/* Rapid Threat Intel live feed, v6. Colours and type follow daniyyell.com: Roboto-first system stack, #141010 ground, #fff6fb text, #f21368 links.
   Spacing scale 4/8/12/16/24/32/48/64. Type scale 12/13/14/15/16/18/20/28/36/44. */
@font-face { font-family: "Roboto"; src: local("Roboto"), url(fonts/roboto-400-normal.woff2) format("woff2"); font-weight: 400; font-style: normal; font-display: swap; }
@font-face { font-family: "Roboto"; src: local("Roboto Italic"), url(fonts/roboto-400-italic.woff2) format("woff2"); font-weight: 400; font-style: italic; font-display: swap; }
@font-face { font-family: "Roboto"; src: local("Roboto Medium"), url(fonts/roboto-500-normal.woff2) format("woff2"); font-weight: 500; font-style: normal; font-display: swap; }
@font-face { font-family: "Roboto"; src: local("Roboto Bold"), url(fonts/roboto-700-normal.woff2) format("woff2"); font-weight: 700; font-style: normal; font-display: swap; }
@font-face { font-family: "Roboto Mono"; src: local("Roboto Mono"), url(fonts/roboto-mono-400-normal.woff2) format("woff2"); font-weight: 400; font-display: swap; }
@font-face { font-family: "Roboto Mono"; src: local("Roboto Mono Medium"), url(fonts/roboto-mono-500-normal.woff2) format("woff2"); font-weight: 500; font-display: swap; }

:root {
  --bg: #141010;
  --well: #110e0e;
  --raise: #1c1919;
  --foot: #18020a;
  --line: #323030;
  --line-2: #434040;
  --ink: #fff6fb;
  --ink-2: #d4cbd0;
  --ink-3: #9a9196;
  --pink: #f21368;
  --pink-text: #f54e8e;
  --pink-deep: #c20f53;
  --block: #ee5f5b;
  --alert: #e58a10;
  --monitor: #3fa9cb;
  --ok: #3fa63f;
  --sans: -apple-system, BlinkMacSystemFont, "Roboto", "Segoe UI", "Helvetica Neue", "Lucida Grande", Arial, sans-serif;
  --mono: Monaco, Consolas, "Lucida Console", "Roboto Mono", monospace;
  --wrap: 1240px;
  --gut: clamp(16px, 3vw, 32px);
  --rail: 248px;
  --cols: 104px minmax(0, 1fr) 176px;
  --ease: cubic-bezier(.2, .7, .2, 1);
}

*, *::before, *::after { box-sizing: border-box; }
html { -webkit-text-size-adjust: 100%; scroll-padding-top: 72px; background: var(--bg); }
body { margin: 0; background: var(--bg); color: var(--ink); font: 400 15px/1.55 var(--sans); -webkit-font-smoothing: antialiased; text-rendering: optimizeLegibility; }
a { color: var(--pink-text); text-decoration: underline; text-decoration-thickness: 1px; text-underline-offset: 3px; transition: color .15s, text-decoration-color .15s; }
a:hover { color: #f87aa9; }
:focus-visible { outline: 2px solid var(--pink-text); outline-offset: 2px; }
::selection { background: var(--pink); color: #fff; }
h1, h2, h3 { margin: 0; font-family: var(--sans); font-weight: 700; color: var(--ink); }
code, kbd, .mono { font-family: var(--mono); }
kbd { font: 500 12px/1 var(--mono); padding: 1px 5px 2px; border: 1px solid var(--line-2); border-bottom-width: 2px; border-radius: 3px; color: var(--ink-2); }
.sr { position: absolute; width: 1px; height: 1px; overflow: hidden; clip: rect(0 0 0 0); white-space: nowrap; }
.skip { position: absolute; left: 12px; top: -60px; background: var(--ink); color: var(--bg); padding: 8px 12px; z-index: 50; font-weight: 700; }
.skip:focus { top: 12px; }
.offscreen { position: fixed; left: -9999px; top: 0; opacity: 0; }
.notice { max-width: var(--wrap); margin: 24px auto; padding: 16px var(--gut); color: var(--ink-2); }
.wrap, .brief, .strip, .check, .console, .det, .foot-in, .foot-end { max-width: var(--wrap); margin-left: auto; margin-right: auto; padding-left: var(--gut); padding-right: var(--gut); }

/* Top bar */
.bar { position: sticky; top: 0; z-index: 20; background: rgba(20, 16, 16, .92); backdrop-filter: saturate(1.2) blur(10px); -webkit-backdrop-filter: saturate(1.2) blur(10px); border-bottom: 1px solid var(--line); }
.bar-in { max-width: var(--wrap); margin: 0 auto; padding: 0 var(--gut); height: 56px; display: flex; align-items: center; gap: 20px; }
.mark { display: flex; align-items: center; gap: 8px; text-decoration: none; white-space: nowrap; color: var(--ink); }
.mark:hover { color: var(--ink); }
.mark-i { display: block; width: 30px; height: 30px; margin-left: -4px; }
.mark-w { display: block; width: auto; height: 18px; }
.mark-s { margin-left: 8px; padding-left: 12px; border-left: 1px solid var(--line-2); font: 700 13px/18px var(--sans); color: var(--ink-2); }
.pulse { margin: 0; display: flex; align-items: center; gap: 8px; font: 400 12px/1 var(--mono); color: var(--ink-3); white-space: nowrap; font-variant-numeric: tabular-nums; }
.dot { flex: none; width: 7px; height: 7px; border-radius: 50%; background: var(--pink); animation: ping 2.4s var(--ease) infinite; }
@keyframes ping { 0% { box-shadow: 0 0 0 0 rgba(242, 19, 104, .55); } 70%, 100% { box-shadow: 0 0 0 7px rgba(242, 19, 104, 0); } }
.bar-nav { margin-left: auto; display: flex; gap: 4px; }
.bar-nav a { padding: 8px 10px; font: 500 14px/1 var(--sans); color: var(--ink-2); text-decoration: none; border-radius: 3px; }
.bar-nav a:hover { color: var(--ink); }
.bar-nav a.mono { font: 400 13px/1 var(--mono); }
.bar-nav a:last-child { margin-right: -10px; }

/* Briefing header */
main { display: block; }
.brief { padding-top: clamp(32px, 5vw, 56px); padding-bottom: 32px; display: grid; grid-template-columns: minmax(0, 1fr) 300px; gap: 48px; align-items: center; }
.eyebrow { margin: 0 0 16px; display: flex; flex-wrap: wrap; gap: 4px 12px; align-items: baseline; font: 500 14px/1.4 var(--sans); color: var(--ink-2); }
.tag { font: 500 13px/1 var(--mono); color: var(--ok); letter-spacing: .02em; padding-right: 12px; border-right: 1px solid var(--line-2); }
.tag-method { color: var(--monitor); }
h1 { font: 700 clamp(32px, 3.6vw, 44px)/1.08 var(--sans); letter-spacing: -.012em; max-width: 17em; text-wrap: balance; }
.caution { margin-top: 24px; max-width: 720px; position: relative; padding: 12px 16px 12px 24px; border: 1px solid rgba(238, 95, 91, .5); }
.caution::before { content: ""; position: absolute; left: 0; top: 0; bottom: 0; width: 6px; background: repeating-linear-gradient(-45deg, var(--block) 0 4px, transparent 4px 8px); }
.caution-h { margin: 0 0 4px; display: flex; gap: 8px; align-items: center; font: 700 14px/1.4 var(--sans); color: var(--block); }
.caution p:last-child { margin: 0; font-size: 14px; color: var(--ink-2); line-height: 1.6; }
.caution strong { color: var(--ink); }
.brief-r { min-width: 0; }
.banner { display: block; }
.banner img { display: block; width: 100%; height: auto; max-width: 300px; margin: 0 auto; }

/* Stats strip */
.strip { padding-bottom: 8px; }
.ledger { margin: 0; display: grid; grid-template-columns: repeat(4, minmax(0, 1fr)); border-top: 1px solid var(--line-2); border-bottom: 1px solid var(--line-2); }
.cell { padding: 20px 24px; border-left: 1px solid var(--line); min-width: 0; }
.cell:first-child { border-left: 0; padding-left: 0; }
.cell dt { font: 500 13px/1.2 var(--sans); color: var(--ink-3); }
.cell dd { margin: 8px 0 0; display: flex; align-items: baseline; gap: 12px; flex-wrap: wrap; font: 700 36px/1 var(--sans); letter-spacing: -.01em; font-variant-numeric: tabular-nums; }
.cell dd small { font: 400 13px/1.3 var(--sans); letter-spacing: 0; color: var(--ink-3); }
.cell.hot dd { color: var(--block); }
.cell.date dd { font-size: 24px; line-height: 36px; white-space: nowrap; }
.sk dd { height: 36px; background: var(--raise); width: 55%; }

/* Section heads, as "Recent Posts" on daniyyell.com */
.sec-h { display: flex; align-items: baseline; justify-content: space-between; gap: 16px; padding-bottom: 12px; border-bottom: 1px solid var(--line-2); }
.sec-h h2 { font: 700 20px/1.2 var(--sans); }
.idx { display: none; }
.hint { margin: 0; font: 400 13px/1.4 var(--sans); color: var(--ink-3); }

/* Indicator check */
.check { padding-top: 40px; }
.search { margin-top: 16px; display: flex; align-items: stretch; height: 52px; border: 1px solid var(--line-2); background: var(--well); transition: border-color .15s, box-shadow .15s; }
.search:hover { border-color: #5a5456; }
.search:focus-within { border-color: var(--pink); box-shadow: 0 0 0 3px rgba(242, 19, 104, .18); }
.prompt { display: flex; align-items: center; padding-left: 16px; font: 500 14px/1 var(--mono); color: var(--pink-text); }
.search input { flex: 1; min-width: 0; border: 0; background: transparent; color: var(--ink); font: 400 15px/1 var(--mono); padding: 0 12px; outline: 0; }
.search input::placeholder { color: #8a8186; }
.search input::-webkit-search-cancel-button { filter: grayscale(1) invert(.6); }
.search button { border: 0; background: var(--pink-deep); color: var(--ink); font: 700 15px/1 var(--sans); padding: 0 28px; transition: background .15s; }
.search button:hover { background: #a80c47; }
.search button:focus-visible { outline-offset: -4px; outline-color: var(--ink); }
#search-results:empty { display: none; }
#search-results { margin-top: 12px; border: 1px solid var(--line-2); animation: rise .25s var(--ease); }
.res-head { margin: 0; padding: 12px 16px; display: flex; gap: 12px; align-items: baseline; flex-wrap: wrap; font-size: 14px; color: var(--ink-2); border-bottom: 1px solid var(--line); }
.res-head:last-child { border-bottom: 0; }
.verdict { font: 700 14px/1 var(--sans); }
.verdict.yes { color: var(--block); }
.verdict.near { color: var(--alert); }
.verdict.no { color: var(--ink); }
.res-head code { color: var(--ink); word-break: break-all; }
.hit { padding: 12px 16px; border-bottom: 1px solid var(--line); display: grid; grid-template-columns: minmax(0, 1fr); gap: 8px; }
.hit:last-child { border-bottom: 0; }
.hit.exact { box-shadow: inset 2px 0 0 var(--block); }
.hit .why { display: flex; gap: 4px 16px; flex-wrap: wrap; align-items: center; }
.hit p { margin: 0; font-size: 14px; color: var(--ink-2); }
.tlink { font-weight: 700; }

/* Console: rail + feed */
.console { padding-top: 48px; padding-bottom: 24px; display: grid; grid-template-columns: var(--rail) minmax(0, 1fr); gap: 40px; align-items: start; }
.rail { display: grid; gap: 32px; min-width: 0; }
.rail-h { display: flex; align-items: center; gap: 8px; padding-bottom: 8px; margin-bottom: 12px; border-bottom: 1px solid var(--line-2); font: 700 16px/1.25 var(--sans); }
.rail-h h2 { font: inherit; }
summary.rail-h { list-style: none; }
summary.rail-h::-webkit-details-marker { display: none; }
summary.rail-h::after { content: ""; margin-left: auto; width: 7px; height: 7px; border-right: 1.5px solid var(--ink-3); border-bottom: 1.5px solid var(--ink-3); transform: translateY(-2px) rotate(45deg); transition: transform .2s var(--ease), border-color .15s; }
details:not([open]) > summary.rail-h::after { transform: translateY(1px) rotate(-45deg); }
summary.rail-h:hover::after { border-color: var(--ink); }
details:not([open]) > summary.rail-h { margin-bottom: 0; }
.f-on { font: 500 12px/1 var(--mono); color: var(--pink-text); }
.rail-p { margin: 0 0 12px; font-size: 13px; color: var(--ink-3); line-height: 1.5; }
.field { display: grid; gap: 4px; margin-bottom: 12px; }
.field span { font: 500 13px/1.2 var(--sans); color: var(--ink-2); }
select, .ind-tools input { width: 100%; height: 36px; appearance: none; -webkit-appearance: none; background: var(--well); color: var(--ink); border: 1px solid var(--line-2); border-radius: 0; padding: 0 30px 0 10px; font: 400 14px/1.2 var(--sans); transition: border-color .15s, box-shadow .15s; }
select { background-image: linear-gradient(45deg, transparent 50%, var(--ink-3) 50%), linear-gradient(135deg, var(--ink-3) 50%, transparent 50%); background-position: calc(100% - 15px) 52%, calc(100% - 10px) 52%; background-size: 5px 5px; background-repeat: no-repeat; }
select:hover, .ind-tools input:hover { border-color: #5a5456; }
select:focus, .ind-tools input:focus { border-color: var(--pink); box-shadow: 0 0 0 3px rgba(242, 19, 104, .18); outline: 0; }
select.on { border-color: var(--pink); color: var(--pink-text); }
option, optgroup { background: var(--raise); color: var(--ink); }
.link-btn { background: none; border: 0; padding: 4px 0; color: var(--pink-text); font: 500 13px/1 var(--sans); text-decoration: underline; text-decoration-thickness: 1px; text-underline-offset: 3px; }
.link-btn:hover { color: #f87aa9; }
.link-btn:disabled { color: #6f676b; text-decoration: none; }
.dl-list { list-style: none; margin: 0; padding: 0; }
.dl-list li { border-bottom: 1px solid var(--line); }
.dl-list li:first-child { border-top: 1px solid var(--line); }
.dl { display: grid; grid-template-columns: minmax(0, 1fr) auto; gap: 2px 12px; align-items: center; padding: 8px 8px 8px 0; text-decoration: none; transition: padding .2s var(--ease), background .15s; }
.dl:hover { padding-left: 8px; background: var(--raise); }
.dl b { font: 500 14px/1.35 var(--sans); color: var(--pink-text); }
.dl:hover b { color: #f87aa9; }
.dl small { grid-column: 1; font: 400 12px/1.3 var(--mono); color: var(--ink-3); overflow-wrap: anywhere; }
.dl .ext { grid-row: 1 / span 2; grid-column: 2; font: 500 11px/1 var(--mono); color: var(--ink-3); text-transform: uppercase; letter-spacing: .04em; transition: color .15s; }
.dl:hover .ext { color: var(--ink); }
.dl.busy .ext { animation: blink .8s steps(2) infinite; }
@keyframes blink { 50% { opacity: .3; } }

/* Countries affected */
.geo-list { list-style: none; margin: 0; padding: 0; }
.geo-list li.geo-more { border-top: 1px solid var(--line); margin-top: 4px; }
.geo-list .geo-btn { width: 100%; display: grid; grid-template-columns: 28px minmax(0, 1fr) auto; grid-template-rows: auto 2px; gap: 6px 8px; align-items: baseline; background: none; border: 0; padding: 7px 0 8px; color: var(--ink); font: 400 14px/1.3 var(--sans); text-align: left; transition: padding .2s var(--ease), color .15s, background .15s; }
.geo-list .geo-btn:hover { padding-left: 6px; padding-right: 6px; background: var(--raise); color: var(--ink); }
.geo-list .geo-btn.on { box-shadow: inset 2px 0 0 var(--pink); padding-left: 8px; }
.geo-c { font: 500 12px/1 var(--mono); color: var(--monitor); }
.geo-n { min-width: 0; overflow: hidden; text-overflow: ellipsis; white-space: nowrap; }
.geo-v { font: 500 13px/1 var(--mono); font-variant-numeric: tabular-nums; color: var(--ink-2); }
.geo-bar { grid-column: 2 / -1; display: block; height: 2px; background: var(--line); }
.geo-bar i { display: block; height: 2px; background: var(--pink); }
.geo-btn.on .geo-n, .geo-btn.on .geo-v { color: var(--pink-text); }
.geo-more { padding: 8px 0; font-size: 12px; color: var(--ink-3); }
.geo-regions { margin: 12px 0 0; font-size: 13px; color: var(--ink-3); line-height: 1.8; }
.geo-regions .link-btn { font-size: 13px; padding: 0; }
.geo-regions .link-btn.on { color: var(--ink); }
.geo-rl { font-weight: 500; color: var(--ink-2); }

/* Feed */
.feed { min-width: 0; }
.feed-cols { display: grid; grid-template-columns: var(--cols); gap: 32px; padding: 12px 16px 8px; font: 500 12px/1 var(--sans); color: var(--ink-3); border-bottom: 1px solid var(--line); }
.feed-cols span:last-child { text-align: left; }
.rows { list-style: none; margin: 0; padding: 0; }
.row { border-bottom: 1px solid var(--line); }
.row-in { display: grid; grid-template-columns: var(--cols); gap: 32px; padding: 24px 16px; color: var(--ink); position: relative; transition: background .18s; }
.row-in::before { content: ""; position: absolute; left: 0; top: -1px; bottom: -1px; width: 2px; background: var(--pink); transform: scaleY(0); transform-origin: top; transition: transform .22s var(--ease); }
.row-in:hover, .row-in:focus-within { background: var(--raise); }
.row-in:hover::before, .row-in:focus-within::before { transform: scaleY(1); }
.r-link { color: inherit; text-decoration: inherit; text-decoration-color: inherit; }
.r-link::after { content: ""; position: absolute; inset: 0; }
.r-link:focus-visible { outline: none; }
.r-link:focus-visible::after { outline: 2px solid var(--pink-text); outline-offset: -2px; }
.when { font: 400 12px/1.6 var(--mono); color: var(--ink-3); font-variant-numeric: tabular-nums; }
.when b { display: block; font: 700 14px/1.4 var(--sans); color: var(--ink); }
.new { display: block; margin-top: 8px; font: 700 12px/1.2 var(--sans); color: var(--ok); }
.new::before { content: ""; display: inline-block; width: 6px; height: 6px; margin-right: 6px; border-radius: 50%; background: currentColor; vertical-align: 1px; }
.r-main { min-width: 0; }
.r-cat { margin-bottom: 4px; font: 400 12px/1.5 var(--mono); color: var(--ink-3); }
.row h3 { font: 700 20px/1.25 var(--sans); letter-spacing: -.005em; color: var(--pink); text-decoration: underline; text-decoration-thickness: 1px; text-underline-offset: 4px; text-decoration-color: rgba(242, 19, 104, .35); transition: color .15s, text-decoration-color .15s; text-wrap: balance; }
.row-in:hover h3, .row-in:focus-within h3 { color: var(--pink-text); text-decoration-color: currentColor; }
.row .r-sum { margin: 8px 0 0; color: var(--ink-2); font-size: 15px; line-height: 1.55; max-width: 68ch; }
.r-tg { margin: 12px 0 0; display: grid; gap: 4px; font-size: 13px; line-height: 1.5; }
.r-tg div { display: grid; grid-template-columns: 72px minmax(0, 1fr); gap: 8px; }
.r-tg dt { font-weight: 500; color: var(--ink-3); }
.r-tg dd { margin: 0; color: var(--ink-2); }
.ctry b { font: 500 12px/1 var(--mono); color: var(--monitor); letter-spacing: .02em; }
.dim { color: var(--ink-3); }
.r-meta { margin-top: 12px; display: flex; flex-wrap: wrap; gap: 4px 16px; align-items: baseline; font: 400 12px/1.4 var(--mono); color: var(--ink-3); }
.r-src { margin: 0; font: 400 13px/1.4 var(--sans); color: var(--ink-3); }
.r-src a, .srcline a, .tg-src a { position: relative; z-index: 1; font-weight: 500; text-decoration-color: rgba(242, 19, 104, .45); }
.r-src a:hover, .srcline a:hover, .tg-src a:hover { text-decoration-color: currentColor; }
.sl { color: var(--ink-3); margin-right: 4px; }
.sep { color: var(--ink-3); }
.srcline { margin: 0 0 32px; font-size: 14px; line-height: 1.6; color: var(--ink-3); }
.todo { margin: 0 0 16px; font-size: 15px; color: var(--ink-2); }
.todo b { font-weight: 700; font-variant-numeric: tabular-nums; }
.todo .blk { color: var(--block); }
.todo .hunt { color: var(--alert); }
.todo .link-btn { font-size: 14px; padding: 0; }
.r-side { display: grid; gap: 8px; align-content: start; padding-top: 2px; }
.r-num { display: flex; align-items: baseline; gap: 10px; font: 400 13px/1 var(--sans); color: var(--ink-3); }
.r-num b { font: 700 28px/1 var(--sans); color: var(--ink); font-variant-numeric: tabular-nums; letter-spacing: -.01em; }
.r-num .blk { color: var(--block); font-weight: 500; }
.comp { display: flex; height: 3px; gap: 2px; margin-top: 2px; }
.comp i { display: block; height: 100%; min-width: 3px; background: var(--c, #6a6466); }
.legend { display: flex; flex-wrap: wrap; gap: 2px 10px; font: 400 12px/1.5 var(--mono); }
.legend span { color: var(--c, var(--ink-3)); }
.t-ipv4 { --c: #7fd1b9; } .t-domain { --c: #3fa9cb; } .t-url { --c: #c58af0; } .t-sha256 { --c: #e58a10; } .t-sha1 { --c: #d9a441; } .t-md5 { --c: #c89b6a; }
.t-filename { --c: #b5d96a; } .t-email { --c: #ff8fb8; } .t-eth_address, .t-xmr_address { --c: #9aa0ff; } .t-other, .t-ssh_pubkey, .t-session_id, .t-function_selector { --c: #a39a9f; }
.skel { height: 160px; background: linear-gradient(90deg, transparent, var(--raise), transparent) 0 0 / 50% 100% no-repeat, var(--bg); animation: sheen 1.4s linear infinite; }
@keyframes sheen { from { background-position: -50% 0, 0 0; } to { background-position: 150% 0, 0 0; } }
.empty-state { list-style: none; padding: 48px 24px; text-align: center; border: 1px dashed var(--line-2); margin-top: 16px; color: var(--ink-3); font-size: 14px; }
.empty-state b { display: block; font: 700 18px/1.3 var(--sans); color: var(--ink); margin-bottom: 4px; }
.empty-state .link-btn { margin-top: 12px; }

/* Shared atoms: coloured text only, no fills */
.ioc { display: flex; align-items: flex-start; gap: 10px; min-width: 0; }
.ioc code { font-size: 13px; line-height: 1.6; color: var(--ink); word-break: break-all; flex: 1; min-width: 0; }
.copy { flex: none; background: transparent; border: 1px solid var(--line-2); color: var(--ink-2); font: 500 12px/1 var(--sans); padding: 5px 8px; border-radius: 3px; transition: color .15s, border-color .15s; }
.copy:hover { color: var(--ink); border-color: var(--ink-3); }
.copy.done { color: var(--ok); border-color: var(--ok); }
.pill { display: inline; font: 500 13px/1.3 var(--sans); color: var(--ink-2); white-space: nowrap; }
.pill.block { color: var(--block); font-weight: 700; }
.pill.alert { color: var(--alert); font-weight: 700; }
.pill.monitor { color: var(--monitor); font-weight: 700; }
.pill.hunt { color: var(--monitor); font-weight: 700; }
.conf { display: inline-flex; align-items: center; gap: 7px; font: 400 13px/1 var(--sans); color: var(--ink-2); white-space: nowrap; }
.conf i { display: inline-flex; gap: 2px; }
.conf i::before, .conf i::after, .conf i b { content: ""; display: block; width: 4px; height: 10px; background: var(--line-2); }
.conf.low i::before { background: var(--ink-2); }
.conf.med i::before, .conf.med i b { background: var(--ink-2); }
.conf.high i::before, .conf.high i b, .conf.high i::after { background: var(--ink); }
.ty { font: 500 13px/1.3 var(--sans); color: var(--c, var(--ink-2)); white-space: nowrap; }
.pill.block, .pill.alert, .pill.monitor, .pill.hunt, .conf { text-transform: capitalize; }

/* Detail */
.det { padding-top: 24px; padding-bottom: 24px; animation: rise .3s var(--ease); }
@keyframes rise { from { opacity: 0; transform: translateY(6px); } to { opacity: 1; transform: none; } }
.crumb { display: flex; gap: 8px; align-items: center; font: 400 13px/1 var(--sans); color: var(--ink-3); }
.crumb a { font-weight: 500; display: inline-flex; gap: 6px; align-items: center; text-decoration: none; }
.crumb a:hover { text-decoration: underline; }
.det-head { padding: 24px 0 32px; border-bottom: 1px solid var(--line-2); }
.det-head .r-cat { display: flex; gap: 12px; flex-wrap: wrap; align-items: baseline; font-size: 13px; }
.det-head .r-cat .new { margin-top: 0; }
.det-head h1 { max-width: 26ch; font-size: clamp(28px, 3.2vw, 40px); margin-top: 8px; }
.det-head .lede { margin: 12px 0 0; font-size: 18px; color: var(--ink-2); max-width: 64ch; line-height: 1.5; }
.facts { display: grid; grid-template-columns: repeat(3, minmax(0, max-content)); margin: 24px 0 0; border-top: 1px solid var(--line-2); border-bottom: 1px solid var(--line-2); }
.facts div { padding: 12px 32px 12px 20px; border-left: 1px solid var(--line); }
.facts div:first-child { border-left: 0; padding-left: 0; }
.facts dt { font: 500 12px/1.2 var(--sans); color: var(--ink-3); }
.facts dd { margin: 6px 0 0; font: 700 16px/1.2 var(--sans); font-variant-numeric: tabular-nums; white-space: nowrap; }
.facts .hot dd { color: var(--block); }
.det-grid { display: grid; grid-template-columns: minmax(0, 1fr) 300px; gap: 48px; padding-top: 32px; }
.det-main { min-width: 0; }
.blk-sec { margin-bottom: 32px; }
.blk-sec > h2 { font: 700 18px/1.25 var(--sans); padding-bottom: 8px; border-bottom: 1px solid var(--line-2); margin-bottom: 16px; display: flex; justify-content: space-between; align-items: baseline; gap: 12px; }
.blk-sec > h2 span { font: 400 12px/1 var(--mono); color: var(--ink-3); }
.prose { font-size: 16px; line-height: 1.65; color: var(--ink); max-width: 72ch; }
.prose p { margin: 0; }
.steps { list-style: none; margin: 0; padding: 0; counter-reset: s; }
.steps li { counter-increment: s; display: grid; grid-template-columns: 32px minmax(0, 1fr); gap: 8px; padding: 12px 0; border-bottom: 1px solid var(--line); font-size: 15px; }
.steps li:first-child { padding-top: 0; }
.steps li:last-child { border-bottom: 0; }
.steps li::before { content: counter(s, decimal-leading-zero); font: 500 13px/1.75 var(--mono); color: var(--pink-text); }
.warn { margin: 0 0 32px; padding: 12px 16px; border: 1px solid rgba(229, 138, 16, .55); font-size: 14px; color: var(--ink-2); box-shadow: inset 2px 0 0 var(--alert); }
.warn b { font-weight: 700; color: var(--alert); margin-right: 8px; }
.side { display: grid; gap: 32px; align-content: start; }
.side .blk-sec { margin: 0; }
.side .rail-p { margin-top: 12px; }
.mitre { list-style: none; margin: 0; padding: 0; }
.mitre li { border-bottom: 1px solid var(--line); }
.mitre li:first-child { border-top: 1px solid var(--line); }
.mitre a { display: grid; grid-template-columns: 76px minmax(0, 1fr); gap: 8px; padding: 8px 0; text-decoration: none; font-size: 14px; color: var(--ink-2); }
.mitre a b { font: 500 13px/1.55 var(--mono); color: var(--pink-text); }
.mitre a:hover { color: var(--ink); }
.mitre a:hover b { color: #f87aa9; }
.ext-ico { display: inline-block; width: 7px; height: 7px; margin-left: 6px; border-top: 1.5px solid currentColor; border-right: 1.5px solid currentColor; }
.tg-dl { margin: 0; display: grid; gap: 8px; font-size: 14px; }
.tg-dl div { display: grid; grid-template-columns: 96px minmax(0, 1fr); gap: 12px; }
.tg-dl dt { font-weight: 500; color: var(--ink-3); }
.tg-dl dd { margin: 0; }
.ctry-list { list-style: none; margin: 0; padding: 0; display: flex; flex-wrap: wrap; gap: 4px 16px; }
.tg-note { margin: 12px 0 0; font-size: 14px; color: var(--ink-2); max-width: 72ch; }
.tg-src { margin: 4px 0 0; font-size: 13px; color: var(--ink-3); }

.ind-sec { margin-top: 16px; }
.ind-head { display: flex; justify-content: space-between; align-items: end; gap: 16px; flex-wrap: wrap; padding-bottom: 12px; border-bottom: 1px solid var(--line-2); }
.ind-head h2 { font: 700 20px/1.2 var(--sans); display: flex; gap: 12px; align-items: baseline; }
.ind-head h2 span { font: 400 13px/1 var(--mono); color: var(--ink-3); }
.ind-note { margin: 12px 0 16px; font: 400 13px/1.5 var(--sans); color: var(--ink-3); }
.ind-tools { display: grid; grid-template-columns: minmax(0, 1fr) 240px; gap: 8px; margin-bottom: 8px; }
.ind-tools input { padding: 0 10px; font-family: var(--mono); font-size: 13px; }
.tbl-wrap { overflow-x: auto; }
table { width: 100%; border-collapse: collapse; font-size: 14px; }
thead th { text-align: left; font: 500 13px/1.2 var(--sans); color: var(--ink); background: var(--line-2); padding: 10px 12px; white-space: nowrap; }
tbody td { padding: 12px; border-bottom: 1px solid var(--line); vertical-align: top; }
tbody tr { transition: background .12s; }
tbody tr:hover { background: var(--raise); }
td.ind { width: 38%; }
td.desc { color: var(--ink-2); line-height: 1.5; }
.src { margin-top: 4px; font-size: 12px; color: var(--ink-3); }
td.none { text-align: center; padding: 32px; color: var(--ink-3); font-size: 14px; }

/* Footer, as on daniyyell.com. One grid shared by every band, on the same columns as the dashboard (rail | content | side),
   so labels, text and logos line up down the page. Rhythm: 48 / 32 / 24 / 16 / 8. */
.foot { margin-top: 64px; border-top: 1px solid var(--line-2); background: var(--foot); }
.foot-in { display: grid; grid-template-columns: var(--rail) minmax(0, 1fr) 232px; column-gap: 40px; }
.foot-in { padding-top: 40px; padding-bottom: 36px; grid-template-areas: "scope links vis"; row-gap: 32px; align-items: start; }
.foot-h { margin: 0 0 14px; font: 500 12px/16px var(--sans); letter-spacing: .08em; text-transform: uppercase; color: var(--ink-3); }
.foot-scope { grid-area: scope; min-width: 0; }
.foot-scope p { margin: 0; font-size: 14px; line-height: 1.6; color: var(--ink-2); }
.foot-links { grid-area: links; min-width: 0; }
.foot-links ul { list-style: none; margin: 0; padding: 0; display: grid; grid-template-columns: repeat(3, max-content); gap: 10px 40px; }
.nw { white-space: nowrap; }
.foot-links a { display: inline-flex; align-items: flex-start; gap: 8px; font: 500 14px/1.4 var(--sans); color: #fff8fc; text-decoration: none; }
.foot-links .ico { flex: none; display: block; width: 14px; height: 14px; margin-top: 3px; color: var(--ink-3); transition: color .15s; }
.foot-links a:hover .ico { color: var(--pink-text); }
.foot-links a.mono { font: 500 13px/1.4 var(--mono); }
.foot-links a:hover { color: var(--pink-text); }
.foot-links a:hover span { text-decoration: underline; text-underline-offset: 3px; }
/* Bottom bar: credits and privacy note left; a slim sponsor credit right, logos only, no fill */
.foot-end { padding-top: 20px; padding-bottom: 24px; position: relative; display: flex; flex-wrap: wrap; justify-content: space-between; align-items: center; gap: 12px 32px; }
.foot-end::before { content: ""; position: absolute; top: 0; left: var(--gut); right: var(--gut); border-top: 1px solid var(--line); }
.foot-meta { min-width: 0; }
.credit { margin: 0; display: flex; flex-wrap: wrap; gap: 4px 24px; font: 400 13px/1.4 var(--sans); color: #c9bfc4; }
.credit a { font-weight: 700; }
.privacy { margin: 6px 0 0; font: 400 13px/1.4 var(--sans); color: var(--ink-3); }
.privacy a { color: inherit; }
.privacy a:hover { color: var(--pink-text); }
.spons { display: flex; align-items: center; gap: 16px; }
.spons-h { margin: 0; font: 400 12px/1.4 var(--sans); color: var(--ink-3); white-space: nowrap; }
.spons-list { list-style: none; margin: 0; padding: 0; display: flex; align-items: center; gap: 20px; }
.spons-list a { display: block; padding: 2px 0; text-decoration: none; opacity: .8; transition: opacity .15s; }
.spons-list a:hover, .spons-list a:focus-visible { opacity: 1; }
.spons-list img { display: block; width: auto; height: 20px; }
.spons-list img.spons-phishcore { height: 17px; }

/* Visitors: third column of the footer grid. Two even stats, then a flag list with share bars */
.visits { grid-area: vis; min-width: 0; }
.visits-nums { margin: 0; display: grid; grid-template-columns: minmax(0, 1fr) minmax(0, 1fr); gap: 16px; }
.visits-cell { min-width: 0; }
.visits-cell dd { margin: 0; font: 700 26px/1 var(--sans); letter-spacing: -.01em; font-variant-numeric: tabular-nums; color: var(--ink); }
.visits-cell dt { margin-top: 6px; font: 400 12px/1.3 var(--sans); color: var(--ink-3); }
.visits-cell { display: flex; flex-direction: column-reverse; }
.visits-geo-wrap { margin-top: 24px; padding-top: 16px; border-top: 1px solid var(--line); }
.visits-sub { margin: 0 0 12px; font: 500 12px/16px var(--sans); color: var(--ink-3); }
.visits-geo { list-style: none; margin: 0; padding: 0; display: grid; gap: 12px; }
.visits-geo li { display: grid; grid-template-columns: 20px minmax(0, 1fr) auto; column-gap: 10px; row-gap: 6px; align-items: center; }
.visits-flag { display: block; width: 20px; height: 15px; border-radius: 2px; object-fit: cover; box-shadow: 0 0 0 1px rgba(255, 255, 255, .12); }
.visits-cn { min-width: 0; overflow: hidden; text-overflow: ellipsis; white-space: nowrap; font: 400 13px/1.3 var(--sans); color: var(--ink-2); }
.visits-cv { font: 500 13px/1 var(--mono); font-variant-numeric: tabular-nums; color: var(--ink); text-align: right; }
.visits-bar { grid-column: 2 / -1; display: block; height: 2px; background: var(--line); border-radius: 1px; overflow: hidden; }
.visits-bar-f { display: block; height: 100%; background: var(--pink); border-radius: 1px; }

.toast { position: fixed; left: 50%; bottom: 24px; transform: translate(-50%, 16px); background: var(--raise); border: 1px solid var(--line-2); color: var(--ink); font: 500 13px/1 var(--sans); padding: 12px 16px; opacity: 0; pointer-events: none; transition: opacity .18s, transform .25s var(--ease); z-index: 40; }
.toast.show { opacity: 1; transform: translate(-50%, 0); }

/* Tablet */
@media (max-width: 1080px) {
  :root { --cols: 96px minmax(0, 1fr) 160px; }
  .brief { grid-template-columns: 1fr; }
  .brief-r { display: none; }
  .console { grid-template-columns: 1fr; gap: 32px; }
  .rail { display: contents; }
  .filt { order: 1; }
  .filt-in { display: grid; grid-template-columns: repeat(5, minmax(0, 1fr)); gap: 0 12px; align-items: end; }
  .filt-in .link-btn { grid-column: 1 / -1; justify-self: start; }
  .geo { order: 2; }
  .geo-list { display: grid; grid-template-columns: 1fr 1fr; column-gap: 32px; }
  .geo-list .geo-more { grid-column: 1 / -1; }
  .feed { order: 3; }
  .files { order: 4; }
  .foot-in { grid-template-columns: minmax(0, 1fr) minmax(0, 1fr); }
  .foot-in { grid-template-areas: "scope vis" "links vis"; }
  .foot-links ul { grid-template-columns: repeat(2, max-content); }
  .det-grid { grid-template-columns: 1fr; }
  .facts { grid-template-columns: repeat(3, minmax(0, 1fr)); }
  .facts div { border-bottom: 1px solid var(--line); }
  .facts div:nth-child(3n+1) { border-left: 0; padding-left: 0; }
  .facts div:nth-child(n+4) { border-bottom: 0; }
}
@media (max-width: 860px) {
  .filt-in { grid-template-columns: repeat(3, minmax(0, 1fr)); }
}

/* Phone */
@media (max-width: 720px) {
  body { font-size: 15px; }
  .bar-in { gap: 12px; height: 52px; }
  .mark-s, .bar-nav, .pl { display: none; }
  .mark { gap: 6px; }
  .mark-i { width: 26px; height: 26px; }
  .mark-w { height: 14px; }
  .pulse { margin-left: auto; font-size: 11.5px; }
  .brief { padding-top: 24px; padding-bottom: 24px; }
  .eyebrow { margin-bottom: 12px; font-size: 13px; }
  .eyebrow { flex-direction: column; gap: 6px; }
  .tag { font-size: 12px; padding-right: 0; border-right: 0; }
  h1 { font-size: 30px; line-height: 1.1; }
  .caution { margin-top: 20px; padding: 12px 14px 12px 20px; }
  .caution p:last-child { font-size: 13.5px; line-height: 1.55; }
  .ledger { grid-template-columns: 1fr 1fr; }
  .cell { padding: 16px; }
  .cell:nth-child(odd) { border-left: 0; padding-left: 0; }
  .cell:nth-child(-n+2) { border-bottom: 1px solid var(--line); }
  .cell dd { font-size: 30px; flex-direction: column; align-items: flex-start; gap: 6px; }
  .cell dd small { font-size: 12px; }
  .cell.date dd { font-size: 20px; line-height: 30px; }
  .check { padding-top: 32px; }
  .sec-h { flex-direction: column; gap: 4px; }
  .sec-h h2 { font-size: 18px; }
  .search { flex-wrap: wrap; height: auto; }
  .search input { height: 48px; font-size: 14px; padding: 0 10px; }
  .search button { flex: 1 0 100%; height: 44px; }
  .console { padding-top: 32px; gap: 24px; }
  .filt-in { grid-template-columns: 1fr 1fr; }
  .filt-in .field:nth-child(5) { grid-column: 1 / -1; }
  .filt-in .link-btn { margin-bottom: 4px; }
  details.rail-box > summary.rail-h { padding: 12px 0; margin-bottom: 0; border-top: 1px solid var(--line-2); border-bottom: 1px solid var(--line-2); }
  details[open].rail-box > summary.rail-h { margin-bottom: 12px; border-bottom-color: var(--line); }
  .console { gap: 0; }
  .geo > summary.rail-h { border-top: 0; }
  .geo-list { grid-template-columns: 1fr; }
  .feed { margin-top: 32px; }
  .feed-cols { display: none; }
  .row-in { grid-template-columns: 1fr; gap: 12px; padding: 20px 0; }
  .row-in:hover, .row-in:focus-within { background: transparent; }
  .row-in::before { left: -12px; }
  .when { display: flex; gap: 8px; align-items: baseline; flex-wrap: wrap; }
  .when b { display: inline; font-size: 13px; }
  .new { margin-top: 0; margin-left: auto; }
  .row h3 { font-size: 19px; }
  .row .r-sum { font-size: 14px; }
  .r-meta { margin-top: 8px; }
  .r-side { grid-template-columns: auto 1fr; align-items: center; gap: 8px 16px; padding-top: 12px; border-top: 1px dashed var(--line); }
  .r-num b { font-size: 22px; }
  .comp { margin-top: 0; }
  .legend { grid-column: 1 / -1; }
  .files { margin-top: 40px; }
  .det-head .lede { font-size: 16px; }
  .facts { grid-template-columns: 1fr 1fr; }
  .facts div, .facts div:nth-child(n+4) { border-bottom: 1px solid var(--line); padding: 12px 16px; }
  .facts div:nth-child(3n+1) { border-left: 1px solid var(--line); padding-left: 16px; }
  .facts div:nth-child(odd) { border-left: 0; padding-left: 0; }
  .facts div:last-child { border-bottom: 0; }
  .tg-dl div { grid-template-columns: 1fr; gap: 2px; }
  .foot-in { grid-template-columns: minmax(0, 1fr); grid-template-areas: "scope" "links" "vis"; padding-top: 32px; padding-bottom: 28px; row-gap: 28px; }
  .foot-h { margin-bottom: 12px; }
  .foot-links ul { grid-template-columns: minmax(0, 1fr) minmax(0, 1fr); gap: 10px 16px; }
  .foot-end { flex-direction: column; align-items: flex-start; gap: 16px; }
  .spons { gap: 12px; }
  .spons-list { gap: 16px; }
  .spons-list img { height: 18px; }
  .spons-list img.spons-phishcore { height: 15px; }
  .credit { flex-direction: column; gap: 2px; }
  .visits-cell dd { font-size: 24px; }
  .ind-tools { grid-template-columns: 1fr; }
  table, thead, tbody, tr, td { display: block; }
  thead { position: absolute; width: 1px; height: 1px; overflow: hidden; clip: rect(0 0 0 0); }
  tbody tr { border: 1px solid var(--line-2); margin-top: 8px; padding: 12px; display: grid; grid-template-columns: auto auto 1fr; gap: 8px 16px; align-items: center; }
  tbody tr:hover { background: transparent; }
  tbody td { border: 0; padding: 0; }
  td.ind { width: auto; grid-column: 1 / -1; padding-bottom: 8px; border-bottom: 1px solid var(--line); }
  td.desc { grid-column: 1 / -1; font-size: 13.5px; }
  td.none { grid-column: 1 / -1; }
}
@media (prefers-reduced-motion: reduce) {
  *, *::before, *::after { animation-duration: .001ms !important; animation-iteration-count: 1 !important; transition-duration: .001ms !important; scroll-behavior: auto !important; }
  .dot { box-shadow: none; }
}

/* Behaviours to hunt (IOAs) */
.r-num .hunt { color: var(--monitor); font-weight: 500; }
.legend .ioa-leg { color: var(--monitor); }
.todo .ioa-c { color: var(--monitor); }

/* Hunt: query tabs per platform. Text labels only, no filled boxes. */
.hq-intro { margin: 0 0 12px; font-size: 14px; line-height: 1.55; color: var(--ink-3); max-width: 72ch; }
.hq-tabs { display: flex; flex-wrap: wrap; gap: 4px 24px; border-bottom: 1px solid var(--line); margin-bottom: 12px; }
.hq-tab { background: none; border: 0; border-bottom: 2px solid transparent; margin-bottom: -1px; padding: 8px 0; font: 500 14px/1.2 var(--sans); color: var(--ink-3); transition: color .15s, border-color .15s; }
.hq-tab:hover { color: var(--ink); }
.hq-tab[aria-selected="true"] { font-weight: 700; }
.hq-tab.p-defender-xdr[aria-selected="true"] { color: var(--monitor); border-bottom-color: var(--monitor); }
.hq-tab.p-splunk[aria-selected="true"] { color: var(--ok); border-bottom-color: var(--ok); }
.hq-tab.p-google-secops[aria-selected="true"] { color: var(--alert); border-bottom-color: var(--alert); }
.hq-tab:focus-visible, .hq-panel:focus-visible, .hq-code:focus-visible { outline: 2px solid var(--pink); outline-offset: 2px; }
.hq-meta { margin: 0 0 8px; font: 400 13px/1.45 var(--sans); color: var(--ink-3); }
.hq-lang { font: 700 13px/1 var(--mono); color: var(--ink); }
.hq-file { font: 400 12px/1 var(--mono); color: var(--ink-2); }
.hq-alt { margin-top: 12px; padding-top: 12px; border-top: 1px solid var(--line); }
.hq-alt p { margin: 0 0 8px; font-size: 13px; line-height: 1.5; color: var(--ink-3); }
.hq-alt b { color: var(--ink-2); font-weight: 500; }
@media (max-width: 720px) {
  .hq-tabs { gap: 4px 16px; }
  .hq-tab { font-size: 13px; }
}

/* Behaviours: numbered items, label first, labelled detail lines. */
.blk-sec { scroll-margin-top: 80px; }
.ioa-note { margin: 0 0 20px; padding: 2px 0 2px 12px; border-left: 2px solid var(--pink); font-size: 14px; line-height: 1.55; color: var(--ink-2); max-width: 72ch; }
.ioa-list { list-style: none; margin: 0; padding: 0; }
.ioa-list > li { display: grid; grid-template-columns: 32px minmax(0, 1fr); gap: 0 12px; padding: 20px 0; border-top: 1px solid var(--line); }
.ioa-list > li:first-child { border-top: 0; padding-top: 4px; }
.ioa-list > li:last-child { padding-bottom: 0; }
.ioa-n { font: 500 15px/1.4 var(--mono); color: var(--ink-3); text-align: right; padding-top: 1px; }
.ioa-title { margin: 0 0 8px; font: 500 16px/1.4 var(--sans); color: var(--ink); overflow-wrap: anywhere; }
.ioa-title .pill { margin-right: 8px; font-size: 12px; letter-spacing: .04em; text-transform: uppercase; }
.ioa-line { display: grid; grid-template-columns: 120px minmax(0, 1fr); gap: 0 12px; margin: 4px 0 0; font-size: 14px; line-height: 1.55; color: var(--ink-2); max-width: 78ch; overflow-wrap: anywhere; }
.ioa-lab { display: block; padding-top: 2px; font: 500 12px/1.55 var(--sans); color: var(--ink-3); text-transform: uppercase; letter-spacing: .04em; }
.ioa-qs { font-family: var(--mono); font-size: 13px; color: var(--ink); }
.ioa-qs .ioa-lab { font-family: var(--sans); }
.ioa-qs.none { font-family: var(--sans); color: var(--ink-3); }

/* Hunt preview and actions */
.hq-act { display: flex; flex-wrap: wrap; align-items: center; gap: 4px 12px; margin: 0 0 12px; }
.hq-act .sep { color: var(--ink-3); }
.hq-btn { background: none; border: 0; padding: 4px 0; color: var(--pink-text); font: 500 14px/1.2 var(--sans); text-decoration: underline; text-decoration-thickness: 1px; text-underline-offset: 3px; transition: color .15s; }
.hq-btn:hover { color: #f87aa9; }
.hq-btn.done { color: var(--ok); }
.hq-btn.busy { animation: blink .8s steps(2) infinite; }
.hq-code { margin: 0; max-height: 440px; overflow: auto; padding: 12px 14px; border: 1px solid var(--line-2); border-radius: 3px; font: 400 12.5px/1.6 var(--mono); color: var(--ink); white-space: pre-wrap; overflow-wrap: anywhere; tab-size: 4; -webkit-overflow-scrolling: touch; }
.hq-code code { font: inherit; color: inherit; }
.hq-code .t-c { color: var(--ink-3); font-style: italic; }
.hq-code .t-k { color: var(--pink-text); font-weight: 600; }
.hq-code .t-s { color: #f2a65a; }
.hq-code .t-r { color: #f2a65a; }
.hq-code .t-n { color: #7cc7e0; }
.hq-code .t-f { color: #ffd479; }
.hq-code .t-v { color: #b7a3f0; }
.hq-code .t-a { color: #9fd3c7; }
.hq-code .t-p { color: var(--pink); font-weight: 700; }
.hq-code .t-o { color: var(--ink-2); }
.hq-hint { margin: 6px 0 0; font-size: 12px; line-height: 1.5; color: var(--ink-3); }
@media (max-width: 720px) {
  .ioa-list > li { grid-template-columns: 22px minmax(0, 1fr); gap: 0 8px; padding: 16px 0; }
  .ioa-line { display: block; }
  .ioa-lab { padding-top: 0; }
  .ioa-title { font-size: 15px; }
  .hq-code { max-height: 360px; padding: 10px; font-size: 11.5px; }
}

/* Subline under the main heading */
.tagline-sub { margin: 10px 0 0; font: 400 15px/1.5 var(--sans); color: var(--ink-3); }

/* Buy Me a Coffee: official yellow logo, kept in colour (no hover tint) */
.foot-links .ico-bmc { width: 16px; height: 16px; margin-top: 2px; border-radius: 4px; }