXj\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"__cf_bm","value":"vOuBaFobJJHt2JGkBfxmwK60G8D6IyQVMT5sk6zLfGg-1791668772.3255684-1.0.1.1-TAeZ3m9ziTdsOy9Dm3_qgMAR5jdBCC6nmmHTtsbfUUqjEn8lVxafvHJfJTehEhGew0b7N7p3DDyOcvnHPJBbuySlYAJtMylSNpIXNhpFAi83EvkhJnIeNPGbMG63_vXj"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 10 Oct 2026 21:46:14 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 54252\r\ncache-control: public, max-age=604800, immutable\r\nstrict-transport-security: max-age=31536000\r\nx-deployment-id: 0f99e4b75af14702f37d466a7129023b9b25e5159a3104342517539ef44a4f3a\r\nx-robots-tag: none\r\nvary: accept-encoding\r\nexpect-ct: max-age=86400, enforce\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\ncf-ray: a488d10f2d1023eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":54252,"size_decoded":54893,"mime_type":"application/octet-stream","magic":"Web Open Font Format (Version 2), CFF, length 54252, version 1.393","md5":"ed08ceadeedb5461059386ddb069c28c","sha1":"b27ff8b21dac87646967afd269afd172fa43de69","sha256":"7d91f25ad3011801a1561726d7e46e86f5e342e93f222233ad4d03b6bd260bbd","sha512":"3831704619973926a5f6d2022364858ff375ff5a1a4ad0f797223b7c202b9e4762ef2c15ba6e36df9ff478c8449728077d58f8c086b9bdd7377faf2ef2885f77","ssdeep":"1536:IUOqaDd66lBBFLCD95lqfi+6d+K0umxiBUn:F5yY6lU95lqfl611miUn","tlshash":"2433010cdd4ba3074bbb94b4863d1dec29400a63becfeb2e9c5039da15de58986d1a34","first_seen":"2025-10-11T08:21:36.730369Z","last_seen":"2026-10-10T21:47:12.459084Z","times_seen":6,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"cescaa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"cescaa.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cescaa.com/_assets/static_font_4.ltr.css","fqdn":"cescaa.com","domain":"cescaa.com","tld":"com"},"ip":{"addr":"103.169.142.0","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://cescaa.com/","date":"2026-10-10T21:46:12.634Z","timestamp":1791668772634,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cescaa.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Sun, 06 Sep 2026 05:47:48 GMT","end":"Sat, 05 Dec 2026 06:46:40 GMT"},"fingerprint":{"sha1":"ED:EA:92:85:3E:13:4B:14:B2:3D:68:46:E8:43:9C:6B:3C:F1:32:DA","sha256":"7A:0F:F6:5D:4D:CF:B3:61:47:C4:54:6B:D7:C9:B4:11:9F:99:60:9F:7A:33:B6:FE:12:75:A1:FE:A9:B9:B5:C2"}}},"request":{"raw":"GET /_assets/static_font_4.ltr.css HTTP/1.1\r\nHost: cescaa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://cescaa.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __cf_bm=vOuBaFobJJHt2JGkBfxmwK60G8D6IyQVMT5sk6zLfGg-1791668772.3255684-1.0.1.1-TAeZ3m9ziTdsOy9Dm3_qgMAR5jdBCC6nmmHTtsbfUUqjEn8lVxafvHJfJTehEhGew0b7N7p3DDyOcvnHPJBbuySlYAJtMylSNpIXNhpFAi83EvkhJnIeNPGbMG63_vXj\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"__cf_bm","value":"vOuBaFobJJHt2JGkBfxmwK60G8D6IyQVMT5sk6zLfGg-1791668772.3255684-1.0.1.1-TAeZ3m9ziTdsOy9Dm3_qgMAR5jdBCC6nmmHTtsbfUUqjEn8lVxafvHJfJTehEhGew0b7N7p3DDyOcvnHPJBbuySlYAJtMylSNpIXNhpFAi83EvkhJnIeNPGbMG63_vXj"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 10 Oct 2026 21:46:12 GMT\r\ncontent-type: text/css\r\ncache-control: public, max-age=604800, immutable\r\nstrict-transport-security: max-age=31536000\r\nx-deployment-id: 0f99e4b75af14702f37d466a7129023b9b25e5159a3104342517539ef44a4f3a\r\nx-robots-tag: none\r\nvary: accept-encoding\r\nexpect-ct: max-age=86400, enforce\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\npriority: u=2,i=?0\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: a488d104fabd23eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1506,"size_decoded":1246,"mime_type":"text/css","magic":"ASCII text, with very long lines (1446)","md5":"d1437e0251d431b3a3080cb68d66c610","sha1":"e40f425d2630e3d7c770d913457b1209b7b81327","sha256":"138b5385f644aacbff65a59c31cdd4f12856f422ebf852afb7477230e9e002c8","sha512":"31045fca87d9d8f7c5015713d8a1d74e6f179524727855c1d488a644133d876ea2e9bcec8ab1fd1d253b1cccafec599d743b5a402f727af6825a50673f8d5d5e","ssdeep":"","tlshash":"4131ac341419918ed862795334df76721f3e10256f88622bdf1c58944fabca6f150f9e","first_seen":"2024-08-20T09:48:06.054128Z","last_seen":"2026-10-10T21:47:12.518497Z","times_seen":2266,"resource_available":true,"data":null}},"time_used":127,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":127,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"cescaa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"cescaa.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cescaa.com/_assets/c1ad8d21ac431176.js","fqdn":"cescaa.com","domain":"cescaa.com","tld":"com"},"ip":{"addr":"103.169.142.0","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cescaa.com/","date":"2026-10-10T21:46:13.836Z","timestamp":1791668773836,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cescaa.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Sun, 06 Sep 2026 05:47:48 GMT","end":"Sat, 05 Dec 2026 06:46:40 GMT"},"fingerprint":{"sha1":"ED:EA:92:85:3E:13:4B:14:B2:3D:68:46:E8:43:9C:6B:3C:F1:32:DA","sha256":"7A:0F:F6:5D:4D:CF:B3:61:47:C4:54:6B:D7:C9:B4:11:9F:99:60:9F:7A:33:B6:FE:12:75:A1:FE:A9:B9:B5:C2"}}},"request":{"raw":"GET /_assets/c1ad8d21ac431176.js HTTP/1.1\r\nHost: cescaa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://cescaa.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __cf_bm=vOuBaFobJJHt2JGkBfxmwK60G8D6IyQVMT5sk6zLfGg-1791668772.3255684-1.0.1.1-TAeZ3m9ziTdsOy9Dm3_qgMAR5jdBCC6nmmHTtsbfUUqjEn8lVxafvHJfJTehEhGew0b7N7p3DDyOcvnHPJBbuySlYAJtMylSNpIXNhpFAi83EvkhJnIeNPGbMG63_vXj\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"__cf_bm","value":"vOuBaFobJJHt2JGkBfxmwK60G8D6IyQVMT5sk6zLfGg-1791668772.3255684-1.0.1.1-TAeZ3m9ziTdsOy9Dm3_qgMAR5jdBCC6nmmHTtsbfUUqjEn8lVxafvHJfJTehEhGew0b7N7p3DDyOcvnHPJBbuySlYAJtMylSNpIXNhpFAi83EvkhJnIeNPGbMG63_vXj"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 10 Oct 2026 21:46:13 GMT\r\ncontent-type: application/javascript\r\ncache-control: public, max-age=604800, immutable\r\nstrict-transport-security: max-age=31536000\r\nx-deployment-id: 0f99e4b75af14702f37d466a7129023b9b25e5159a3104342517539ef44a4f3a\r\nx-robots-tag: none\r\nvary: accept-encoding\r\nexpect-ct: max-age=86400, enforce\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\npriority: u=3,i=?0\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: a488d10c7eb223eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":864,"size_decoded":1125,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (644)","md5":"6eb8ff5476e181905ba18d29c13190f3","sha1":"affb871141c92057cde3e7d5c82282e36f0fb917","sha256":"50d66064e722df7d317a23765e70f8e9ecfabbd61e8e8cc81265b37339f1df66","sha512":"4ece9864cda715da96d1e7f6519f7020d127eab2ebc2502b64b35d6c75e55137a3ddb2a839d763d02ae332af551b309d0b72126fe4234d9551f0b60affb65edc","ssdeep":"","tlshash":"c711801cbe6aba27505a21f0401f1a25062b9261ac4eabd9b1b95ce844f344dd722fb5","first_seen":"2025-10-10T00:55:24.13174Z","last_seen":"2026-10-10T21:47:12.519248Z","times_seen":17,"resource_available":true,"data":null}},"time_used":119,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":119,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"cescaa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"cescaa.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cescaa.com/_assets/eebc1a25dc225384.js","fqdn":"cescaa.com","domain":"cescaa.com","tld":"com"},"ip":{"addr":"103.169.142.0","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cescaa.com/","date":"2026-10-10T21:46:13.840Z","timestamp":1791668773840,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cescaa.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Sun, 06 Sep 2026 05:47:48 GMT","end":"Sat, 05 Dec 2026 06:46:40 GMT"},"fingerprint":{"sha1":"ED:EA:92:85:3E:13:4B:14:B2:3D:68:46:E8:43:9C:6B:3C:F1:32:DA","sha256":"7A:0F:F6:5D:4D:CF:B3:61:47:C4:54:6B:D7:C9:B4:11:9F:99:60:9F:7A:33:B6:FE:12:75:A1:FE:A9:B9:B5:C2"}}},"request":{"raw":"GET /_assets/eebc1a25dc225384.js HTTP/1.1\r\nHost: cescaa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://cescaa.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __cf_bm=vOuBaFobJJHt2JGkBfxmwK60G8D6IyQVMT5sk6zLfGg-1791668772.3255684-1.0.1.1-TAeZ3m9ziTdsOy9Dm3_qgMAR5jdBCC6nmmHTtsbfUUqjEn8lVxafvHJfJTehEhGew0b7N7p3DDyOcvnHPJBbuySlYAJtMylSNpIXNhpFAi83EvkhJnIeNPGbMG63_vXj\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"__cf_bm","value":"vOuBaFobJJHt2JGkBfxmwK60G8D6IyQVMT5sk6zLfGg-1791668772.3255684-1.0.1.1-TAeZ3m9ziTdsOy9Dm3_qgMAR5jdBCC6nmmHTtsbfUUqjEn8lVxafvHJfJTehEhGew0b7N7p3DDyOcvnHPJBbuySlYAJtMylSNpIXNhpFAi83EvkhJnIeNPGbMG63_vXj"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 10 Oct 2026 21:46:13 GMT\r\ncontent-type: application/javascript\r\ncache-control: public, max-age=604800, immutable\r\nstrict-transport-security: max-age=31536000\r\nx-deployment-id: 0f99e4b75af14702f37d466a7129023b9b25e5159a3104342517539ef44a4f3a\r\nx-robots-tag: none\r\nvary: accept-encoding\r\nexpect-ct: max-age=86400, enforce\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\npriority: u=3,i=?0\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: a488d10c8ec623eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":31412,"size_decoded":11738,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1426)","md5":"b7f0a8d07b58b96a8ee313aa05c45a96","sha1":"a698d30be2ea638d798fa13b860133a986ff08d2","sha256":"fde384b3f4d3cab5db44e8117f583a042e93fa550152cd1361bcc1c5ca7d3b5d","sha512":"9d16b66a5739d7936330b77b70db5814a4527cc3585373475792b711f4bf781b267e5a6b581be388e618e7bad53e1a26cb4a8e43778525539b6181f75584cc5a","ssdeep":"768:D9dzfN7VJ0+JYXnJXriTdTjN8u1t0TKs1VjE6UBcPHO40Az1pf+JKRG+d2HUd4V:Zd7N7cXQsTjVj7PH+AzeJKRlx4V","tlshash":"53e21a99b1da306dd3b74988202f5206a9291d25f00d9df1f63c96fa1d70d0eb23af6d","first_seen":"2025-10-10T00:55:24.153941Z","last_seen":"2026-10-10T21:47:12.527221Z","times_seen":17,"resource_available":true,"data":null}},"time_used":141,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":141,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"cescaa.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"cescaa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cescaa.com/_assets/fonts/673cfd68bc7f23224a573c827b4dd620.woff2","fqdn":"cescaa.com","domain":"cescaa.com","tld":"com"},"ip":{"addr":"103.169.142.0","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://cescaa.com/","date":"2026-10-10T21:46:14.030Z","timestamp":1791668774030,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cescaa.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Sun, 06 Sep 2026 05:47:48 GMT","end":"Sat, 05 Dec 2026 06:46:40 GMT"},"fingerprint":{"sha1":"ED:EA:92:85:3E:13:4B:14:B2:3D:68:46:E8:43:9C:6B:3C:F1:32:DA","sha256":"7A:0F:F6:5D:4D:CF:B3:61:47:C4:54:6B:D7:C9:B4:11:9F:99:60:9F:7A:33:B6:FE:12:75:A1:FE:A9:B9:B5:C2"}}},"request":{"raw":"GET /_assets/fonts/673cfd68bc7f23224a573c827b4dd620.woff2 HTTP/1.1\r\nHost: cescaa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nReferer: https://cescaa.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __cf_bm=vOuBaFobJJHt2JGkBfxmwK60G8D6IyQVMT5sk6zLfGg-1791668772.3255684-1.0.1.1-TAeZ3m9ziTdsOy9Dm3_qgMAR5jdBCC6nmmHTtsbfUUqjEn8lVxafvHJfJTehEhGew0b7N7p3DDyOcvnHPJBbuySlYAJtMylSNpIXNhpFAi83EvkhJnIeNPGbMG63_vXj\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"__cf_bm","value":"vOuBaFobJJHt2JGkBfxmwK60G8D6IyQVMT5sk6zLfGg-1791668772.3255684-1.0.1.1-TAeZ3m9ziTdsOy9Dm3_qgMAR5jdBCC6nmmHTtsbfUUqjEn8lVxafvHJfJTehEhGew0b7N7p3DDyOcvnHPJBbuySlYAJtMylSNpIXNhpFAi83EvkhJnIeNPGbMG63_vXj"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 10 Oct 2026 21:46:14 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 53080\r\ncache-control: public, max-age=604800, immutable\r\nstrict-transport-security: max-age=31536000\r\nx-deployment-id: 0f99e4b75af14702f37d466a7129023b9b25e5159a3104342517539ef44a4f3a\r\nx-robots-tag: none\r\nvary: accept-encoding\r\nexpect-ct: max-age=86400, enforce\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\ncf-ray: a488d10db96123eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":53080,"size_decoded":53721,"mime_type":"application/octet-stream","magic":"Web Open Font Format (Version 2), CFF, length 53080, version 1.393","md5":"04433c9644d7b2a4e893f52976c4a99e","sha1":"d0a060c25a1e59ef229f5fd4b2e0c2909a56d553","sha256":"ec7e5c9fe8b9304c6ab5ec7f394447cf04ccfaf1eeecdccdf6c3ed73741f932b","sha512":"a54c455851806ec8408e7ff52c40f410747fa10260338cdb1c4881c5e9f04ef37667d0d259ce32957be16f35ffe503475a77d84ee395ba5bfa24a47be6817e67","ssdeep":"1536:S9zqpN2OeGJBHnyF3qU4SrtdGg+8MeiFGBah:lL1g6U4kWkMeiFGi","tlshash":"ae33f1ef4994c644718b8fb676e95b262076c14da5aacf0431ff98887c60704e8f6e1b","first_seen":"2025-10-11T08:21:36.727378Z","last_seen":"2026-10-10T21:47:12.473461Z","times_seen":4,"resource_available":false,"data":null}},"time_used":117,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":116,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"cescaa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"cescaa.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cescaa.com/_assets/fonts/673cfd68bc7f23224a573c827b4dd620.woff2","fqdn":"cescaa.com","domain":"cescaa.com","tld":"com"},"ip":{"addr":"103.169.142.0","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://cescaa.com/","date":"2026-10-10T21:46:14.163Z","timestamp":1791668774163,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cescaa.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Sun, 06 Sep 2026 05:47:48 GMT","end":"Sat, 05 Dec 2026 06:46:40 GMT"},"fingerprint":{"sha1":"ED:EA:92:85:3E:13:4B:14:B2:3D:68:46:E8:43:9C:6B:3C:F1:32:DA","sha256":"7A:0F:F6:5D:4D:CF:B3:61:47:C4:54:6B:D7:C9:B4:11:9F:99:60:9F:7A:33:B6:FE:12:75:A1:FE:A9:B9:B5:C2"}}},"request":{"raw":"GET /_assets/fonts/673cfd68bc7f23224a573c827b4dd620.woff2 HTTP/1.1\r\nHost: cescaa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nReferer: https://cescaa.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __cf_bm=vOuBaFobJJHt2JGkBfxmwK60G8D6IyQVMT5sk6zLfGg-1791668772.3255684-1.0.1.1-TAeZ3m9ziTdsOy9Dm3_qgMAR5jdBCC6nmmHTtsbfUUqjEn8lVxafvHJfJTehEhGew0b7N7p3DDyOcvnHPJBbuySlYAJtMylSNpIXNhpFAi83EvkhJnIeNPGbMG63_vXj\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"__cf_bm","value":"vOuBaFobJJHt2JGkBfxmwK60G8D6IyQVMT5sk6zLfGg-1791668772.3255684-1.0.1.1-TAeZ3m9ziTdsOy9Dm3_qgMAR5jdBCC6nmmHTtsbfUUqjEn8lVxafvHJfJTehEhGew0b7N7p3DDyOcvnHPJBbuySlYAJtMylSNpIXNhpFAi83EvkhJnIeNPGbMG63_vXj"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 10 Oct 2026 21:46:14 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 53080\r\ncache-control: public, max-age=604800, immutable\r\nstrict-transport-security: max-age=31536000\r\nx-deployment-id: 0f99e4b75af14702f37d466a7129023b9b25e5159a3104342517539ef44a4f3a\r\nx-robots-tag: none\r\nvary: accept-encoding\r\nexpect-ct: max-age=86400, enforce\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\ncf-ray: a488d10e8b6023eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":53080,"size_decoded":53721,"mime_type":"application/octet-stream","magic":"Web Open Font Format (Version 2), CFF, length 53080, version 1.393","md5":"04433c9644d7b2a4e893f52976c4a99e","sha1":"d0a060c25a1e59ef229f5fd4b2e0c2909a56d553","sha256":"ec7e5c9fe8b9304c6ab5ec7f394447cf04ccfaf1eeecdccdf6c3ed73741f932b","sha512":"a54c455851806ec8408e7ff52c40f410747fa10260338cdb1c4881c5e9f04ef37667d0d259ce32957be16f35ffe503475a77d84ee395ba5bfa24a47be6817e67","ssdeep":"1536:S9zqpN2OeGJBHnyF3qU4SrtdGg+8MeiFGBah:lL1g6U4kWkMeiFGi","tlshash":"ae33f1ef4994c644718b8fb676e95b262076c14da5aacf0431ff98887c60704e8f6e1b","first_seen":"2025-10-11T08:21:36.727378Z","last_seen":"2026-10-10T21:47:12.473461Z","times_seen":4,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"cescaa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"cescaa.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cescaa.com/_assets/fonts/673cfd68bc7f23224a573c827b4dd620.woff2","fqdn":"cescaa.com","domain":"cescaa.com","tld":"com"},"ip":{"addr":"103.169.142.0","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://cescaa.com/","date":"2026-10-10T21:46:14.171Z","timestamp":1791668774171,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cescaa.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Sun, 06 Sep 2026 05:47:48 GMT","end":"Sat, 05 Dec 2026 06:46:40 GMT"},"fingerprint":{"sha1":"ED:EA:92:85:3E:13:4B:14:B2:3D:68:46:E8:43:9C:6B:3C:F1:32:DA","sha256":"7A:0F:F6:5D:4D:CF:B3:61:47:C4:54:6B:D7:C9:B4:11:9F:99:60:9F:7A:33:B6:FE:12:75:A1:FE:A9:B9:B5:C2"}}},"request":{"raw":"GET /_assets/fonts/673cfd68bc7f23224a573c827b4dd620.woff2 HTTP/1.1\r\nHost: cescaa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nReferer: https://cescaa.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __cf_bm=vOuBaFobJJHt2JGkBfxmwK60G8D6IyQVMT5sk6zLfGg-1791668772.3255684-1.0.1.1-TAeZ3m9ziTdsOy9Dm3_qgMAR5jdBCC6nmmHTtsbfUUqjEn8lVxafvHJfJTehEhGew0b7N7p3DDyOcvnHPJBbuySlYAJtMylSNpIXNhpFAi83EvkhJnIeNPGbMG63_vXj\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"__cf_bm","value":"vOuBaFobJJHt2JGkBfxmwK60G8D6IyQVMT5sk6zLfGg-1791668772.3255684-1.0.1.1-TAeZ3m9ziTdsOy9Dm3_qgMAR5jdBCC6nmmHTtsbfUUqjEn8lVxafvHJfJTehEhGew0b7N7p3DDyOcvnHPJBbuySlYAJtMylSNpIXNhpFAi83EvkhJnIeNPGbMG63_vXj"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 10 Oct 2026 21:46:14 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 53080\r\ncache-control: public, max-age=604800, immutable\r\nstrict-transport-security: max-age=31536000\r\nx-deployment-id: 0f99e4b75af14702f37d466a7129023b9b25e5159a3104342517539ef44a4f3a\r\nx-robots-tag: none\r\nvary: accept-encoding\r\nexpect-ct: max-age=86400, enforce\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\ncf-ray: a488d10e9b7e23eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":53080,"size_decoded":53721,"mime_type":"application/octet-stream","magic":"Web Open Font Format (Version 2), CFF, length 53080, version 1.393","md5":"04433c9644d7b2a4e893f52976c4a99e","sha1":"d0a060c25a1e59ef229f5fd4b2e0c2909a56d553","sha256":"ec7e5c9fe8b9304c6ab5ec7f394447cf04ccfaf1eeecdccdf6c3ed73741f932b","sha512":"a54c455851806ec8408e7ff52c40f410747fa10260338cdb1c4881c5e9f04ef37667d0d259ce32957be16f35ffe503475a77d84ee395ba5bfa24a47be6817e67","ssdeep":"1536:S9zqpN2OeGJBHnyF3qU4SrtdGg+8MeiFGBah:lL1g6U4kWkMeiFGi","tlshash":"ae33f1ef4994c644718b8fb676e95b262076c14da5aacf0431ff98887c60704e8f6e1b","first_seen":"2025-10-11T08:21:36.727378Z","last_seen":"2026-10-10T21:47:12.473461Z","times_seen":4,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"cescaa.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"cescaa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cescaa.com/_assets/fonts/5c612a870b96ecbc73de2d0a0f12bbc9.woff2","fqdn":"cescaa.com","domain":"cescaa.com","tld":"com"},"ip":{"addr":"103.169.142.0","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://cescaa.com/","date":"2026-10-10T21:46:14.275Z","timestamp":1791668774275,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cescaa.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Sun, 06 Sep 2026 05:47:48 GMT","end":"Sat, 05 Dec 2026 06:46:40 GMT"},"fingerprint":{"sha1":"ED:EA:92:85:3E:13:4B:14:B2:3D:68:46:E8:43:9C:6B:3C:F1:32:DA","sha256":"7A:0F:F6:5D:4D:CF:B3:61:47:C4:54:6B:D7:C9:B4:11:9F:99:60:9F:7A:33:B6:FE:12:75:A1:FE:A9:B9:B5:C2"}}},"request":{"raw":"GET /_assets/fonts/5c612a870b96ecbc73de2d0a0f12bbc9.woff2 HTTP/1.1\r\nHost: cescaa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nReferer: https://cescaa.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __cf_bm=vOuBaFobJJHt2JGkBfxmwK60G8D6IyQVMT5sk6zLfGg-1791668772.3255684-1.0.1.1-TAeZ3m9ziTdsOy9Dm3_qgMAR5jdBCC6nmmHTtsbfUUqjEn8lVxafvHJfJTehEhGew0b7N7p3DDyOcvnHPJBbuySlYAJtMylSNpIXNhpFAi83EvkhJnIeNPGbMG63_vXj\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"__cf_bm","value":"vOuBaFobJJHt2JGkBfxmwK60G8D6IyQVMT5sk6zLfGg-1791668772.3255684-1.0.1.1-TAeZ3m9ziTdsOy9Dm3_qgMAR5jdBCC6nmmHTtsbfUUqjEn8lVxafvHJfJTehEhGew0b7N7p3DDyOcvnHPJBbuySlYAJtMylSNpIXNhpFAi83EvkhJnIeNPGbMG63_vXj"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 10 Oct 2026 21:46:14 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 54252\r\ncache-control: public, max-age=604800, immutable\r\nstrict-transport-security: max-age=31536000\r\nx-deployment-id: 0f99e4b75af14702f37d466a7129023b9b25e5159a3104342517539ef44a4f3a\r\nx-robots-tag: none\r\nvary: accept-encoding\r\nexpect-ct: max-age=86400, enforce\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\ncf-ray: a488d10f3d3423eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":54252,"size_decoded":54893,"mime_type":"application/octet-stream","magic":"Web Open Font Format (Version 2), CFF, length 54252, version 1.393","md5":"ed08ceadeedb5461059386ddb069c28c","sha1":"b27ff8b21dac87646967afd269afd172fa43de69","sha256":"7d91f25ad3011801a1561726d7e46e86f5e342e93f222233ad4d03b6bd260bbd","sha512":"3831704619973926a5f6d2022364858ff375ff5a1a4ad0f797223b7c202b9e4762ef2c15ba6e36df9ff478c8449728077d58f8c086b9bdd7377faf2ef2885f77","ssdeep":"1536:IUOqaDd66lBBFLCD95lqfi+6d+K0umxiBUn:F5yY6lU95lqfl611miUn","tlshash":"2433010cdd4ba3074bbb94b4863d1dec29400a63becfeb2e9c5039da15de58986d1a34","first_seen":"2025-10-11T08:21:36.730369Z","last_seen":"2026-10-10T21:47:12.459084Z","times_seen":6,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"cescaa.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"cescaa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cescaa.com/_assets/fonts/1101f812d8310a0639775c29afe1af81.woff2","fqdn":"cescaa.com","domain":"cescaa.com","tld":"com"},"ip":{"addr":"103.169.142.0","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://cescaa.com/","date":"2026-10-10T21:46:14.219Z","timestamp":1791668774219,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cescaa.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Sun, 06 Sep 2026 05:47:48 GMT","end":"Sat, 05 Dec 2026 06:46:40 GMT"},"fingerprint":{"sha1":"ED:EA:92:85:3E:13:4B:14:B2:3D:68:46:E8:43:9C:6B:3C:F1:32:DA","sha256":"7A:0F:F6:5D:4D:CF:B3:61:47:C4:54:6B:D7:C9:B4:11:9F:99:60:9F:7A:33:B6:FE:12:75:A1:FE:A9:B9:B5:C2"}}},"request":{"raw":"GET /_assets/fonts/1101f812d8310a0639775c29afe1af81.woff2 HTTP/1.1\r\nHost: cescaa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nReferer: https://cescaa.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __cf_bm=vOuBaFobJJHt2JGkBfxmwK60G8D6IyQVMT5sk6zLfGg-1791668772.3255684-1.0.1.1-TAeZ3m9ziTdsOy9Dm3_qgMAR5jdBCC6nmmHTtsbfUUqjEn8lVxafvHJfJTehEhGew0b7N7p3DDyOcvnHPJBbuySlYAJtMylSNpIXNhpFAi83EvkhJnIeNPGbMG63_vXj\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"__cf_bm","value":"vOuBaFobJJHt2JGkBfxmwK60G8D6IyQVMT5sk6zLfGg-1791668772.3255684-1.0.1.1-TAeZ3m9ziTdsOy9Dm3_qgMAR5jdBCC6nmmHTtsbfUUqjEn8lVxafvHJfJTehEhGew0b7N7p3DDyOcvnHPJBbuySlYAJtMylSNpIXNhpFAi83EvkhJnIeNPGbMG63_vXj"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 10 Oct 2026 21:46:14 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 51616\r\ncache-control: public, max-age=604800, immutable\r\nstrict-transport-security: max-age=31536000\r\nx-deployment-id: 0f99e4b75af14702f37d466a7129023b9b25e5159a3104342517539ef44a4f3a\r\nx-robots-tag: none\r\nvary: accept-encoding\r\nexpect-ct: max-age=86400, enforce\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\ncf-ray: a488d10edc3623eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":51616,"size_decoded":52257,"mime_type":"application/octet-stream","magic":"Web Open Font Format (Version 2), CFF, length 51616, version 1.393","md5":"1f08068188b13a30a9c52169f7f97918","sha1":"6c8eebda3283fc53fea03b644583df3dae966628","sha256":"b1cb4cd4e0d5aec7f5cbbdd0c123d559c37f2d3ae75b1e9188c4ca221ff55025","sha512":"b47bed9104a6b978007ff3f1c75df338159b1e2bb01cc1d391b92e129d6544b668cfa0818c79eca5009e387cf3ff92e70c5506f9000f1144c0187e87fa82206f","ssdeep":"1536:jufH9kxHzaip66BVH7v4V2CSFLsyJ9m+w88FMjG:Cv2J3NVbv4VwLsQz2","tlshash":"173302b082377135fdc02197b95da7e8782bcc9e0dee57434b63ad81aa5460393e4cb2","first_seen":"2025-10-08T09:36:53.279817Z","last_seen":"2026-10-10T21:47:12.498858Z","times_seen":4,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"cescaa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"cescaa.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cescaa.com/_assets/images/e53c4bd8da5e491d9ab09e7cf0daf874.png","fqdn":"cescaa.com","domain":"cescaa.com","tld":"com"},"ip":{"addr":"103.169.142.0","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cescaa.com/","date":"2026-10-10T21:46:13.664Z","timestamp":1791668773664,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cescaa.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Sun, 06 Sep 2026 05:47:48 GMT","end":"Sat, 05 Dec 2026 06:46:40 GMT"},"fingerprint":{"sha1":"ED:EA:92:85:3E:13:4B:14:B2:3D:68:46:E8:43:9C:6B:3C:F1:32:DA","sha256":"7A:0F:F6:5D:4D:CF:B3:61:47:C4:54:6B:D7:C9:B4:11:9F:99:60:9F:7A:33:B6:FE:12:75:A1:FE:A9:B9:B5:C2"}}},"request":{"raw":"GET /_assets/images/e53c4bd8da5e491d9ab09e7cf0daf874.png HTTP/1.1\r\nHost: cescaa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://cescaa.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __cf_bm=vOuBaFobJJHt2JGkBfxmwK60G8D6IyQVMT5sk6zLfGg-1791668772.3255684-1.0.1.1-TAeZ3m9ziTdsOy9Dm3_qgMAR5jdBCC6nmmHTtsbfUUqjEn8lVxafvHJfJTehEhGew0b7N7p3DDyOcvnHPJBbuySlYAJtMylSNpIXNhpFAi83EvkhJnIeNPGbMG63_vXj\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"__cf_bm","value":"vOuBaFobJJHt2JGkBfxmwK60G8D6IyQVMT5sk6zLfGg-1791668772.3255684-1.0.1.1-TAeZ3m9ziTdsOy9Dm3_qgMAR5jdBCC6nmmHTtsbfUUqjEn8lVxafvHJfJTehEhGew0b7N7p3DDyOcvnHPJBbuySlYAJtMylSNpIXNhpFAi83EvkhJnIeNPGbMG63_vXj"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 10 Oct 2026 21:46:13 GMT\r\ncontent-type: image/png\r\ncontent-length: 5971\r\ncache-control: public, max-age=604800, immutable\r\nstrict-transport-security: max-age=31536000\r\nx-deployment-id: 0f99e4b75af14702f37d466a7129023b9b25e5159a3104342517539ef44a4f3a\r\nx-robots-tag: none\r\nvary: accept-encoding\r\nexpect-ct: max-age=86400, enforce\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\npriority: u=6,i=?0\r\nserver: cloudflare\r\ncf-ray: a488d10b6bd823eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5971,"size_decoded":6596,"mime_type":"image/png","magic":"PNG image data, 192 x 192, 8-bit colormap, non-interlaced","md5":"001d04d8ffff08f82d461fe590aa5616","sha1":"9a777f2dd6d963c8b385e118e7127c1403a6dfd4","sha256":"dc823dfb52c77818de9bd6eedcebd92839aee78ca4580a108b1ecda2f7bf64cf","sha512":"b3ce5cdf0ecd94d0e689c24c4f16d9148e7c04a8d78faa622e4b663c29a661a72db3038d65057ea438a603cfc7a109ca746d76a0718e8f3203065d7c541e4234","ssdeep":"96:9MQp/qSMCAHsS5AxLqiX6IbvYeinhgvIy0tTVAhaSIfcdBZ5r+G:Jp/qlHH4LlKuALMR0tTVAh+fcdR+G","tlshash":"d2c18e5b382eb1c7dad467fe03aea0aac5375d4b7608e9913d4276bc5361c543208a0b","first_seen":"2024-12-09T21:44:15.849099Z","last_seen":"2026-10-10T21:47:12.529423Z","times_seen":1105,"resource_available":false,"data":null}},"time_used":121,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":121,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"cescaa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"cescaa.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cescaa.com/_assets/06102bb3a47c3258.js","fqdn":"cescaa.com","domain":"cescaa.com","tld":"com"},"ip":{"addr":"103.169.142.0","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cescaa.com/","date":"2026-10-10T21:46:13.822Z","timestamp":1791668773822,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cescaa.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Sun, 06 Sep 2026 05:47:48 GMT","end":"Sat, 05 Dec 2026 06:46:40 GMT"},"fingerprint":{"sha1":"ED:EA:92:85:3E:13:4B:14:B2:3D:68:46:E8:43:9C:6B:3C:F1:32:DA","sha256":"7A:0F:F6:5D:4D:CF:B3:61:47:C4:54:6B:D7:C9:B4:11:9F:99:60:9F:7A:33:B6:FE:12:75:A1:FE:A9:B9:B5:C2"}}},"request":{"raw":"GET /_assets/06102bb3a47c3258.js HTTP/1.1\r\nHost: cescaa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://cescaa.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __cf_bm=vOuBaFobJJHt2JGkBfxmwK60G8D6IyQVMT5sk6zLfGg-1791668772.3255684-1.0.1.1-TAeZ3m9ziTdsOy9Dm3_qgMAR5jdBCC6nmmHTtsbfUUqjEn8lVxafvHJfJTehEhGew0b7N7p3DDyOcvnHPJBbuySlYAJtMylSNpIXNhpFAi83EvkhJnIeNPGbMG63_vXj\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"__cf_bm","value":"vOuBaFobJJHt2JGkBfxmwK60G8D6IyQVMT5sk6zLfGg-1791668772.3255684-1.0.1.1-TAeZ3m9ziTdsOy9Dm3_qgMAR5jdBCC6nmmHTtsbfUUqjEn8lVxafvHJfJTehEhGew0b7N7p3DDyOcvnHPJBbuySlYAJtMylSNpIXNhpFAi83EvkhJnIeNPGbMG63_vXj"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 10 Oct 2026 21:46:13 GMT\r\ncontent-type: application/javascript\r\ncache-control: public, max-age=604800, immutable\r\nstrict-transport-security: max-age=31536000\r\nx-deployment-id: 0f99e4b75af14702f37d466a7129023b9b25e5159a3104342517539ef44a4f3a\r\nx-robots-tag: none\r\nvary: accept-encoding\r\nexpect-ct: max-age=86400, enforce\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\npriority: u=3,i=?0\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: a488d10c6e6c23eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":18023,"size_decoded":7077,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (3027)","md5":"da67116942de55009782452e135953d7","sha1":"8146938a423d5273fc3b9e7f3a83dbc86e7a7d2c","sha256":"42795e08efddba17702a907046cfcc8d3c7738f52280edc363b189f155757c40","sha512":"cccf34ce08584fe16b56309f7292d0def4ab143df20a49de32649b70556a712ced6cbffd8b2051392ef939c51eb80d8b532ee955781f38ab5378f237870e4224","ssdeep":"384:pBQY0lvoxZClJRK29x/e7E7InCf7EDcjpfLjOV38CcfVav:pB30lvoxclJg29xGLnCfbU39cfI","tlshash":"1582d782269e7c6755a1a4d0d02f7230914af151b101ecfbba6ceecde7fb5089264b72","first_seen":"2025-10-10T00:55:24.125729Z","last_seen":"2026-10-10T21:47:12.530545Z","times_seen":17,"resource_available":true,"data":null}},"time_used":118,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":116,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"cescaa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"cescaa.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cescaa.com/_assets/fonts/673cfd68bc7f23224a573c827b4dd620.woff2","fqdn":"cescaa.com","domain":"cescaa.com","tld":"com"},"ip":{"addr":"103.169.142.0","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://cescaa.com/","date":"2026-10-10T21:46:14.185Z","timestamp":1791668774185,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cescaa.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Sun, 06 Sep 2026 05:47:48 GMT","end":"Sat, 05 Dec 2026 06:46:40 GMT"},"fingerprint":{"sha1":"ED:EA:92:85:3E:13:4B:14:B2:3D:68:46:E8:43:9C:6B:3C:F1:32:DA","sha256":"7A:0F:F6:5D:4D:CF:B3:61:47:C4:54:6B:D7:C9:B4:11:9F:99:60:9F:7A:33:B6:FE:12:75:A1:FE:A9:B9:B5:C2"}}},"request":{"raw":"GET /_assets/fonts/673cfd68bc7f23224a573c827b4dd620.woff2 HTTP/1.1\r\nHost: cescaa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nReferer: https://cescaa.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __cf_bm=vOuBaFobJJHt2JGkBfxmwK60G8D6IyQVMT5sk6zLfGg-1791668772.3255684-1.0.1.1-TAeZ3m9ziTdsOy9Dm3_qgMAR5jdBCC6nmmHTtsbfUUqjEn8lVxafvHJfJTehEhGew0b7N7p3DDyOcvnHPJBbuySlYAJtMylSNpIXNhpFAi83EvkhJnIeNPGbMG63_vXj\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"__cf_bm","value":"vOuBaFobJJHt2JGkBfxmwK60G8D6IyQVMT5sk6zLfGg-1791668772.3255684-1.0.1.1-TAeZ3m9ziTdsOy9Dm3_qgMAR5jdBCC6nmmHTtsbfUUqjEn8lVxafvHJfJTehEhGew0b7N7p3DDyOcvnHPJBbuySlYAJtMylSNpIXNhpFAi83EvkhJnIeNPGbMG63_vXj"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 10 Oct 2026 21:46:14 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 53080\r\ncache-control: public, max-age=604800, immutable\r\nstrict-transport-security: max-age=31536000\r\nx-deployment-id: 0f99e4b75af14702f37d466a7129023b9b25e5159a3104342517539ef44a4f3a\r\nx-robots-tag: none\r\nvary: accept-encoding\r\nexpect-ct: max-age=86400, enforce\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\ncf-ray: a488d10eabbf23eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":53080,"size_decoded":53721,"mime_type":"application/octet-stream","magic":"Web Open Font Format (Version 2), CFF, length 53080, version 1.393","md5":"04433c9644d7b2a4e893f52976c4a99e","sha1":"d0a060c25a1e59ef229f5fd4b2e0c2909a56d553","sha256":"ec7e5c9fe8b9304c6ab5ec7f394447cf04ccfaf1eeecdccdf6c3ed73741f932b","sha512":"a54c455851806ec8408e7ff52c40f410747fa10260338cdb1c4881c5e9f04ef37667d0d259ce32957be16f35ffe503475a77d84ee395ba5bfa24a47be6817e67","ssdeep":"1536:S9zqpN2OeGJBHnyF3qU4SrtdGg+8MeiFGBah:lL1g6U4kWkMeiFGi","tlshash":"ae33f1ef4994c644718b8fb676e95b262076c14da5aacf0431ff98887c60704e8f6e1b","first_seen":"2025-10-11T08:21:36.727378Z","last_seen":"2026-10-10T21:47:12.473461Z","times_seen":4,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"cescaa.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"cescaa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cescaa.com/_assets/fonts/1101f812d8310a0639775c29afe1af81.woff2","fqdn":"cescaa.com","domain":"cescaa.com","tld":"com"},"ip":{"addr":"103.169.142.0","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://cescaa.com/","date":"2026-10-10T21:46:14.243Z","timestamp":1791668774243,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cescaa.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Sun, 06 Sep 2026 05:47:48 GMT","end":"Sat, 05 Dec 2026 06:46:40 GMT"},"fingerprint":{"sha1":"ED:EA:92:85:3E:13:4B:14:B2:3D:68:46:E8:43:9C:6B:3C:F1:32:DA","sha256":"7A:0F:F6:5D:4D:CF:B3:61:47:C4:54:6B:D7:C9:B4:11:9F:99:60:9F:7A:33:B6:FE:12:75:A1:FE:A9:B9:B5:C2"}}},"request":{"raw":"GET /_assets/fonts/1101f812d8310a0639775c29afe1af81.woff2 HTTP/1.1\r\nHost: cescaa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nReferer: https://cescaa.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __cf_bm=vOuBaFobJJHt2JGkBfxmwK60G8D6IyQVMT5sk6zLfGg-1791668772.3255684-1.0.1.1-TAeZ3m9ziTdsOy9Dm3_qgMAR5jdBCC6nmmHTtsbfUUqjEn8lVxafvHJfJTehEhGew0b7N7p3DDyOcvnHPJBbuySlYAJtMylSNpIXNhpFAi83EvkhJnIeNPGbMG63_vXj\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"__cf_bm","value":"vOuBaFobJJHt2JGkBfxmwK60G8D6IyQVMT5sk6zLfGg-1791668772.3255684-1.0.1.1-TAeZ3m9ziTdsOy9Dm3_qgMAR5jdBCC6nmmHTtsbfUUqjEn8lVxafvHJfJTehEhGew0b7N7p3DDyOcvnHPJBbuySlYAJtMylSNpIXNhpFAi83EvkhJnIeNPGbMG63_vXj"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 10 Oct 2026 21:46:14 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 51616\r\ncache-control: public, max-age=604800, immutable\r\nstrict-transport-security: max-age=31536000\r\nx-deployment-id: 0f99e4b75af14702f37d466a7129023b9b25e5159a3104342517539ef44a4f3a\r\nx-robots-tag: none\r\nvary: accept-encoding\r\nexpect-ct: max-age=86400, enforce\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\ncf-ray: a488d10f0c9423eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":51616,"size_decoded":52257,"mime_type":"application/octet-stream","magic":"Web Open Font Format (Version 2), CFF, length 51616, version 1.393","md5":"1f08068188b13a30a9c52169f7f97918","sha1":"6c8eebda3283fc53fea03b644583df3dae966628","sha256":"b1cb4cd4e0d5aec7f5cbbdd0c123d559c37f2d3ae75b1e9188c4ca221ff55025","sha512":"b47bed9104a6b978007ff3f1c75df338159b1e2bb01cc1d391b92e129d6544b668cfa0818c79eca5009e387cf3ff92e70c5506f9000f1144c0187e87fa82206f","ssdeep":"1536:jufH9kxHzaip66BVH7v4V2CSFLsyJ9m+w88FMjG:Cv2J3NVbv4VwLsQz2","tlshash":"173302b082377135fdc02197b95da7e8782bcc9e0dee57434b63ad81aa5460393e4cb2","first_seen":"2025-10-08T09:36:53.279817Z","last_seen":"2026-10-10T21:47:12.498858Z","times_seen":4,"resource_available":false,"data":null}},"time_used":46,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":44,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"cescaa.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"cescaa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cescaa.com/_assets/fonts/5c411d01677832c1b6f80e11045c3e17.woff2","fqdn":"cescaa.com","domain":"cescaa.com","tld":"com"},"ip":{"addr":"103.169.142.0","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://cescaa.com/","date":"2026-10-10T21:46:14.255Z","timestamp":1791668774255,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cescaa.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Sun, 06 Sep 2026 05:47:48 GMT","end":"Sat, 05 Dec 2026 06:46:40 GMT"},"fingerprint":{"sha1":"ED:EA:92:85:3E:13:4B:14:B2:3D:68:46:E8:43:9C:6B:3C:F1:32:DA","sha256":"7A:0F:F6:5D:4D:CF:B3:61:47:C4:54:6B:D7:C9:B4:11:9F:99:60:9F:7A:33:B6:FE:12:75:A1:FE:A9:B9:B5:C2"}}},"request":{"raw":"GET /_assets/fonts/5c411d01677832c1b6f80e11045c3e17.woff2 HTTP/1.1\r\nHost: cescaa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nReferer: https://cescaa.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __cf_bm=vOuBaFobJJHt2JGkBfxmwK60G8D6IyQVMT5sk6zLfGg-1791668772.3255684-1.0.1.1-TAeZ3m9ziTdsOy9Dm3_qgMAR5jdBCC6nmmHTtsbfUUqjEn8lVxafvHJfJTehEhGew0b7N7p3DDyOcvnHPJBbuySlYAJtMylSNpIXNhpFAi83EvkhJnIeNPGbMG63_vXj\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"__cf_bm","value":"vOuBaFobJJHt2JGkBfxmwK60G8D6IyQVMT5sk6zLfGg-1791668772.3255684-1.0.1.1-TAeZ3m9ziTdsOy9Dm3_qgMAR5jdBCC6nmmHTtsbfUUqjEn8lVxafvHJfJTehEhGew0b7N7p3DDyOcvnHPJBbuySlYAJtMylSNpIXNhpFAi83EvkhJnIeNPGbMG63_vXj"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 10 Oct 2026 21:46:14 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 53200\r\ncache-control: public, max-age=604800, immutable\r\nstrict-transport-security: max-age=31536000\r\nx-deployment-id: 0f99e4b75af14702f37d466a7129023b9b25e5159a3104342517539ef44a4f3a\r\nx-robots-tag: none\r\nvary: accept-encoding\r\nexpect-ct: max-age=86400, enforce\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\ncf-ray: a488d10f1cc623eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":53200,"size_decoded":53841,"mime_type":"application/octet-stream","magic":"Web Open Font Format (Version 2), CFF, length 53200, version 1.393","md5":"1dd71e9221adf3dce1f6d63d98234b40","sha1":"94ffd37ad6799e3f6a79ac43ef675bf13460f5d7","sha256":"51de067a32600ef07c4f813625211e4596e03ea2ba5b9a86886dbc946b3ac091","sha512":"5e7742e8e83d5d7cc71550abc18959d0f6c1a9e4f09a314c845c19eb18a06ba6006a04e7babb1396f5f4f7aa8df3d5f13df824d2bd9fd375702e54caaeb50c43","ssdeep":"1536:/25ut3oUaeM/Q+kDDSLQpW+kjCDDqU061Fp:/iut3LM/Q+kDDSLgW+9DuU06x","tlshash":"1a3302c8f77dc1dadf8d044fe30e4ac5582c28f91d4c2da6558db290ae18fe96b4469c","first_seen":"2025-10-11T08:21:36.724182Z","last_seen":"2026-10-10T21:47:12.500644Z","times_seen":4,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"cescaa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"cescaa.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cescaa.com/_assets/fonts/5c411d01677832c1b6f80e11045c3e17.woff2","fqdn":"cescaa.com","domain":"cescaa.com","tld":"com"},"ip":{"addr":"103.169.142.0","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://cescaa.com/","date":"2026-10-10T21:46:14.256Z","timestamp":1791668774256,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cescaa.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Sun, 06 Sep 2026 05:47:48 GMT","end":"Sat, 05 Dec 2026 06:46:40 GMT"},"fingerprint":{"sha1":"ED:EA:92:85:3E:13:4B:14:B2:3D:68:46:E8:43:9C:6B:3C:F1:32:DA","sha256":"7A:0F:F6:5D:4D:CF:B3:61:47:C4:54:6B:D7:C9:B4:11:9F:99:60:9F:7A:33:B6:FE:12:75:A1:FE:A9:B9:B5:C2"}}},"request":{"raw":"GET /_assets/fonts/5c411d01677832c1b6f80e11045c3e17.woff2 HTTP/1.1\r\nHost: cescaa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nReferer: https://cescaa.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __cf_bm=vOuBaFobJJHt2JGkBfxmwK60G8D6IyQVMT5sk6zLfGg-1791668772.3255684-1.0.1.1-TAeZ3m9ziTdsOy9Dm3_qgMAR5jdBCC6nmmHTtsbfUUqjEn8lVxafvHJfJTehEhGew0b7N7p3DDyOcvnHPJBbuySlYAJtMylSNpIXNhpFAi83EvkhJnIeNPGbMG63_vXj\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"__cf_bm","value":"vOuBaFobJJHt2JGkBfxmwK60G8D6IyQVMT5sk6zLfGg-1791668772.3255684-1.0.1.1-TAeZ3m9ziTdsOy9Dm3_qgMAR5jdBCC6nmmHTtsbfUUqjEn8lVxafvHJfJTehEhGew0b7N7p3DDyOcvnHPJBbuySlYAJtMylSNpIXNhpFAi83EvkhJnIeNPGbMG63_vXj"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 10 Oct 2026 21:46:14 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 53200\r\ncache-control: public, max-age=604800, immutable\r\nstrict-transport-security: max-age=31536000\r\nx-deployment-id: 0f99e4b75af14702f37d466a7129023b9b25e5159a3104342517539ef44a4f3a\r\nx-robots-tag: none\r\nvary: accept-encoding\r\nexpect-ct: max-age=86400, enforce\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\ncf-ray: a488d10f1ccc23eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":53200,"size_decoded":53841,"mime_type":"application/octet-stream","magic":"Web Open Font Format (Version 2), CFF, length 53200, version 1.393","md5":"1dd71e9221adf3dce1f6d63d98234b40","sha1":"94ffd37ad6799e3f6a79ac43ef675bf13460f5d7","sha256":"51de067a32600ef07c4f813625211e4596e03ea2ba5b9a86886dbc946b3ac091","sha512":"5e7742e8e83d5d7cc71550abc18959d0f6c1a9e4f09a314c845c19eb18a06ba6006a04e7babb1396f5f4f7aa8df3d5f13df824d2bd9fd375702e54caaeb50c43","ssdeep":"1536:/25ut3oUaeM/Q+kDDSLQpW+kjCDDqU061Fp:/iut3LM/Q+kDDSLgW+9DuU06x","tlshash":"1a3302c8f77dc1dadf8d044fe30e4ac5582c28f91d4c2da6558db290ae18fe96b4469c","first_seen":"2025-10-11T08:21:36.724182Z","last_seen":"2026-10-10T21:47:12.500644Z","times_seen":4,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"cescaa.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"cescaa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cescaa.com/_assets/1e5dd1c96ce202e3.js","fqdn":"cescaa.com","domain":"cescaa.com","tld":"com"},"ip":{"addr":"103.169.142.0","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cescaa.com/","date":"2026-10-10T21:46:13.833Z","timestamp":1791668773833,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cescaa.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Sun, 06 Sep 2026 05:47:48 GMT","end":"Sat, 05 Dec 2026 06:46:40 GMT"},"fingerprint":{"sha1":"ED:EA:92:85:3E:13:4B:14:B2:3D:68:46:E8:43:9C:6B:3C:F1:32:DA","sha256":"7A:0F:F6:5D:4D:CF:B3:61:47:C4:54:6B:D7:C9:B4:11:9F:99:60:9F:7A:33:B6:FE:12:75:A1:FE:A9:B9:B5:C2"}}},"request":{"raw":"GET /_assets/1e5dd1c96ce202e3.js HTTP/1.1\r\nHost: cescaa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://cescaa.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __cf_bm=vOuBaFobJJHt2JGkBfxmwK60G8D6IyQVMT5sk6zLfGg-1791668772.3255684-1.0.1.1-TAeZ3m9ziTdsOy9Dm3_qgMAR5jdBCC6nmmHTtsbfUUqjEn8lVxafvHJfJTehEhGew0b7N7p3DDyOcvnHPJBbuySlYAJtMylSNpIXNhpFAi83EvkhJnIeNPGbMG63_vXj\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"__cf_bm","value":"vOuBaFobJJHt2JGkBfxmwK60G8D6IyQVMT5sk6zLfGg-1791668772.3255684-1.0.1.1-TAeZ3m9ziTdsOy9Dm3_qgMAR5jdBCC6nmmHTtsbfUUqjEn8lVxafvHJfJTehEhGew0b7N7p3DDyOcvnHPJBbuySlYAJtMylSNpIXNhpFAi83EvkhJnIeNPGbMG63_vXj"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 10 Oct 2026 21:46:13 GMT\r\ncontent-type: application/javascript\r\ncache-control: public, max-age=604800, immutable\r\nstrict-transport-security: max-age=31536000\r\nx-deployment-id: 0f99e4b75af14702f37d466a7129023b9b25e5159a3104342517539ef44a4f3a\r\nx-robots-tag: none\r\nvary: accept-encoding\r\nexpect-ct: max-age=86400, enforce\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\npriority: u=3,i=?0\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: a488d10c7ea323eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":412,"size_decoded":842,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"30e4b1d9a519c7e9d625b163417454b5","sha1":"55a6eca334055c8820c08ef26f1f8f2e2c1fbf84","sha256":"ff42712146a711f657081b0f975f6ba412b7c7f42a3b2222861652f61561cfff","sha512":"5463642457bf74fab5666a0fce295922be08231bee21edf1e68af3343c1b27a079ac65a7c7337af816f2adf7ee512d3b4a951624899d28765a6cacfe6757a43b","ssdeep":"","tlshash":"8fe0e5947d66bd07309f20e4814e2a24032be7727c59aec5b0719c5508f398d8323e64","first_seen":"2025-07-01T23:02:20.446204Z","last_seen":"2026-10-10T21:47:12.532378Z","times_seen":519,"resource_available":true,"data":null}},"time_used":121,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":121,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"cescaa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"cescaa.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cescaa.com/_assets/fonts/673cfd68bc7f23224a573c827b4dd620.woff2","fqdn":"cescaa.com","domain":"cescaa.com","tld":"com"},"ip":{"addr":"103.169.142.0","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://cescaa.com/","date":"2026-10-10T21:46:14.161Z","timestamp":1791668774161,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cescaa.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Sun, 06 Sep 2026 05:47:48 GMT","end":"Sat, 05 Dec 2026 06:46:40 GMT"},"fingerprint":{"sha1":"ED:EA:92:85:3E:13:4B:14:B2:3D:68:46:E8:43:9C:6B:3C:F1:32:DA","sha256":"7A:0F:F6:5D:4D:CF:B3:61:47:C4:54:6B:D7:C9:B4:11:9F:99:60:9F:7A:33:B6:FE:12:75:A1:FE:A9:B9:B5:C2"}}},"request":{"raw":"GET /_assets/fonts/673cfd68bc7f23224a573c827b4dd620.woff2 HTTP/1.1\r\nHost: cescaa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nReferer: https://cescaa.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __cf_bm=vOuBaFobJJHt2JGkBfxmwK60G8D6IyQVMT5sk6zLfGg-1791668772.3255684-1.0.1.1-TAeZ3m9ziTdsOy9Dm3_qgMAR5jdBCC6nmmHTtsbfUUqjEn8lVxafvHJfJTehEhGew0b7N7p3DDyOcvnHPJBbuySlYAJtMylSNpIXNhpFAi83EvkhJnIeNPGbMG63_vXj\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"__cf_bm","value":"vOuBaFobJJHt2JGkBfxmwK60G8D6IyQVMT5sk6zLfGg-1791668772.3255684-1.0.1.1-TAeZ3m9ziTdsOy9Dm3_qgMAR5jdBCC6nmmHTtsbfUUqjEn8lVxafvHJfJTehEhGew0b7N7p3DDyOcvnHPJBbuySlYAJtMylSNpIXNhpFAi83EvkhJnIeNPGbMG63_vXj"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 10 Oct 2026 21:46:14 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 53080\r\ncache-control: public, max-age=604800, immutable\r\nstrict-transport-security: max-age=31536000\r\nx-deployment-id: 0f99e4b75af14702f37d466a7129023b9b25e5159a3104342517539ef44a4f3a\r\nx-robots-tag: none\r\nvary: accept-encoding\r\nexpect-ct: max-age=86400, enforce\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\ncf-ray: a488d10e8b5623eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":53080,"size_decoded":53721,"mime_type":"application/octet-stream","magic":"Web Open Font Format (Version 2), CFF, length 53080, version 1.393","md5":"04433c9644d7b2a4e893f52976c4a99e","sha1":"d0a060c25a1e59ef229f5fd4b2e0c2909a56d553","sha256":"ec7e5c9fe8b9304c6ab5ec7f394447cf04ccfaf1eeecdccdf6c3ed73741f932b","sha512":"a54c455851806ec8408e7ff52c40f410747fa10260338cdb1c4881c5e9f04ef37667d0d259ce32957be16f35ffe503475a77d84ee395ba5bfa24a47be6817e67","ssdeep":"1536:S9zqpN2OeGJBHnyF3qU4SrtdGg+8MeiFGBah:lL1g6U4kWkMeiFGi","tlshash":"ae33f1ef4994c644718b8fb676e95b262076c14da5aacf0431ff98887c60704e8f6e1b","first_seen":"2025-10-11T08:21:36.727378Z","last_seen":"2026-10-10T21:47:12.473461Z","times_seen":4,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"cescaa.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"cescaa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cescaa.com/_assets/fonts/673cfd68bc7f23224a573c827b4dd620.woff2","fqdn":"cescaa.com","domain":"cescaa.com","tld":"com"},"ip":{"addr":"103.169.142.0","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://cescaa.com/","date":"2026-10-10T21:46:14.183Z","timestamp":1791668774183,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cescaa.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Sun, 06 Sep 2026 05:47:48 GMT","end":"Sat, 05 Dec 2026 06:46:40 GMT"},"fingerprint":{"sha1":"ED:EA:92:85:3E:13:4B:14:B2:3D:68:46:E8:43:9C:6B:3C:F1:32:DA","sha256":"7A:0F:F6:5D:4D:CF:B3:61:47:C4:54:6B:D7:C9:B4:11:9F:99:60:9F:7A:33:B6:FE:12:75:A1:FE:A9:B9:B5:C2"}}},"request":{"raw":"GET /_assets/fonts/673cfd68bc7f23224a573c827b4dd620.woff2 HTTP/1.1\r\nHost: cescaa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nReferer: https://cescaa.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __cf_bm=vOuBaFobJJHt2JGkBfxmwK60G8D6IyQVMT5sk6zLfGg-1791668772.3255684-1.0.1.1-TAeZ3m9ziTdsOy9Dm3_qgMAR5jdBCC6nmmHTtsbfUUqjEn8lVxafvHJfJTehEhGew0b7N7p3DDyOcvnHPJBbuySlYAJtMylSNpIXNhpFAi83EvkhJnIeNPGbMG63_vXj\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"__cf_bm","value":"vOuBaFobJJHt2JGkBfxmwK60G8D6IyQVMT5sk6zLfGg-1791668772.3255684-1.0.1.1-TAeZ3m9ziTdsOy9Dm3_qgMAR5jdBCC6nmmHTtsbfUUqjEn8lVxafvHJfJTehEhGew0b7N7p3DDyOcvnHPJBbuySlYAJtMylSNpIXNhpFAi83EvkhJnIeNPGbMG63_vXj"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 10 Oct 2026 21:46:14 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 53080\r\ncache-control: public, max-age=604800, immutable\r\nstrict-transport-security: max-age=31536000\r\nx-deployment-id: 0f99e4b75af14702f37d466a7129023b9b25e5159a3104342517539ef44a4f3a\r\nx-robots-tag: none\r\nvary: accept-encoding\r\nexpect-ct: max-age=86400, enforce\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\ncf-ray: a488d10eabb223eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":53080,"size_decoded":53721,"mime_type":"application/octet-stream","magic":"Web Open Font Format (Version 2), CFF, length 53080, version 1.393","md5":"04433c9644d7b2a4e893f52976c4a99e","sha1":"d0a060c25a1e59ef229f5fd4b2e0c2909a56d553","sha256":"ec7e5c9fe8b9304c6ab5ec7f394447cf04ccfaf1eeecdccdf6c3ed73741f932b","sha512":"a54c455851806ec8408e7ff52c40f410747fa10260338cdb1c4881c5e9f04ef37667d0d259ce32957be16f35ffe503475a77d84ee395ba5bfa24a47be6817e67","ssdeep":"1536:S9zqpN2OeGJBHnyF3qU4SrtdGg+8MeiFGBah:lL1g6U4kWkMeiFGi","tlshash":"ae33f1ef4994c644718b8fb676e95b262076c14da5aacf0431ff98887c60704e8f6e1b","first_seen":"2025-10-11T08:21:36.727378Z","last_seen":"2026-10-10T21:47:12.473461Z","times_seen":4,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"cescaa.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"cescaa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cescaa.com/_assets/fonts/5c411d01677832c1b6f80e11045c3e17.woff2","fqdn":"cescaa.com","domain":"cescaa.com","tld":"com"},"ip":{"addr":"103.169.142.0","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://cescaa.com/","date":"2026-10-10T21:46:14.253Z","timestamp":1791668774253,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cescaa.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Sun, 06 Sep 2026 05:47:48 GMT","end":"Sat, 05 Dec 2026 06:46:40 GMT"},"fingerprint":{"sha1":"ED:EA:92:85:3E:13:4B:14:B2:3D:68:46:E8:43:9C:6B:3C:F1:32:DA","sha256":"7A:0F:F6:5D:4D:CF:B3:61:47:C4:54:6B:D7:C9:B4:11:9F:99:60:9F:7A:33:B6:FE:12:75:A1:FE:A9:B9:B5:C2"}}},"request":{"raw":"GET /_assets/fonts/5c411d01677832c1b6f80e11045c3e17.woff2 HTTP/1.1\r\nHost: cescaa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nReferer: https://cescaa.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __cf_bm=vOuBaFobJJHt2JGkBfxmwK60G8D6IyQVMT5sk6zLfGg-1791668772.3255684-1.0.1.1-TAeZ3m9ziTdsOy9Dm3_qgMAR5jdBCC6nmmHTtsbfUUqjEn8lVxafvHJfJTehEhGew0b7N7p3DDyOcvnHPJBbuySlYAJtMylSNpIXNhpFAi83EvkhJnIeNPGbMG63_vXj\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"__cf_bm","value":"vOuBaFobJJHt2JGkBfxmwK60G8D6IyQVMT5sk6zLfGg-1791668772.3255684-1.0.1.1-TAeZ3m9ziTdsOy9Dm3_qgMAR5jdBCC6nmmHTtsbfUUqjEn8lVxafvHJfJTehEhGew0b7N7p3DDyOcvnHPJBbuySlYAJtMylSNpIXNhpFAi83EvkhJnIeNPGbMG63_vXj"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 10 Oct 2026 21:46:14 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 53200\r\ncache-control: public, max-age=604800, immutable\r\nstrict-transport-security: max-age=31536000\r\nx-deployment-id: 0f99e4b75af14702f37d466a7129023b9b25e5159a3104342517539ef44a4f3a\r\nx-robots-tag: none\r\nvary: accept-encoding\r\nexpect-ct: max-age=86400, enforce\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\ncf-ray: a488d10f1cc023eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":53200,"size_decoded":53841,"mime_type":"application/octet-stream","magic":"Web Open Font Format (Version 2), CFF, length 53200, version 1.393","md5":"1dd71e9221adf3dce1f6d63d98234b40","sha1":"94ffd37ad6799e3f6a79ac43ef675bf13460f5d7","sha256":"51de067a32600ef07c4f813625211e4596e03ea2ba5b9a86886dbc946b3ac091","sha512":"5e7742e8e83d5d7cc71550abc18959d0f6c1a9e4f09a314c845c19eb18a06ba6006a04e7babb1396f5f4f7aa8df3d5f13df824d2bd9fd375702e54caaeb50c43","ssdeep":"1536:/25ut3oUaeM/Q+kDDSLQpW+kjCDDqU061Fp:/iut3LM/Q+kDDSLgW+9DuU06x","tlshash":"1a3302c8f77dc1dadf8d044fe30e4ac5582c28f91d4c2da6558db290ae18fe96b4469c","first_seen":"2025-10-11T08:21:36.724182Z","last_seen":"2026-10-10T21:47:12.500644Z","times_seen":4,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"cescaa.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"cescaa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cescaa.com/_assets/fonts/5c411d01677832c1b6f80e11045c3e17.woff2","fqdn":"cescaa.com","domain":"cescaa.com","tld":"com"},"ip":{"addr":"103.169.142.0","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://cescaa.com/","date":"2026-10-10T21:46:14.260Z","timestamp":1791668774260,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cescaa.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Sun, 06 Sep 2026 05:47:48 GMT","end":"Sat, 05 Dec 2026 06:46:40 GMT"},"fingerprint":{"sha1":"ED:EA:92:85:3E:13:4B:14:B2:3D:68:46:E8:43:9C:6B:3C:F1:32:DA","sha256":"7A:0F:F6:5D:4D:CF:B3:61:47:C4:54:6B:D7:C9:B4:11:9F:99:60:9F:7A:33:B6:FE:12:75:A1:FE:A9:B9:B5:C2"}}},"request":{"raw":"GET /_assets/fonts/5c411d01677832c1b6f80e11045c3e17.woff2 HTTP/1.1\r\nHost: cescaa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nReferer: https://cescaa.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __cf_bm=vOuBaFobJJHt2JGkBfxmwK60G8D6IyQVMT5sk6zLfGg-1791668772.3255684-1.0.1.1-TAeZ3m9ziTdsOy9Dm3_qgMAR5jdBCC6nmmHTtsbfUUqjEn8lVxafvHJfJTehEhGew0b7N7p3DDyOcvnHPJBbuySlYAJtMylSNpIXNhpFAi83EvkhJnIeNPGbMG63_vXj\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"__cf_bm","value":"vOuBaFobJJHt2JGkBfxmwK60G8D6IyQVMT5sk6zLfGg-1791668772.3255684-1.0.1.1-TAeZ3m9ziTdsOy9Dm3_qgMAR5jdBCC6nmmHTtsbfUUqjEn8lVxafvHJfJTehEhGew0b7N7p3DDyOcvnHPJBbuySlYAJtMylSNpIXNhpFAi83EvkhJnIeNPGbMG63_vXj"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 10 Oct 2026 21:46:14 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 53200\r\ncache-control: public, max-age=604800, immutable\r\nstrict-transport-security: max-age=31536000\r\nx-deployment-id: 0f99e4b75af14702f37d466a7129023b9b25e5159a3104342517539ef44a4f3a\r\nx-robots-tag: none\r\nvary: accept-encoding\r\nexpect-ct: max-age=86400, enforce\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\ncf-ray: a488d10f2cde23eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":53200,"size_decoded":53841,"mime_type":"application/octet-stream","magic":"Web Open Font Format (Version 2), CFF, length 53200, version 1.393","md5":"1dd71e9221adf3dce1f6d63d98234b40","sha1":"94ffd37ad6799e3f6a79ac43ef675bf13460f5d7","sha256":"51de067a32600ef07c4f813625211e4596e03ea2ba5b9a86886dbc946b3ac091","sha512":"5e7742e8e83d5d7cc71550abc18959d0f6c1a9e4f09a314c845c19eb18a06ba6006a04e7babb1396f5f4f7aa8df3d5f13df824d2bd9fd375702e54caaeb50c43","ssdeep":"1536:/25ut3oUaeM/Q+kDDSLQpW+kjCDDqU061Fp:/iut3LM/Q+kDDSLgW+9DuU06x","tlshash":"1a3302c8f77dc1dadf8d044fe30e4ac5582c28f91d4c2da6558db290ae18fe96b4469c","first_seen":"2025-10-11T08:21:36.724182Z","last_seen":"2026-10-10T21:47:12.500644Z","times_seen":4,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"cescaa.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"cescaa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cescaa.com/_assets/fonts/673cfd68bc7f23224a573c827b4dd620.woff2","fqdn":"cescaa.com","domain":"cescaa.com","tld":"com"},"ip":{"addr":"103.169.142.0","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://cescaa.com/","date":"2026-10-10T21:46:14.177Z","timestamp":1791668774177,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cescaa.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Sun, 06 Sep 2026 05:47:48 GMT","end":"Sat, 05 Dec 2026 06:46:40 GMT"},"fingerprint":{"sha1":"ED:EA:92:85:3E:13:4B:14:B2:3D:68:46:E8:43:9C:6B:3C:F1:32:DA","sha256":"7A:0F:F6:5D:4D:CF:B3:61:47:C4:54:6B:D7:C9:B4:11:9F:99:60:9F:7A:33:B6:FE:12:75:A1:FE:A9:B9:B5:C2"}}},"request":{"raw":"GET /_assets/fonts/673cfd68bc7f23224a573c827b4dd620.woff2 HTTP/1.1\r\nHost: cescaa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nReferer: https://cescaa.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __cf_bm=vOuBaFobJJHt2JGkBfxmwK60G8D6IyQVMT5sk6zLfGg-1791668772.3255684-1.0.1.1-TAeZ3m9ziTdsOy9Dm3_qgMAR5jdBCC6nmmHTtsbfUUqjEn8lVxafvHJfJTehEhGew0b7N7p3DDyOcvnHPJBbuySlYAJtMylSNpIXNhpFAi83EvkhJnIeNPGbMG63_vXj\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"__cf_bm","value":"vOuBaFobJJHt2JGkBfxmwK60G8D6IyQVMT5sk6zLfGg-1791668772.3255684-1.0.1.1-TAeZ3m9ziTdsOy9Dm3_qgMAR5jdBCC6nmmHTtsbfUUqjEn8lVxafvHJfJTehEhGew0b7N7p3DDyOcvnHPJBbuySlYAJtMylSNpIXNhpFAi83EvkhJnIeNPGbMG63_vXj"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 10 Oct 2026 21:46:14 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 53080\r\ncache-control: public, max-age=604800, immutable\r\nstrict-transport-security: max-age=31536000\r\nx-deployment-id: 0f99e4b75af14702f37d466a7129023b9b25e5159a3104342517539ef44a4f3a\r\nx-robots-tag: none\r\nvary: accept-encoding\r\nexpect-ct: max-age=86400, enforce\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\ncf-ray: a488d10e9b9923eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":53080,"size_decoded":53721,"mime_type":"application/octet-stream","magic":"Web Open Font Format (Version 2), CFF, length 53080, version 1.393","md5":"04433c9644d7b2a4e893f52976c4a99e","sha1":"d0a060c25a1e59ef229f5fd4b2e0c2909a56d553","sha256":"ec7e5c9fe8b9304c6ab5ec7f394447cf04ccfaf1eeecdccdf6c3ed73741f932b","sha512":"a54c455851806ec8408e7ff52c40f410747fa10260338cdb1c4881c5e9f04ef37667d0d259ce32957be16f35ffe503475a77d84ee395ba5bfa24a47be6817e67","ssdeep":"1536:S9zqpN2OeGJBHnyF3qU4SrtdGg+8MeiFGBah:lL1g6U4kWkMeiFGi","tlshash":"ae33f1ef4994c644718b8fb676e95b262076c14da5aacf0431ff98887c60704e8f6e1b","first_seen":"2025-10-11T08:21:36.727378Z","last_seen":"2026-10-10T21:47:12.473461Z","times_seen":4,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"cescaa.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"cescaa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cescaa.com/_assets/fonts/1101f812d8310a0639775c29afe1af81.woff2","fqdn":"cescaa.com","domain":"cescaa.com","tld":"com"},"ip":{"addr":"103.169.142.0","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://cescaa.com/","date":"2026-10-10T21:46:14.249Z","timestamp":1791668774249,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cescaa.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Sun, 06 Sep 2026 05:47:48 GMT","end":"Sat, 05 Dec 2026 06:46:40 GMT"},"fingerprint":{"sha1":"ED:EA:92:85:3E:13:4B:14:B2:3D:68:46:E8:43:9C:6B:3C:F1:32:DA","sha256":"7A:0F:F6:5D:4D:CF:B3:61:47:C4:54:6B:D7:C9:B4:11:9F:99:60:9F:7A:33:B6:FE:12:75:A1:FE:A9:B9:B5:C2"}}},"request":{"raw":"GET /_assets/fonts/1101f812d8310a0639775c29afe1af81.woff2 HTTP/1.1\r\nHost: cescaa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nReferer: https://cescaa.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __cf_bm=vOuBaFobJJHt2JGkBfxmwK60G8D6IyQVMT5sk6zLfGg-1791668772.3255684-1.0.1.1-TAeZ3m9ziTdsOy9Dm3_qgMAR5jdBCC6nmmHTtsbfUUqjEn8lVxafvHJfJTehEhGew0b7N7p3DDyOcvnHPJBbuySlYAJtMylSNpIXNhpFAi83EvkhJnIeNPGbMG63_vXj\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"__cf_bm","value":"vOuBaFobJJHt2JGkBfxmwK60G8D6IyQVMT5sk6zLfGg-1791668772.3255684-1.0.1.1-TAeZ3m9ziTdsOy9Dm3_qgMAR5jdBCC6nmmHTtsbfUUqjEn8lVxafvHJfJTehEhGew0b7N7p3DDyOcvnHPJBbuySlYAJtMylSNpIXNhpFAi83EvkhJnIeNPGbMG63_vXj"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 10 Oct 2026 21:46:14 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 51616\r\ncache-control: public, max-age=604800, immutable\r\nstrict-transport-security: max-age=31536000\r\nx-deployment-id: 0f99e4b75af14702f37d466a7129023b9b25e5159a3104342517539ef44a4f3a\r\nx-robots-tag: none\r\nvary: accept-encoding\r\nexpect-ct: max-age=86400, enforce\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\ncf-ray: a488d10f0ca623eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":51616,"size_decoded":52257,"mime_type":"application/octet-stream","magic":"Web Open Font Format (Version 2), CFF, length 51616, version 1.393","md5":"1f08068188b13a30a9c52169f7f97918","sha1":"6c8eebda3283fc53fea03b644583df3dae966628","sha256":"b1cb4cd4e0d5aec7f5cbbdd0c123d559c37f2d3ae75b1e9188c4ca221ff55025","sha512":"b47bed9104a6b978007ff3f1c75df338159b1e2bb01cc1d391b92e129d6544b668cfa0818c79eca5009e387cf3ff92e70c5506f9000f1144c0187e87fa82206f","ssdeep":"1536:jufH9kxHzaip66BVH7v4V2CSFLsyJ9m+w88FMjG:Cv2J3NVbv4VwLsQz2","tlshash":"173302b082377135fdc02197b95da7e8782bcc9e0dee57434b63ad81aa5460393e4cb2","first_seen":"2025-10-08T09:36:53.279817Z","last_seen":"2026-10-10T21:47:12.498858Z","times_seen":4,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"cescaa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"cescaa.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cescaa.com/_assets/fonts/5c612a870b96ecbc73de2d0a0f12bbc9.woff2","fqdn":"cescaa.com","domain":"cescaa.com","tld":"com"},"ip":{"addr":"103.169.142.0","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://cescaa.com/","date":"2026-10-10T21:46:14.252Z","timestamp":1791668774252,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cescaa.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Sun, 06 Sep 2026 05:47:48 GMT","end":"Sat, 05 Dec 2026 06:46:40 GMT"},"fingerprint":{"sha1":"ED:EA:92:85:3E:13:4B:14:B2:3D:68:46:E8:43:9C:6B:3C:F1:32:DA","sha256":"7A:0F:F6:5D:4D:CF:B3:61:47:C4:54:6B:D7:C9:B4:11:9F:99:60:9F:7A:33:B6:FE:12:75:A1:FE:A9:B9:B5:C2"}}},"request":{"raw":"GET /_assets/fonts/5c612a870b96ecbc73de2d0a0f12bbc9.woff2 HTTP/1.1\r\nHost: cescaa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nReferer: https://cescaa.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __cf_bm=vOuBaFobJJHt2JGkBfxmwK60G8D6IyQVMT5sk6zLfGg-1791668772.3255684-1.0.1.1-TAeZ3m9ziTdsOy9Dm3_qgMAR5jdBCC6nmmHTtsbfUUqjEn8lVxafvHJfJTehEhGew0b7N7p3DDyOcvnHPJBbuySlYAJtMylSNpIXNhpFAi83EvkhJnIeNPGbMG63_vXj\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"__cf_bm","value":"vOuBaFobJJHt2JGkBfxmwK60G8D6IyQVMT5sk6zLfGg-1791668772.3255684-1.0.1.1-TAeZ3m9ziTdsOy9Dm3_qgMAR5jdBCC6nmmHTtsbfUUqjEn8lVxafvHJfJTehEhGew0b7N7p3DDyOcvnHPJBbuySlYAJtMylSNpIXNhpFAi83EvkhJnIeNPGbMG63_vXj"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 10 Oct 2026 21:46:14 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 54252\r\ncache-control: public, max-age=604800, immutable\r\nstrict-transport-security: max-age=31536000\r\nx-deployment-id: 0f99e4b75af14702f37d466a7129023b9b25e5159a3104342517539ef44a4f3a\r\nx-robots-tag: none\r\nvary: accept-encoding\r\nexpect-ct: max-age=86400, enforce\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\ncf-ray: a488d10f1cbb23eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":54252,"size_decoded":54893,"mime_type":"application/octet-stream","magic":"Web Open Font Format (Version 2), CFF, length 54252, version 1.393","md5":"ed08ceadeedb5461059386ddb069c28c","sha1":"b27ff8b21dac87646967afd269afd172fa43de69","sha256":"7d91f25ad3011801a1561726d7e46e86f5e342e93f222233ad4d03b6bd260bbd","sha512":"3831704619973926a5f6d2022364858ff375ff5a1a4ad0f797223b7c202b9e4762ef2c15ba6e36df9ff478c8449728077d58f8c086b9bdd7377faf2ef2885f77","ssdeep":"1536:IUOqaDd66lBBFLCD95lqfi+6d+K0umxiBUn:F5yY6lU95lqfl611miUn","tlshash":"2433010cdd4ba3074bbb94b4863d1dec29400a63becfeb2e9c5039da15de58986d1a34","first_seen":"2025-10-11T08:21:36.730369Z","last_seen":"2026-10-10T21:47:12.459084Z","times_seen":6,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"cescaa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"cescaa.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cescaa.com/_assets/fonts/5c411d01677832c1b6f80e11045c3e17.woff2","fqdn":"cescaa.com","domain":"cescaa.com","tld":"com"},"ip":{"addr":"103.169.142.0","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://cescaa.com/","date":"2026-10-10T21:46:14.257Z","timestamp":1791668774257,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cescaa.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Sun, 06 Sep 2026 05:47:48 GMT","end":"Sat, 05 Dec 2026 06:46:40 GMT"},"fingerprint":{"sha1":"ED:EA:92:85:3E:13:4B:14:B2:3D:68:46:E8:43:9C:6B:3C:F1:32:DA","sha256":"7A:0F:F6:5D:4D:CF:B3:61:47:C4:54:6B:D7:C9:B4:11:9F:99:60:9F:7A:33:B6:FE:12:75:A1:FE:A9:B9:B5:C2"}}},"request":{"raw":"GET /_assets/fonts/5c411d01677832c1b6f80e11045c3e17.woff2 HTTP/1.1\r\nHost: cescaa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nReferer: https://cescaa.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __cf_bm=vOuBaFobJJHt2JGkBfxmwK60G8D6IyQVMT5sk6zLfGg-1791668772.3255684-1.0.1.1-TAeZ3m9ziTdsOy9Dm3_qgMAR5jdBCC6nmmHTtsbfUUqjEn8lVxafvHJfJTehEhGew0b7N7p3DDyOcvnHPJBbuySlYAJtMylSNpIXNhpFAi83EvkhJnIeNPGbMG63_vXj\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"__cf_bm","value":"vOuBaFobJJHt2JGkBfxmwK60G8D6IyQVMT5sk6zLfGg-1791668772.3255684-1.0.1.1-TAeZ3m9ziTdsOy9Dm3_qgMAR5jdBCC6nmmHTtsbfUUqjEn8lVxafvHJfJTehEhGew0b7N7p3DDyOcvnHPJBbuySlYAJtMylSNpIXNhpFAi83EvkhJnIeNPGbMG63_vXj"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 10 Oct 2026 21:46:14 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 53200\r\ncache-control: public, max-age=604800, immutable\r\nstrict-transport-security: max-age=31536000\r\nx-deployment-id: 0f99e4b75af14702f37d466a7129023b9b25e5159a3104342517539ef44a4f3a\r\nx-robots-tag: none\r\nvary: accept-encoding\r\nexpect-ct: max-age=86400, enforce\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\ncf-ray: a488d10f1cd123eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":53200,"size_decoded":53841,"mime_type":"application/octet-stream","magic":"Web Open Font Format (Version 2), CFF, length 53200, version 1.393","md5":"1dd71e9221adf3dce1f6d63d98234b40","sha1":"94ffd37ad6799e3f6a79ac43ef675bf13460f5d7","sha256":"51de067a32600ef07c4f813625211e4596e03ea2ba5b9a86886dbc946b3ac091","sha512":"5e7742e8e83d5d7cc71550abc18959d0f6c1a9e4f09a314c845c19eb18a06ba6006a04e7babb1396f5f4f7aa8df3d5f13df824d2bd9fd375702e54caaeb50c43","ssdeep":"1536:/25ut3oUaeM/Q+kDDSLQpW+kjCDDqU061Fp:/iut3LM/Q+kDDSLgW+9DuU06x","tlshash":"1a3302c8f77dc1dadf8d044fe30e4ac5582c28f91d4c2da6558db290ae18fe96b4469c","first_seen":"2025-10-11T08:21:36.724182Z","last_seen":"2026-10-10T21:47:12.500644Z","times_seen":4,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"cescaa.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"cescaa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cescaa.com/_assets/media/9e329e6e083b177fd0ddf9c818a5789b.svg","fqdn":"cescaa.com","domain":"cescaa.com","tld":"com"},"ip":{"addr":"103.169.142.0","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://cescaa.com/","date":"2026-10-10T21:46:14.887Z","timestamp":1791668774887,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cescaa.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Sun, 06 Sep 2026 05:47:48 GMT","end":"Sat, 05 Dec 2026 06:46:40 GMT"},"fingerprint":{"sha1":"ED:EA:92:85:3E:13:4B:14:B2:3D:68:46:E8:43:9C:6B:3C:F1:32:DA","sha256":"7A:0F:F6:5D:4D:CF:B3:61:47:C4:54:6B:D7:C9:B4:11:9F:99:60:9F:7A:33:B6:FE:12:75:A1:FE:A9:B9:B5:C2"}}},"request":{"raw":"GET /_assets/media/9e329e6e083b177fd0ddf9c818a5789b.svg HTTP/1.1\r\nHost: cescaa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://cescaa.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __cf_bm=vOuBaFobJJHt2JGkBfxmwK60G8D6IyQVMT5sk6zLfGg-1791668772.3255684-1.0.1.1-TAeZ3m9ziTdsOy9Dm3_qgMAR5jdBCC6nmmHTtsbfUUqjEn8lVxafvHJfJTehEhGew0b7N7p3DDyOcvnHPJBbuySlYAJtMylSNpIXNhpFAi83EvkhJnIeNPGbMG63_vXj\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"__cf_bm","value":"vOuBaFobJJHt2JGkBfxmwK60G8D6IyQVMT5sk6zLfGg-1791668772.3255684-1.0.1.1-TAeZ3m9ziTdsOy9Dm3_qgMAR5jdBCC6nmmHTtsbfUUqjEn8lVxafvHJfJTehEhGew0b7N7p3DDyOcvnHPJBbuySlYAJtMylSNpIXNhpFAi83EvkhJnIeNPGbMG63_vXj"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 10 Oct 2026 21:46:14 GMT\r\ncontent-type: image/svg+xml\r\ncache-control: public, max-age=604800, immutable\r\nstrict-transport-security: max-age=31536000\r\nx-deployment-id: 0f99e4b75af14702f37d466a7129023b9b25e5159a3104342517539ef44a4f3a\r\nx-robots-tag: none\r\nvary: accept-encoding\r\nexpect-ct: max-age=86400, enforce\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\npriority: u=3,i=?0\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: a488d1130faf23eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":548,"size_decoded":1001,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"a70611f86fd907a84f5c100bd7694d28","sha1":"a37087f06faf75f79119b916c7208558f00a72ab","sha256":"5f3eb41ecfc56749850f76c0af6eb9648d3766f9d978fa8c4f36371f8f9bba9a","sha512":"96372d8d6a40b7d8079c68982cdadd7895a70df517d0846d4f67cc16935f2f9280d2bd4e9b132a71b287c850f4826c3e2b0b1403ea0ee9442318029620d7f850","ssdeep":"","tlshash":"0ff0c0e49319c421c65de76d73f8cc02936a74c065d590ecf8e42e5236165852f2694d","first_seen":"2025-10-11T08:21:36.774425Z","last_seen":"2026-10-10T21:47:12.502722Z","times_seen":5,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"cescaa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"cescaa.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cescaa.com/_assets/1699aa8480ddc861.strings.js","fqdn":"cescaa.com","domain":"cescaa.com","tld":"com"},"ip":{"addr":"103.169.142.0","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cescaa.com/","date":"2026-10-10T21:46:12.643Z","timestamp":1791668772643,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cescaa.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Sun, 06 Sep 2026 05:47:48 GMT","end":"Sat, 05 Dec 2026 06:46:40 GMT"},"fingerprint":{"sha1":"ED:EA:92:85:3E:13:4B:14:B2:3D:68:46:E8:43:9C:6B:3C:F1:32:DA","sha256":"7A:0F:F6:5D:4D:CF:B3:61:47:C4:54:6B:D7:C9:B4:11:9F:99:60:9F:7A:33:B6:FE:12:75:A1:FE:A9:B9:B5:C2"}}},"request":{"raw":"GET /_assets/1699aa8480ddc861.strings.js HTTP/1.1\r\nHost: cescaa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://cescaa.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __cf_bm=vOuBaFobJJHt2JGkBfxmwK60G8D6IyQVMT5sk6zLfGg-1791668772.3255684-1.0.1.1-TAeZ3m9ziTdsOy9Dm3_qgMAR5jdBCC6nmmHTtsbfUUqjEn8lVxafvHJfJTehEhGew0b7N7p3DDyOcvnHPJBbuySlYAJtMylSNpIXNhpFAi83EvkhJnIeNPGbMG63_vXj\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"__cf_bm","value":"vOuBaFobJJHt2JGkBfxmwK60G8D6IyQVMT5sk6zLfGg-1791668772.3255684-1.0.1.1-TAeZ3m9ziTdsOy9Dm3_qgMAR5jdBCC6nmmHTtsbfUUqjEn8lVxafvHJfJTehEhGew0b7N7p3DDyOcvnHPJBbuySlYAJtMylSNpIXNhpFAi83EvkhJnIeNPGbMG63_vXj"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 10 Oct 2026 21:46:12 GMT\r\ncontent-type: application/javascript\r\ncache-control: public, max-age=604800, immutable\r\nstrict-transport-security: max-age=31536000\r\nx-deployment-id: 0f99e4b75af14702f37d466a7129023b9b25e5159a3104342517539ef44a4f3a\r\nx-robots-tag: none\r\nvary: accept-encoding\r\nexpect-ct: max-age=86400, enforce\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\npriority: u=1,i=?0\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: a488d1050ae823eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15387,"size_decoded":7301,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (15032)","md5":"7cbe2b15e9d09061940d82760cc04d91","sha1":"697ad94f406d2a7f4379820a59a553356e23473e","sha256":"1779e8ff628da7e996df75820a2be41d256d215e9c3ec776321a79511c5833cb","sha512":"17021b2dcd080c3ec364a2c4098bc2b57ff20716e2e96224302cee84100bbfc74247ec1772bf9ea19d6d32985035de27cd04ea76b07f7036f7d9f96db9473752","ssdeep":"384:bpXhswlgxe75VPsOSRV0A5Ic1DR6xkI0PCX29B:1KaIezZg9wxn2j","tlshash":"5d62a305f242d12cc2424e8e267eaef4f91bc16997a013b5fc59c568a36387c7bb78d0","first_seen":"2025-09-27T01:50:48.446156Z","last_seen":"2026-10-10T21:47:12.533345Z","times_seen":40,"resource_available":true,"data":null}},"time_used":128,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":128,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"cescaa.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"cescaa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cescaa.com/_assets/b5de2817a09dae0e.ltr.css","fqdn":"cescaa.com","domain":"cescaa.com","tld":"com"},"ip":{"addr":"103.169.142.0","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://cescaa.com/","date":"2026-10-10T21:46:13.810Z","timestamp":1791668773810,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cescaa.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Sun, 06 Sep 2026 05:47:48 GMT","end":"Sat, 05 Dec 2026 06:46:40 GMT"},"fingerprint":{"sha1":"ED:EA:92:85:3E:13:4B:14:B2:3D:68:46:E8:43:9C:6B:3C:F1:32:DA","sha256":"7A:0F:F6:5D:4D:CF:B3:61:47:C4:54:6B:D7:C9:B4:11:9F:99:60:9F:7A:33:B6:FE:12:75:A1:FE:A9:B9:B5:C2"}}},"request":{"raw":"GET /_assets/b5de2817a09dae0e.ltr.css HTTP/1.1\r\nHost: cescaa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://cescaa.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __cf_bm=vOuBaFobJJHt2JGkBfxmwK60G8D6IyQVMT5sk6zLfGg-1791668772.3255684-1.0.1.1-TAeZ3m9ziTdsOy9Dm3_qgMAR5jdBCC6nmmHTtsbfUUqjEn8lVxafvHJfJTehEhGew0b7N7p3DDyOcvnHPJBbuySlYAJtMylSNpIXNhpFAi83EvkhJnIeNPGbMG63_vXj\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"__cf_bm","value":"vOuBaFobJJHt2JGkBfxmwK60G8D6IyQVMT5sk6zLfGg-1791668772.3255684-1.0.1.1-TAeZ3m9ziTdsOy9Dm3_qgMAR5jdBCC6nmmHTtsbfUUqjEn8lVxafvHJfJTehEhGew0b7N7p3DDyOcvnHPJBbuySlYAJtMylSNpIXNhpFAi83EvkhJnIeNPGbMG63_vXj"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 10 Oct 2026 21:46:13 GMT\r\ncontent-type: text/css\r\ncache-control: public, max-age=604800, immutable\r\nstrict-transport-security: max-age=31536000\r\nx-deployment-id: 0f99e4b75af14702f37d466a7129023b9b25e5159a3104342517539ef44a4f3a\r\nx-robots-tag: none\r\nvary: accept-encoding\r\nexpect-ct: max-age=86400, enforce\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\npriority: u=2,i=?0\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: a488d10c5e3523eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":526,"size_decoded":903,"mime_type":"text/css","magic":"ASCII text, with very long lines (463)","md5":"af9a475d4680a7fd0a9671a925e498ec","sha1":"b838a547a7beb601262061de005c8ba67807ad97","sha256":"e78ae77ca39702d0727ac5fb0698a2d4bc470dcee43bfa36c196449e41502982","sha512":"b5ca1039d8eaa05f9ed82c3b182a05782588e2a0e0484d9a9a84b7a9cbf75e4a69b627812154203caec109486ec8849d9561943046d3f072626b8bfd0b5d204a","ssdeep":"","tlshash":"6bf0c0b8d77976b78922e73435f1968f306350209be08308f911e662c5cf7642c50d41","first_seen":"2025-08-03T17:49:13.15855Z","last_seen":"2026-10-10T21:47:12.535606Z","times_seen":197,"resource_available":true,"data":null}},"time_used":123,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":123,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"cescaa.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"cescaa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cescaa.com/_assets/fonts/e44a76124d0e53c15573a43751bda1dc.woff2","fqdn":"cescaa.com","domain":"cescaa.com","tld":"com"},"ip":{"addr":"103.169.142.0","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://cescaa.com/","date":"2026-10-10T21:46:14.231Z","timestamp":1791668774231,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cescaa.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Sun, 06 Sep 2026 05:47:48 GMT","end":"Sat, 05 Dec 2026 06:46:40 GMT"},"fingerprint":{"sha1":"ED:EA:92:85:3E:13:4B:14:B2:3D:68:46:E8:43:9C:6B:3C:F1:32:DA","sha256":"7A:0F:F6:5D:4D:CF:B3:61:47:C4:54:6B:D7:C9:B4:11:9F:99:60:9F:7A:33:B6:FE:12:75:A1:FE:A9:B9:B5:C2"}}},"request":{"raw":"GET /_assets/fonts/e44a76124d0e53c15573a43751bda1dc.woff2 HTTP/1.1\r\nHost: cescaa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nReferer: https://cescaa.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __cf_bm=vOuBaFobJJHt2JGkBfxmwK60G8D6IyQVMT5sk6zLfGg-1791668772.3255684-1.0.1.1-TAeZ3m9ziTdsOy9Dm3_qgMAR5jdBCC6nmmHTtsbfUUqjEn8lVxafvHJfJTehEhGew0b7N7p3DDyOcvnHPJBbuySlYAJtMylSNpIXNhpFAi83EvkhJnIeNPGbMG63_vXj\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"__cf_bm","value":"vOuBaFobJJHt2JGkBfxmwK60G8D6IyQVMT5sk6zLfGg-1791668772.3255684-1.0.1.1-TAeZ3m9ziTdsOy9Dm3_qgMAR5jdBCC6nmmHTtsbfUUqjEn8lVxafvHJfJTehEhGew0b7N7p3DDyOcvnHPJBbuySlYAJtMylSNpIXNhpFAi83EvkhJnIeNPGbMG63_vXj"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 10 Oct 2026 21:46:14 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 51760\r\ncache-control: public, max-age=604800, immutable\r\nstrict-transport-security: max-age=31536000\r\nx-deployment-id: 0f99e4b75af14702f37d466a7129023b9b25e5159a3104342517539ef44a4f3a\r\nx-robots-tag: none\r\nvary: accept-encoding\r\nexpect-ct: max-age=86400, enforce\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\ncf-ray: a488d10efc6523eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":51760,"size_decoded":52401,"mime_type":"application/octet-stream","magic":"Web Open Font Format (Version 2), CFF, length 51760, version 1.393","md5":"83c4f958dac8837aa60859d214f16e44","sha1":"dbf3a429034a016d8a399db27af6341b7d747289","sha256":"3f947cf511bb13f29650c3956ff65b84419f3d4ec719cd2a41163aa7dc9f0773","sha512":"3642325459c0102784a5e966808504454b3ac0f65ffad1954710dbea17fa46d5722af3723f83bc79319e30074e02a830bb2e6de9c6495081b77cdabaa90f569e","ssdeep":"1536:VivFXIgmL8w5oPI1xxiUGwKt3UA3wzOBfOS:Vi9XIhouPiRAzOBfL","tlshash":"9233f20f4fa9473a5802e82d5b804ca682c318a356e00bef52dcb68c571bb75f865df7","first_seen":"2025-10-08T09:36:53.284909Z","last_seen":"2026-10-10T21:47:12.489305Z","times_seen":4,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"cescaa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"cescaa.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cescaa.com/_assets/fonts/1101f812d8310a0639775c29afe1af81.woff2","fqdn":"cescaa.com","domain":"cescaa.com","tld":"com"},"ip":{"addr":"103.169.142.0","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://cescaa.com/","date":"2026-10-10T21:46:14.239Z","timestamp":1791668774239,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cescaa.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Sun, 06 Sep 2026 05:47:48 GMT","end":"Sat, 05 Dec 2026 06:46:40 GMT"},"fingerprint":{"sha1":"ED:EA:92:85:3E:13:4B:14:B2:3D:68:46:E8:43:9C:6B:3C:F1:32:DA","sha256":"7A:0F:F6:5D:4D:CF:B3:61:47:C4:54:6B:D7:C9:B4:11:9F:99:60:9F:7A:33:B6:FE:12:75:A1:FE:A9:B9:B5:C2"}}},"request":{"raw":"GET /_assets/fonts/1101f812d8310a0639775c29afe1af81.woff2 HTTP/1.1\r\nHost: cescaa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nReferer: https://cescaa.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __cf_bm=vOuBaFobJJHt2JGkBfxmwK60G8D6IyQVMT5sk6zLfGg-1791668772.3255684-1.0.1.1-TAeZ3m9ziTdsOy9Dm3_qgMAR5jdBCC6nmmHTtsbfUUqjEn8lVxafvHJfJTehEhGew0b7N7p3DDyOcvnHPJBbuySlYAJtMylSNpIXNhpFAi83EvkhJnIeNPGbMG63_vXj\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"__cf_bm","value":"vOuBaFobJJHt2JGkBfxmwK60G8D6IyQVMT5sk6zLfGg-1791668772.3255684-1.0.1.1-TAeZ3m9ziTdsOy9Dm3_qgMAR5jdBCC6nmmHTtsbfUUqjEn8lVxafvHJfJTehEhGew0b7N7p3DDyOcvnHPJBbuySlYAJtMylSNpIXNhpFAi83EvkhJnIeNPGbMG63_vXj"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 10 Oct 2026 21:46:14 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 51616\r\ncache-control: public, max-age=604800, immutable\r\nstrict-transport-security: max-age=31536000\r\nx-deployment-id: 0f99e4b75af14702f37d466a7129023b9b25e5159a3104342517539ef44a4f3a\r\nx-robots-tag: none\r\nvary: accept-encoding\r\nexpect-ct: max-age=86400, enforce\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\ncf-ray: a488d10efc7823eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":51616,"size_decoded":52257,"mime_type":"application/octet-stream","magic":"Web Open Font Format (Version 2), CFF, length 51616, version 1.393","md5":"1f08068188b13a30a9c52169f7f97918","sha1":"6c8eebda3283fc53fea03b644583df3dae966628","sha256":"b1cb4cd4e0d5aec7f5cbbdd0c123d559c37f2d3ae75b1e9188c4ca221ff55025","sha512":"b47bed9104a6b978007ff3f1c75df338159b1e2bb01cc1d391b92e129d6544b668cfa0818c79eca5009e387cf3ff92e70c5506f9000f1144c0187e87fa82206f","ssdeep":"1536:jufH9kxHzaip66BVH7v4V2CSFLsyJ9m+w88FMjG:Cv2J3NVbv4VwLsQz2","tlshash":"173302b082377135fdc02197b95da7e8782bcc9e0dee57434b63ad81aa5460393e4cb2","first_seen":"2025-10-08T09:36:53.279817Z","last_seen":"2026-10-10T21:47:12.498858Z","times_seen":4,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"cescaa.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"cescaa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cescaa.com/_assets/media/b65c1c9c3fed0ecc180a3886cd7dbb1a.svg","fqdn":"cescaa.com","domain":"cescaa.com","tld":"com"},"ip":{"addr":"103.169.142.0","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://cescaa.com/","date":"2026-10-10T21:46:14.886Z","timestamp":1791668774886,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cescaa.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Sun, 06 Sep 2026 05:47:48 GMT","end":"Sat, 05 Dec 2026 06:46:40 GMT"},"fingerprint":{"sha1":"ED:EA:92:85:3E:13:4B:14:B2:3D:68:46:E8:43:9C:6B:3C:F1:32:DA","sha256":"7A:0F:F6:5D:4D:CF:B3:61:47:C4:54:6B:D7:C9:B4:11:9F:99:60:9F:7A:33:B6:FE:12:75:A1:FE:A9:B9:B5:C2"}}},"request":{"raw":"GET /_assets/media/b65c1c9c3fed0ecc180a3886cd7dbb1a.svg HTTP/1.1\r\nHost: cescaa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://cescaa.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __cf_bm=vOuBaFobJJHt2JGkBfxmwK60G8D6IyQVMT5sk6zLfGg-1791668772.3255684-1.0.1.1-TAeZ3m9ziTdsOy9Dm3_qgMAR5jdBCC6nmmHTtsbfUUqjEn8lVxafvHJfJTehEhGew0b7N7p3DDyOcvnHPJBbuySlYAJtMylSNpIXNhpFAi83EvkhJnIeNPGbMG63_vXj\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"__cf_bm","value":"vOuBaFobJJHt2JGkBfxmwK60G8D6IyQVMT5sk6zLfGg-1791668772.3255684-1.0.1.1-TAeZ3m9ziTdsOy9Dm3_qgMAR5jdBCC6nmmHTtsbfUUqjEn8lVxafvHJfJTehEhGew0b7N7p3DDyOcvnHPJBbuySlYAJtMylSNpIXNhpFAi83EvkhJnIeNPGbMG63_vXj"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 10 Oct 2026 21:46:14 GMT\r\ncontent-type: image/svg+xml\r\ncache-control: public, max-age=604800, immutable\r\nstrict-transport-security: max-age=31536000\r\nx-deployment-id: 0f99e4b75af14702f37d466a7129023b9b25e5159a3104342517539ef44a4f3a\r\nx-robots-tag: none\r\nvary: accept-encoding\r\nexpect-ct: max-age=86400, enforce\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\npriority: u=3,i=?0\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: a488d1130fa723eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1044,"size_decoded":1232,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"0e713c19ce1d278c97cb46a15f5a6209","sha1":"941d406fcc6ffa97007ada7e559a4c18cef2101d","sha256":"6d310025fd6c6c62a4ec41552ffefefd0ab4ea7366e6f19c84491b90da956a12","sha512":"736dcc16164ccb40606880a01fdc772aa3b34c2a4bdc447e996c80d2a51f9e3051339588cee6d42b2e81afa8b4fedb109e944a1a92cd2670687095c051dc15a2","ssdeep":"","tlshash":"6f11ef1983124871e6e90a685bac68a373fcf1c7209146cd66ae1f29ac413e73e35e16","first_seen":"2023-11-11T19:24:48Z","last_seen":"2026-10-10T21:47:12.536441Z","times_seen":13,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"cescaa.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"cescaa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cescaa.com/_assets/4e43ff722876b949.runtime.js","fqdn":"cescaa.com","domain":"cescaa.com","tld":"com"},"ip":{"addr":"103.169.142.0","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cescaa.com/","date":"2026-10-10T21:46:12.636Z","timestamp":1791668772636,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cescaa.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Sun, 06 Sep 2026 05:47:48 GMT","end":"Sat, 05 Dec 2026 06:46:40 GMT"},"fingerprint":{"sha1":"ED:EA:92:85:3E:13:4B:14:B2:3D:68:46:E8:43:9C:6B:3C:F1:32:DA","sha256":"7A:0F:F6:5D:4D:CF:B3:61:47:C4:54:6B:D7:C9:B4:11:9F:99:60:9F:7A:33:B6:FE:12:75:A1:FE:A9:B9:B5:C2"}}},"request":{"raw":"GET /_assets/4e43ff722876b949.runtime.js HTTP/1.1\r\nHost: cescaa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://cescaa.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __cf_bm=vOuBaFobJJHt2JGkBfxmwK60G8D6IyQVMT5sk6zLfGg-1791668772.3255684-1.0.1.1-TAeZ3m9ziTdsOy9Dm3_qgMAR5jdBCC6nmmHTtsbfUUqjEn8lVxafvHJfJTehEhGew0b7N7p3DDyOcvnHPJBbuySlYAJtMylSNpIXNhpFAi83EvkhJnIeNPGbMG63_vXj\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"__cf_bm","value":"vOuBaFobJJHt2JGkBfxmwK60G8D6IyQVMT5sk6zLfGg-1791668772.3255684-1.0.1.1-TAeZ3m9ziTdsOy9Dm3_qgMAR5jdBCC6nmmHTtsbfUUqjEn8lVxafvHJfJTehEhGew0b7N7p3DDyOcvnHPJBbuySlYAJtMylSNpIXNhpFAi83EvkhJnIeNPGbMG63_vXj"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 10 Oct 2026 21:46:12 GMT\r\ncontent-type: application/javascript\r\ncache-control: public, max-age=604800, immutable\r\nstrict-transport-security: max-age=31536000\r\nx-deployment-id: 0f99e4b75af14702f37d466a7129023b9b25e5159a3104342517539ef44a4f3a\r\nx-robots-tag: none\r\nvary: accept-encoding\r\nexpect-ct: max-age=86400, enforce\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\npriority: u=1,i=?0\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: a488d104fac623eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":31267,"size_decoded":12304,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (31203)","md5":"34c584a86ac7564eb3c5d15ddbccedc7","sha1":"10ed79f84dbb1bfc5b0bb7595e4e9cdcf4f7a382","sha256":"b7a628a574fa8d94171380017f6a5ea743c2e4a46d4103bd2461f4eeeeb8afc3","sha512":"ab87026609b84b3d6d0ea983d8aa1474d225a9250c701a7e6e392be77d080da3306336fd8189c92eb6d552391e720b8504a1f6030c8b66ddf618799f517695f5","ssdeep":"768:la7P3F0p7fFAGFDSDFAoPgue5Ezy99WKUWj/5yg6CvYoYGeCxL/tTS0v:la7CLPOg1dfAoHjpSq","tlshash":"63e2b4e936f340a2d1d12ee87859c04b388d5ce9249d1790dbdb79e8fb54b72e433862","first_seen":"2025-10-10T00:55:24.108666Z","last_seen":"2026-10-10T21:47:12.538206Z","times_seen":17,"resource_available":true,"data":null}},"time_used":123,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":123,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"cescaa.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"cescaa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cescaa.com/_assets/cac67018060c51df.js","fqdn":"cescaa.com","domain":"cescaa.com","tld":"com"},"ip":{"addr":"103.169.142.0","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cescaa.com/","date":"2026-10-10T21:46:13.818Z","timestamp":1791668773818,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cescaa.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Sun, 06 Sep 2026 05:47:48 GMT","end":"Sat, 05 Dec 2026 06:46:40 GMT"},"fingerprint":{"sha1":"ED:EA:92:85:3E:13:4B:14:B2:3D:68:46:E8:43:9C:6B:3C:F1:32:DA","sha256":"7A:0F:F6:5D:4D:CF:B3:61:47:C4:54:6B:D7:C9:B4:11:9F:99:60:9F:7A:33:B6:FE:12:75:A1:FE:A9:B9:B5:C2"}}},"request":{"raw":"GET /_assets/cac67018060c51df.js HTTP/1.1\r\nHost: cescaa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://cescaa.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __cf_bm=vOuBaFobJJHt2JGkBfxmwK60G8D6IyQVMT5sk6zLfGg-1791668772.3255684-1.0.1.1-TAeZ3m9ziTdsOy9Dm3_qgMAR5jdBCC6nmmHTtsbfUUqjEn8lVxafvHJfJTehEhGew0b7N7p3DDyOcvnHPJBbuySlYAJtMylSNpIXNhpFAi83EvkhJnIeNPGbMG63_vXj\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"__cf_bm","value":"vOuBaFobJJHt2JGkBfxmwK60G8D6IyQVMT5sk6zLfGg-1791668772.3255684-1.0.1.1-TAeZ3m9ziTdsOy9Dm3_qgMAR5jdBCC6nmmHTtsbfUUqjEn8lVxafvHJfJTehEhGew0b7N7p3DDyOcvnHPJBbuySlYAJtMylSNpIXNhpFAi83EvkhJnIeNPGbMG63_vXj"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 10 Oct 2026 21:46:13 GMT\r\ncontent-type: application/javascript\r\ncache-control: public, max-age=604800, immutable\r\nstrict-transport-security: max-age=31536000\r\nx-deployment-id: 0f99e4b75af14702f37d466a7129023b9b25e5159a3104342517539ef44a4f3a\r\nx-robots-tag: none\r\nvary: accept-encoding\r\nexpect-ct: max-age=86400, enforce\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\npriority: u=3,i=?0\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: a488d10c5e5323eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5622,"size_decoded":2535,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (798)","md5":"ffd116cf3c16f390168b28fba7f53eec","sha1":"daeff1075096aba89347debc775184f664693d6a","sha256":"8b324de3d261ed9041b2bf2d4021efcc00157908259e3ab52df88f2548e8bbbf","sha512":"0a53d0973a0bf483f443c03f5c7eaec01c9a483abef64aac1c5b4134d956c85ccda155227daaeccc2faf13b2e15b6a271e3e94a5f6623088fca75ce9ab376bd0","ssdeep":"96:8swiA9Jw/xIeeBcM7XuZSojwk+lVlrYYaAtunCR9QYwc8QXejuW4iiraUBTqBtTJ:8s/ATxeJQXoSOw5lrSnUQFQXeSWViWUO","tlshash":"efc1fee471dbb507836970aa407b4583ef5e6dd0f44c89fdf89898c63e228128136fb9","first_seen":"2025-10-10T00:55:24.142791Z","last_seen":"2026-10-10T21:47:12.540094Z","times_seen":17,"resource_available":true,"data":null}},"time_used":133,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":133,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"cescaa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"cescaa.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cescaa.com/_assets/fonts/e44a76124d0e53c15573a43751bda1dc.woff2","fqdn":"cescaa.com","domain":"cescaa.com","tld":"com"},"ip":{"addr":"103.169.142.0","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://cescaa.com/","date":"2026-10-10T21:46:14.028Z","timestamp":1791668774028,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cescaa.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Sun, 06 Sep 2026 05:47:48 GMT","end":"Sat, 05 Dec 2026 06:46:40 GMT"},"fingerprint":{"sha1":"ED:EA:92:85:3E:13:4B:14:B2:3D:68:46:E8:43:9C:6B:3C:F1:32:DA","sha256":"7A:0F:F6:5D:4D:CF:B3:61:47:C4:54:6B:D7:C9:B4:11:9F:99:60:9F:7A:33:B6:FE:12:75:A1:FE:A9:B9:B5:C2"}}},"request":{"raw":"GET /_assets/fonts/e44a76124d0e53c15573a43751bda1dc.woff2 HTTP/1.1\r\nHost: cescaa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nReferer: https://cescaa.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __cf_bm=vOuBaFobJJHt2JGkBfxmwK60G8D6IyQVMT5sk6zLfGg-1791668772.3255684-1.0.1.1-TAeZ3m9ziTdsOy9Dm3_qgMAR5jdBCC6nmmHTtsbfUUqjEn8lVxafvHJfJTehEhGew0b7N7p3DDyOcvnHPJBbuySlYAJtMylSNpIXNhpFAi83EvkhJnIeNPGbMG63_vXj\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"__cf_bm","value":"vOuBaFobJJHt2JGkBfxmwK60G8D6IyQVMT5sk6zLfGg-1791668772.3255684-1.0.1.1-TAeZ3m9ziTdsOy9Dm3_qgMAR5jdBCC6nmmHTtsbfUUqjEn8lVxafvHJfJTehEhGew0b7N7p3DDyOcvnHPJBbuySlYAJtMylSNpIXNhpFAi83EvkhJnIeNPGbMG63_vXj"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 10 Oct 2026 21:46:14 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 51760\r\ncache-control: public, max-age=604800, immutable\r\nstrict-transport-security: max-age=31536000\r\nx-deployment-id: 0f99e4b75af14702f37d466a7129023b9b25e5159a3104342517539ef44a4f3a\r\nx-robots-tag: none\r\nvary: accept-encoding\r\nexpect-ct: max-age=86400, enforce\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\ncf-ray: a488d10da95a23eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":51760,"size_decoded":52401,"mime_type":"application/octet-stream","magic":"Web Open Font Format (Version 2), CFF, length 51760, version 1.393","md5":"83c4f958dac8837aa60859d214f16e44","sha1":"dbf3a429034a016d8a399db27af6341b7d747289","sha256":"3f947cf511bb13f29650c3956ff65b84419f3d4ec719cd2a41163aa7dc9f0773","sha512":"3642325459c0102784a5e966808504454b3ac0f65ffad1954710dbea17fa46d5722af3723f83bc79319e30074e02a830bb2e6de9c6495081b77cdabaa90f569e","ssdeep":"1536:VivFXIgmL8w5oPI1xxiUGwKt3UA3wzOBfOS:Vi9XIhouPiRAzOBfL","tlshash":"9233f20f4fa9473a5802e82d5b804ca682c318a356e00bef52dcb68c571bb75f865df7","first_seen":"2025-10-08T09:36:53.284909Z","last_seen":"2026-10-10T21:47:12.489305Z","times_seen":4,"resource_available":false,"data":null}},"time_used":120,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":120,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"cescaa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"cescaa.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cescaa.com/_assets/fonts/5c612a870b96ecbc73de2d0a0f12bbc9.woff2","fqdn":"cescaa.com","domain":"cescaa.com","tld":"com"},"ip":{"addr":"103.169.142.0","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://cescaa.com/","date":"2026-10-10T21:46:14.274Z","timestamp":1791668774274,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cescaa.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Sun, 06 Sep 2026 05:47:48 GMT","end":"Sat, 05 Dec 2026 06:46:40 GMT"},"fingerprint":{"sha1":"ED:EA:92:85:3E:13:4B:14:B2:3D:68:46:E8:43:9C:6B:3C:F1:32:DA","sha256":"7A:0F:F6:5D:4D:CF:B3:61:47:C4:54:6B:D7:C9:B4:11:9F:99:60:9F:7A:33:B6:FE:12:75:A1:FE:A9:B9:B5:C2"}}},"request":{"raw":"GET /_assets/fonts/5c612a870b96ecbc73de2d0a0f12bbc9.woff2 HTTP/1.1\r\nHost: cescaa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nReferer: https://cescaa.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __cf_bm=vOuBaFobJJHt2JGkBfxmwK60G8D6IyQVMT5sk6zLfGg-1791668772.3255684-1.0.1.1-TAeZ3m9ziTdsOy9Dm3_qgMAR5jdBCC6nmmHTtsbfUUqjEn8lVxafvHJfJTehEhGew0b7N7p3DDyOcvnHPJBbuySlYAJtMylSNpIXNhpFAi83EvkhJnIeNPGbMG63_vXj\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"__cf_bm","value":"vOuBaFobJJHt2JGkBfxmwK60G8D6IyQVMT5sk6zLfGg-1791668772.3255684-1.0.1.1-TAeZ3m9ziTdsOy9Dm3_qgMAR5jdBCC6nmmHTtsbfUUqjEn8lVxafvHJfJTehEhGew0b7N7p3DDyOcvnHPJBbuySlYAJtMylSNpIXNhpFAi83EvkhJnIeNPGbMG63_vXj"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 10 Oct 2026 21:46:14 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 54252\r\ncache-control: public, max-age=604800, immutable\r\nstrict-transport-security: max-age=31536000\r\nx-deployment-id: 0f99e4b75af14702f37d466a7129023b9b25e5159a3104342517539ef44a4f3a\r\nx-robots-tag: none\r\nvary: accept-encoding\r\nexpect-ct: max-age=86400, enforce\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\ncf-ray: a488d10f3d2a23eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":54252,"size_decoded":54893,"mime_type":"application/octet-stream","magic":"Web Open Font Format (Version 2), CFF, length 54252, version 1.393","md5":"ed08ceadeedb5461059386ddb069c28c","sha1":"b27ff8b21dac87646967afd269afd172fa43de69","sha256":"7d91f25ad3011801a1561726d7e46e86f5e342e93f222233ad4d03b6bd260bbd","sha512":"3831704619973926a5f6d2022364858ff375ff5a1a4ad0f797223b7c202b9e4762ef2c15ba6e36df9ff478c8449728077d58f8c086b9bdd7377faf2ef2885f77","ssdeep":"1536:IUOqaDd66lBBFLCD95lqfi+6d+K0umxiBUn:F5yY6lU95lqfl611miUn","tlshash":"2433010cdd4ba3074bbb94b4863d1dec29400a63becfeb2e9c5039da15de58986d1a34","first_seen":"2025-10-11T08:21:36.730369Z","last_seen":"2026-10-10T21:47:12.459084Z","times_seen":6,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"cescaa.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"cescaa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cescaa.com/_assets/media/795f71aab087aba9b52c0d03cac83ac8.svg","fqdn":"cescaa.com","domain":"cescaa.com","tld":"com"},"ip":{"addr":"103.169.142.0","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cescaa.com/","date":"2026-10-10T21:46:14.731Z","timestamp":1791668774731,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cescaa.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Sun, 06 Sep 2026 05:47:48 GMT","end":"Sat, 05 Dec 2026 06:46:40 GMT"},"fingerprint":{"sha1":"ED:EA:92:85:3E:13:4B:14:B2:3D:68:46:E8:43:9C:6B:3C:F1:32:DA","sha256":"7A:0F:F6:5D:4D:CF:B3:61:47:C4:54:6B:D7:C9:B4:11:9F:99:60:9F:7A:33:B6:FE:12:75:A1:FE:A9:B9:B5:C2"}}},"request":{"raw":"GET /_assets/media/795f71aab087aba9b52c0d03cac83ac8.svg HTTP/1.1\r\nHost: cescaa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://cescaa.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __cf_bm=vOuBaFobJJHt2JGkBfxmwK60G8D6IyQVMT5sk6zLfGg-1791668772.3255684-1.0.1.1-TAeZ3m9ziTdsOy9Dm3_qgMAR5jdBCC6nmmHTtsbfUUqjEn8lVxafvHJfJTehEhGew0b7N7p3DDyOcvnHPJBbuySlYAJtMylSNpIXNhpFAi83EvkhJnIeNPGbMG63_vXj\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"__cf_bm","value":"vOuBaFobJJHt2JGkBfxmwK60G8D6IyQVMT5sk6zLfGg-1791668772.3255684-1.0.1.1-TAeZ3m9ziTdsOy9Dm3_qgMAR5jdBCC6nmmHTtsbfUUqjEn8lVxafvHJfJTehEhGew0b7N7p3DDyOcvnHPJBbuySlYAJtMylSNpIXNhpFAi83EvkhJnIeNPGbMG63_vXj"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 10 Oct 2026 21:46:14 GMT\r\ncontent-type: image/svg+xml\r\ncache-control: public, max-age=604800, immutable\r\nstrict-transport-security: max-age=31536000\r\nx-deployment-id: 0f99e4b75af14702f37d466a7129023b9b25e5159a3104342517539ef44a4f3a\r\nx-robots-tag: none\r\nvary: accept-encoding\r\nexpect-ct: max-age=86400, enforce\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\npriority: u=5,i\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: a488d1121cba23eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2075,"size_decoded":1567,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"4eb45f928869a8427a4a1e4a1d5fcefd","sha1":"d6ce15cd46d83a47bde3af1098e3e73d669ad9d9","sha256":"bd07c811348b26a5798990f4beaf200dde3ab81ab8ca1ef785f9e431f568d203","sha512":"c4b2b26641008aa06a74443ca3005dba498cc01f03730b05dbe61a9d9f74244490546bfbf635adda064b3dcdb3eabe8a3f7a8325f23ed6e10d47086e3b45ea07","ssdeep":"","tlshash":"9741c042c3198776de86c26882b0699e64f2d8c5a070d1dcbccf1497f50dcd4ba5cbae","first_seen":"2025-10-06T22:04:20.686168Z","last_seen":"2026-10-10T21:47:12.544954Z","times_seen":24,"resource_available":false,"data":null}},"time_used":118,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":118,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"cescaa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"cescaa.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cescaa.com/_assets/media/b65c1c9c3fed0ecc180a3886cd7dbb1a.svg","fqdn":"cescaa.com","domain":"cescaa.com","tld":"com"},"ip":{"addr":"103.169.142.0","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cescaa.com/","date":"2026-10-10T21:46:14.737Z","timestamp":1791668774737,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cescaa.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Sun, 06 Sep 2026 05:47:48 GMT","end":"Sat, 05 Dec 2026 06:46:40 GMT"},"fingerprint":{"sha1":"ED:EA:92:85:3E:13:4B:14:B2:3D:68:46:E8:43:9C:6B:3C:F1:32:DA","sha256":"7A:0F:F6:5D:4D:CF:B3:61:47:C4:54:6B:D7:C9:B4:11:9F:99:60:9F:7A:33:B6:FE:12:75:A1:FE:A9:B9:B5:C2"}}},"request":{"raw":"GET /_assets/media/b65c1c9c3fed0ecc180a3886cd7dbb1a.svg HTTP/1.1\r\nHost: cescaa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://cescaa.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __cf_bm=vOuBaFobJJHt2JGkBfxmwK60G8D6IyQVMT5sk6zLfGg-1791668772.3255684-1.0.1.1-TAeZ3m9ziTdsOy9Dm3_qgMAR5jdBCC6nmmHTtsbfUUqjEn8lVxafvHJfJTehEhGew0b7N7p3DDyOcvnHPJBbuySlYAJtMylSNpIXNhpFAi83EvkhJnIeNPGbMG63_vXj\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"__cf_bm","value":"vOuBaFobJJHt2JGkBfxmwK60G8D6IyQVMT5sk6zLfGg-1791668772.3255684-1.0.1.1-TAeZ3m9ziTdsOy9Dm3_qgMAR5jdBCC6nmmHTtsbfUUqjEn8lVxafvHJfJTehEhGew0b7N7p3DDyOcvnHPJBbuySlYAJtMylSNpIXNhpFAi83EvkhJnIeNPGbMG63_vXj"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 10 Oct 2026 21:46:14 GMT\r\ncontent-type: image/svg+xml\r\ncache-control: public, max-age=604800, immutable\r\nstrict-transport-security: max-age=31536000\r\nx-deployment-id: 0f99e4b75af14702f37d466a7129023b9b25e5159a3104342517539ef44a4f3a\r\nx-robots-tag: none\r\nvary: accept-encoding\r\nexpect-ct: max-age=86400, enforce\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\npriority: u=5,i\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: a488d1121ce123eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1044,"size_decoded":1229,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"0e713c19ce1d278c97cb46a15f5a6209","sha1":"941d406fcc6ffa97007ada7e559a4c18cef2101d","sha256":"6d310025fd6c6c62a4ec41552ffefefd0ab4ea7366e6f19c84491b90da956a12","sha512":"736dcc16164ccb40606880a01fdc772aa3b34c2a4bdc447e996c80d2a51f9e3051339588cee6d42b2e81afa8b4fedb109e944a1a92cd2670687095c051dc15a2","ssdeep":"","tlshash":"6f11ef1983124871e6e90a685bac68a373fcf1c7209146cd66ae1f29ac413e73e35e16","first_seen":"2023-11-11T19:24:48Z","last_seen":"2026-10-10T21:47:12.536441Z","times_seen":13,"resource_available":false,"data":null}},"time_used":126,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":126,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"cescaa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"cescaa.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cescaa.com/_assets/ccb12a183b91b652.js","fqdn":"cescaa.com","domain":"cescaa.com","tld":"com"},"ip":{"addr":"103.169.142.0","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cescaa.com/","date":"2026-10-10T21:46:13.830Z","timestamp":1791668773830,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cescaa.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Sun, 06 Sep 2026 05:47:48 GMT","end":"Sat, 05 Dec 2026 06:46:40 GMT"},"fingerprint":{"sha1":"ED:EA:92:85:3E:13:4B:14:B2:3D:68:46:E8:43:9C:6B:3C:F1:32:DA","sha256":"7A:0F:F6:5D:4D:CF:B3:61:47:C4:54:6B:D7:C9:B4:11:9F:99:60:9F:7A:33:B6:FE:12:75:A1:FE:A9:B9:B5:C2"}}},"request":{"raw":"GET /_assets/ccb12a183b91b652.js HTTP/1.1\r\nHost: cescaa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://cescaa.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __cf_bm=vOuBaFobJJHt2JGkBfxmwK60G8D6IyQVMT5sk6zLfGg-1791668772.3255684-1.0.1.1-TAeZ3m9ziTdsOy9Dm3_qgMAR5jdBCC6nmmHTtsbfUUqjEn8lVxafvHJfJTehEhGew0b7N7p3DDyOcvnHPJBbuySlYAJtMylSNpIXNhpFAi83EvkhJnIeNPGbMG63_vXj\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"__cf_bm","value":"vOuBaFobJJHt2JGkBfxmwK60G8D6IyQVMT5sk6zLfGg-1791668772.3255684-1.0.1.1-TAeZ3m9ziTdsOy9Dm3_qgMAR5jdBCC6nmmHTtsbfUUqjEn8lVxafvHJfJTehEhGew0b7N7p3DDyOcvnHPJBbuySlYAJtMylSNpIXNhpFAi83EvkhJnIeNPGbMG63_vXj"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 10 Oct 2026 21:46:14 GMT\r\ncontent-type: application/javascript\r\ncache-control: public, max-age=604800, immutable\r\nstrict-transport-security: max-age=31536000\r\nx-deployment-id: 0f99e4b75af14702f37d466a7129023b9b25e5159a3104342517539ef44a4f3a\r\nx-robots-tag: none\r\nvary: accept-encoding\r\nexpect-ct: max-age=86400, enforce\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\npriority: u=3,i=?0\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: a488d10c6e9323eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":43919,"size_decoded":16391,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1467)","md5":"68ffbf4de093e0380e843b89e4a1cbdd","sha1":"317aec06bdc7bfdadf1dcf3a95504cf8fbd42c4b","sha256":"04f62c95ae31d45116b6ac41534f6868856febbaec871a08571f2e11d7af54fc","sha512":"ac26de73e5699c808368b3afecd4dab2a0647321ee37826ede2bc4b0f508a8109a2df5fbfae57b0229944cb6631c153eaa160d39e8a3f0a73a2d8423dd9ef736","ssdeep":"768:xsNtGibxcZXPxWCjI+41nenMwfKu0j/4df48dNgWpl1NIRnumyIbTJ+5Glm4O1HK:ONtGibxYXPxWCjI/wyu0jE7rNpl1NIBz","tlshash":"5a13f819b0a6a43dc57698c9c0bf218575169c0cb208dcfcb77e9ddb2ca484172beb79","first_seen":"2025-10-10T00:55:24.157091Z","last_seen":"2026-10-10T21:47:12.548111Z","times_seen":17,"resource_available":true,"data":null}},"time_used":421,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":421,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"cescaa.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"cescaa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cescaa.com/_assets/images/b46630e470f4040eba7033cf2435edce.woff","fqdn":"cescaa.com","domain":"cescaa.com","tld":"com"},"ip":{"addr":"103.169.142.0","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://cescaa.com/","date":"2026-10-10T21:46:13.975Z","timestamp":1791668773975,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cescaa.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Sun, 06 Sep 2026 05:47:48 GMT","end":"Sat, 05 Dec 2026 06:46:40 GMT"},"fingerprint":{"sha1":"ED:EA:92:85:3E:13:4B:14:B2:3D:68:46:E8:43:9C:6B:3C:F1:32:DA","sha256":"7A:0F:F6:5D:4D:CF:B3:61:47:C4:54:6B:D7:C9:B4:11:9F:99:60:9F:7A:33:B6:FE:12:75:A1:FE:A9:B9:B5:C2"}}},"request":{"raw":"GET /_assets/images/b46630e470f4040eba7033cf2435edce.woff HTTP/1.1\r\nHost: cescaa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nReferer: https://cescaa.com/_assets/d9814184d4cd0bfc.ltr.css\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __cf_bm=vOuBaFobJJHt2JGkBfxmwK60G8D6IyQVMT5sk6zLfGg-1791668772.3255684-1.0.1.1-TAeZ3m9ziTdsOy9Dm3_qgMAR5jdBCC6nmmHTtsbfUUqjEn8lVxafvHJfJTehEhGew0b7N7p3DDyOcvnHPJBbuySlYAJtMylSNpIXNhpFAi83EvkhJnIeNPGbMG63_vXj\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"__cf_bm","value":"vOuBaFobJJHt2JGkBfxmwK60G8D6IyQVMT5sk6zLfGg-1791668772.3255684-1.0.1.1-TAeZ3m9ziTdsOy9Dm3_qgMAR5jdBCC6nmmHTtsbfUUqjEn8lVxafvHJfJTehEhGew0b7N7p3DDyOcvnHPJBbuySlYAJtMylSNpIXNhpFAi83EvkhJnIeNPGbMG63_vXj"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 10 Oct 2026 21:46:14 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 1136\r\ncache-control: public, max-age=604800, immutable\r\nstrict-transport-security: max-age=31536000\r\nx-deployment-id: 0f99e4b75af14702f37d466a7129023b9b25e5159a3104342517539ef44a4f3a\r\nx-robots-tag: none\r\nvary: accept-encoding\r\nexpect-ct: max-age=86400, enforce\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\ncf-ray: a488d10d588923eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1136,"size_decoded":1776,"mime_type":"application/octet-stream","magic":"Web Open Font Format, CFF, length 1136, version 1.0","md5":"b46630e470f4040eba7033cf2435edce","sha1":"ba26d2e1dc5bbc01a80446ac65bffb991953764a","sha256":"3e32aea52247a81c38b4735e84a28ba27b0cbc33f007a1d14e81e64ba766eadd","sha512":"eff809cc87517f9048f1c7a16561ef6f956ed0fe50b3382afaf111b6f159e769dd88af0dc0d8a03b748d407c5c554789b6148a137ac700f776a260fd153c0ae7","ssdeep":"","tlshash":"6321b6a2ea60c260dc4506707ae89bee732490ce2657be851e6b043bb48a304e380066","first_seen":"2023-04-08T14:15:10Z","last_seen":"2026-10-11T02:07:22.721145Z","times_seen":3563,"resource_available":false,"data":null}},"time_used":121,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":121,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"cescaa.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"cescaa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cescaa.com/_assets/media/795f71aab087aba9b52c0d03cac83ac8.svg","fqdn":"cescaa.com","domain":"cescaa.com","tld":"com"},"ip":{"addr":"103.169.142.0","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://cescaa.com/","date":"2026-10-10T21:46:14.877Z","timestamp":1791668774877,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cescaa.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Sun, 06 Sep 2026 05:47:48 GMT","end":"Sat, 05 Dec 2026 06:46:40 GMT"},"fingerprint":{"sha1":"ED:EA:92:85:3E:13:4B:14:B2:3D:68:46:E8:43:9C:6B:3C:F1:32:DA","sha256":"7A:0F:F6:5D:4D:CF:B3:61:47:C4:54:6B:D7:C9:B4:11:9F:99:60:9F:7A:33:B6:FE:12:75:A1:FE:A9:B9:B5:C2"}}},"request":{"raw":"GET /_assets/media/795f71aab087aba9b52c0d03cac83ac8.svg HTTP/1.1\r\nHost: cescaa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://cescaa.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __cf_bm=vOuBaFobJJHt2JGkBfxmwK60G8D6IyQVMT5sk6zLfGg-1791668772.3255684-1.0.1.1-TAeZ3m9ziTdsOy9Dm3_qgMAR5jdBCC6nmmHTtsbfUUqjEn8lVxafvHJfJTehEhGew0b7N7p3DDyOcvnHPJBbuySlYAJtMylSNpIXNhpFAi83EvkhJnIeNPGbMG63_vXj\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"__cf_bm","value":"vOuBaFobJJHt2JGkBfxmwK60G8D6IyQVMT5sk6zLfGg-1791668772.3255684-1.0.1.1-TAeZ3m9ziTdsOy9Dm3_qgMAR5jdBCC6nmmHTtsbfUUqjEn8lVxafvHJfJTehEhGew0b7N7p3DDyOcvnHPJBbuySlYAJtMylSNpIXNhpFAi83EvkhJnIeNPGbMG63_vXj"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 10 Oct 2026 21:46:14 GMT\r\ncontent-type: image/svg+xml\r\ncache-control: public, max-age=604800, immutable\r\nstrict-transport-security: max-age=31536000\r\nx-deployment-id: 0f99e4b75af14702f37d466a7129023b9b25e5159a3104342517539ef44a4f3a\r\nx-robots-tag: none\r\nvary: accept-encoding\r\nexpect-ct: max-age=86400, enforce\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\npriority: u=3,i=?0\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: a488d112ff8823eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2075,"size_decoded":1570,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"4eb45f928869a8427a4a1e4a1d5fcefd","sha1":"d6ce15cd46d83a47bde3af1098e3e73d669ad9d9","sha256":"bd07c811348b26a5798990f4beaf200dde3ab81ab8ca1ef785f9e431f568d203","sha512":"c4b2b26641008aa06a74443ca3005dba498cc01f03730b05dbe61a9d9f74244490546bfbf635adda064b3dcdb3eabe8a3f7a8325f23ed6e10d47086e3b45ea07","ssdeep":"","tlshash":"9741c042c3198776de86c26882b0699e64f2d8c5a070d1dcbccf1497f50dcd4ba5cbae","first_seen":"2025-10-06T22:04:20.686168Z","last_seen":"2026-10-10T21:47:12.544954Z","times_seen":24,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"cescaa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"cescaa.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cescaa.com/_assets/fonts/673cfd68bc7f23224a573c827b4dd620.woff2","fqdn":"cescaa.com","domain":"cescaa.com","tld":"com"},"ip":{"addr":"103.169.142.0","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://cescaa.com/","date":"2026-10-10T21:46:14.172Z","timestamp":1791668774172,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cescaa.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Sun, 06 Sep 2026 05:47:48 GMT","end":"Sat, 05 Dec 2026 06:46:40 GMT"},"fingerprint":{"sha1":"ED:EA:92:85:3E:13:4B:14:B2:3D:68:46:E8:43:9C:6B:3C:F1:32:DA","sha256":"7A:0F:F6:5D:4D:CF:B3:61:47:C4:54:6B:D7:C9:B4:11:9F:99:60:9F:7A:33:B6:FE:12:75:A1:FE:A9:B9:B5:C2"}}},"request":{"raw":"GET /_assets/fonts/673cfd68bc7f23224a573c827b4dd620.woff2 HTTP/1.1\r\nHost: cescaa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nReferer: https://cescaa.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __cf_bm=vOuBaFobJJHt2JGkBfxmwK60G8D6IyQVMT5sk6zLfGg-1791668772.3255684-1.0.1.1-TAeZ3m9ziTdsOy9Dm3_qgMAR5jdBCC6nmmHTtsbfUUqjEn8lVxafvHJfJTehEhGew0b7N7p3DDyOcvnHPJBbuySlYAJtMylSNpIXNhpFAi83EvkhJnIeNPGbMG63_vXj\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"__cf_bm","value":"vOuBaFobJJHt2JGkBfxmwK60G8D6IyQVMT5sk6zLfGg-1791668772.3255684-1.0.1.1-TAeZ3m9ziTdsOy9Dm3_qgMAR5jdBCC6nmmHTtsbfUUqjEn8lVxafvHJfJTehEhGew0b7N7p3DDyOcvnHPJBbuySlYAJtMylSNpIXNhpFAi83EvkhJnIeNPGbMG63_vXj"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 10 Oct 2026 21:46:14 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 53080\r\ncache-control: public, max-age=604800, immutable\r\nstrict-transport-security: max-age=31536000\r\nx-deployment-id: 0f99e4b75af14702f37d466a7129023b9b25e5159a3104342517539ef44a4f3a\r\nx-robots-tag: none\r\nvary: accept-encoding\r\nexpect-ct: max-age=86400, enforce\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\ncf-ray: a488d10e9b8623eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":53080,"size_decoded":53721,"mime_type":"application/octet-stream","magic":"Web Open Font Format (Version 2), CFF, length 53080, version 1.393","md5":"04433c9644d7b2a4e893f52976c4a99e","sha1":"d0a060c25a1e59ef229f5fd4b2e0c2909a56d553","sha256":"ec7e5c9fe8b9304c6ab5ec7f394447cf04ccfaf1eeecdccdf6c3ed73741f932b","sha512":"a54c455851806ec8408e7ff52c40f410747fa10260338cdb1c4881c5e9f04ef37667d0d259ce32957be16f35ffe503475a77d84ee395ba5bfa24a47be6817e67","ssdeep":"1536:S9zqpN2OeGJBHnyF3qU4SrtdGg+8MeiFGBah:lL1g6U4kWkMeiFGi","tlshash":"ae33f1ef4994c644718b8fb676e95b262076c14da5aacf0431ff98887c60704e8f6e1b","first_seen":"2025-10-11T08:21:36.727378Z","last_seen":"2026-10-10T21:47:12.473461Z","times_seen":4,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"cescaa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"cescaa.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cescaa.com/_assets/fonts/673cfd68bc7f23224a573c827b4dd620.woff2","fqdn":"cescaa.com","domain":"cescaa.com","tld":"com"},"ip":{"addr":"103.169.142.0","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://cescaa.com/","date":"2026-10-10T21:46:14.173Z","timestamp":1791668774173,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cescaa.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Sun, 06 Sep 2026 05:47:48 GMT","end":"Sat, 05 Dec 2026 06:46:40 GMT"},"fingerprint":{"sha1":"ED:EA:92:85:3E:13:4B:14:B2:3D:68:46:E8:43:9C:6B:3C:F1:32:DA","sha256":"7A:0F:F6:5D:4D:CF:B3:61:47:C4:54:6B:D7:C9:B4:11:9F:99:60:9F:7A:33:B6:FE:12:75:A1:FE:A9:B9:B5:C2"}}},"request":{"raw":"GET /_assets/fonts/673cfd68bc7f23224a573c827b4dd620.woff2 HTTP/1.1\r\nHost: cescaa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nReferer: https://cescaa.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __cf_bm=vOuBaFobJJHt2JGkBfxmwK60G8D6IyQVMT5sk6zLfGg-1791668772.3255684-1.0.1.1-TAeZ3m9ziTdsOy9Dm3_qgMAR5jdBCC6nmmHTtsbfUUqjEn8lVxafvHJfJTehEhGew0b7N7p3DDyOcvnHPJBbuySlYAJtMylSNpIXNhpFAi83EvkhJnIeNPGbMG63_vXj\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"__cf_bm","value":"vOuBaFobJJHt2JGkBfxmwK60G8D6IyQVMT5sk6zLfGg-1791668772.3255684-1.0.1.1-TAeZ3m9ziTdsOy9Dm3_qgMAR5jdBCC6nmmHTtsbfUUqjEn8lVxafvHJfJTehEhGew0b7N7p3DDyOcvnHPJBbuySlYAJtMylSNpIXNhpFAi83EvkhJnIeNPGbMG63_vXj"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 10 Oct 2026 21:46:14 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 53080\r\ncache-control: public, max-age=604800, immutable\r\nstrict-transport-security: max-age=31536000\r\nx-deployment-id: 0f99e4b75af14702f37d466a7129023b9b25e5159a3104342517539ef44a4f3a\r\nx-robots-tag: none\r\nvary: accept-encoding\r\nexpect-ct: max-age=86400, enforce\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\ncf-ray: a488d10e9b8b23eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":53080,"size_decoded":53721,"mime_type":"application/octet-stream","magic":"Web Open Font Format (Version 2), CFF, length 53080, version 1.393","md5":"04433c9644d7b2a4e893f52976c4a99e","sha1":"d0a060c25a1e59ef229f5fd4b2e0c2909a56d553","sha256":"ec7e5c9fe8b9304c6ab5ec7f394447cf04ccfaf1eeecdccdf6c3ed73741f932b","sha512":"a54c455851806ec8408e7ff52c40f410747fa10260338cdb1c4881c5e9f04ef37667d0d259ce32957be16f35ffe503475a77d84ee395ba5bfa24a47be6817e67","ssdeep":"1536:S9zqpN2OeGJBHnyF3qU4SrtdGg+8MeiFGBah:lL1g6U4kWkMeiFGi","tlshash":"ae33f1ef4994c644718b8fb676e95b262076c14da5aacf0431ff98887c60704e8f6e1b","first_seen":"2025-10-11T08:21:36.727378Z","last_seen":"2026-10-10T21:47:12.473461Z","times_seen":4,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"cescaa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"cescaa.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cescaa.com/_assets/fonts/673cfd68bc7f23224a573c827b4dd620.woff2","fqdn":"cescaa.com","domain":"cescaa.com","tld":"com"},"ip":{"addr":"103.169.142.0","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://cescaa.com/","date":"2026-10-10T21:46:14.178Z","timestamp":1791668774178,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cescaa.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Sun, 06 Sep 2026 05:47:48 GMT","end":"Sat, 05 Dec 2026 06:46:40 GMT"},"fingerprint":{"sha1":"ED:EA:92:85:3E:13:4B:14:B2:3D:68:46:E8:43:9C:6B:3C:F1:32:DA","sha256":"7A:0F:F6:5D:4D:CF:B3:61:47:C4:54:6B:D7:C9:B4:11:9F:99:60:9F:7A:33:B6:FE:12:75:A1:FE:A9:B9:B5:C2"}}},"request":{"raw":"GET /_assets/fonts/673cfd68bc7f23224a573c827b4dd620.woff2 HTTP/1.1\r\nHost: cescaa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nReferer: https://cescaa.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __cf_bm=vOuBaFobJJHt2JGkBfxmwK60G8D6IyQVMT5sk6zLfGg-1791668772.3255684-1.0.1.1-TAeZ3m9ziTdsOy9Dm3_qgMAR5jdBCC6nmmHTtsbfUUqjEn8lVxafvHJfJTehEhGew0b7N7p3DDyOcvnHPJBbuySlYAJtMylSNpIXNhpFAi83EvkhJnIeNPGbMG63_vXj\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"__cf_bm","value":"vOuBaFobJJHt2JGkBfxmwK60G8D6IyQVMT5sk6zLfGg-1791668772.3255684-1.0.1.1-TAeZ3m9ziTdsOy9Dm3_qgMAR5jdBCC6nmmHTtsbfUUqjEn8lVxafvHJfJTehEhGew0b7N7p3DDyOcvnHPJBbuySlYAJtMylSNpIXNhpFAi83EvkhJnIeNPGbMG63_vXj"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 10 Oct 2026 21:46:14 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 53080\r\ncache-control: public, max-age=604800, immutable\r\nstrict-transport-security: max-age=31536000\r\nx-deployment-id: 0f99e4b75af14702f37d466a7129023b9b25e5159a3104342517539ef44a4f3a\r\nx-robots-tag: none\r\nvary: accept-encoding\r\nexpect-ct: max-age=86400, enforce\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\ncf-ray: a488d10e9b9c23eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":53080,"size_decoded":53721,"mime_type":"application/octet-stream","magic":"Web Open Font Format (Version 2), CFF, length 53080, version 1.393","md5":"04433c9644d7b2a4e893f52976c4a99e","sha1":"d0a060c25a1e59ef229f5fd4b2e0c2909a56d553","sha256":"ec7e5c9fe8b9304c6ab5ec7f394447cf04ccfaf1eeecdccdf6c3ed73741f932b","sha512":"a54c455851806ec8408e7ff52c40f410747fa10260338cdb1c4881c5e9f04ef37667d0d259ce32957be16f35ffe503475a77d84ee395ba5bfa24a47be6817e67","ssdeep":"1536:S9zqpN2OeGJBHnyF3qU4SrtdGg+8MeiFGBah:lL1g6U4kWkMeiFGi","tlshash":"ae33f1ef4994c644718b8fb676e95b262076c14da5aacf0431ff98887c60704e8f6e1b","first_seen":"2025-10-11T08:21:36.727378Z","last_seen":"2026-10-10T21:47:12.473461Z","times_seen":4,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"cescaa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"cescaa.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cescaa.com/_assets/fonts/e44a76124d0e53c15573a43751bda1dc.woff2","fqdn":"cescaa.com","domain":"cescaa.com","tld":"com"},"ip":{"addr":"103.169.142.0","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://cescaa.com/","date":"2026-10-10T21:46:14.221Z","timestamp":1791668774221,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cescaa.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Sun, 06 Sep 2026 05:47:48 GMT","end":"Sat, 05 Dec 2026 06:46:40 GMT"},"fingerprint":{"sha1":"ED:EA:92:85:3E:13:4B:14:B2:3D:68:46:E8:43:9C:6B:3C:F1:32:DA","sha256":"7A:0F:F6:5D:4D:CF:B3:61:47:C4:54:6B:D7:C9:B4:11:9F:99:60:9F:7A:33:B6:FE:12:75:A1:FE:A9:B9:B5:C2"}}},"request":{"raw":"GET /_assets/fonts/e44a76124d0e53c15573a43751bda1dc.woff2 HTTP/1.1\r\nHost: cescaa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nReferer: https://cescaa.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __cf_bm=vOuBaFobJJHt2JGkBfxmwK60G8D6IyQVMT5sk6zLfGg-1791668772.3255684-1.0.1.1-TAeZ3m9ziTdsOy9Dm3_qgMAR5jdBCC6nmmHTtsbfUUqjEn8lVxafvHJfJTehEhGew0b7N7p3DDyOcvnHPJBbuySlYAJtMylSNpIXNhpFAi83EvkhJnIeNPGbMG63_vXj\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"__cf_bm","value":"vOuBaFobJJHt2JGkBfxmwK60G8D6IyQVMT5sk6zLfGg-1791668772.3255684-1.0.1.1-TAeZ3m9ziTdsOy9Dm3_qgMAR5jdBCC6nmmHTtsbfUUqjEn8lVxafvHJfJTehEhGew0b7N7p3DDyOcvnHPJBbuySlYAJtMylSNpIXNhpFAi83EvkhJnIeNPGbMG63_vXj"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 10 Oct 2026 21:46:14 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 51760\r\ncache-control: public, max-age=604800, immutable\r\nstrict-transport-security: max-age=31536000\r\nx-deployment-id: 0f99e4b75af14702f37d466a7129023b9b25e5159a3104342517539ef44a4f3a\r\nx-robots-tag: none\r\nvary: accept-encoding\r\nexpect-ct: max-age=86400, enforce\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\ncf-ray: a488d10eec4223eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":51760,"size_decoded":52401,"mime_type":"application/octet-stream","magic":"Web Open Font Format (Version 2), CFF, length 51760, version 1.393","md5":"83c4f958dac8837aa60859d214f16e44","sha1":"dbf3a429034a016d8a399db27af6341b7d747289","sha256":"3f947cf511bb13f29650c3956ff65b84419f3d4ec719cd2a41163aa7dc9f0773","sha512":"3642325459c0102784a5e966808504454b3ac0f65ffad1954710dbea17fa46d5722af3723f83bc79319e30074e02a830bb2e6de9c6495081b77cdabaa90f569e","ssdeep":"1536:VivFXIgmL8w5oPI1xxiUGwKt3UA3wzOBfOS:Vi9XIhouPiRAzOBfL","tlshash":"9233f20f4fa9473a5802e82d5b804ca682c318a356e00bef52dcb68c571bb75f865df7","first_seen":"2025-10-08T09:36:53.284909Z","last_seen":"2026-10-10T21:47:12.489305Z","times_seen":4,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"cescaa.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"cescaa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cescaa.com/_assets/fonts/e44a76124d0e53c15573a43751bda1dc.woff2","fqdn":"cescaa.com","domain":"cescaa.com","tld":"com"},"ip":{"addr":"103.169.142.0","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://cescaa.com/","date":"2026-10-10T21:46:14.223Z","timestamp":1791668774223,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cescaa.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Sun, 06 Sep 2026 05:47:48 GMT","end":"Sat, 05 Dec 2026 06:46:40 GMT"},"fingerprint":{"sha1":"ED:EA:92:85:3E:13:4B:14:B2:3D:68:46:E8:43:9C:6B:3C:F1:32:DA","sha256":"7A:0F:F6:5D:4D:CF:B3:61:47:C4:54:6B:D7:C9:B4:11:9F:99:60:9F:7A:33:B6:FE:12:75:A1:FE:A9:B9:B5:C2"}}},"request":{"raw":"GET /_assets/fonts/e44a76124d0e53c15573a43751bda1dc.woff2 HTTP/1.1\r\nHost: cescaa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nReferer: https://cescaa.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __cf_bm=vOuBaFobJJHt2JGkBfxmwK60G8D6IyQVMT5sk6zLfGg-1791668772.3255684-1.0.1.1-TAeZ3m9ziTdsOy9Dm3_qgMAR5jdBCC6nmmHTtsbfUUqjEn8lVxafvHJfJTehEhGew0b7N7p3DDyOcvnHPJBbuySlYAJtMylSNpIXNhpFAi83EvkhJnIeNPGbMG63_vXj\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"__cf_bm","value":"vOuBaFobJJHt2JGkBfxmwK60G8D6IyQVMT5sk6zLfGg-1791668772.3255684-1.0.1.1-TAeZ3m9ziTdsOy9Dm3_qgMAR5jdBCC6nmmHTtsbfUUqjEn8lVxafvHJfJTehEhGew0b7N7p3DDyOcvnHPJBbuySlYAJtMylSNpIXNhpFAi83EvkhJnIeNPGbMG63_vXj"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 10 Oct 2026 21:46:14 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 51760\r\ncache-control: public, max-age=604800, immutable\r\nstrict-transport-security: max-age=31536000\r\nx-deployment-id: 0f99e4b75af14702f37d466a7129023b9b25e5159a3104342517539ef44a4f3a\r\nx-robots-tag: none\r\nvary: accept-encoding\r\nexpect-ct: max-age=86400, enforce\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\ncf-ray: a488d10eec4823eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":51760,"size_decoded":52401,"mime_type":"application/octet-stream","magic":"Web Open Font Format (Version 2), CFF, length 51760, version 1.393","md5":"83c4f958dac8837aa60859d214f16e44","sha1":"dbf3a429034a016d8a399db27af6341b7d747289","sha256":"3f947cf511bb13f29650c3956ff65b84419f3d4ec719cd2a41163aa7dc9f0773","sha512":"3642325459c0102784a5e966808504454b3ac0f65ffad1954710dbea17fa46d5722af3723f83bc79319e30074e02a830bb2e6de9c6495081b77cdabaa90f569e","ssdeep":"1536:VivFXIgmL8w5oPI1xxiUGwKt3UA3wzOBfOS:Vi9XIhouPiRAzOBfL","tlshash":"9233f20f4fa9473a5802e82d5b804ca682c318a356e00bef52dcb68c571bb75f865df7","first_seen":"2025-10-08T09:36:53.284909Z","last_seen":"2026-10-10T21:47:12.489305Z","times_seen":4,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"cescaa.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"cescaa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cescaa.com/_assets/8b151872c2943599.s4le6a.vendor.js","fqdn":"cescaa.com","domain":"cescaa.com","tld":"com"},"ip":{"addr":"103.169.142.0","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cescaa.com/","date":"2026-10-10T21:46:12.640Z","timestamp":1791668772640,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cescaa.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Sun, 06 Sep 2026 05:47:48 GMT","end":"Sat, 05 Dec 2026 06:46:40 GMT"},"fingerprint":{"sha1":"ED:EA:92:85:3E:13:4B:14:B2:3D:68:46:E8:43:9C:6B:3C:F1:32:DA","sha256":"7A:0F:F6:5D:4D:CF:B3:61:47:C4:54:6B:D7:C9:B4:11:9F:99:60:9F:7A:33:B6:FE:12:75:A1:FE:A9:B9:B5:C2"}}},"request":{"raw":"GET /_assets/8b151872c2943599.s4le6a.vendor.js HTTP/1.1\r\nHost: cescaa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://cescaa.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __cf_bm=vOuBaFobJJHt2JGkBfxmwK60G8D6IyQVMT5sk6zLfGg-1791668772.3255684-1.0.1.1-TAeZ3m9ziTdsOy9Dm3_qgMAR5jdBCC6nmmHTtsbfUUqjEn8lVxafvHJfJTehEhGew0b7N7p3DDyOcvnHPJBbuySlYAJtMylSNpIXNhpFAi83EvkhJnIeNPGbMG63_vXj\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"__cf_bm","value":"vOuBaFobJJHt2JGkBfxmwK60G8D6IyQVMT5sk6zLfGg-1791668772.3255684-1.0.1.1-TAeZ3m9ziTdsOy9Dm3_qgMAR5jdBCC6nmmHTtsbfUUqjEn8lVxafvHJfJTehEhGew0b7N7p3DDyOcvnHPJBbuySlYAJtMylSNpIXNhpFAi83EvkhJnIeNPGbMG63_vXj"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 10 Oct 2026 21:46:12 GMT\r\ncontent-type: application/javascript\r\ncache-control: public, max-age=604800, immutable\r\nstrict-transport-security: max-age=31536000\r\nx-deployment-id: 0f99e4b75af14702f37d466a7129023b9b25e5159a3104342517539ef44a4f3a\r\nx-robots-tag: none\r\nvary: accept-encoding\r\nexpect-ct: max-age=86400, enforce\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\npriority: u=1,i=?0\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: a488d1050add23eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":248257,"size_decoded":77422,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65448)","md5":"90d274470f498844ef68fda22b7cb3d3","sha1":"0b2daf885a94104e02b529238d939e56f3df27e8","sha256":"fa4657d50d2b80d018cd7e903c0d5256616ceaa9a19b31f2d08d36b5140dd387","sha512":"28901d714899ea328fd86a23af0613a60f7d1b37998cbc81e570ea2181ac3cef18363abc471d9b8c401f83c81794be7973a979c8ec8f4362d7a14172d37c47eb","ssdeep":"3072:1ROYsFEYVYxAs2vLhp+xUjPYrJ5ZmKmJEwulHaMYzvVPR6:mEYVYh2Fp+WbY1gEVYzvVPR6","tlshash":"f83419dc3995f1616ab352b740af1407b33d392b280d4960b211fcd9b8b845ea17bfad","first_seen":"2025-09-08T11:36:21.437322Z","last_seen":"2026-10-10T21:47:12.550927Z","times_seen":184,"resource_available":true,"data":null}},"time_used":138,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":137,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"cescaa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"cescaa.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cescaa.com/_assets/9a9d2935a08d2ba3.en.js","fqdn":"cescaa.com","domain":"cescaa.com","tld":"com"},"ip":{"addr":"103.169.142.0","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cescaa.com/","date":"2026-10-10T21:46:12.644Z","timestamp":1791668772644,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cescaa.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Sun, 06 Sep 2026 05:47:48 GMT","end":"Sat, 05 Dec 2026 06:46:40 GMT"},"fingerprint":{"sha1":"ED:EA:92:85:3E:13:4B:14:B2:3D:68:46:E8:43:9C:6B:3C:F1:32:DA","sha256":"7A:0F:F6:5D:4D:CF:B3:61:47:C4:54:6B:D7:C9:B4:11:9F:99:60:9F:7A:33:B6:FE:12:75:A1:FE:A9:B9:B5:C2"}}},"request":{"raw":"GET /_assets/9a9d2935a08d2ba3.en.js HTTP/1.1\r\nHost: cescaa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://cescaa.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __cf_bm=vOuBaFobJJHt2JGkBfxmwK60G8D6IyQVMT5sk6zLfGg-1791668772.3255684-1.0.1.1-TAeZ3m9ziTdsOy9Dm3_qgMAR5jdBCC6nmmHTtsbfUUqjEn8lVxafvHJfJTehEhGew0b7N7p3DDyOcvnHPJBbuySlYAJtMylSNpIXNhpFAi83EvkhJnIeNPGbMG63_vXj\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"__cf_bm","value":"vOuBaFobJJHt2JGkBfxmwK60G8D6IyQVMT5sk6zLfGg-1791668772.3255684-1.0.1.1-TAeZ3m9ziTdsOy9Dm3_qgMAR5jdBCC6nmmHTtsbfUUqjEn8lVxafvHJfJTehEhGew0b7N7p3DDyOcvnHPJBbuySlYAJtMylSNpIXNhpFAi83EvkhJnIeNPGbMG63_vXj"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 10 Oct 2026 21:46:12 GMT\r\ncontent-type: application/javascript\r\ncache-control: public, max-age=604800, immutable\r\nstrict-transport-security: max-age=31536000\r\nx-deployment-id: 0f99e4b75af14702f37d466a7129023b9b25e5159a3104342517539ef44a4f3a\r\nx-robots-tag: none\r\nvary: accept-encoding\r\nexpect-ct: max-age=86400, enforce\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\npriority: u=1,i=?0\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: a488d1050aea23eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":259,"size_decoded":786,"mime_type":"application/javascript","magic":"ASCII text","md5":"f724012587f7df7b53a9c94f3af65672","sha1":"cc62b459bbc303ddaa4c76a468ae8ddfbd4d950e","sha256":"cc7814171cf2e62068f48b042b2de56a7f729ff8f1292b553d5482e0966ed4f7","sha512":"ff7dee24b60a65d6e8fe65b86f32ae7a452a899698ff5daf3a20def0530eb905a33674e4d7274140f2364314c0cbe5228e987e8174fa84a463de158a0e31884e","ssdeep":"","tlshash":"c1d05e6600d1dbf4ff7f1fbdc39629862d0247000496e6ac8471428537b8c43cba0598","first_seen":"2025-09-03T09:35:06.490607Z","last_seen":"2026-10-10T21:47:12.552834Z","times_seen":55,"resource_available":true,"data":null}},"time_used":123,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":123,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"cescaa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"cescaa.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cescaa.com/_assets/97b1cac31995460c.js","fqdn":"cescaa.com","domain":"cescaa.com","tld":"com"},"ip":{"addr":"103.169.142.0","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cescaa.com/","date":"2026-10-10T21:46:13.832Z","timestamp":1791668773832,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cescaa.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Sun, 06 Sep 2026 05:47:48 GMT","end":"Sat, 05 Dec 2026 06:46:40 GMT"},"fingerprint":{"sha1":"ED:EA:92:85:3E:13:4B:14:B2:3D:68:46:E8:43:9C:6B:3C:F1:32:DA","sha256":"7A:0F:F6:5D:4D:CF:B3:61:47:C4:54:6B:D7:C9:B4:11:9F:99:60:9F:7A:33:B6:FE:12:75:A1:FE:A9:B9:B5:C2"}}},"request":{"raw":"GET /_assets/97b1cac31995460c.js HTTP/1.1\r\nHost: cescaa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://cescaa.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __cf_bm=vOuBaFobJJHt2JGkBfxmwK60G8D6IyQVMT5sk6zLfGg-1791668772.3255684-1.0.1.1-TAeZ3m9ziTdsOy9Dm3_qgMAR5jdBCC6nmmHTtsbfUUqjEn8lVxafvHJfJTehEhGew0b7N7p3DDyOcvnHPJBbuySlYAJtMylSNpIXNhpFAi83EvkhJnIeNPGbMG63_vXj\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"__cf_bm","value":"vOuBaFobJJHt2JGkBfxmwK60G8D6IyQVMT5sk6zLfGg-1791668772.3255684-1.0.1.1-TAeZ3m9ziTdsOy9Dm3_qgMAR5jdBCC6nmmHTtsbfUUqjEn8lVxafvHJfJTehEhGew0b7N7p3DDyOcvnHPJBbuySlYAJtMylSNpIXNhpFAi83EvkhJnIeNPGbMG63_vXj"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 10 Oct 2026 21:46:13 GMT\r\ncontent-type: application/javascript\r\ncache-control: public, max-age=604800, immutable\r\nstrict-transport-security: max-age=31536000\r\nx-deployment-id: 0f99e4b75af14702f37d466a7129023b9b25e5159a3104342517539ef44a4f3a\r\nx-robots-tag: none\r\nvary: accept-encoding\r\nexpect-ct: max-age=86400, enforce\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\npriority: u=3,i=?0\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: a488d10c7e9823eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":409,"size_decoded":839,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"02efa161e6636681b11b77b92159a2ce","sha1":"49fcb93cb37df59db6445739995708f1e1801519","sha256":"79582424c6c09f560cac85d6451f16019054b99f1f99104eda32cc7f724a4e10","sha512":"0badcd182a6bdd06248151e40e192fec1ef04e6a6ca0504716f1b0ae4dbe9adb9f6c06e935ee5f8bd550402a357e8d36ecfe49bd2885035d8679df8d725f8b6b","ssdeep":"","tlshash":"e5e0e5947d56fd0b309f20e0800e2a24071be6726c59aec6b071885508f394d8323e64","first_seen":"2025-07-01T23:02:20.455824Z","last_seen":"2026-10-10T21:47:12.554883Z","times_seen":519,"resource_available":true,"data":null}},"time_used":116,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":116,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"cescaa.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"cescaa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cescaa.com/_assets/fonts/e44a76124d0e53c15573a43751bda1dc.woff2","fqdn":"cescaa.com","domain":"cescaa.com","tld":"com"},"ip":{"addr":"103.169.142.0","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://cescaa.com/","date":"2026-10-10T21:46:14.217Z","timestamp":1791668774217,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cescaa.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Sun, 06 Sep 2026 05:47:48 GMT","end":"Sat, 05 Dec 2026 06:46:40 GMT"},"fingerprint":{"sha1":"ED:EA:92:85:3E:13:4B:14:B2:3D:68:46:E8:43:9C:6B:3C:F1:32:DA","sha256":"7A:0F:F6:5D:4D:CF:B3:61:47:C4:54:6B:D7:C9:B4:11:9F:99:60:9F:7A:33:B6:FE:12:75:A1:FE:A9:B9:B5:C2"}}},"request":{"raw":"GET /_assets/fonts/e44a76124d0e53c15573a43751bda1dc.woff2 HTTP/1.1\r\nHost: cescaa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nReferer: https://cescaa.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __cf_bm=vOuBaFobJJHt2JGkBfxmwK60G8D6IyQVMT5sk6zLfGg-1791668772.3255684-1.0.1.1-TAeZ3m9ziTdsOy9Dm3_qgMAR5jdBCC6nmmHTtsbfUUqjEn8lVxafvHJfJTehEhGew0b7N7p3DDyOcvnHPJBbuySlYAJtMylSNpIXNhpFAi83EvkhJnIeNPGbMG63_vXj\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"__cf_bm","value":"vOuBaFobJJHt2JGkBfxmwK60G8D6IyQVMT5sk6zLfGg-1791668772.3255684-1.0.1.1-TAeZ3m9ziTdsOy9Dm3_qgMAR5jdBCC6nmmHTtsbfUUqjEn8lVxafvHJfJTehEhGew0b7N7p3DDyOcvnHPJBbuySlYAJtMylSNpIXNhpFAi83EvkhJnIeNPGbMG63_vXj"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 10 Oct 2026 21:46:14 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 51760\r\ncache-control: public, max-age=604800, immutable\r\nstrict-transport-security: max-age=31536000\r\nx-deployment-id: 0f99e4b75af14702f37d466a7129023b9b25e5159a3104342517539ef44a4f3a\r\nx-robots-tag: none\r\nvary: accept-encoding\r\nexpect-ct: max-age=86400, enforce\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\ncf-ray: a488d10edc3023eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":51760,"size_decoded":52401,"mime_type":"application/octet-stream","magic":"Web Open Font Format (Version 2), CFF, length 51760, version 1.393","md5":"83c4f958dac8837aa60859d214f16e44","sha1":"dbf3a429034a016d8a399db27af6341b7d747289","sha256":"3f947cf511bb13f29650c3956ff65b84419f3d4ec719cd2a41163aa7dc9f0773","sha512":"3642325459c0102784a5e966808504454b3ac0f65ffad1954710dbea17fa46d5722af3723f83bc79319e30074e02a830bb2e6de9c6495081b77cdabaa90f569e","ssdeep":"1536:VivFXIgmL8w5oPI1xxiUGwKt3UA3wzOBfOS:Vi9XIhouPiRAzOBfL","tlshash":"9233f20f4fa9473a5802e82d5b804ca682c318a356e00bef52dcb68c571bb75f865df7","first_seen":"2025-10-08T09:36:53.284909Z","last_seen":"2026-10-10T21:47:12.489305Z","times_seen":4,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"cescaa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"cescaa.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cescaa.com/_assets/6d708af84f85a6a6.js","fqdn":"cescaa.com","domain":"cescaa.com","tld":"com"},"ip":{"addr":"103.169.142.0","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cescaa.com/","date":"2026-10-10T21:46:13.839Z","timestamp":1791668773839,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cescaa.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Sun, 06 Sep 2026 05:47:48 GMT","end":"Sat, 05 Dec 2026 06:46:40 GMT"},"fingerprint":{"sha1":"ED:EA:92:85:3E:13:4B:14:B2:3D:68:46:E8:43:9C:6B:3C:F1:32:DA","sha256":"7A:0F:F6:5D:4D:CF:B3:61:47:C4:54:6B:D7:C9:B4:11:9F:99:60:9F:7A:33:B6:FE:12:75:A1:FE:A9:B9:B5:C2"}}},"request":{"raw":"GET /_assets/6d708af84f85a6a6.js HTTP/1.1\r\nHost: cescaa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://cescaa.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __cf_bm=vOuBaFobJJHt2JGkBfxmwK60G8D6IyQVMT5sk6zLfGg-1791668772.3255684-1.0.1.1-TAeZ3m9ziTdsOy9Dm3_qgMAR5jdBCC6nmmHTtsbfUUqjEn8lVxafvHJfJTehEhGew0b7N7p3DDyOcvnHPJBbuySlYAJtMylSNpIXNhpFAi83EvkhJnIeNPGbMG63_vXj\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"__cf_bm","value":"vOuBaFobJJHt2JGkBfxmwK60G8D6IyQVMT5sk6zLfGg-1791668772.3255684-1.0.1.1-TAeZ3m9ziTdsOy9Dm3_qgMAR5jdBCC6nmmHTtsbfUUqjEn8lVxafvHJfJTehEhGew0b7N7p3DDyOcvnHPJBbuySlYAJtMylSNpIXNhpFAi83EvkhJnIeNPGbMG63_vXj"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 10 Oct 2026 21:46:13 GMT\r\ncontent-type: application/javascript\r\ncache-control: public, max-age=604800, immutable\r\nstrict-transport-security: max-age=31536000\r\nx-deployment-id: 0f99e4b75af14702f37d466a7129023b9b25e5159a3104342517539ef44a4f3a\r\nx-robots-tag: none\r\nvary: accept-encoding\r\nexpect-ct: max-age=86400, enforce\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\npriority: u=3,i=?0\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: a488d10c7ec023eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1516,"size_decoded":1418,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (505)","md5":"7c4b6f27f9ef9e9ce4b6b25eeb367fed","sha1":"e03578185430579ad47ea2b8db0f92a74a2020fe","sha256":"b76778b695b60ae850c9733b85fb0fe65f23ed4fd48ecf6916ff15a3cd8555f6","sha512":"40ecef88199185707d1c7d48bc689abcff41a48869e72193457668e9240dfdc6bb7e88467ea15fe8a2955eee970469bbfa7afa77cce53320eff6a992ec1ad665","ssdeep":"","tlshash":"6231ec587cee2e06b016b3e0817f19265a9ea279f857bcca94244d5d0835c0e472ef79","first_seen":"2025-10-10T00:55:24.133406Z","last_seen":"2026-10-10T21:47:12.555577Z","times_seen":17,"resource_available":true,"data":null}},"time_used":117,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":117,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"cescaa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"cescaa.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cescaa.com/_assets/a0684b0780c739e9.vendor.ltr.css","fqdn":"cescaa.com","domain":"cescaa.com","tld":"com"},"ip":{"addr":"103.169.142.0","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://cescaa.com/","date":"2026-10-10T21:46:12.631Z","timestamp":1791668772631,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cescaa.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Sun, 06 Sep 2026 05:47:48 GMT","end":"Sat, 05 Dec 2026 06:46:40 GMT"},"fingerprint":{"sha1":"ED:EA:92:85:3E:13:4B:14:B2:3D:68:46:E8:43:9C:6B:3C:F1:32:DA","sha256":"7A:0F:F6:5D:4D:CF:B3:61:47:C4:54:6B:D7:C9:B4:11:9F:99:60:9F:7A:33:B6:FE:12:75:A1:FE:A9:B9:B5:C2"}}},"request":{"raw":"GET /_assets/a0684b0780c739e9.vendor.ltr.css HTTP/1.1\r\nHost: cescaa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://cescaa.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __cf_bm=vOuBaFobJJHt2JGkBfxmwK60G8D6IyQVMT5sk6zLfGg-1791668772.3255684-1.0.1.1-TAeZ3m9ziTdsOy9Dm3_qgMAR5jdBCC6nmmHTtsbfUUqjEn8lVxafvHJfJTehEhGew0b7N7p3DDyOcvnHPJBbuySlYAJtMylSNpIXNhpFAi83EvkhJnIeNPGbMG63_vXj\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"__cf_bm","value":"vOuBaFobJJHt2JGkBfxmwK60G8D6IyQVMT5sk6zLfGg-1791668772.3255684-1.0.1.1-TAeZ3m9ziTdsOy9Dm3_qgMAR5jdBCC6nmmHTtsbfUUqjEn8lVxafvHJfJTehEhGew0b7N7p3DDyOcvnHPJBbuySlYAJtMylSNpIXNhpFAi83EvkhJnIeNPGbMG63_vXj"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 10 Oct 2026 21:46:12 GMT\r\ncontent-type: text/css\r\ncache-control: public, max-age=604800, immutable\r\nstrict-transport-security: max-age=31536000\r\nx-deployment-id: 0f99e4b75af14702f37d466a7129023b9b25e5159a3104342517539ef44a4f3a\r\nx-robots-tag: none\r\nvary: accept-encoding\r\nexpect-ct: max-age=86400, enforce\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\npriority: u=2,i=?0\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: a488d104faae23eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10359,"size_decoded":2351,"mime_type":"text/css","magic":"ASCII text, with very long lines (10099)","md5":"4eb0cc037aa215c5fa2eb3c1b342613d","sha1":"97d135c19209077c0335065f35d53fffc62caa88","sha256":"e8fb139770ec251e750403322d40db96c027b9feb48f4489b76a735f9f0869e5","sha512":"270302a621dd93de4ca144dab5f699270b2dcde0e759fbd63098b09d2c597cf9a07827b8caf40343e38d3108c8cbf1edef6af44e6944fa0bd99d8467a5d2dd56","ssdeep":"192:FFS+oMcpO2BMKGwLsreI0keXg6moYyfJWh:S+oMz2BMKGwLsreI0keXg6moYkQ","tlshash":"9022af6a3f57307f8393857ff042aae150c9e396a0e98515f0a5ef0429db4e5921af3c","first_seen":"2024-04-10T03:14:53Z","last_seen":"2026-10-10T21:47:12.556977Z","times_seen":2496,"resource_available":true,"data":null}},"time_used":125,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":125,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"cescaa.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"cescaa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cescaa.com/_assets/d9814184d4cd0bfc.ltr.css","fqdn":"cescaa.com","domain":"cescaa.com","tld":"com"},"ip":{"addr":"103.169.142.0","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://cescaa.com/","date":"2026-10-10T21:46:12.633Z","timestamp":1791668772633,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cescaa.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Sun, 06 Sep 2026 05:47:48 GMT","end":"Sat, 05 Dec 2026 06:46:40 GMT"},"fingerprint":{"sha1":"ED:EA:92:85:3E:13:4B:14:B2:3D:68:46:E8:43:9C:6B:3C:F1:32:DA","sha256":"7A:0F:F6:5D:4D:CF:B3:61:47:C4:54:6B:D7:C9:B4:11:9F:99:60:9F:7A:33:B6:FE:12:75:A1:FE:A9:B9:B5:C2"}}},"request":{"raw":"GET /_assets/d9814184d4cd0bfc.ltr.css HTTP/1.1\r\nHost: cescaa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://cescaa.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __cf_bm=vOuBaFobJJHt2JGkBfxmwK60G8D6IyQVMT5sk6zLfGg-1791668772.3255684-1.0.1.1-TAeZ3m9ziTdsOy9Dm3_qgMAR5jdBCC6nmmHTtsbfUUqjEn8lVxafvHJfJTehEhGew0b7N7p3DDyOcvnHPJBbuySlYAJtMylSNpIXNhpFAi83EvkhJnIeNPGbMG63_vXj\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"__cf_bm","value":"vOuBaFobJJHt2JGkBfxmwK60G8D6IyQVMT5sk6zLfGg-1791668772.3255684-1.0.1.1-TAeZ3m9ziTdsOy9Dm3_qgMAR5jdBCC6nmmHTtsbfUUqjEn8lVxafvHJfJTehEhGew0b7N7p3DDyOcvnHPJBbuySlYAJtMylSNpIXNhpFAi83EvkhJnIeNPGbMG63_vXj"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 10 Oct 2026 21:46:12 GMT\r\ncontent-type: text/css\r\ncache-control: public, max-age=604800, immutable\r\nstrict-transport-security: max-age=31536000\r\nx-deployment-id: 0f99e4b75af14702f37d466a7129023b9b25e5159a3104342517539ef44a4f3a\r\nx-robots-tag: none\r\nvary: accept-encoding\r\nexpect-ct: max-age=86400, enforce\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\npriority: u=2,i=?0\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: a488d104fab123eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":165942,"size_decoded":40012,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"553f829231e800648729402e3bf88d9a","sha1":"d45bb95d918943579298e760399fbb9cb407ec6a","sha256":"b9c4e140a5494a4c5a62b991530323c29df436ea4ee44a1493699385ed34c1df","sha512":"51ff2bc6d50e86b7a96e7ade50bd4f37281f955ff92ba81944f452e20c71143c7b70997651ce0e83764afe8d79b82bb57b2a36263e98febb8b86d84e668a5af7","ssdeep":"1536:XOQLk4GHJZQ9Cqdka1cqUtFIVG+OKzx9UUXJRa5lp5UDrAQMQliuWxSHo0:9H9OJFIVG+OP8a5lp5U8hoo0","tlshash":"9cf329e84a61f13cec2bb11267dd9a9c1179b011ee230bdec666be2196c7ff505b024c","first_seen":"2025-09-21T21:23:56.965393Z","last_seen":"2026-10-10T21:47:12.557609Z","times_seen":62,"resource_available":true,"data":null}},"time_used":128,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":128,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"cescaa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"cescaa.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cescaa.com/_assets/images/e53c4bd8da5e491d9ab09e7cf0daf874.png","fqdn":"cescaa.com","domain":"cescaa.com","tld":"com"},"ip":{"addr":"103.169.142.0","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cescaa.com/","date":"2026-10-10T21:46:13.667Z","timestamp":1791668773667,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cescaa.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Sun, 06 Sep 2026 05:47:48 GMT","end":"Sat, 05 Dec 2026 06:46:40 GMT"},"fingerprint":{"sha1":"ED:EA:92:85:3E:13:4B:14:B2:3D:68:46:E8:43:9C:6B:3C:F1:32:DA","sha256":"7A:0F:F6:5D:4D:CF:B3:61:47:C4:54:6B:D7:C9:B4:11:9F:99:60:9F:7A:33:B6:FE:12:75:A1:FE:A9:B9:B5:C2"}}},"request":{"raw":"GET /_assets/images/e53c4bd8da5e491d9ab09e7cf0daf874.png HTTP/1.1\r\nHost: cescaa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://cescaa.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __cf_bm=vOuBaFobJJHt2JGkBfxmwK60G8D6IyQVMT5sk6zLfGg-1791668772.3255684-1.0.1.1-TAeZ3m9ziTdsOy9Dm3_qgMAR5jdBCC6nmmHTtsbfUUqjEn8lVxafvHJfJTehEhGew0b7N7p3DDyOcvnHPJBbuySlYAJtMylSNpIXNhpFAi83EvkhJnIeNPGbMG63_vXj\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"__cf_bm","value":"vOuBaFobJJHt2JGkBfxmwK60G8D6IyQVMT5sk6zLfGg-1791668772.3255684-1.0.1.1-TAeZ3m9ziTdsOy9Dm3_qgMAR5jdBCC6nmmHTtsbfUUqjEn8lVxafvHJfJTehEhGew0b7N7p3DDyOcvnHPJBbuySlYAJtMylSNpIXNhpFAi83EvkhJnIeNPGbMG63_vXj"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 10 Oct 2026 21:46:13 GMT\r\ncontent-type: image/png\r\ncontent-length: 5971\r\ncache-control: public, max-age=604800, immutable\r\nstrict-transport-security: max-age=31536000\r\nx-deployment-id: 0f99e4b75af14702f37d466a7129023b9b25e5159a3104342517539ef44a4f3a\r\nx-robots-tag: none\r\nvary: accept-encoding\r\nexpect-ct: max-age=86400, enforce\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\npriority: u=6,i=?0\r\nserver: cloudflare\r\ncf-ray: a488d10b6bdf23eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5971,"size_decoded":6596,"mime_type":"image/png","magic":"PNG image data, 192 x 192, 8-bit colormap, non-interlaced","md5":"001d04d8ffff08f82d461fe590aa5616","sha1":"9a777f2dd6d963c8b385e118e7127c1403a6dfd4","sha256":"dc823dfb52c77818de9bd6eedcebd92839aee78ca4580a108b1ecda2f7bf64cf","sha512":"b3ce5cdf0ecd94d0e689c24c4f16d9148e7c04a8d78faa622e4b663c29a661a72db3038d65057ea438a603cfc7a109ca746d76a0718e8f3203065d7c541e4234","ssdeep":"96:9MQp/qSMCAHsS5AxLqiX6IbvYeinhgvIy0tTVAhaSIfcdBZ5r+G:Jp/qlHH4LlKuALMR0tTVAh+fcdR+G","tlshash":"d2c18e5b382eb1c7dad467fe03aea0aac5375d4b7608e9913d4276bc5361c543208a0b","first_seen":"2024-12-09T21:44:15.849099Z","last_seen":"2026-10-10T21:47:12.529423Z","times_seen":1105,"resource_available":false,"data":null}},"time_used":120,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":120,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"cescaa.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"cescaa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cescaa.com/_assets/fonts/e44a76124d0e53c15573a43751bda1dc.woff2","fqdn":"cescaa.com","domain":"cescaa.com","tld":"com"},"ip":{"addr":"103.169.142.0","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://cescaa.com/","date":"2026-10-10T21:46:14.233Z","timestamp":1791668774233,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cescaa.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Sun, 06 Sep 2026 05:47:48 GMT","end":"Sat, 05 Dec 2026 06:46:40 GMT"},"fingerprint":{"sha1":"ED:EA:92:85:3E:13:4B:14:B2:3D:68:46:E8:43:9C:6B:3C:F1:32:DA","sha256":"7A:0F:F6:5D:4D:CF:B3:61:47:C4:54:6B:D7:C9:B4:11:9F:99:60:9F:7A:33:B6:FE:12:75:A1:FE:A9:B9:B5:C2"}}},"request":{"raw":"GET /_assets/fonts/e44a76124d0e53c15573a43751bda1dc.woff2 HTTP/1.1\r\nHost: cescaa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nReferer: https://cescaa.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __cf_bm=vOuBaFobJJHt2JGkBfxmwK60G8D6IyQVMT5sk6zLfGg-1791668772.3255684-1.0.1.1-TAeZ3m9ziTdsOy9Dm3_qgMAR5jdBCC6nmmHTtsbfUUqjEn8lVxafvHJfJTehEhGew0b7N7p3DDyOcvnHPJBbuySlYAJtMylSNpIXNhpFAi83EvkhJnIeNPGbMG63_vXj\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"__cf_bm","value":"vOuBaFobJJHt2JGkBfxmwK60G8D6IyQVMT5sk6zLfGg-1791668772.3255684-1.0.1.1-TAeZ3m9ziTdsOy9Dm3_qgMAR5jdBCC6nmmHTtsbfUUqjEn8lVxafvHJfJTehEhGew0b7N7p3DDyOcvnHPJBbuySlYAJtMylSNpIXNhpFAi83EvkhJnIeNPGbMG63_vXj"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 10 Oct 2026 21:46:14 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 51760\r\ncache-control: public, max-age=604800, immutable\r\nstrict-transport-security: max-age=31536000\r\nx-deployment-id: 0f99e4b75af14702f37d466a7129023b9b25e5159a3104342517539ef44a4f3a\r\nx-robots-tag: none\r\nvary: accept-encoding\r\nexpect-ct: max-age=86400, enforce\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\ncf-ray: a488d10efc6623eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":51760,"size_decoded":52401,"mime_type":"application/octet-stream","magic":"Web Open Font Format (Version 2), CFF, length 51760, version 1.393","md5":"83c4f958dac8837aa60859d214f16e44","sha1":"dbf3a429034a016d8a399db27af6341b7d747289","sha256":"3f947cf511bb13f29650c3956ff65b84419f3d4ec719cd2a41163aa7dc9f0773","sha512":"3642325459c0102784a5e966808504454b3ac0f65ffad1954710dbea17fa46d5722af3723f83bc79319e30074e02a830bb2e6de9c6495081b77cdabaa90f569e","ssdeep":"1536:VivFXIgmL8w5oPI1xxiUGwKt3UA3wzOBfOS:Vi9XIhouPiRAzOBfL","tlshash":"9233f20f4fa9473a5802e82d5b804ca682c318a356e00bef52dcb68c571bb75f865df7","first_seen":"2025-10-08T09:36:53.284909Z","last_seen":"2026-10-10T21:47:12.489305Z","times_seen":4,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"cescaa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"cescaa.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cescaa.com/_assets/fonts/5c411d01677832c1b6f80e11045c3e17.woff2","fqdn":"cescaa.com","domain":"cescaa.com","tld":"com"},"ip":{"addr":"103.169.142.0","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://cescaa.com/","date":"2026-10-10T21:46:14.250Z","timestamp":1791668774250,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cescaa.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Sun, 06 Sep 2026 05:47:48 GMT","end":"Sat, 05 Dec 2026 06:46:40 GMT"},"fingerprint":{"sha1":"ED:EA:92:85:3E:13:4B:14:B2:3D:68:46:E8:43:9C:6B:3C:F1:32:DA","sha256":"7A:0F:F6:5D:4D:CF:B3:61:47:C4:54:6B:D7:C9:B4:11:9F:99:60:9F:7A:33:B6:FE:12:75:A1:FE:A9:B9:B5:C2"}}},"request":{"raw":"GET /_assets/fonts/5c411d01677832c1b6f80e11045c3e17.woff2 HTTP/1.1\r\nHost: cescaa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nReferer: https://cescaa.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __cf_bm=vOuBaFobJJHt2JGkBfxmwK60G8D6IyQVMT5sk6zLfGg-1791668772.3255684-1.0.1.1-TAeZ3m9ziTdsOy9Dm3_qgMAR5jdBCC6nmmHTtsbfUUqjEn8lVxafvHJfJTehEhGew0b7N7p3DDyOcvnHPJBbuySlYAJtMylSNpIXNhpFAi83EvkhJnIeNPGbMG63_vXj\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"__cf_bm","value":"vOuBaFobJJHt2JGkBfxmwK60G8D6IyQVMT5sk6zLfGg-1791668772.3255684-1.0.1.1-TAeZ3m9ziTdsOy9Dm3_qgMAR5jdBCC6nmmHTtsbfUUqjEn8lVxafvHJfJTehEhGew0b7N7p3DDyOcvnHPJBbuySlYAJtMylSNpIXNhpFAi83EvkhJnIeNPGbMG63_vXj"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 10 Oct 2026 21:46:14 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 53200\r\ncache-control: public, max-age=604800, immutable\r\nstrict-transport-security: max-age=31536000\r\nx-deployment-id: 0f99e4b75af14702f37d466a7129023b9b25e5159a3104342517539ef44a4f3a\r\nx-robots-tag: none\r\nvary: accept-encoding\r\nexpect-ct: max-age=86400, enforce\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\ncf-ray: a488d10f1cb523eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":53200,"size_decoded":53841,"mime_type":"application/octet-stream","magic":"Web Open Font Format (Version 2), CFF, length 53200, version 1.393","md5":"1dd71e9221adf3dce1f6d63d98234b40","sha1":"94ffd37ad6799e3f6a79ac43ef675bf13460f5d7","sha256":"51de067a32600ef07c4f813625211e4596e03ea2ba5b9a86886dbc946b3ac091","sha512":"5e7742e8e83d5d7cc71550abc18959d0f6c1a9e4f09a314c845c19eb18a06ba6006a04e7babb1396f5f4f7aa8df3d5f13df824d2bd9fd375702e54caaeb50c43","ssdeep":"1536:/25ut3oUaeM/Q+kDDSLQpW+kjCDDqU061Fp:/iut3LM/Q+kDDSLgW+9DuU06x","tlshash":"1a3302c8f77dc1dadf8d044fe30e4ac5582c28f91d4c2da6558db290ae18fe96b4469c","first_seen":"2025-10-11T08:21:36.724182Z","last_seen":"2026-10-10T21:47:12.500644Z","times_seen":4,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"cescaa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"cescaa.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cescaa.com/_assets/fonts/5c612a870b96ecbc73de2d0a0f12bbc9.woff2","fqdn":"cescaa.com","domain":"cescaa.com","tld":"com"},"ip":{"addr":"103.169.142.0","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://cescaa.com/","date":"2026-10-10T21:46:14.271Z","timestamp":1791668774271,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cescaa.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Sun, 06 Sep 2026 05:47:48 GMT","end":"Sat, 05 Dec 2026 06:46:40 GMT"},"fingerprint":{"sha1":"ED:EA:92:85:3E:13:4B:14:B2:3D:68:46:E8:43:9C:6B:3C:F1:32:DA","sha256":"7A:0F:F6:5D:4D:CF:B3:61:47:C4:54:6B:D7:C9:B4:11:9F:99:60:9F:7A:33:B6:FE:12:75:A1:FE:A9:B9:B5:C2"}}},"request":{"raw":"GET /_assets/fonts/5c612a870b96ecbc73de2d0a0f12bbc9.woff2 HTTP/1.1\r\nHost: cescaa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nReferer: https://cescaa.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __cf_bm=vOuBaFobJJHt2JGkBfxmwK60G8D6IyQVMT5sk6zLfGg-1791668772.3255684-1.0.1.1-TAeZ3m9ziTdsOy9Dm3_qgMAR5jdBCC6nmmHTtsbfUUqjEn8lVxafvHJfJTehEhGew0b7N7p3DDyOcvnHPJBbuySlYAJtMylSNpIXNhpFAi83EvkhJnIeNPGbMG63_vXj\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"__cf_bm","value":"vOuBaFobJJHt2JGkBfxmwK60G8D6IyQVMT5sk6zLfGg-1791668772.3255684-1.0.1.1-TAeZ3m9ziTdsOy9Dm3_qgMAR5jdBCC6nmmHTtsbfUUqjEn8lVxafvHJfJTehEhGew0b7N7p3DDyOcvnHPJBbuySlYAJtMylSNpIXNhpFAi83EvkhJnIeNPGbMG63_vXj"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 10 Oct 2026 21:46:14 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 54252\r\ncache-control: public, max-age=604800, immutable\r\nstrict-transport-security: max-age=31536000\r\nx-deployment-id: 0f99e4b75af14702f37d466a7129023b9b25e5159a3104342517539ef44a4f3a\r\nx-robots-tag: none\r\nvary: accept-encoding\r\nexpect-ct: max-age=86400, enforce\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\ncf-ray: a488d10f3d1723eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":54252,"size_decoded":54893,"mime_type":"application/octet-stream","magic":"Web Open Font Format (Version 2), CFF, length 54252, version 1.393","md5":"ed08ceadeedb5461059386ddb069c28c","sha1":"b27ff8b21dac87646967afd269afd172fa43de69","sha256":"7d91f25ad3011801a1561726d7e46e86f5e342e93f222233ad4d03b6bd260bbd","sha512":"3831704619973926a5f6d2022364858ff375ff5a1a4ad0f797223b7c202b9e4762ef2c15ba6e36df9ff478c8449728077d58f8c086b9bdd7377faf2ef2885f77","ssdeep":"1536:IUOqaDd66lBBFLCD95lqfi+6d+K0umxiBUn:F5yY6lU95lqfl611miUn","tlshash":"2433010cdd4ba3074bbb94b4863d1dec29400a63becfeb2e9c5039da15de58986d1a34","first_seen":"2025-10-11T08:21:36.730369Z","last_seen":"2026-10-10T21:47:12.459084Z","times_seen":6,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"cescaa.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"cescaa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cescaa.com/_assets/eb4f34b17a82c952.js","fqdn":"cescaa.com","domain":"cescaa.com","tld":"com"},"ip":{"addr":"103.169.142.0","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cescaa.com/","date":"2026-10-10T21:46:12.645Z","timestamp":1791668772645,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cescaa.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Sun, 06 Sep 2026 05:47:48 GMT","end":"Sat, 05 Dec 2026 06:46:40 GMT"},"fingerprint":{"sha1":"ED:EA:92:85:3E:13:4B:14:B2:3D:68:46:E8:43:9C:6B:3C:F1:32:DA","sha256":"7A:0F:F6:5D:4D:CF:B3:61:47:C4:54:6B:D7:C9:B4:11:9F:99:60:9F:7A:33:B6:FE:12:75:A1:FE:A9:B9:B5:C2"}}},"request":{"raw":"GET /_assets/eb4f34b17a82c952.js HTTP/1.1\r\nHost: cescaa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://cescaa.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __cf_bm=vOuBaFobJJHt2JGkBfxmwK60G8D6IyQVMT5sk6zLfGg-1791668772.3255684-1.0.1.1-TAeZ3m9ziTdsOy9Dm3_qgMAR5jdBCC6nmmHTtsbfUUqjEn8lVxafvHJfJTehEhGew0b7N7p3DDyOcvnHPJBbuySlYAJtMylSNpIXNhpFAi83EvkhJnIeNPGbMG63_vXj\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"__cf_bm","value":"vOuBaFobJJHt2JGkBfxmwK60G8D6IyQVMT5sk6zLfGg-1791668772.3255684-1.0.1.1-TAeZ3m9ziTdsOy9Dm3_qgMAR5jdBCC6nmmHTtsbfUUqjEn8lVxafvHJfJTehEhGew0b7N7p3DDyOcvnHPJBbuySlYAJtMylSNpIXNhpFAi83EvkhJnIeNPGbMG63_vXj"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 10 Oct 2026 21:46:12 GMT\r\ncontent-type: application/javascript\r\ncache-control: public, max-age=604800, immutable\r\nstrict-transport-security: max-age=31536000\r\nx-deployment-id: 0f99e4b75af14702f37d466a7129023b9b25e5159a3104342517539ef44a4f3a\r\nx-robots-tag: none\r\nvary: accept-encoding\r\nexpect-ct: max-age=86400, enforce\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\npriority: u=1,i=?0\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: a488d1050af423eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2169546,"size_decoded":716898,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (569)","md5":"421e1a3b0a0bb2c82d25753b3c4a08f2","sha1":"be13bcf741a3d667fb68ef81ca6e69a44406edab","sha256":"4dd86ff1ba8ad7c7f72ea89ad1d7d04e8758463be7c2737562c3adb460016ffa","sha512":"25b4d934db339d4a8ca381174feedd17562ddf807e090339d8237aad6dae94c92eb5d12723fc6ae330a7090670d9b1124e2f29381b91ca09ec616d2ce58a00ee","ssdeep":"24576:j3u4z/OFavwLg85LT1CtojwddX9yCdyIqzA0tZYqgvQZedQQ9rD9TjwAHn2IVml4:jJz/OFavwLg8x1CtojwddXICdyIqzA0K","tlshash":"9425198432d37456c266a8e5507f004af83a9c91f00d9cb9f5ace9dabe25c0591bbf7c","first_seen":"2025-10-10T00:55:24.138183Z","last_seen":"2026-10-10T21:47:12.560677Z","times_seen":17,"resource_available":true,"data":null}},"time_used":415,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":119,"receive":296,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"cescaa.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"cescaa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cescaa.com/_assets/6465c0a8cc767404.js","fqdn":"cescaa.com","domain":"cescaa.com","tld":"com"},"ip":{"addr":"103.169.142.0","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cescaa.com/","date":"2026-10-10T21:46:13.815Z","timestamp":1791668773815,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cescaa.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Sun, 06 Sep 2026 05:47:48 GMT","end":"Sat, 05 Dec 2026 06:46:40 GMT"},"fingerprint":{"sha1":"ED:EA:92:85:3E:13:4B:14:B2:3D:68:46:E8:43:9C:6B:3C:F1:32:DA","sha256":"7A:0F:F6:5D:4D:CF:B3:61:47:C4:54:6B:D7:C9:B4:11:9F:99:60:9F:7A:33:B6:FE:12:75:A1:FE:A9:B9:B5:C2"}}},"request":{"raw":"GET /_assets/6465c0a8cc767404.js HTTP/1.1\r\nHost: cescaa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://cescaa.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __cf_bm=vOuBaFobJJHt2JGkBfxmwK60G8D6IyQVMT5sk6zLfGg-1791668772.3255684-1.0.1.1-TAeZ3m9ziTdsOy9Dm3_qgMAR5jdBCC6nmmHTtsbfUUqjEn8lVxafvHJfJTehEhGew0b7N7p3DDyOcvnHPJBbuySlYAJtMylSNpIXNhpFAi83EvkhJnIeNPGbMG63_vXj\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"__cf_bm","value":"vOuBaFobJJHt2JGkBfxmwK60G8D6IyQVMT5sk6zLfGg-1791668772.3255684-1.0.1.1-TAeZ3m9ziTdsOy9Dm3_qgMAR5jdBCC6nmmHTtsbfUUqjEn8lVxafvHJfJTehEhGew0b7N7p3DDyOcvnHPJBbuySlYAJtMylSNpIXNhpFAi83EvkhJnIeNPGbMG63_vXj"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 10 Oct 2026 21:46:13 GMT\r\ncontent-type: application/javascript\r\ncache-control: public, max-age=604800, immutable\r\nstrict-transport-security: max-age=31536000\r\nx-deployment-id: 0f99e4b75af14702f37d466a7129023b9b25e5159a3104342517539ef44a4f3a\r\nx-robots-tag: none\r\nvary: accept-encoding\r\nexpect-ct: max-age=86400, enforce\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\npriority: u=3,i=?0\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: a488d10c5e4e23eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":649,"size_decoded":983,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (429)","md5":"05366aedb60457b47ad0f837aa13f576","sha1":"b2600b4ebbb96a3963e1f5d47884e25622588067","sha256":"a8d90f0686a3f940ccf1cc1f398898bf22ac3805529ee50b7fa2ed29135a8cd9","sha512":"e0671ed64e7b3ba3bcd8ccd623a17ec4d8b6241300e881fe6ae8eeee43d6adec6f1e3dab50ebf226e8fa3213293187eb809f0db1190de7012d763f1b4cf56782","ssdeep":"","tlshash":"50f0d89c7c67bd07702bb4e0500f5d254b1be5a1ec49aec9f052986419f384dc313f20","first_seen":"2025-10-10T00:55:24.022641Z","last_seen":"2026-10-10T21:47:12.563586Z","times_seen":17,"resource_available":true,"data":null}},"time_used":117,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":117,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"cescaa.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"cescaa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cescaa.com/_assets/4b4870ee5cf37f1d.js","fqdn":"cescaa.com","domain":"cescaa.com","tld":"com"},"ip":{"addr":"103.169.142.0","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cescaa.com/","date":"2026-10-10T21:46:14.042Z","timestamp":1791668774042,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cescaa.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Sun, 06 Sep 2026 05:47:48 GMT","end":"Sat, 05 Dec 2026 06:46:40 GMT"},"fingerprint":{"sha1":"ED:EA:92:85:3E:13:4B:14:B2:3D:68:46:E8:43:9C:6B:3C:F1:32:DA","sha256":"7A:0F:F6:5D:4D:CF:B3:61:47:C4:54:6B:D7:C9:B4:11:9F:99:60:9F:7A:33:B6:FE:12:75:A1:FE:A9:B9:B5:C2"}}},"request":{"raw":"GET /_assets/4b4870ee5cf37f1d.js HTTP/1.1\r\nHost: cescaa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://cescaa.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __cf_bm=vOuBaFobJJHt2JGkBfxmwK60G8D6IyQVMT5sk6zLfGg-1791668772.3255684-1.0.1.1-TAeZ3m9ziTdsOy9Dm3_qgMAR5jdBCC6nmmHTtsbfUUqjEn8lVxafvHJfJTehEhGew0b7N7p3DDyOcvnHPJBbuySlYAJtMylSNpIXNhpFAi83EvkhJnIeNPGbMG63_vXj\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"__cf_bm","value":"vOuBaFobJJHt2JGkBfxmwK60G8D6IyQVMT5sk6zLfGg-1791668772.3255684-1.0.1.1-TAeZ3m9ziTdsOy9Dm3_qgMAR5jdBCC6nmmHTtsbfUUqjEn8lVxafvHJfJTehEhGew0b7N7p3DDyOcvnHPJBbuySlYAJtMylSNpIXNhpFAi83EvkhJnIeNPGbMG63_vXj"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 10 Oct 2026 21:46:14 GMT\r\ncontent-type: application/javascript\r\ncache-control: public, max-age=604800, immutable\r\nstrict-transport-security: max-age=31536000\r\nx-deployment-id: 0f99e4b75af14702f37d466a7129023b9b25e5159a3104342517539ef44a4f3a\r\nx-robots-tag: none\r\nvary: accept-encoding\r\nexpect-ct: max-age=86400, enforce\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\npriority: u=3,i=?0\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: a488d10dc98b23eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":103070,"size_decoded":13044,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65433)","md5":"e2ca18d70eb25aa71ce47846fcc1a70a","sha1":"9972e924ee857c467fa3c82ad77ccf1c67a94262","sha256":"6d16e4ca5bc97d2bcd4dec98273e4afa9b5da428708a25df0ed4af917330bd21","sha512":"7e660f9a0a09fce12722f5c089104738a21d19b43a4692dd1ca0f160c158020d57ca90b5e874b69f8044ce286c1a6b14d79504dbe486a42cf18655665a5e4009","ssdeep":"384:/sYmde8tWr65Ce6KRawg1BVRAqQyA2A/oaQVXAFyAPsCiDxX6gLUa7Rzc3y8Pcix:/sskJR5g1Bb4yAPsCKMWhqB","tlshash":"d0a3a55aeba71cad97617c79cd75f9acb4cf3ca180b0d2b50e74849b9c1412fc86e821","first_seen":"2025-10-10T00:55:24.128847Z","last_seen":"2026-10-10T21:47:12.567038Z","times_seen":17,"resource_available":true,"data":null}},"time_used":121,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":121,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"cescaa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"cescaa.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cescaa.com/_assets/fonts/673cfd68bc7f23224a573c827b4dd620.woff2","fqdn":"cescaa.com","domain":"cescaa.com","tld":"com"},"ip":{"addr":"103.169.142.0","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://cescaa.com/","date":"2026-10-10T21:46:14.179Z","timestamp":1791668774179,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cescaa.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Sun, 06 Sep 2026 05:47:48 GMT","end":"Sat, 05 Dec 2026 06:46:40 GMT"},"fingerprint":{"sha1":"ED:EA:92:85:3E:13:4B:14:B2:3D:68:46:E8:43:9C:6B:3C:F1:32:DA","sha256":"7A:0F:F6:5D:4D:CF:B3:61:47:C4:54:6B:D7:C9:B4:11:9F:99:60:9F:7A:33:B6:FE:12:75:A1:FE:A9:B9:B5:C2"}}},"request":{"raw":"GET /_assets/fonts/673cfd68bc7f23224a573c827b4dd620.woff2 HTTP/1.1\r\nHost: cescaa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nReferer: https://cescaa.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __cf_bm=vOuBaFobJJHt2JGkBfxmwK60G8D6IyQVMT5sk6zLfGg-1791668772.3255684-1.0.1.1-TAeZ3m9ziTdsOy9Dm3_qgMAR5jdBCC6nmmHTtsbfUUqjEn8lVxafvHJfJTehEhGew0b7N7p3DDyOcvnHPJBbuySlYAJtMylSNpIXNhpFAi83EvkhJnIeNPGbMG63_vXj\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"__cf_bm","value":"vOuBaFobJJHt2JGkBfxmwK60G8D6IyQVMT5sk6zLfGg-1791668772.3255684-1.0.1.1-TAeZ3m9ziTdsOy9Dm3_qgMAR5jdBCC6nmmHTtsbfUUqjEn8lVxafvHJfJTehEhGew0b7N7p3DDyOcvnHPJBbuySlYAJtMylSNpIXNhpFAi83EvkhJnIeNPGbMG63_vXj"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 10 Oct 2026 21:46:14 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 53080\r\ncache-control: public, max-age=604800, immutable\r\nstrict-transport-security: max-age=31536000\r\nx-deployment-id: 0f99e4b75af14702f37d466a7129023b9b25e5159a3104342517539ef44a4f3a\r\nx-robots-tag: none\r\nvary: accept-encoding\r\nexpect-ct: max-age=86400, enforce\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\ncf-ray: a488d10e9ba223eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":53080,"size_decoded":53721,"mime_type":"application/octet-stream","magic":"Web Open Font Format (Version 2), CFF, length 53080, version 1.393","md5":"04433c9644d7b2a4e893f52976c4a99e","sha1":"d0a060c25a1e59ef229f5fd4b2e0c2909a56d553","sha256":"ec7e5c9fe8b9304c6ab5ec7f394447cf04ccfaf1eeecdccdf6c3ed73741f932b","sha512":"a54c455851806ec8408e7ff52c40f410747fa10260338cdb1c4881c5e9f04ef37667d0d259ce32957be16f35ffe503475a77d84ee395ba5bfa24a47be6817e67","ssdeep":"1536:S9zqpN2OeGJBHnyF3qU4SrtdGg+8MeiFGBah:lL1g6U4kWkMeiFGi","tlshash":"ae33f1ef4994c644718b8fb676e95b262076c14da5aacf0431ff98887c60704e8f6e1b","first_seen":"2025-10-11T08:21:36.727378Z","last_seen":"2026-10-10T21:47:12.473461Z","times_seen":4,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"cescaa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"cescaa.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cescaa.com/_assets/fonts/e44a76124d0e53c15573a43751bda1dc.woff2","fqdn":"cescaa.com","domain":"cescaa.com","tld":"com"},"ip":{"addr":"103.169.142.0","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://cescaa.com/","date":"2026-10-10T21:46:14.229Z","timestamp":1791668774229,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cescaa.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Sun, 06 Sep 2026 05:47:48 GMT","end":"Sat, 05 Dec 2026 06:46:40 GMT"},"fingerprint":{"sha1":"ED:EA:92:85:3E:13:4B:14:B2:3D:68:46:E8:43:9C:6B:3C:F1:32:DA","sha256":"7A:0F:F6:5D:4D:CF:B3:61:47:C4:54:6B:D7:C9:B4:11:9F:99:60:9F:7A:33:B6:FE:12:75:A1:FE:A9:B9:B5:C2"}}},"request":{"raw":"GET /_assets/fonts/e44a76124d0e53c15573a43751bda1dc.woff2 HTTP/1.1\r\nHost: cescaa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nReferer: https://cescaa.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __cf_bm=vOuBaFobJJHt2JGkBfxmwK60G8D6IyQVMT5sk6zLfGg-1791668772.3255684-1.0.1.1-TAeZ3m9ziTdsOy9Dm3_qgMAR5jdBCC6nmmHTtsbfUUqjEn8lVxafvHJfJTehEhGew0b7N7p3DDyOcvnHPJBbuySlYAJtMylSNpIXNhpFAi83EvkhJnIeNPGbMG63_vXj\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"__cf_bm","value":"vOuBaFobJJHt2JGkBfxmwK60G8D6IyQVMT5sk6zLfGg-1791668772.3255684-1.0.1.1-TAeZ3m9ziTdsOy9Dm3_qgMAR5jdBCC6nmmHTtsbfUUqjEn8lVxafvHJfJTehEhGew0b7N7p3DDyOcvnHPJBbuySlYAJtMylSNpIXNhpFAi83EvkhJnIeNPGbMG63_vXj"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 10 Oct 2026 21:46:14 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 51760\r\ncache-control: public, max-age=604800, immutable\r\nstrict-transport-security: max-age=31536000\r\nx-deployment-id: 0f99e4b75af14702f37d466a7129023b9b25e5159a3104342517539ef44a4f3a\r\nx-robots-tag: none\r\nvary: accept-encoding\r\nexpect-ct: max-age=86400, enforce\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\ncf-ray: a488d10eec5d23eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":51760,"size_decoded":52401,"mime_type":"application/octet-stream","magic":"Web Open Font Format (Version 2), CFF, length 51760, version 1.393","md5":"83c4f958dac8837aa60859d214f16e44","sha1":"dbf3a429034a016d8a399db27af6341b7d747289","sha256":"3f947cf511bb13f29650c3956ff65b84419f3d4ec719cd2a41163aa7dc9f0773","sha512":"3642325459c0102784a5e966808504454b3ac0f65ffad1954710dbea17fa46d5722af3723f83bc79319e30074e02a830bb2e6de9c6495081b77cdabaa90f569e","ssdeep":"1536:VivFXIgmL8w5oPI1xxiUGwKt3UA3wzOBfOS:Vi9XIhouPiRAzOBfL","tlshash":"9233f20f4fa9473a5802e82d5b804ca682c318a356e00bef52dcb68c571bb75f865df7","first_seen":"2025-10-08T09:36:53.284909Z","last_seen":"2026-10-10T21:47:12.489305Z","times_seen":4,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"cescaa.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"cescaa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cescaa.com/_assets/fonts/5c411d01677832c1b6f80e11045c3e17.woff2","fqdn":"cescaa.com","domain":"cescaa.com","tld":"com"},"ip":{"addr":"103.169.142.0","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://cescaa.com/","date":"2026-10-10T21:46:14.263Z","timestamp":1791668774263,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cescaa.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Sun, 06 Sep 2026 05:47:48 GMT","end":"Sat, 05 Dec 2026 06:46:40 GMT"},"fingerprint":{"sha1":"ED:EA:92:85:3E:13:4B:14:B2:3D:68:46:E8:43:9C:6B:3C:F1:32:DA","sha256":"7A:0F:F6:5D:4D:CF:B3:61:47:C4:54:6B:D7:C9:B4:11:9F:99:60:9F:7A:33:B6:FE:12:75:A1:FE:A9:B9:B5:C2"}}},"request":{"raw":"GET /_assets/fonts/5c411d01677832c1b6f80e11045c3e17.woff2 HTTP/1.1\r\nHost: cescaa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nReferer: https://cescaa.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __cf_bm=vOuBaFobJJHt2JGkBfxmwK60G8D6IyQVMT5sk6zLfGg-1791668772.3255684-1.0.1.1-TAeZ3m9ziTdsOy9Dm3_qgMAR5jdBCC6nmmHTtsbfUUqjEn8lVxafvHJfJTehEhGew0b7N7p3DDyOcvnHPJBbuySlYAJtMylSNpIXNhpFAi83EvkhJnIeNPGbMG63_vXj\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"__cf_bm","value":"vOuBaFobJJHt2JGkBfxmwK60G8D6IyQVMT5sk6zLfGg-1791668772.3255684-1.0.1.1-TAeZ3m9ziTdsOy9Dm3_qgMAR5jdBCC6nmmHTtsbfUUqjEn8lVxafvHJfJTehEhGew0b7N7p3DDyOcvnHPJBbuySlYAJtMylSNpIXNhpFAi83EvkhJnIeNPGbMG63_vXj"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 10 Oct 2026 21:46:14 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 53200\r\ncache-control: public, max-age=604800, immutable\r\nstrict-transport-security: max-age=31536000\r\nx-deployment-id: 0f99e4b75af14702f37d466a7129023b9b25e5159a3104342517539ef44a4f3a\r\nx-robots-tag: none\r\nvary: accept-encoding\r\nexpect-ct: max-age=86400, enforce\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\ncf-ray: a488d10f2cf223eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":53200,"size_decoded":53841,"mime_type":"application/octet-stream","magic":"Web Open Font Format (Version 2), CFF, length 53200, version 1.393","md5":"1dd71e9221adf3dce1f6d63d98234b40","sha1":"94ffd37ad6799e3f6a79ac43ef675bf13460f5d7","sha256":"51de067a32600ef07c4f813625211e4596e03ea2ba5b9a86886dbc946b3ac091","sha512":"5e7742e8e83d5d7cc71550abc18959d0f6c1a9e4f09a314c845c19eb18a06ba6006a04e7babb1396f5f4f7aa8df3d5f13df824d2bd9fd375702e54caaeb50c43","ssdeep":"1536:/25ut3oUaeM/Q+kDDSLQpW+kjCDDqU061Fp:/iut3LM/Q+kDDSLgW+9DuU06x","tlshash":"1a3302c8f77dc1dadf8d044fe30e4ac5582c28f91d4c2da6558db290ae18fe96b4469c","first_seen":"2025-10-11T08:21:36.724182Z","last_seen":"2026-10-10T21:47:12.500644Z","times_seen":4,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"cescaa.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"cescaa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cescaa.com/_assets/fonts/5c411d01677832c1b6f80e11045c3e17.woff2","fqdn":"cescaa.com","domain":"cescaa.com","tld":"com"},"ip":{"addr":"103.169.142.0","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://cescaa.com/","date":"2026-10-10T21:46:14.265Z","timestamp":1791668774265,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cescaa.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Sun, 06 Sep 2026 05:47:48 GMT","end":"Sat, 05 Dec 2026 06:46:40 GMT"},"fingerprint":{"sha1":"ED:EA:92:85:3E:13:4B:14:B2:3D:68:46:E8:43:9C:6B:3C:F1:32:DA","sha256":"7A:0F:F6:5D:4D:CF:B3:61:47:C4:54:6B:D7:C9:B4:11:9F:99:60:9F:7A:33:B6:FE:12:75:A1:FE:A9:B9:B5:C2"}}},"request":{"raw":"GET /_assets/fonts/5c411d01677832c1b6f80e11045c3e17.woff2 HTTP/1.1\r\nHost: cescaa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nReferer: https://cescaa.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __cf_bm=vOuBaFobJJHt2JGkBfxmwK60G8D6IyQVMT5sk6zLfGg-1791668772.3255684-1.0.1.1-TAeZ3m9ziTdsOy9Dm3_qgMAR5jdBCC6nmmHTtsbfUUqjEn8lVxafvHJfJTehEhGew0b7N7p3DDyOcvnHPJBbuySlYAJtMylSNpIXNhpFAi83EvkhJnIeNPGbMG63_vXj\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"__cf_bm","value":"vOuBaFobJJHt2JGkBfxmwK60G8D6IyQVMT5sk6zLfGg-1791668772.3255684-1.0.1.1-TAeZ3m9ziTdsOy9Dm3_qgMAR5jdBCC6nmmHTtsbfUUqjEn8lVxafvHJfJTehEhGew0b7N7p3DDyOcvnHPJBbuySlYAJtMylSNpIXNhpFAi83EvkhJnIeNPGbMG63_vXj"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 10 Oct 2026 21:46:14 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 53200\r\ncache-control: public, max-age=604800, immutable\r\nstrict-transport-security: max-age=31536000\r\nx-deployment-id: 0f99e4b75af14702f37d466a7129023b9b25e5159a3104342517539ef44a4f3a\r\nx-robots-tag: none\r\nvary: accept-encoding\r\nexpect-ct: max-age=86400, enforce\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\ncf-ray: a488d10f2d0523eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":53200,"size_decoded":53841,"mime_type":"application/octet-stream","magic":"Web Open Font Format (Version 2), CFF, length 53200, version 1.393","md5":"1dd71e9221adf3dce1f6d63d98234b40","sha1":"94ffd37ad6799e3f6a79ac43ef675bf13460f5d7","sha256":"51de067a32600ef07c4f813625211e4596e03ea2ba5b9a86886dbc946b3ac091","sha512":"5e7742e8e83d5d7cc71550abc18959d0f6c1a9e4f09a314c845c19eb18a06ba6006a04e7babb1396f5f4f7aa8df3d5f13df824d2bd9fd375702e54caaeb50c43","ssdeep":"1536:/25ut3oUaeM/Q+kDDSLQpW+kjCDDqU061Fp:/iut3LM/Q+kDDSLgW+9DuU06x","tlshash":"1a3302c8f77dc1dadf8d044fe30e4ac5582c28f91d4c2da6558db290ae18fe96b4469c","first_seen":"2025-10-11T08:21:36.724182Z","last_seen":"2026-10-10T21:47:12.500644Z","times_seen":4,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"cescaa.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"cescaa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}