{"report_id":"09fe1960-addf-4480-ab90-10149c1ee7ee","version":6,"status":"done","tags":["paypal","phishing","financial","suspicious"],"date":"2026-02-21T21:50:44Z","url":{"schema":"http","addr":"garbeado.click","fqdn":"garbeado.click","domain":"garbeado.click","tld":"click"},"ip":{"addr":"185.221.216.117","port":0,"asn":393960,"as":"HOST4GEEKS-LLC","country":"United Kingdom","country_code":"GB"},"final":{"url":{"schema":"https","addr":"garbeado.click/","fqdn":"garbeado.click","domain":"garbeado.click","tld":"click"},"title":"Log in to your PayPal account","dom":{"size":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"garbeado.click","fqdn":"garbeado.click","domain":"garbeado.click","tld":"click"},"ip":{"addr":"185.221.216.117","port":0,"asn":393960,"as":"HOST4GEEKS-LLC","country":"United Kingdom","country_code":"GB"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-03-28T21:50:44Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":3,"analyzer":4}},"detection":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-21","alert":"Sinkholed","trigger":"garbeado.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-21","alert":"Sinkholed","trigger":"garbeado.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-21","alert":"Sinkholed","trigger":"garbeado.click","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-21","alert":"Phishing Block","trigger":"garbeado.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - PayPal","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with PayPal phishing","tags":["paypal","phishing","financial"],"meta":null},{"sensor_name":"urlquery","alert":"Suspicious - Suspicious Javascript code","verdict":"suspicious","severity":"medium","comment":"","tags":["suspicious"],"meta":null},{"sensor_name":"urlquery","alert":"Suspicious - Suspicious Javascript code","verdict":"suspicious","severity":"medium","comment":"","tags":["suspicious"],"meta":null}]},"summary":[{"fqdn":"garbeado.click","ip":{"addr":"185.221.216.117","port":443,"asn":393960,"as":"HOST4GEEKS-LLC","country":"United Kingdom","country_code":"GB"},"domain_registered":"2026-01-28","domain_rank":0,"first_seen":"2026-02-21T20:33:51.306145Z","last_seen":"2026-02-21T20:33:51.306145Z","alert_count":71,"request_count":14,"received_data":882512,"sent_data":6502,"comment":"","tags":null,"fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Modernizr","description":"Modernizr is a JavaScript library that detects the features available in a user's browser.","website":"https://modernizr.com","common_platform_enumeration":"","icon":"Modernizr.svg","categories":["JavaScript libraries"]}]},{"fqdn":"www.paypalobjects.com","ip":{"addr":"151.101.131.1","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2005-05-12","domain_rank":19317,"first_seen":"2012-05-30T06:40:21Z","last_seen":"2026-02-18T15:52:40.390623Z","alert_count":0,"request_count":6,"received_data":513280,"sent_data":2930,"comment":"","tags":null,"fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - PayPal","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with PayPal phishing","tags":["paypal","phishing","financial"],"meta":null},{"sensor_name":"urlquery","alert":"Suspicious - Suspicious Javascript code","verdict":"suspicious","severity":"medium","comment":"","tags":["suspicious"],"meta":null}]},"javascript":{"script":[{"url":{"schema":"https","addr":"garbeado.click/index_files/modernizr-2.6.1.js.download","fqdn":"garbeado.click","domain":"garbeado.click","tld":"click"},"ip":{"addr":"185.221.216.117","port":443,"asn":393960,"as":"HOST4GEEKS-LLC","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":false,"md5":"a635a55ddb6339a3d0d01c641f670753","sha1":"a6dee4a1df6c51b82ce2e67323514e7de4e165d4","sha256":"a6c3bff965978df8093c3a29f7071c21d7439a212af41e7b40ce70d94d6bcc44","sha512":"2562ca35be37bfe0b984ec288e23678bc97ba7a881764044e65914ea013742a5310a5c12839cb8a501a464791bc67868fe6a02ae149df9329e40562569eba42d","ssdeep":"","tlshash":"a77175c474e1f15e539b20bb107fa34ef2b85a65596a8510e0a8c4bdbcb0c64867bf2d","size":3807,"data":"","first_seen":"2023-03-07T01:03:30Z","last_seen":"2026-06-05T02:04:16.000751Z","times_seen":1048,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"garbeado.click/index_files/ngrlCaptcha.min.js.download","fqdn":"garbeado.click","domain":"garbeado.click","tld":"click"},"ip":{"addr":"185.221.216.117","port":443,"asn":393960,"as":"HOST4GEEKS-LLC","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":false,"md5":"243eda4543153156c0ae9df9e8c5833d","sha1":"dfa372f408889fa3f4a6ca29847f4a379ed246a8","sha256":"d81bfefd8585b694222d3e94e9dee5d7935049c65355f9fd096800301d51545b","sha512":"bc2e170a94bb45624ed4392b2049fa017411c244dc765b5e862093e2264ec9580752a29a86e6739e2ecba2f16b6880fdbf9ab1ecb6647e739b391b46a5bf9aa9","ssdeep":"384:v0Ap5n5P9Nxf4hfWGwR+EkE+n4QnZ/X2NWKW4BCCMHxDkZbaXpweyGobcUWfgMcC:J5n51f4hfWGwR+Tnn4QnZ/b3J7yGQMUE","tlshash":"faa2c6d9378074b30bdb22ba712fa247f1b2459aac4dd050a614dcf12c7ceda8516fad","size":23125,"data":"","first_seen":"2024-06-05T17:44:09Z","last_seen":"2026-06-07T20:24:04.996399Z","times_seen":1160,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.paypalobjects.com/martech/tm/paypal/mktconf.js","fqdn":"www.paypalobjects.com","domain":"paypalobjects.com","tld":"com"},"ip":{"addr":"151.101.131.1","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"e2e371289ec06d4a2bed53651fcbf96b","sha1":"5f4420ffab2dc84746a09a831b5680216b7bf4b6","sha256":"503746bbb1d00bef2cffcd2ca09cdeb7c42692b0eadae64e107765d223b37099","sha512":"93dcf87f637048b485d5c0a610c9f43701a625ce4332d53e39f12a5ba265be1acc6e7126511ddffd8a9ad672e70cb405279c40dbaddcebbc6ca80eb37c2bdc38","ssdeep":"3072:SEO3e0uNHs0QRQ3QCQBEd+fCT8T0G9Y3QzJ:S1AMJM+f0e0G9Y3QzJ","tlshash":"178483c8c9b49daf0d7fdf44ae5f9a2420242b684b8a4811b7d47f7a07571db29ca7c0","size":376648,"data":"","first_seen":"2026-02-20T07:23:20.016016Z","last_seen":"2026-03-04T19:39:23.777425Z","times_seen":60,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"garbeado.click/index_files/latmconf.js.download","fqdn":"garbeado.click","domain":"garbeado.click","tld":"click"},"ip":{"addr":"185.221.216.117","port":443,"asn":393960,"as":"HOST4GEEKS-LLC","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":false,"md5":"a48a0ce07fdeae639d115a15c66d406d","sha1":"27f5fdd1dab4745ee202d4266f59812f26d04b59","sha256":"20b73b0e0cf1a03aac7359c8605d0b6ad8518a0fcd10f1a40a77175ad3cc1bcd","sha512":"6f82ac29f3b671168f3c09f6f7f22aae9d0b994243b799b155a50cd3f9d9b53016f2129c4e9700544f666ad88b36a6626fb9dc046d151648ca651c18d3649544","ssdeep":"384:8jCLoqKvmwdkvON2jWRx4YLDz0odh269JS:8jCLo7vmwdkA2CRx4wDAmh269JS","tlshash":"5e620c4e6bfc9af61d7a52e693da3e0f58c450c3784393e575e8c82f20d64d6092743a","size":15367,"data":"","first_seen":"2025-04-22T21:29:43.931532Z","last_seen":"2026-02-22T00:14:23.751172Z","times_seen":65,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"garbeado.click/editme.js","fqdn":"garbeado.click","domain":"garbeado.click","tld":"click"},"ip":{"addr":"185.221.216.117","port":443,"asn":393960,"as":"HOST4GEEKS-LLC","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":false,"md5":"adfb7297de3d618c742f2e29c4ccc941","sha1":"b2f63641f3e94e66bdf557263ef3b12c68455cae","sha256":"a7f6d3a16c5294bf712125dea11bbae4234c802a28ae9b46efa6352932ddfc06","sha512":"31d366b9b7b2c3adaab62843cdf03a4a5b6966bcc57311b631691e383441a5cd297cd946ffa5b106b38f19febf267f6678a6126db7c7201c3cd63a2f1845fa10","ssdeep":"","tlshash":"12b092192031502481878a82aba1fe901a4b20a8a456e4f06b9ac0e970eb222a966860","size":111,"data":"","first_seen":"2026-02-21T20:33:54.703538Z","last_seen":"2026-02-22T00:14:23.733981Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"garbeado.click/","fqdn":"garbeado.click","domain":"garbeado.click","tld":"click"},"ip":{"addr":"185.221.216.117","port":443,"asn":393960,"as":"HOST4GEEKS-LLC","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":true,"md5":"83182c1f32f3eb986ea19ea2ec6cb0e7","sha1":"6aaba5636bc862baf0d6ea726ec5c6c12f030fb2","sha256":"360c19abcb043462694bdf8f4fd8c93998eb28bf3e1d2e88e125346cd03d5723","sha512":"ceafc06f4e951998636b5f1555cf884645df12d4e97ecb4fb381c702dcc064703539b37376be27edbae4cc982aea059db46cbd17b81af1a1f1ab8dfaabcd62c9","ssdeep":"","tlshash":"d0e0f81362241330865ac6923b6eb7c47622820863089020ac1c02abf6ace2fe0f0cce","size":372,"data":"","first_seen":"2026-02-21T20:33:54.707487Z","last_seen":"2026-02-22T00:14:23.757471Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"garbeado.click/","fqdn":"garbeado.click","domain":"garbeado.click","tld":"click"},"ip":{"addr":"185.221.216.117","port":443,"asn":393960,"as":"HOST4GEEKS-LLC","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":true,"md5":"4e4bcbccf580eaa051e916eb85d15aea","sha1":"fe55d2ea978915387300ea9b282e5ba7450e9fe0","sha256":"d48c0b2cfa363ca5bd9ce2efee01e1480412b4602a2af042d7486702d421744f","sha512":"6989efdda34d59787dde7fb3d98bbc252747fceb2e74318901ed5950fd7bc2e11e8aa0048190c4d2fe2b067146e5610061fb25ad90b92992737f5c3ee77c37f7","ssdeep":"","tlshash":"91d0a7d0528ad547659b2390c192650d605000ecc1a6a01dc6075b1d568bfdb8c4c3b5","size":217,"data":"","first_seen":"2026-02-21T20:33:54.709292Z","last_seen":"2026-02-22T00:14:23.758316Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"garbeado.click/index_files/mktgtagmanager.js.download","fqdn":"garbeado.click","domain":"garbeado.click","tld":"click"},"ip":{"addr":"185.221.216.117","port":443,"asn":393960,"as":"HOST4GEEKS-LLC","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":false,"md5":"8d00dccce823ef1abaf337df3e76cb93","sha1":"0507314fe3c721485f85f155b3eeb6502878fde1","sha256":"5ae47299a5baba803ff17af3566300d591920b3584d98062a8cac5c7b1317748","sha512":"81c19831ee5adee46d054595fc3683a097b4cb4513fb19700c704de79c616c77c1d752c6edd26669406fdc912ec9fcfea60e9ab7e487b7baa9a1814105644102","ssdeep":"384:jcGfcUvUKvmwdPd+7Ac0TXXIxjeOdXnU/Ef5yQF0ex2D:KUJvmwdPMsg9dXnUsy","tlshash":"5f723c4937d5f0b1877b10b542af260bb0383a65ac4ed4d0d586e8d03cb4a9f877be99","size":16124,"data":"","first_seen":"2025-01-13T15:50:05.611101Z","last_seen":"2026-02-22T00:14:23.73095Z","times_seen":215,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"garbeado.click/","fqdn":"garbeado.click","domain":"garbeado.click","tld":"click"},"ip":{"addr":"185.221.216.117","port":443,"asn":393960,"as":"HOST4GEEKS-LLC","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":true,"md5":"c1b76493f5c34779889cd7430d901ba6","sha1":"e0fbf744b4c6d39b33eec952006e770956399878","sha256":"9a5f5b07315f085e7e90ebd956f137b6ec30c62435a4c2b095f8e91ea74c2dca","sha512":"858dd22577a3c3334b675487be60a11713fe74c4a4b0f4db8893eb69b3bfd89e5cf0ffa8b97e2bae1e5a8665e30866567b1c803e359f75c6bdd6b7b7c1946f6d","ssdeep":"","tlshash":"30e0e5eb31c0313139c22c3a0a6660b83a3e4ca571e512b1ac0ec0742011df643eb5ec","size":426,"data":"","first_seen":"2025-06-16T11:06:21.346276Z","last_seen":"2026-02-22T00:14:23.759091Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"garbeado.click/","fqdn":"garbeado.click","domain":"garbeado.click","tld":"click"},"ip":{"addr":"185.221.216.117","port":443,"asn":393960,"as":"HOST4GEEKS-LLC","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":true,"md5":"bfa1dd7962dd16683e16dc261e8cae18","sha1":"118424e724f5cbf1120ab68d562a8adc01339642","sha256":"5cf2bf90fc5bfa679a21dd888ecc036eeda9725bc0edbe09ec76afbe2724eac1","sha512":"d5f54728783954344577af1969c2a0d1707836adba0107b540eef8b75ace234a5672375aef20225cf9eaa3e99eddb2a35494aa934a7b306775cefb620d06f69f","ssdeep":"","tlshash":"5d017b5b31e34ca02597e2ae359ba302242550173d05a9867f8c8a1d1f6ad1734223cd","size":657,"data":"","first_seen":"2026-02-21T20:33:54.712937Z","last_seen":"2026-02-22T00:14:23.759798Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"garbeado.click/index_files/dfp.js.download","fqdn":"garbeado.click","domain":"garbeado.click","tld":"click"},"ip":{"addr":"185.221.216.117","port":443,"asn":393960,"as":"HOST4GEEKS-LLC","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":false,"md5":"c8db7589ed28b7bde55e3a79cb19f21f","sha1":"438675fbbc2170adf45e8704e79939c3a6535626","sha256":"01ec8c49c772155788f848cd6a1689c41605b023785de98e02f71aeb5e74e2c9","sha512":"923fe30dc6075542d7d005c710c00ac2ead5b0070970c7e649d7bd609e62737f8ad18f455d12c4ef5be3105f16e4dbba0710afff2c9218c55d41bf4bea3eea94","ssdeep":"3072:DRB3frbE93SrRh3wlWBS8rEYtiRg7AGgdr:DL3frbEG3wlS6YyjG2","tlshash":"aa1482c8b6d3f05a57a3f0b5417f108af23e7d5528ad2800d1a2e5e53c78a4ed137ea9","size":206112,"data":"","first_seen":"2025-02-14T06:56:47.707418Z","last_seen":"2026-02-22T00:14:23.738189Z","times_seen":65,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"garbeado.click/index_files/mktconf.js.download","fqdn":"garbeado.click","domain":"garbeado.click","tld":"click"},"ip":{"addr":"185.221.216.117","port":443,"asn":393960,"as":"HOST4GEEKS-LLC","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":false,"md5":"120a547c0b6697cbbeedca3a5d63e37c","sha1":"b13232344bb52c5d066682b8e5bcedc585bfc07c","sha256":"3b3dd5abf32c8a034cd976eb973c153d49a8c1d0dcdbc08c016608a7af5deb8a","sha512":"8b3f63a6ddc3479897afd2f778fc6080b4701943aeb1f67c183923fd552743e35ac9ed89afa8e9de3d3fd69a1def3715bc19aa363d17e038f5df8b03d3f80133","ssdeep":"1536:Wo7vmwdkyIEtT1Hu737eU22/qzNC2sbpwIccctQTQJ6oVW7NCRqTvE0T75FTNTxZ:SEtUjFGzco0BCRqjE0n5FTNTfYXd0","tlshash":"a47496c9c8b49daf0d7bef846e5f9a2420252f684b874851b7c47f7a02571db29ca7c0","size":346571,"data":"","first_seen":"2025-05-12T08:53:31.248277Z","last_seen":"2026-02-22T00:14:23.75026Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"garbeado.click/index_files/modernizr-2.6.1.js.download","fqdn":"garbeado.click","domain":"garbeado.click","tld":"click"},"ip":{"addr":"185.221.216.117","port":443,"asn":393960,"as":"HOST4GEEKS-LLC","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://garbeado.click/","date":"2026-02-21T21:50:23.274Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"garbeado.click","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Feb 2026 05:23:17 GMT","end":"Tue, 05 May 2026 05:23:16 GMT"},"fingerprint":{"sha1":"D8:DB:B4:49:42:CD:44:B1:3D:35:97:AF:DD:B6:58:E1:D0:F9:D4:3B","sha256":"87:0C:08:40:8F:7C:89:23:47:ED:CB:35:4D:05:EE:DB:86:CC:CF:BA:B7:30:86:90:FC:B3:68:90:C9:BF:14:57"}}},"request":{"raw":"GET /index_files/modernizr-2.6.1.js.download HTTP/1.1\r\nHost: garbeado.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://garbeado.click/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sat, 21 Feb 2026 21:50:23 GMT\r\nServer: Apache\r\nLast-Modified: Tue, 13 May 2025 13:12:42 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 3807\r\nKeep-Alive: timeout=5, max=99\r\nConnection: Keep-Alive\r\nContent-Type: text/javascript\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":3807,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (3807), with no line terminators","md5":"a635a55ddb6339a3d0d01c641f670753","sha1":"a6dee4a1df6c51b82ce2e67323514e7de4e165d4","sha256":"a6c3bff965978df8093c3a29f7071c21d7439a212af41e7b40ce70d94d6bcc44","sha512":"2562ca35be37bfe0b984ec288e23678bc97ba7a881764044e65914ea013742a5310a5c12839cb8a501a464791bc67868fe6a02ae149df9329e40562569eba42d","ssdeep":"","tlshash":"a77175c474e1f15e539b20bb107fa34ef2b85a65596a8510e0a8c4bdbcb0c64867bf2d","first_seen":"2023-03-07T01:03:30Z","last_seen":"2026-06-05T02:04:16.000751Z","times_seen":1048,"resource_available":true,"data":null}},"time_used":102,"timings":{"blocked":76,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-21","alert":"Sinkholed","trigger":"garbeado.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-21","alert":"Sinkholed","trigger":"garbeado.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-21","alert":"Sinkholed","trigger":"garbeado.click","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-21","alert":"Phishing Block","trigger":"garbeado.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - PayPal","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with PayPal phishing","tags":["paypal","phishing","financial"],"meta":null}]}},{"url":{"schema":"https","addr":"garbeado.click/editme.js","fqdn":"garbeado.click","domain":"garbeado.click","tld":"click"},"ip":{"addr":"185.221.216.117","port":443,"asn":393960,"as":"HOST4GEEKS-LLC","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://garbeado.click/","date":"2026-02-21T21:50:23.276Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"garbeado.click","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Feb 2026 05:23:17 GMT","end":"Tue, 05 May 2026 05:23:16 GMT"},"fingerprint":{"sha1":"D8:DB:B4:49:42:CD:44:B1:3D:35:97:AF:DD:B6:58:E1:D0:F9:D4:3B","sha256":"87:0C:08:40:8F:7C:89:23:47:ED:CB:35:4D:05:EE:DB:86:CC:CF:BA:B7:30:86:90:FC:B3:68:90:C9:BF:14:57"}}},"request":{"raw":"GET /editme.js HTTP/1.1\r\nHost: garbeado.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://garbeado.click/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sat, 21 Feb 2026 21:50:23 GMT\r\nServer: Apache\r\nLast-Modified: Thu, 26 Jun 2025 00:00:16 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 111\r\nKeep-Alive: timeout=5, max=99\r\nConnection: Keep-Alive\r\nContent-Type: text/javascript\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":111,"size_decoded":0,"mime_type":"text/javascript","magic":"ASCII text, with CRLF line terminators","md5":"adfb7297de3d618c742f2e29c4ccc941","sha1":"b2f63641f3e94e66bdf557263ef3b12c68455cae","sha256":"a7f6d3a16c5294bf712125dea11bbae4234c802a28ae9b46efa6352932ddfc06","sha512":"31d366b9b7b2c3adaab62843cdf03a4a5b6966bcc57311b631691e383441a5cd297cd946ffa5b106b38f19febf267f6678a6126db7c7201c3cd63a2f1845fa10","ssdeep":"","tlshash":"12b092192031502481878a82aba1fe901a4b20a8a456e4f06b9ac0e970eb222a966860","first_seen":"2026-02-21T20:33:54.703538Z","last_seen":"2026-02-22T00:14:23.733981Z","times_seen":3,"resource_available":true,"data":null}},"time_used":112,"timings":{"blocked":90,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-21","alert":"Sinkholed","trigger":"garbeado.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-21","alert":"Phishing Block","trigger":"garbeado.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-21","alert":"Sinkholed","trigger":"garbeado.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-21","alert":"Sinkholed","trigger":"garbeado.click","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - PayPal","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with PayPal phishing","tags":["paypal","phishing","financial"],"meta":null},{"sensor_name":"urlquery","alert":"Suspicious - Suspicious Javascript code","verdict":"suspicious","severity":"medium","comment":"","tags":["suspicious"],"meta":null}]}},{"url":{"schema":"https","addr":"garbeado.click/","fqdn":"garbeado.click","domain":"garbeado.click","tld":"click"},"ip":{"addr":"185.221.216.117","port":443,"asn":393960,"as":"HOST4GEEKS-LLC","country":"United Kingdom","country_code":"GB"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-02-21T21:50:22.934Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"garbeado.click","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Feb 2026 05:23:17 GMT","end":"Tue, 05 May 2026 05:23:16 GMT"},"fingerprint":{"sha1":"D8:DB:B4:49:42:CD:44:B1:3D:35:97:AF:DD:B6:58:E1:D0:F9:D4:3B","sha256":"87:0C:08:40:8F:7C:89:23:47:ED:CB:35:4D:05:EE:DB:86:CC:CF:BA:B7:30:86:90:FC:B3:68:90:C9:BF:14:57"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: garbeado.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sat, 21 Feb 2026 21:50:23 GMT\r\nServer: Apache\r\nLast-Modified: Tue, 10 Feb 2026 04:14:54 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 56054\r\nKeep-Alive: timeout=5, max=100\r\nConnection: Keep-Alive\r\nContent-Type: text/html\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Modernizr","description":"Modernizr is a JavaScript library that detects the features available in a user's browser.","website":"https://modernizr.com","common_platform_enumeration":"","icon":"Modernizr.svg","categories":["JavaScript libraries"]}],"data":{"size":56054,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (452)","md5":"11670401443694e8c2658c7711120454","sha1":"53da3612de8ba94937a0fe5bc9d8b88ad64ea27f","sha256":"75d28d67afe772143e1254e60aefc4e91acb18556fcf128c5fae2110abf7bcef","sha512":"6acd3cf4d3be193988c11b85a050a46b385aade0eb558270e0af1da7d33ce020f71f60bf06879b3ccf23ae2891551280d9604d89215954610733fb3d9ad18ee5","ssdeep":"768:2tw/trabaZB2YdzFwqpGE3C+uHECGyBgwh0y:ww/trabkUVEy+OE4h0y","tlshash":"6c4331dec1b1056bee2ba732b9a52200e97de5e3c845ec4c39ade3583f694c44633176","first_seen":"2026-02-21T20:33:54.682494Z","last_seen":"2026-02-22T00:14:23.735974Z","times_seen":3,"resource_available":false,"data":null}},"time_used":289,"timings":{"blocked":107,"dns":49,"connect":23,"send":0,"wait":27,"receive":47,"ssl":32},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-21","alert":"Sinkholed","trigger":"garbeado.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-21","alert":"Sinkholed","trigger":"garbeado.click","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-21","alert":"Sinkholed","trigger":"garbeado.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-21","alert":"Phishing Block","trigger":"garbeado.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - PayPal","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with PayPal phishing","tags":["paypal","phishing","financial"],"meta":null}]}},{"url":{"schema":"https","addr":"garbeado.click/index_files/mktconf.js.download","fqdn":"garbeado.click","domain":"garbeado.click","tld":"click"},"ip":{"addr":"185.221.216.117","port":443,"asn":393960,"as":"HOST4GEEKS-LLC","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://garbeado.click/","date":"2026-02-21T21:50:23.263Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"garbeado.click","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Feb 2026 05:23:17 GMT","end":"Tue, 05 May 2026 05:23:16 GMT"},"fingerprint":{"sha1":"D8:DB:B4:49:42:CD:44:B1:3D:35:97:AF:DD:B6:58:E1:D0:F9:D4:3B","sha256":"87:0C:08:40:8F:7C:89:23:47:ED:CB:35:4D:05:EE:DB:86:CC:CF:BA:B7:30:86:90:FC:B3:68:90:C9:BF:14:57"}}},"request":{"raw":"GET /index_files/mktconf.js.download HTTP/1.1\r\nHost: garbeado.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://garbeado.click/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sat, 21 Feb 2026 21:50:23 GMT\r\nServer: Apache\r\nLast-Modified: Tue, 13 May 2025 13:12:40 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 346571\r\nKeep-Alive: timeout=5, max=99\r\nConnection: Keep-Alive\r\nContent-Type: text/javascript\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":346571,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65491)","md5":"120a547c0b6697cbbeedca3a5d63e37c","sha1":"b13232344bb52c5d066682b8e5bcedc585bfc07c","sha256":"3b3dd5abf32c8a034cd976eb973c153d49a8c1d0dcdbc08c016608a7af5deb8a","sha512":"8b3f63a6ddc3479897afd2f778fc6080b4701943aeb1f67c183923fd552743e35ac9ed89afa8e9de3d3fd69a1def3715bc19aa363d17e038f5df8b03d3f80133","ssdeep":"1536:Wo7vmwdkyIEtT1Hu737eU22/qzNC2sbpwIccctQTQJ6oVW7NCRqTvE0T75FTNTxZ:SEtUjFGzco0BCRqjE0n5FTNTfYXd0","tlshash":"a47496c9c8b49daf0d7bef846e5f9a2420252f684b874851b7c47f7a02571db29ca7c0","first_seen":"2025-05-12T08:53:31.248277Z","last_seen":"2026-02-22T00:14:23.75026Z","times_seen":9,"resource_available":true,"data":null}},"time_used":83,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":58,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-21","alert":"Sinkholed","trigger":"garbeado.click","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-21","alert":"Sinkholed","trigger":"garbeado.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-21","alert":"Phishing Block","trigger":"garbeado.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-21","alert":"Sinkholed","trigger":"garbeado.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - PayPal","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with PayPal phishing","tags":["paypal","phishing","financial"],"meta":null}]}},{"url":{"schema":"https","addr":"garbeado.click/index_files/tags.js.download","fqdn":"garbeado.click","domain":"garbeado.click","tld":"click"},"ip":{"addr":"185.221.216.117","port":443,"asn":393960,"as":"HOST4GEEKS-LLC","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://garbeado.click/","date":"2026-02-21T21:50:23.267Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"garbeado.click","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Feb 2026 05:23:17 GMT","end":"Tue, 05 May 2026 05:23:16 GMT"},"fingerprint":{"sha1":"D8:DB:B4:49:42:CD:44:B1:3D:35:97:AF:DD:B6:58:E1:D0:F9:D4:3B","sha256":"87:0C:08:40:8F:7C:89:23:47:ED:CB:35:4D:05:EE:DB:86:CC:CF:BA:B7:30:86:90:FC:B3:68:90:C9:BF:14:57"}}},"request":{"raw":"GET /index_files/tags.js.download HTTP/1.1\r\nHost: garbeado.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://garbeado.click/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nDate: Sat, 21 Feb 2026 21:50:23 GMT\r\nServer: Apache\r\nContent-Length: 355\r\nKeep-Alive: timeout=5, max=100\r\nConnection: Keep-Alive\r\nContent-Type: text/html; charset=iso-8859-1\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":355,"size_decoded":0,"mime_type":"text/html; charset=iso-8859-1","magic":"HTML document, ASCII text","md5":"4525b2d648f7c457a689fd96421783a5","sha1":"11bfe30ce44585a15a38e86bc094224ddfe2c08e","sha256":"cc0b4e42510d49c6decd464123ecf3b14ae9b47f9b4ed2ee64893e2d6520a264","sha512":"94e3e8246cf38ff7740e51aa115c8c455b14f78e672c2686b782c0ce30b6fa2dbd91a78b29b3964d9c0414aabd4b9391fd5db326665e25b4b8e73dae60ffe979","ssdeep":"","tlshash":"71e0c04f4057b3474011a2907dc01291e505236b38a152f93ac09467500897dc4aa2dd","first_seen":"2025-12-09T03:51:58.5943Z","last_seen":"2026-06-08T11:44:51.543966Z","times_seen":39269,"resource_available":true,"data":null}},"time_used":147,"timings":{"blocked":58,"dns":0,"connect":27,"send":0,"wait":24,"receive":0,"ssl":31},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-21","alert":"Phishing Block","trigger":"garbeado.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-21","alert":"Sinkholed","trigger":"garbeado.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-21","alert":"Sinkholed","trigger":"garbeado.click","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-21","alert":"Sinkholed","trigger":"garbeado.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - PayPal","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with PayPal phishing","tags":["paypal","phishing","financial"],"meta":null}]}},{"url":{"schema":"https","addr":"garbeado.click/index_files/tags.js.download","fqdn":"garbeado.click","domain":"garbeado.click","tld":"click"},"ip":{"addr":"185.221.216.117","port":443,"asn":393960,"as":"HOST4GEEKS-LLC","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://garbeado.click/","date":"2026-02-21T21:50:23.398Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"garbeado.click","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Feb 2026 05:23:17 GMT","end":"Tue, 05 May 2026 05:23:16 GMT"},"fingerprint":{"sha1":"D8:DB:B4:49:42:CD:44:B1:3D:35:97:AF:DD:B6:58:E1:D0:F9:D4:3B","sha256":"87:0C:08:40:8F:7C:89:23:47:ED:CB:35:4D:05:EE:DB:86:CC:CF:BA:B7:30:86:90:FC:B3:68:90:C9:BF:14:57"}}},"request":{"raw":"GET /index_files/tags.js.download HTTP/1.1\r\nHost: garbeado.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://garbeado.click/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nDate: Sat, 21 Feb 2026 21:50:23 GMT\r\nServer: Apache\r\nContent-Length: 355\r\nKeep-Alive: timeout=5, max=97\r\nConnection: Keep-Alive\r\nContent-Type: text/html; charset=iso-8859-1\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":355,"size_decoded":0,"mime_type":"text/html; charset=iso-8859-1","magic":"HTML document, ASCII text","md5":"4525b2d648f7c457a689fd96421783a5","sha1":"11bfe30ce44585a15a38e86bc094224ddfe2c08e","sha256":"cc0b4e42510d49c6decd464123ecf3b14ae9b47f9b4ed2ee64893e2d6520a264","sha512":"94e3e8246cf38ff7740e51aa115c8c455b14f78e672c2686b782c0ce30b6fa2dbd91a78b29b3964d9c0414aabd4b9391fd5db326665e25b4b8e73dae60ffe979","ssdeep":"","tlshash":"71e0c04f4057b3474011a2907dc01291e505236b38a152f93ac09467500897dc4aa2dd","first_seen":"2025-12-09T03:51:58.5943Z","last_seen":"2026-06-08T11:44:51.543966Z","times_seen":39269,"resource_available":true,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-21","alert":"Phishing Block","trigger":"garbeado.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-21","alert":"Sinkholed","trigger":"garbeado.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-21","alert":"Sinkholed","trigger":"garbeado.click","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-21","alert":"Sinkholed","trigger":"garbeado.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - PayPal","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with PayPal phishing","tags":["paypal","phishing","financial"],"meta":null}]}},{"url":{"schema":"https","addr":"www.paypalobjects.com/webstatic/mktg/icons/sprite_countries_flag4.png","fqdn":"www.paypalobjects.com","domain":"paypalobjects.com","tld":"com"},"ip":{"addr":"151.101.131.1","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://garbeado.click/","date":"2026-02-21T21:50:23.429Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.paypalobjects.com","organization":"PayPal, Inc."},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Tue, 17 Jun 2025 00:00:00 GMT","end":"Tue, 16 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D1:CC:8D:A7:79:AE:1A:09:18:36:29:8A:84:C5:9B:2E:0E:FB:CC:75","sha256":"B2:15:32:68:A9:52:EC:F4:53:30:4D:98:F6:AF:90:B7:AA:72:37:80:05:8A:96:71:BC:E8:9A:9F:05:01:C7:E9"}}},"request":{"raw":"GET /webstatic/mktg/icons/sprite_countries_flag4.png HTTP/1.1\r\nHost: www.paypalobjects.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://garbeado.click/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: s-maxage=31536000, public,max-age=3600\r\ncontent-type: image/png\r\ndc: ccg11-origin-www-1.paypal.com\r\netag: \"Nuylfp+to+eBvo2TUOG5pjOz26CVaqgZXN1uHvjtDMM\"\r\nfastly-io-info: ifsz=110177 idim=22x7296 ifmt=png ofsz=72320 odim=22x7296 ofmt=png\r\nfastly-io-served-by: vpop-haf2300703\r\nfastly-stats: io=1\r\npaypal-debug-id: 53c18b8fdc2dd\r\ntiming-allow-origin: https://www.paypal.com,https://www.sandbox.paypal.com\r\ntraceparent: 00-000000000000000000053c18b8fdc2dd-ef33578877835d09-01\r\nvia: 1.1 varnish, 1.1 varnish\r\naccept-ranges: bytes\r\ndate: Sat, 21 Feb 2026 21:50:23 GMT\r\nx-served-by: cache-sjc10054-SJC, cache-hel1410027-HEL\r\nx-cache: HIT, HIT\r\nx-cache-hits: 1930, 3285\r\nx-timer: S1771710624.504995,VS0,VE0\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31557600\r\ncontent-length: 72320\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":72320,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 22 x 7296, 8-bit/color RGBA, non-interlaced","md5":"d3682f00301178fccd9afd06ec46be69","sha1":"93aef919da3bd70dd4acd0b31658775f6ad15d51","sha256":"9c14b809ca4d5de12a569239d46ab8ef5f7ac1b3804c9801583cbafb66d3e550","sha512":"ad973dae6a4eecec15651f3a2837136d5b6daad4995dba5737d95dd46ee429139443b57dac78467f164ce3f88b13e5ffd3132a76d27a188a16fa54e4f1c29445","ssdeep":"1536:nD+gsSFTV3X8Ioy8C8BByWCaLZiq/2wH6QZLF13exy9o+gD05Mf5U:nqgVVD8C8BBy4LZpKQZ0B2C5U","tlshash":"9c6301ffb200499a48005eaafacfd6e470ad052e1e40d7adfa54d2c8f4ca8561dc2f51","first_seen":"2023-05-09T16:24:46Z","last_seen":"2026-06-04T11:53:19.298718Z","times_seen":292,"resource_available":false,"data":null}},"time_used":132,"timings":{"blocked":67,"dns":0,"connect":0,"send":0,"wait":14,"receive":16,"ssl":35},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.paypalobjects.com/paypal-ui/fonts/PayPalOpen-Medium.woff2","fqdn":"www.paypalobjects.com","domain":"paypalobjects.com","tld":"com"},"ip":{"addr":"151.101.131.1","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://garbeado.click/","date":"2026-02-21T21:50:23.439Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.paypalobjects.com","organization":"PayPal, Inc."},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Tue, 17 Jun 2025 00:00:00 GMT","end":"Tue, 16 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D1:CC:8D:A7:79:AE:1A:09:18:36:29:8A:84:C5:9B:2E:0E:FB:CC:75","sha256":"B2:15:32:68:A9:52:EC:F4:53:30:4D:98:F6:AF:90:B7:AA:72:37:80:05:8A:96:71:BC:E8:9A:9F:05:01:C7:E9"}}},"request":{"raw":"GET /paypal-ui/fonts/PayPalOpen-Medium.woff2 HTTP/1.1\r\nHost: www.paypalobjects.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://garbeado.click\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://garbeado.click/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: s-maxage=31536000, public,max-age=31536000\r\ndc: ccg11-origin-www-1.paypal.com\r\npaypal-debug-id: 4bf6d79974bfa\r\ntiming-allow-origin: https://www.paypal.com,https://www.sandbox.paypal.com\r\naccess-control-allow-methods: GET\r\ntraceparent: 00-00000000000000000004bf6d79974bfa-3e384d3b650d92b2-01\r\nlast-modified: Thu, 11 Jan 2024 20:08:22 GMT\r\netag: \"65a04ab6-6bf1\"\r\nvia: 1.1 varnish, 1.1 varnish\r\naccept-ranges: bytes\r\ndate: Sat, 21 Feb 2026 21:50:23 GMT\r\nx-served-by: cache-sjc1000099-SJC, cache-sjc1000099-SJC, cache-hel1410020-HEL\r\nx-cache: MISS, HIT, HIT\r\nx-cache-hits: 0, 12238, 59\r\nx-timer: S1771710624.513361,VS0,VE0\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: *\r\ncontent-type: application/font-woff2\r\nstrict-transport-security: max-age=31557600\r\ncontent-length: 27633\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":27633,"size_decoded":0,"mime_type":"application/font-woff2","magic":"Web Open Font Format (Version 2), TrueType, length 27633, version 1.0","md5":"38178232099be6c278a39fdcfe2db243","sha1":"abf44e1e4a3cd12be295b8361dc488784259fb53","sha256":"8d0e74dfe39c809f2dde1119f404841405d107fa40165669ea74fca51722311b","sha512":"307cb0a013088bc87c392dbe0c084ada953beb01b902c988a97a46894bc85b81eb93bea0436186f09deccec7bcc58b9b63cad9d4c5783fe37d5968a90bdc94f3","ssdeep":"768:4qq1uwAN5VyeAAL7ddHIavOnPMpz6dmP6wfzVUsl4bDA:4q2BAN5HrLHaUpz66n4bk","tlshash":"f5c2e1ca04025970e53356ff439f28dfc0b1d2e3ae199c9dd49f59a8c4ff38512950a6","first_seen":"2024-07-23T00:03:56Z","last_seen":"2026-06-03T08:29:10.230097Z","times_seen":391,"resource_available":false,"data":null}},"time_used":149,"timings":{"blocked":66,"dns":2,"connect":27,"send":0,"wait":14,"receive":3,"ssl":33},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"garbeado.click/mtr/1a7c3460cd8c343771081839499ed7a0/AvQ9/Gr6-8k/ViQEi/xLu1/x0?q=QBzalmMuDFJIiZNebIWt","fqdn":"garbeado.click","domain":"garbeado.click","tld":"click"},"ip":{"addr":"185.221.216.117","port":443,"asn":393960,"as":"HOST4GEEKS-LLC","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://garbeado.click/","date":"2026-02-21T21:50:23.718Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"garbeado.click","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Feb 2026 05:23:17 GMT","end":"Tue, 05 May 2026 05:23:16 GMT"},"fingerprint":{"sha1":"D8:DB:B4:49:42:CD:44:B1:3D:35:97:AF:DD:B6:58:E1:D0:F9:D4:3B","sha256":"87:0C:08:40:8F:7C:89:23:47:ED:CB:35:4D:05:EE:DB:86:CC:CF:BA:B7:30:86:90:FC:B3:68:90:C9:BF:14:57"}}},"request":{"raw":"GET /mtr/1a7c3460cd8c343771081839499ed7a0/AvQ9/Gr6-8k/ViQEi/xLu1/x0?q=QBzalmMuDFJIiZNebIWt HTTP/1.1\r\nHost: garbeado.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Requested-With: XMLHttpRequest\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://garbeado.click/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nDate: Sat, 21 Feb 2026 21:50:23 GMT\r\nServer: Apache\r\nContent-Length: 355\r\nKeep-Alive: timeout=5, max=96\r\nConnection: Keep-Alive\r\nContent-Type: text/html; charset=iso-8859-1\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":355,"size_decoded":0,"mime_type":"text/html; charset=iso-8859-1","magic":"HTML document, ASCII text","md5":"4525b2d648f7c457a689fd96421783a5","sha1":"11bfe30ce44585a15a38e86bc094224ddfe2c08e","sha256":"cc0b4e42510d49c6decd464123ecf3b14ae9b47f9b4ed2ee64893e2d6520a264","sha512":"94e3e8246cf38ff7740e51aa115c8c455b14f78e672c2686b782c0ce30b6fa2dbd91a78b29b3964d9c0414aabd4b9391fd5db326665e25b4b8e73dae60ffe979","ssdeep":"","tlshash":"71e0c04f4057b3474011a2907dc01291e505236b38a152f93ac09467500897dc4aa2dd","first_seen":"2025-12-09T03:51:58.5943Z","last_seen":"2026-06-08T11:44:51.543966Z","times_seen":39269,"resource_available":true,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-21","alert":"Sinkholed","trigger":"garbeado.click","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-21","alert":"Sinkholed","trigger":"garbeado.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-21","alert":"Phishing Block","trigger":"garbeado.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-21","alert":"Sinkholed","trigger":"garbeado.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - PayPal","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with PayPal phishing","tags":["paypal","phishing","financial"],"meta":null}]}},{"url":{"schema":"https","addr":"garbeado.click/identity/di/log","fqdn":"garbeado.click","domain":"garbeado.click","tld":"click"},"ip":{"addr":"185.221.216.117","port":443,"asn":393960,"as":"HOST4GEEKS-LLC","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://garbeado.click/","date":"2026-02-21T21:50:24.470Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"garbeado.click","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Feb 2026 05:23:17 GMT","end":"Tue, 05 May 2026 05:23:16 GMT"},"fingerprint":{"sha1":"D8:DB:B4:49:42:CD:44:B1:3D:35:97:AF:DD:B6:58:E1:D0:F9:D4:3B","sha256":"87:0C:08:40:8F:7C:89:23:47:ED:CB:35:4D:05:EE:DB:86:CC:CF:BA:B7:30:86:90:FC:B3:68:90:C9:BF:14:57"}}},"request":{"raw":"POST /identity/di/log HTTP/1.1\r\nHost: garbeado.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nContent-Length: 939\r\nOrigin: https://garbeado.click\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://garbeado.click/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":939,"data":"{\"events\":[{\"level\":\"info\",\"event\":\"DFPJS_LIB_LOADED\",\"payload\":{\"timestamp\":\"1771710623528\",\"comp\":\"dfpjs\",\"btz\":\"UTC\",\"ul_corr_id\":\"f527800a212f4\"}},{\"level\":\"info\",\"event\":\"DFPJS_EDGE_MAPPING_ENABLED\",\"payload\":{\"timestamp\":\"1771710623553\",\"comp\":\"dfpjs\",\"btz\":\"UTC\",\"ul_corr_id\":\"f527800a212f4\"}},{\"level\":\"info\",\"event\":\"DFPJS_VENDOR_INVOKED\",\"payload\":{\"timestamp\":\"1771710623554\",\"comp\":\"dfpjs\",\"btz\":\"UTC\",\"ul_corr_id\":\"f527800a212f4\"}},{\"level\":\"error\",\"event\":\"DFPJS_UNKNOWN_ERR\",\"payload\":{\"error\":\"Response cannot be parsed\",\"timestamp\":\"1771710624417\",\"comp\":\"dfpjs\",\"btz\":\"UTC\",\"ul_corr_id\":\"f527800a212f4\"}}],\"meta\":{},\"tracking\":[{\"event_name\":\"LIB_LOADED\",\"CMID\":\"6b65be9311964eeb91510458ddcce012\",\"component\":\"dfpjs\",\"browser_timezone\":\"UTC\",\"ul_corr_id\":\"f527800a212f4\"},{\"event_name\":\"VENDOR_INVOKED\",\"CMID\":\"6b65be9311964eeb91510458ddcce012\",\"component\":\"dfpjs\",\"browser_timezone\":\"UTC\",\"ul_corr_id\":\"f527800a212f4\"}]}"}},"response":{"raw":"HTTP/1.1 404 Not Found\r\nDate: Sat, 21 Feb 2026 21:50:24 GMT\r\nServer: Apache\r\nContent-Length: 355\r\nKeep-Alive: timeout=5, max=94\r\nConnection: Keep-Alive\r\nContent-Type: text/html; charset=iso-8859-1\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":355,"size_decoded":0,"mime_type":"text/html; charset=iso-8859-1","magic":"HTML document, ASCII text","md5":"4525b2d648f7c457a689fd96421783a5","sha1":"11bfe30ce44585a15a38e86bc094224ddfe2c08e","sha256":"cc0b4e42510d49c6decd464123ecf3b14ae9b47f9b4ed2ee64893e2d6520a264","sha512":"94e3e8246cf38ff7740e51aa115c8c455b14f78e672c2686b782c0ce30b6fa2dbd91a78b29b3964d9c0414aabd4b9391fd5db326665e25b4b8e73dae60ffe979","ssdeep":"","tlshash":"71e0c04f4057b3474011a2907dc01291e505236b38a152f93ac09467500897dc4aa2dd","first_seen":"2025-12-09T03:51:58.5943Z","last_seen":"2026-06-08T11:44:51.543966Z","times_seen":39269,"resource_available":true,"data":null}},"time_used":26,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-21","alert":"Sinkholed","trigger":"garbeado.click","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-21","alert":"Sinkholed","trigger":"garbeado.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-21","alert":"Phishing Block","trigger":"garbeado.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-21","alert":"Sinkholed","trigger":"garbeado.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - PayPal","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with PayPal phishing","tags":["paypal","phishing","financial"],"meta":null}]}},{"url":{"schema":"https","addr":"garbeado.click/index_files/latmconf.js.download","fqdn":"garbeado.click","domain":"garbeado.click","tld":"click"},"ip":{"addr":"185.221.216.117","port":443,"asn":393960,"as":"HOST4GEEKS-LLC","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://garbeado.click/","date":"2026-02-21T21:50:23.265Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"garbeado.click","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Feb 2026 05:23:17 GMT","end":"Tue, 05 May 2026 05:23:16 GMT"},"fingerprint":{"sha1":"D8:DB:B4:49:42:CD:44:B1:3D:35:97:AF:DD:B6:58:E1:D0:F9:D4:3B","sha256":"87:0C:08:40:8F:7C:89:23:47:ED:CB:35:4D:05:EE:DB:86:CC:CF:BA:B7:30:86:90:FC:B3:68:90:C9:BF:14:57"}}},"request":{"raw":"GET /index_files/latmconf.js.download HTTP/1.1\r\nHost: garbeado.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://garbeado.click/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sat, 21 Feb 2026 21:50:23 GMT\r\nServer: Apache\r\nLast-Modified: Tue, 13 May 2025 13:12:40 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 15367\r\nKeep-Alive: timeout=5, max=100\r\nConnection: Keep-Alive\r\nContent-Type: text/javascript\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":15367,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (15321)","md5":"a48a0ce07fdeae639d115a15c66d406d","sha1":"27f5fdd1dab4745ee202d4266f59812f26d04b59","sha256":"20b73b0e0cf1a03aac7359c8605d0b6ad8518a0fcd10f1a40a77175ad3cc1bcd","sha512":"6f82ac29f3b671168f3c09f6f7f22aae9d0b994243b799b155a50cd3f9d9b53016f2129c4e9700544f666ad88b36a6626fb9dc046d151648ca651c18d3649544","ssdeep":"384:8jCLoqKvmwdkvON2jWRx4YLDz0odh269JS:8jCLo7vmwdkA2CRx4wDAmh269JS","tlshash":"5e620c4e6bfc9af61d7a52e693da3e0f58c450c3784393e575e8c82f20d64d6092743a","first_seen":"2025-04-22T21:29:43.931532Z","last_seen":"2026-02-22T00:14:23.751172Z","times_seen":65,"resource_available":true,"data":null}},"time_used":156,"timings":{"blocked":50,"dns":0,"connect":23,"send":0,"wait":28,"receive":23,"ssl":28},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-21","alert":"Sinkholed","trigger":"garbeado.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-21","alert":"Sinkholed","trigger":"garbeado.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-21","alert":"Phishing Block","trigger":"garbeado.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-21","alert":"Sinkholed","trigger":"garbeado.click","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - PayPal","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with PayPal phishing","tags":["paypal","phishing","financial"],"meta":null}]}},{"url":{"schema":"https","addr":"garbeado.click/index_files/mktgtagmanager.js.download","fqdn":"garbeado.click","domain":"garbeado.click","tld":"click"},"ip":{"addr":"185.221.216.117","port":443,"asn":393960,"as":"HOST4GEEKS-LLC","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://garbeado.click/","date":"2026-02-21T21:50:23.266Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"garbeado.click","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Feb 2026 05:23:17 GMT","end":"Tue, 05 May 2026 05:23:16 GMT"},"fingerprint":{"sha1":"D8:DB:B4:49:42:CD:44:B1:3D:35:97:AF:DD:B6:58:E1:D0:F9:D4:3B","sha256":"87:0C:08:40:8F:7C:89:23:47:ED:CB:35:4D:05:EE:DB:86:CC:CF:BA:B7:30:86:90:FC:B3:68:90:C9:BF:14:57"}}},"request":{"raw":"GET /index_files/mktgtagmanager.js.download HTTP/1.1\r\nHost: garbeado.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://garbeado.click/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sat, 21 Feb 2026 21:50:23 GMT\r\nServer: Apache\r\nLast-Modified: Tue, 13 May 2025 13:12:42 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 16124\r\nKeep-Alive: timeout=5, max=100\r\nConnection: Keep-Alive\r\nContent-Type: text/javascript\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":16124,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (16096)","md5":"8d00dccce823ef1abaf337df3e76cb93","sha1":"0507314fe3c721485f85f155b3eeb6502878fde1","sha256":"5ae47299a5baba803ff17af3566300d591920b3584d98062a8cac5c7b1317748","sha512":"81c19831ee5adee46d054595fc3683a097b4cb4513fb19700c704de79c616c77c1d752c6edd26669406fdc912ec9fcfea60e9ab7e487b7baa9a1814105644102","ssdeep":"384:jcGfcUvUKvmwdPd+7Ac0TXXIxjeOdXnU/Ef5yQF0ex2D:KUJvmwdPMsg9dXnUsy","tlshash":"5f723c4937d5f0b1877b10b542af260bb0383a65ac4ed4d0d586e8d03cb4a9f877be99","first_seen":"2025-01-13T15:50:05.611101Z","last_seen":"2026-02-22T00:14:23.73095Z","times_seen":215,"resource_available":true,"data":null}},"time_used":172,"timings":{"blocked":56,"dns":1,"connect":28,"send":0,"wait":24,"receive":28,"ssl":31},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-21","alert":"Sinkholed","trigger":"garbeado.click","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-21","alert":"Sinkholed","trigger":"garbeado.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-21","alert":"Sinkholed","trigger":"garbeado.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-21","alert":"Phishing Block","trigger":"garbeado.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - PayPal","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with PayPal phishing","tags":["paypal","phishing","financial"],"meta":null}]}},{"url":{"schema":"https","addr":"garbeado.click/index_files/dfp.js.download","fqdn":"garbeado.click","domain":"garbeado.click","tld":"click"},"ip":{"addr":"185.221.216.117","port":443,"asn":393960,"as":"HOST4GEEKS-LLC","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://garbeado.click/","date":"2026-02-21T21:50:23.271Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"garbeado.click","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Feb 2026 05:23:17 GMT","end":"Tue, 05 May 2026 05:23:16 GMT"},"fingerprint":{"sha1":"D8:DB:B4:49:42:CD:44:B1:3D:35:97:AF:DD:B6:58:E1:D0:F9:D4:3B","sha256":"87:0C:08:40:8F:7C:89:23:47:ED:CB:35:4D:05:EE:DB:86:CC:CF:BA:B7:30:86:90:FC:B3:68:90:C9:BF:14:57"}}},"request":{"raw":"GET /index_files/dfp.js.download HTTP/1.1\r\nHost: garbeado.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://garbeado.click/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sat, 21 Feb 2026 21:50:23 GMT\r\nServer: Apache\r\nLast-Modified: Tue, 13 May 2025 13:12:42 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 206112\r\nKeep-Alive: timeout=5, max=100\r\nConnection: Keep-Alive\r\nContent-Type: text/javascript\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":206112,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65529), with no line terminators","md5":"c8db7589ed28b7bde55e3a79cb19f21f","sha1":"438675fbbc2170adf45e8704e79939c3a6535626","sha256":"01ec8c49c772155788f848cd6a1689c41605b023785de98e02f71aeb5e74e2c9","sha512":"923fe30dc6075542d7d005c710c00ac2ead5b0070970c7e649d7bd609e62737f8ad18f455d12c4ef5be3105f16e4dbba0710afff2c9218c55d41bf4bea3eea94","ssdeep":"3072:DRB3frbE93SrRh3wlWBS8rEYtiRg7AGgdr:DL3frbEG3wlS6YyjG2","tlshash":"aa1482c8b6d3f05a57a3f0b5417f108af23e7d5528ad2800d1a2e5e53c78a4ed137ea9","first_seen":"2025-02-14T06:56:47.707418Z","last_seen":"2026-02-22T00:14:23.738189Z","times_seen":65,"resource_available":true,"data":null}},"time_used":272,"timings":{"blocked":76,"dns":1,"connect":26,"send":0,"wait":28,"receive":81,"ssl":45},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-21","alert":"Sinkholed","trigger":"garbeado.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-21","alert":"Sinkholed","trigger":"garbeado.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-21","alert":"Phishing Block","trigger":"garbeado.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-21","alert":"Sinkholed","trigger":"garbeado.click","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - PayPal","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with PayPal phishing","tags":["paypal","phishing","financial"],"meta":null}]}},{"url":{"schema":"https","addr":"www.paypalobjects.com/martech/tm/paypal/mktconf.js","fqdn":"www.paypalobjects.com","domain":"paypalobjects.com","tld":"com"},"ip":{"addr":"151.101.131.1","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://garbeado.click/","date":"2026-02-21T21:50:23.396Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.paypalobjects.com","organization":"PayPal, Inc."},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Tue, 17 Jun 2025 00:00:00 GMT","end":"Tue, 16 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D1:CC:8D:A7:79:AE:1A:09:18:36:29:8A:84:C5:9B:2E:0E:FB:CC:75","sha256":"B2:15:32:68:A9:52:EC:F4:53:30:4D:98:F6:AF:90:B7:AA:72:37:80:05:8A:96:71:BC:E8:9A:9F:05:01:C7:E9"}}},"request":{"raw":"GET /martech/tm/paypal/mktconf.js HTTP/1.1\r\nHost: www.paypalobjects.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://garbeado.click\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://garbeado.click/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-encoding: br\r\ncontent-type: application/javascript\r\naccess-control-allow-headers: x-csrf-token\r\ntiming-allow-origin: https://www.paypal.com,https://www.sandbox.paypal.com\r\ndc: ccg11-origin-www-1.paypal.com\r\netag: W/\"6997ea2c-5bf48\"\r\nlast-modified: Fri, 20 Feb 2026 04:59:24 GMT\r\npaypal-debug-id: e26852a3f806e\r\ncache-control: s-maxage=31536000, public,max-age=3600\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\nvia: 1.1 varnish, 1.1 varnish\r\naccept-ranges: bytes\r\ndate: Sat, 21 Feb 2026 21:50:23 GMT\r\nx-served-by: cache-sjc1000113-SJC, cache-sjc1000113-SJC, cache-hel1410020-HEL\r\nx-cache: MISS, HIT, HIT\r\nx-cache-hits: 0, 205, 1876\r\nx-timer: S1771710623.483019,VS0,VE0\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31557600\r\ncontent-length: 34790\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":376648,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65491)","md5":"e2e371289ec06d4a2bed53651fcbf96b","sha1":"5f4420ffab2dc84746a09a831b5680216b7bf4b6","sha256":"503746bbb1d00bef2cffcd2ca09cdeb7c42692b0eadae64e107765d223b37099","sha512":"93dcf87f637048b485d5c0a610c9f43701a625ce4332d53e39f12a5ba265be1acc6e7126511ddffd8a9ad672e70cb405279c40dbaddcebbc6ca80eb37c2bdc38","ssdeep":"3072:SEO3e0uNHs0QRQ3QCQBEd+fCT8T0G9Y3QzJ:S1AMJM+f0e0G9Y3QzJ","tlshash":"178483c8c9b49daf0d7fdf44ae5f9a2420242b684b8a4811b7d47f7a07571db29ca7c0","first_seen":"2026-02-20T07:23:20.016016Z","last_seen":"2026-03-04T19:39:23.777425Z","times_seen":60,"resource_available":true,"data":null}},"time_used":175,"timings":{"blocked":78,"dns":27,"connect":13,"send":0,"wait":13,"receive":4,"ssl":36},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.paypalobjects.com/paypal-ui/logos/svg/paypal-wordmark-color.svg","fqdn":"www.paypalobjects.com","domain":"paypalobjects.com","tld":"com"},"ip":{"addr":"151.101.131.1","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://garbeado.click/","date":"2026-02-21T21:50:23.420Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.paypalobjects.com","organization":"PayPal, Inc."},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Tue, 17 Jun 2025 00:00:00 GMT","end":"Tue, 16 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D1:CC:8D:A7:79:AE:1A:09:18:36:29:8A:84:C5:9B:2E:0E:FB:CC:75","sha256":"B2:15:32:68:A9:52:EC:F4:53:30:4D:98:F6:AF:90:B7:AA:72:37:80:05:8A:96:71:BC:E8:9A:9F:05:01:C7:E9"}}},"request":{"raw":"GET /paypal-ui/logos/svg/paypal-wordmark-color.svg HTTP/1.1\r\nHost: www.paypalobjects.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://garbeado.click/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: s-maxage=31536000, public,max-age=3600\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\ndc: ccg11-origin-www-1.paypal.com\r\ntraceparent: 00-0000000000000000000381116d06a1a4-0891646195ab8dff-01\r\netag: W/\"67da3cd6-8f3\"\r\npaypal-debug-id: 381116d06a1a4\r\ntiming-allow-origin: https://www.paypal.com,https://www.sandbox.paypal.com\r\nlast-modified: Wed, 19 Mar 2025 03:41:10 GMT\r\nvia: 1.1 varnish, 1.1 varnish\r\naccept-ranges: bytes\r\ndate: Sat, 21 Feb 2026 21:50:23 GMT\r\nx-served-by: cache-sjc10069-SJC, cache-sjc10041-SJC, cache-hel1410027-HEL\r\nx-cache: MISS, HIT, HIT\r\nx-cache-hits: 0, 81, 4524\r\nx-timer: S1771710623.483509,VS0,VE0\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=31557600\r\ncontent-length: 756\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":2291,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"b40b8498ed9de0b5cc68df968183c833","sha1":"276409ef0de6ff80af749877a5f650db78f7804a","sha256":"f766ba6d9471acc787c0808b8c30f38494d12b287ccfb2ff610fd617cfa2a432","sha512":"a79c51326b7c6bb1e694f5c85041b6ee014e8a7fb123996d070f8acd744529f06420d5d751bf1d808e40a833ed9b21c48e2a6ad8b9d340e46e9cf2a293915d45","ssdeep":"","tlshash":"c241f2e2a214e39829178a54ce7250e0165ff4fef7af33a191bf5b70a0425e0ca11e74","first_seen":"2024-09-19T18:53:11Z","last_seen":"2026-06-04T13:12:24.485939Z","times_seen":602,"resource_available":false,"data":null}},"time_used":122,"timings":{"blocked":55,"dns":7,"connect":13,"send":0,"wait":14,"receive":0,"ssl":30},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.paypalobjects.com/paypal-ui/fonts/PayPalOpen-Regular.woff2","fqdn":"www.paypalobjects.com","domain":"paypalobjects.com","tld":"com"},"ip":{"addr":"151.101.131.1","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://garbeado.click/","date":"2026-02-21T21:50:23.433Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.paypalobjects.com","organization":"PayPal, Inc."},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Tue, 17 Jun 2025 00:00:00 GMT","end":"Tue, 16 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D1:CC:8D:A7:79:AE:1A:09:18:36:29:8A:84:C5:9B:2E:0E:FB:CC:75","sha256":"B2:15:32:68:A9:52:EC:F4:53:30:4D:98:F6:AF:90:B7:AA:72:37:80:05:8A:96:71:BC:E8:9A:9F:05:01:C7:E9"}}},"request":{"raw":"GET /paypal-ui/fonts/PayPalOpen-Regular.woff2 HTTP/1.1\r\nHost: www.paypalobjects.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://garbeado.click\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://garbeado.click/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\npaypal-debug-id: 72ddcc709dcd9\r\ntiming-allow-origin: https://www.paypal.com,https://www.sandbox.paypal.com\r\naccess-control-allow-methods: GET\r\ncache-control: s-maxage=31536000, public,max-age=31536000\r\ndc: ccg11-origin-www-1.paypal.com\r\netag: \"6298f2c0-6b41\"\r\nlast-modified: Thu, 02 Jun 2022 17:26:24 GMT\r\nvia: 1.1 varnish, 1.1 varnish\r\naccept-ranges: bytes\r\ndate: Sat, 21 Feb 2026 21:50:23 GMT\r\nx-served-by: cache-sjc1000142-SJC, cache-sjc10020-SJC, cache-hel1410020-HEL\r\nx-cache: MISS, HIT, HIT\r\nx-cache-hits: 0, 1748, 68\r\nx-timer: S1771710623.485219,VS0,VE0\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: *\r\ncontent-type: application/font-woff2\r\nstrict-transport-security: max-age=31557600\r\ncontent-length: 27457\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":27457,"size_decoded":0,"mime_type":"application/font-woff2","magic":"Web Open Font Format (Version 2), TrueType, length 27457, version 1.0","md5":"49d49974386dc725656bc1a2bf32ed44","sha1":"26139d3425422f233dfccb09fca2edb36f01e390","sha256":"9ae7b95f034d76b21aaf8fcc0cdd39f4ba7ba59dd9751348a32c7e5cfdfdb6df","sha512":"440a101dc681e69275ab9c2bfa2e436b9d3500debfcf5c84f47b9796f6879e1021b4a6e797ea3c4b45052f68cb066c1bcc75b4a6ac204a40848cb4eb6731f94a","ssdeep":"768:rs41ijgVewvJ0P+BvnbXzmX07uu/pmawwzQ8Mv:rsaijVwP1bXzmX077zQzv","tlshash":"9dc2e0f975cfa310c31d315cbce08a7a010579a8ece47799c368999f195bc8ad1db13a","first_seen":"2023-04-11T21:56:01Z","last_seen":"2026-06-05T15:16:27.940858Z","times_seen":1349,"resource_available":false,"data":null}},"time_used":113,"timings":{"blocked":44,"dns":1,"connect":13,"send":0,"wait":16,"receive":9,"ssl":26},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.paypalobjects.com/webstatic/icon/pp64.png","fqdn":"www.paypalobjects.com","domain":"paypalobjects.com","tld":"com"},"ip":{"addr":"151.101.131.1","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://garbeado.click/","date":"2026-02-21T21:50:23.748Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.paypalobjects.com","organization":"PayPal, Inc."},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Tue, 17 Jun 2025 00:00:00 GMT","end":"Tue, 16 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D1:CC:8D:A7:79:AE:1A:09:18:36:29:8A:84:C5:9B:2E:0E:FB:CC:75","sha256":"B2:15:32:68:A9:52:EC:F4:53:30:4D:98:F6:AF:90:B7:AA:72:37:80:05:8A:96:71:BC:E8:9A:9F:05:01:C7:E9"}}},"request":{"raw":"GET /webstatic/icon/pp64.png HTTP/1.1\r\nHost: www.paypalobjects.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://garbeado.click/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: s-maxage=31536000, public,max-age=3600\r\ncontent-type: image/png\r\ndc: ccg11-origin-www-1.paypal.com\r\netag: \"BBNvPbdpaauRT+iiW9NBzqhT2loQNLSTf5XNX6l5j+0\"\r\nfastly-io-info: ifsz=4518 idim=64x64 ifmt=png ofsz=1745 odim=64x64 ofmt=png\r\nfastly-io-served-by: vpop-haf2300710\r\nfastly-stats: io=1\r\npaypal-debug-id: 0f5f6e993c8b0\r\ntiming-allow-origin: https://www.paypal.com,https://www.sandbox.paypal.com\r\ntraceparent: 00-00000000000000000000f5f6e993c8b0-650e241dd9d14c9b-01\r\nvia: 1.1 varnish, 1.1 varnish\r\naccept-ranges: bytes\r\ndate: Sat, 21 Feb 2026 21:50:23 GMT\r\nx-served-by: cache-sjc10060-SJC, cache-hel1410027-HEL\r\nx-cache: HIT, HIT\r\nx-cache-hits: 2628, 242\r\nx-timer: S1771710624.754974,VS0,VE0\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\nstrict-transport-security: max-age=31557600\r\ncontent-length: 1745\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1745,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit/color RGB, non-interlaced","md5":"de1ba89339f0a1addf3aaa930cd3e461","sha1":"d29ffd216b865aa95798758aaccbed3a654139c3","sha256":"af0887bb94e12e0bfc49f20335693e68b43c993885d6f1cf95d3830ce88565c0","sha512":"f8312fbcec0f22a952d1d2f8d22f092c993bb5126cb5545f11300b8322574828554510de05be9226a2ea174066f89bc84bea0a89ba42290a3004d2281742fe49","ssdeep":"","tlshash":"80310830b0f9301003518879956fab4f95772e9243535711aad9eb40316c17dde997e2","first_seen":"2023-05-08T19:27:30Z","last_seen":"2026-06-05T02:04:16.00654Z","times_seen":378,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"garbeado.click/mtr/1a7c3460cd8c343771081839499ed7a0?chnl=UL\u0026cmid=6b65be9311964eeb91510458ddcce012\u0026cr=f98GXLaQ1c7tnuwXQliVDUhAMjpX1ng+200Q4=\u0026btz=UTC\u0026emf=true\u0026ci=js/3.11.1\u0026q=QBzalmMuDFJIiZNebIWt","fqdn":"garbeado.click","domain":"garbeado.click","tld":"click"},"ip":{"addr":"185.221.216.117","port":443,"asn":393960,"as":"HOST4GEEKS-LLC","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://garbeado.click/","date":"2026-02-21T21:50:24.388Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"garbeado.click","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Feb 2026 05:23:17 GMT","end":"Tue, 05 May 2026 05:23:16 GMT"},"fingerprint":{"sha1":"D8:DB:B4:49:42:CD:44:B1:3D:35:97:AF:DD:B6:58:E1:D0:F9:D4:3B","sha256":"87:0C:08:40:8F:7C:89:23:47:ED:CB:35:4D:05:EE:DB:86:CC:CF:BA:B7:30:86:90:FC:B3:68:90:C9:BF:14:57"}}},"request":{"raw":"POST /mtr/1a7c3460cd8c343771081839499ed7a0?chnl=UL\u0026cmid=6b65be9311964eeb91510458ddcce012\u0026cr=f98GXLaQ1c7tnuwXQliVDUhAMjpX1ng+200Q4=\u0026btz=UTC\u0026emf=true\u0026ci=js/3.11.1\u0026q=QBzalmMuDFJIiZNebIWt HTTP/1.1\r\nHost: garbeado.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 11207\r\nOrigin: https://garbeado.click\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://garbeado.click/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":17566,"data":"¼¿É¾¬º‘Ê£ã¯gÝoHêèÀÁ•EŒ-2ð¦Î®Ú#›%\u0001øí†Í.Š\u001bj½èÎÁ•E®Md³§ÌÁ•\u003cÿ\u0006,³æËEñM;øèþύ\u0014èYj«±]ðZd³¼ÙSí[r±ö‚§à$‰6\u0018Ôêë·â+ý?\u001dӆꠏ;ÿBg¾ €H™;\f±‚÷®ãGéAx åŒ¦á;ÿO\u0014³¢×—ß]ò@?潍”œI²\u001d/¾žñÌÇ\u0013°\u0003|¾¹×‘Æ\u0004©A,å®ÿÁ‘;³S å§Ïݓ\u000f¸\u000e,¯–ÍßÛ\u000e©\u0003-¯þ“׏)²\u001bhץ֍Ë[ò\u001b!å¦ÆÝó\tá@ ô«Çݓ\u0005²\u000b1¯–ÍßÇVã!'åêåŒÚ\t¹Sgùû¿Á[­Q\u001cù¯ƒ‘Ê\u0016¨\n;å¯ÇÃú5‘O?𹃍À\u0013ý\t'ä¤ÇÃÀ\tý\u001b ø¹ƒÊ\u0015«\n:¿öŒ“‘;³S8¯‹Ç‡Æ\u0013´\u0000\u0026ð¦ÏšƒG¼O|¡þƒ­À\u0013óAf³·ÁÜQêMrêèÐÁ•JìCjç虍Ú\u000b±\u0012d³¹ÀÁ•\u001cÿ\u001aj«è˗Û\u0017®Ug¾­Â‘Í\u0002¼\u000b'¿©ÏŠÌ\fò\u0006\u0026õ¯Û¼É\u000e±\n;¾®Å“\r®A,þ½ÍÀ\u0006¹M5½èė]ìCjð¨ÙÔE³\u0000'áè™ÁÎE Cjâÿ‘Á•\u001cÿ\u001cj«ûÁÙEçM+÷ø–ÑÉ\u0003¾\u000bxòÿ”Ô–Vå\u000e}¤òÆÐËRåYq¦ò“‡\u001añM;§è™˜\u0014ÿUx½èÕÁ•\u003cíCx½úÓò\u001añM;¤òÙÔE®Mr¼ûÁÙEç\u0001=ý¦Þύ\u0014ï_j«±]íCjç虸%´\u001b;å¸Æ‚ÂG‹\n:ðêð‚Á\u0014ý\"'ÿ¥Ï$¸\u0001\u003cä¸ÚÁò\u001añM;¢üÙÔE®Mr¼ûÁÙEç\u0001=ý¦Þύ\u0014è^j«±]íCjç虘\u0003¸\t)ä¦×Á•Vê\\f û•Õ™_ê_y ý’Û—Kÿ\u000e8á¦ÆÁ•Vê\\f û•Õ™_ê_y ý’Û—Kÿ\u001c-ã£ÅÁ•Vê\\f û•Õ™_ê_y ý’Û—Kÿ\u001c)ÿ¹ÙžQïAx ü•ÕRäX~¤ü‘ÖƒE°\u0000\u0026þè™ÒUóYp¢ù×œRíZp¤ó—ύ\n´\u0001j«û“Í—Wí_x¢ú–Ò˜RêWy£æÖ\u0014©\n%³ð’՝Ií^~§ü‘Ö–PëZ~£ÿޞƒE®]y³ðØÁÜEç_d³¼ÙœRóX{©ù×ŸUï[~£ù”žƒE®Xq³ðØÁÜEçB{½èÕÁ•\u003c¦M\u0026³ð‡Ê\u0001¼\u001a$åäʍÆEñM$³ðÑ˜Qé]{¨ó—žò\u001añM;§óÙÔE®Mr¡æ•]†\u0014jýè™ÁÇ\u0013©\u001f;«åŒ„Î\u0015¿\n)õ¥€q½ê’Ó–NÿCjùè™ÁÝ\u0000¿G}¢æƒÒœUñOz£òŠÁƒEµ\u001bj«èфÍOïZ}½ê‘ÖšKý]}¤ãÏ\u000e¿Mr³¸ÄÎOíCh¡æƒÓƒGíAp¸èÁÆ\u0004ÿUjã­Á˝SëCh£þ–ϏUé[a³æŠÌ\u0013ÿUjã­Á˛QñO}£æƒÖ›NÿCjø¾Ù\u0015º\r`£ÿ–ϏUèZd±ø–Ö†EñM$åè™ÁÝ\u0000¿Gx½ê“ϏUîWa³æŽ]ÿ\u001d/óâ‘ÖšKý]}¤æƒÓ†EñM%ôè™ÁÝ\u0000¿Gz¤ÿÃRèCh£ÿ–ʍKÿ\u001cj«èфÍOï_~½ê‘Ó™Ký]x§ãÏ\u0013¹\u000b;³ð‘È\u0005õ^x¤æƒÒŸRñOy¡ÿŠÁƒE©\u000b.³ð‘È\u0005õ]|¡æƒÑ›WñOz¥úŠÁƒE©\u000b ³ð‘È\u0005õ]x¤æƒÒ–^ñOy¨þŠÁƒE©\u000b$âè™ÁÝ\u0000¿Gz£ýÃUêCh£ø”ʍKÿ\u001b,âè™ÁÝ\u0000¿Gz¡ÿÃž^äCh ó—ʍKÿ\u0019\u003c³ð‘È\u0005õW}½ê‘ÕƒGì\\q¸èÁØEçM:ö¨‹ÑšRñOz¤ÿÃRèFj½èԅ]ÿ\u001d/óâ‘×™Ký]|¤æƒÑ›SôMd³½×Á•E¯\b*¹úÃŸKý_a³æÆEçM:ö¨‹ÖœKý^{£æƒÑ_ôMd³¹Ê—]ÿ\u001d/óâ‘ÖšKý]}¤æƒÑšRôM5ì恐–UÿU3³¹ÙŸKÿ\u0019j«±›]åCjèè™ÒŸKÿ\u0003-÷¾Ù—Kÿ\u001d!ö¢×Á•Tè]f¢ü•Õ™_ê_y ý’ÚƒE¿\u0000\u003cå¥ÎÁ•UäCjù¯Ê„Ç\u0013ÿUy¨æ—À\u0017ÿUy¡æ”Æ\u0003©\u0007j«ù—ׁTëY~§ò”ÓžVê^q½èŌÁ\u0013ÿUjâ¯ÑŠÉE \u0012d³¹šÐ]¦M;³ð“ύ\u0011ÿU3³²Ù—Kÿ\u0016j«òÁÃ\u0002»\u001bj«òÁÝ\u000eº\u0007\u003c³ð’Ñ—_ñM*þ¾×ŒÂEç]½èˆÆ\u0000µ\u001bj«ûšÏ\u0013²\u001fj«òÁØ\u000e¹\u001b ³ð’Ñ—WñM.þ¤×Á•E®\n:ø¬žÒKÿ\u001cq¤è™˜\u0014ÿUe æ•]³\u001a$ý·ÁÜ^êMrêèÐÁ•JîCjç虍Ú\u000b±\u0012d³¹”Ӎ]¦M;³ðŽÒƒE«Mrÿ¿ÏÒKÿ\u001cy¡üÙÔE®Mr¼ûÁÙEç\u0001=ý¦Þύ\u0014ìZ|³ðØÁÜEç_d³¼ÙÔEª\u0019j«¬ÂÜ\u0002ñM?纁ÙÉ\u0006±\u001c-½èӑ]»\u000e$⯏ÁÌ\fÿU\u003cã¿Æύ\u0017©Mr÷«ÏÊKÿ\t8³ðłÃ\u0014¸\u00125½èÐҚ_ÿU3³¹ÙŸKÿ\u0019j«¬ÂÜ\u0002 Cjâû•Ó]¦M;³ð’ύ\u0011ÿU.ð¦Ð†ÒKÿ\u001c¦è™˜\u0014ÿUe¢æ•]¦M{£þÓ˜Së\\j«±Š]©\u001d=ô恗]³\u001a$ý恐]ÿ\u0019)ýèÁÊEç^z½èÓÁ•E»\u001a\u0026ò¾ÊŒÁOôO3ͤƒÃG†\u0001)å£Õ†\u0004²\u000b-̖͞\u001añMy¡ý’ÚžRå^|³ðØÁÆEç\u001b:䯏ÁÛEç\u0001=ý¦ÁÜEçM'侁ύ\u0002ÿUy£æ“]ÿ\t=ÿ©×ŠÀ\tõFhê–ÍÏGý4\u0026ð¾Ê•ÊG¾\u0000,ô—ÿÒE Cj£û’Ò—Wî^¦è™˜\u000eÿU\u003cã¿Æύ\u0013ÿU\u0026ä¦Ïύ\u0014ÿUjð¹ÈÁƒE¸Mr øÁßEçM.ä¤À—Æ\b³Ga±±ÿGýO\u0013ÿ«×ŠÙ\u0002ý\f'õ¯þ¿Á\u001aÿ\u0012d³ù–ÛžVë[p¡òÙÔE´Mrå¸Ö†ƒE©Mrÿ¿ÏƒE®Mr³¼ÂKÿ\nj«û‘ύ\u0017ÿUj÷¿Í€Û\u000e²\u0001`¸êØ¿ÁGýOhʤ—Æ\u0011¸O+þ®Æ¾ó\t M5췏ÁÜUïMrêèÐÁ•WñM\u003e³ð’ÚÒKÿ\u001c{¡è™˜\u0014ÿUx½èÕÁ•EìM5½èÐМEç\u0014jâè™ÓƒE«Mr÷«ÏÊ\u001añM;¥þÙÔE®Mr¡æ•]»\u000e$â¯Þύ\u0014éZj«±]íCjç虸žPê^ ú•Ñœ^íZd ý”Ò˜VíYz¢ó“Öò\u001añM;¥òÙÔE®Mr¡æ•]†By¥û“Ó›Qî[z½ç’Ö–^éYy¤òÒRïV}¡ù’Ï›UäY©þ—ÔƒUï_{ ø“ÕžKê^}¡ó‘טP€\u0012d³¹—ڍ]¦M;³ð“ύ\u0011ÿU\u0013 æ’¾ÒKÿ\u001c}¡è™˜\u0014ÿUe æ•]³\u001a$ý·ÁÜRêMrêèÐÁ•WñM\u003e³ð’žƒE®Zq³ðØÁÜEç_d³¼ÙÉ\u0006±\u001c-ì恐™WÿU3³¹ÙŸKÿ\u0019j«¬ÂÜ\u0002 Cjâü’Á•\u001cÿ\u001cj«úÁÙEç\t)ý¹ÆžƒE®Yz³ðØÁÜEç_d³¼ÙÉ\u0006±\u001c-ì恐™TÿU3³¹ÙŸKÿ\u0019j«¾Ñ–Ê\u001añM;§þÙÔE®Mr¡æ•]©\u001d=ô·ÁÜQèMrêèÐÁ•WñM\u003e³ðłÃ\u0014¸\u0012d³¹•Õ]¦M;³ðŽÒƒE«Mrÿ¿ÏÒKÿ\u001c~©è™˜\u0014ÿUx½èÕÁ•\u0013¯\u001a-ì恐˜VÿU3³¹ÙŸKÿ\u0019j«±”]ÿ\u0007\u003cåºÐـHº\u000e:ó¯Â‡ÀI¾\u0003!ò¡Ï\u000bÿUjù¾×“Ü]ò@/ð¸Á†Î\u0003²A+ý£ÀˆKÿ\u000ej«¤ÖÃ\u001a Cjâø—Á•\u001cÿ\u001cj«úÁÙEç\\ì恐˜UÿU3³¹ÙŸKÿ\u0019j«¬ÂÜ\u0002 CjâûÙÔE®Mr¡æ•]ÿ#!ÿ¿ÛÃ×_ë0~¥èÞύ\u0014ïMrêèÐÁ•WñM\u003e³ðø¸\u0002³B\u001dÂèþÏôE¸\u0001eęÏ\u0002³M\u0015Ì·ÁÜTÿU3³¹ÙŸKÿ\u0019j«ø—žƒE®[j«±]ð^d³¼ÙÁ\u0012±\u00035½èÐ֍]¦M;³ð“ύ\u0011ÿU\u0013 ø›ÓƒVí]|Ì·ÁÜPÿU3³¹ÙŸKÿ\u0019j«þ›žƒE®Vj«±]íCjçè™Áú3žM5½èÐҟEç\u0014jâè™ÓƒE«Mrå¸Ö†ÒKÿ\u001cy è™˜\u0014ÿUx½èÕÁ•\u0013¯\u001a-ì恐žUÿU3³¹ÙŸKÿ\u0019j«¾Ñ–Ê\u001añM; ùÙÔE®Mr¡æ•]»\u000e$â¯Þύ\u0014ì[j«±]ð^d³¼ÙÁ\u0012±\u00035½èÐҚEç\u0014jâè™ÓƒE«Mr³ÊœUÿ\u0012d³¹’Ս]¦M;³ð“ύ\u0011ÿU\u0013êè͂Â\u0002ÿUjÁŽåÃù\u000e¸\u0018-ãèÁË\u0002®\f:øº×ŠÀ\tÿUjÁ¥Ñ—Î\u0005±\nhÕ¥À–Â\u0002³\u001bhץюÎ\u0013ÿCjü£Î†û\u001e­\n;³ðø˜\u0013¤\u001f-³ð‚ß\u0017±\u0006+ð¾ÊŒÁH­\u000b.³æÚ\u0001»\u00060ô¹Ù\u0017¹\tjìæØÁÛ\u001e­\nj«è׆×\u0013ò\u001f,÷èÁÜ\u0012»\t!é¯ÐÁ•E­\u000b.³·þžƒ\u001cÿ\u0001)ü¯Ù$µ\u001d'ü¯ƒ³ë!ý9!ô½Æ‘Kÿ\u000b-â©ÑŠß\u0013´\u0000\u0026³ð³À\u0015©\u000e*ý¯ƒ§À\u0004¨\u0002-ÿ¾ƒ¥À\u0015°\u000e\u003c³æŽÆ\n¸;1á¯ÐÁ•\u003c¦M\u003cèºÆÁ•E¼\u001f8ý£À‚Û\u000e²\u0001gá®ÅÁƒE®\u001a.÷£Û†ÜEçM8õ¬žƒ\u001cÿ\u001b1ᯁٍ\u0013¸\u0017\u003c¾ºÇ…Kÿ\u001c=÷¬Ê›Ê\u0014ÿUjá®ÅÁÒ: C3³¤ÂŽÊEçM\u000bù¸ÌŽÆ\u0012°O\u0018ՌƒµÆ\u0002ª\n:³æ‡Ê\u0014¾\u001d!á¾ÊŒÁEçM\u0018þ¸×‚Í\u000b¸O\fþ©ÖŽÊ\t©O\u000eþ¸Î‚ÛEñM%ø§Æ·Ö\u0017¸\u001cj«‘ØÁÛ\u001e­\nj«è“ß\u000b´\f)å£Ì€\u0017¹\tj½èЖÉ\u0001´\u0017-âè™Áß\u0003»M5½±—Ö\u0017¸Mr³¾Æ›ÛH­\u000b.³æÚ\u0001»\u00060ô¹Ù\u0017¹\tjì—ÞÏÔE³\u000e%ôè™Áâ\u000e¾\u001d'â¥Å—\"¹\b-±šç¥1´\n?ô¸Ï\u0003¸\u001c+ã£Ó—Æ\b³Mr³šÌ‘Û\u0006¿\u0003-±ŽÌ€Ú\n¸\u0001\u003c±ŒÌ‘Â\u0006©Md³§ÊŽÊ3¤\u001f-â虸ÔE©\u00168ôè™ÁÎ\u0017­\u0003!ò«×ŠÀ\tò\u001f,÷èÁÜ\u0012»\t!é¯ÐÁ•E­\u000b.³·˜\u0013¤\u001f-³ð—Ê\u001f©@8õ¬Ï\u0014¨\t.ø²Æ]ÿ\u001f,÷èÞ¾ÒK¦M\u0026ð§ÆÁ•EŠ\n*Ú£×ÃÍ\u0012´\u0003\u003c¼£ÍÃÿ#›Md³®ÆÌ\u0015´\u001f\u003cø¥ÍÁ•E\u0000:å«ÁÊG™\u0000+ä§ÆÛG›\u0000:ü«×ÁƒE°\u0006%ôžÚ“Ê\u0014ÿU\u0013êèךß\u0002ÿUjðºÓÆ\u0004¼\u001b!þ¤Œ“Ë\u0001ÿCjâ¿Å…Æ\u001f¸\u001cj«èӇÉE C3³¾Ú“ÊEçM\u003cô²×Ìß\u0003»Md³¹Ö…É\u000e¥\n;³ð“Ë\u0001ÿ\u0012\u0015ì—Þύ\u0014ìVj«±]íCjç虘\n¼\u0017\u001cþ¿À‹ÿ\b´\u0001\u003câè™ÓƒE©\u0000=ò¢æ•Ê\t©Mr÷«ÏÊKÿ\u001b'ä©Ë°Û\u0006¯\u001bj«¬ÂÜ\u0002 \u0012d³¹‘ԍ]¦M;³ð“ύ\u0011ÿUj³·ÁÜUåMrêèÐÁ•WñM\u003e³ðø¾ÒKÿ\u001c{£è™˜\u0014ÿUx½èÕÁ•\u0013¯\u001a-ì恐œPÿU3³¹ÙŸKÿ\u0019j«èБÈ\u0005ÿ\u0012d³¹—ҍ]¦M;³ðŽÒƒE«Mrÿ¿ÏÒKÿ\u001c{¨è™˜\u0014ÿUx½èÕÁ•\u0001¼\u0003;ô·ÁÜSïMrêèÐÁ•WñM\u003e³ð“žƒE®\\p³ðØÁÜEç_d³¼ÙŸ\u001añM;¥ùÙÔE®Mr¡æ•]»\u000e$â¯Þύ\u0014é_j«±]íCjç虅Î\u000b®\n5½èÐיEç\u0014jâè™ÓƒE«Mr³ÿÅӜW»\u000eõøÆÖÉ^»X}¦¨Å‚É_ìY|£¯ÁÒÎQÿ\u0012d³¹›Ó]¦M;³ð“ύ\u0011ÿU\u003cã¿ÆžƒE®Wy³ðØÁÜEç_d³¼ÙRè\u0012d³¹›Ñ]¦M;³ð“ύ\u0011ÿUjô¤Ž¶üE CjâòÁ•\u001cÿ\u001cj«úÁÙEç4jô¤Ž¶üEñM-ÿèþžƒE®W~³ðØÁÜEçBy½èÕÁ•\t¨\u0003$ì恐–VÿU3³¹Ù‚VñM\u003e³ð͖Ã\u000b Cjâó•Á•\u001cÿ\u001cj«ç‘ύ\u0011ÿU\u0026ä¦ÏžƒE®Vp³ðØÁÜEç_d³¼ÙÉ\u0006±\u001c-ì恐–^ÿU3³¹ÙŸKÿ\u0019j«¾Ñ–Ê\u001añM;£ú“Á•\u001cÿ\u001cj«úÁÙEç^¦û”ÒŸQï]p¨òÞύ\u0014ê[j«±]íCjç虘\u0011¸\u001d;ø¥ÍÁ•EŠ\n*ֆƒÒWÿCjç¯Í‡À\u0015ÿUjܥيÃ\u000b¼Md³¼ÆË\b¯:\u0026ü«ÐˆÊ\u0003ÿUj³æ‘Ê\t¹\n:ô¸Ù\u000b±\u0019%á£Ó†Kÿ\u001d-ÿ®Æ‘Ê\u0015ˆ\u0001%ð¹È†ËEçMj½èЋÎ\u0003´\u0001/ݫ̈́Ú\u0006º\n\u001eô¸ÐŠÀ\tÿUjƯÁ¤ãGš#\u001bÝê氏Vó_j췏ÁÜPèMrêèÐÁ•WñM\u003e³ðØÁÌ\b³\u001b-é¾â—Û\u0015´\r=å¯ÐÁ•EéW-§ù“‚Ê_í]*ðøǀ˜\u0002¹\\~ôò”Ñ—\u0002¹\t|÷©Ï\u0017¼\u001d)ü¯×†Ý\u0014ÿUj¡ý–Óš^¿\u000eq÷ýÅחV¸Wy£øÓÍR»\\y ü•…–EñM8ð¸ÂŽÊ\u0013¸\u001d;£è™Á–\u0003¹\t}ðüÀ×ËWî\u000e{©òÆӜ\u0005ë]+£ò•ÊSîW}³æÇ\u0006¹\n:Á¸Æ€Æ\u0014´\u0000\u0026âè™Áž\u0006¼\r.¤ÿ’Õ˜\u0001è\ty¥þ–ÔË\u0005ä_-òøÁÒÎ_å\tx³æ†×\u0013¸\u0001;ø¥Í]ÿY-òòÂ֙Q¿Yq£òÔËU¹\t-©ý‚ÎQë\t{¢ý•ÁƒE¸\u0017\u003cô¤ÐŠÀ\t\u000e:ð§Æ—Ê\u0015®Mr³þÇ×Ì\u0002»[-ò«ÆՙS¿Zx¨ø†ŸUä\rp£ù—€–UÿCjô²×†Á\u0014´\u0000\u0026Á«Ñ‚Â\u0002©\n:âøÙ\u0002¹W,¢¯›ÑÎQí\f~£ÿ’ÕŸUå_*ò«Å€R¹\np©èÁÚ\t®\u001a8á¥Ñ—Ê\u0003˜\u0017\u003cô¤ÐŠÀ\t®MrʗޞƒE®X~³ðØÁÜEç_d³¼Ù\u0006¹X~¡ù—ÒÊVè^x¤û’€›UîX{ðóÂԜ_¼\nz¢èÞύ\u0014ì_y³ðØÁÜEç_d³¼Ù*²\u0015!ý¦Â̚IíO`ƣ͇À\u0010®O\u0006Åê’ӁWæO\u001fø¤•×”G¥Y|ªêѕ•Vî[f¡ãƒ¤Ê\u0004¶\u0000g£ú’ÓŸVí^hףцÉ\b¥@y¢þÓ\u001añM; úÁ•\u001cÿ\u001cj«úÁÙEçM}¿úƒË÷VìFjì恐žWéMrêèÐÁ•JìCjç虍Ú\u000b±\u0012d³¹’Ò˜Eç\u0014jâè™ÓƒE«Mr¤·ÁÜVìVj«±]íCjçè™ÁÊ\u0015¯\u0000:Ÿ€Ê'µ\u001b\u003cṙ̀\u0000¼\u001d*ô«ÇŒ\u0004±\u0006+úåʍË\u0002¥0.ø¦Æ€\u0003»\u001ffû¹‡À\u0010³\u0003'ð®™Ò•Qì\\} –Í€ÊHá/ å¾Ó•Hò\b)ã¨Æ‚Ë\bó\f$ø©ÈÌÆ\t¹\n0άʏÊ\u0014ò\u000b.áäɐ\u0003²\u0018\u0026ý¥Â‡•VçW| ø’¿Á\u0006\u0007\u003cåºÐـHº\u000e:ó¯Â‡ÀI¾\u0003!ò¡ŒŠÁ\u0003¸\u0017\u0017÷£Ï†ÜH¹\t8¿ ÐÍË\bª\u0001$þ«Çٞ]ï\\{ òÿæH¾Sgãöã‹Û\u0013­\u001cr¾åĂÝ\u0005¸\u000e,þäÀÆ\u0004¶@!ÿ®Æ›ð\u0001´\u0003-âåDžßI·\u001cfõ¥ÔÃ\b¼\u000br ð‘Ö™Tí3\u0026ØåÀ߀[\u0007\u003cåºÐـHº\u000e:ó¯Â‡ÀI¾\u0003!ò¡ŒŠÁ\u0003¸\u0017\u0017÷£Ï†ÜH¹\t8¿ ÐÍË\bª\u0001$þ«Çٞ]ïZ}©ýÿæH¾S\bù¾×“Ü]ò@/ð¸Á†Î\u0003²A+ý£Àˆ€\u000e³\u000b-é•ÅŠÃ\u0002®@,÷º‰ÜI¹\u0000?ÿ¦Ì‚Ë]ìUz§û”Ñó\t®@t¾öã‹Û\u0013­\u001cr¾åĂÝ\u0005¸\u000e,þäÀÆ\u0004¶@!ÿ®Æ›ð\u0001´\u0003-âåDžßI·\u001cfõ¥ÔÃ\b¼\u000br ð‘ЙTë3\u0026þåÀ̓Há/ å¾Ó•Hò\b)ã¨Æ‚Ë\bó\f$ø©ÈÌÆ\t¹\n0άʏÊ\u0014ò\u000b.áäɐ\u0003²\u0018\u0026ý¥Â‡•Vç]z©ÿ”¿Á\bò\fg­ŠË—Û\u0017®Ug¾­Â‘Í\u0002¼\u000b'¿©ÏŠÌ\fò\u0006\u0026õ¯Û¼É\u000e±\n;¾®Å“\r®A,þ½ÍÀ\u0006¹Uy«ø‘Ú™U\u0001=Ѣחß\u0014ç@gö«ÑÊ\u0006¹\u0000fò¦Ê€ÄH´\u0001,ô²ü…Æ\u000b¸\u001cgõ¬ÓÍÅ\u0014ó\u000b'æ¤ÏŒÎ\u0003ç^r£û•ÛŸ;³\u001f:þ§ÊÊG¾\u000e$ý¨Â€ÄM¼/ å¾Ó•Hò\b)ã¨Æ‚Ë\bó\f$ø©ÈÌÆ\t¹\n0άʏÊ\u0014ò\u000b.áäɐ\u0003²\u0018\u0026ý¥Â‡•Vç]y©þ–¿Á\u0012\u0007\u003cåºÐـHº\u000e:ó¯Â‡ÀI¾\u0003!ò¡ŒŠÁ\u0003¸\u0017\u0017÷£Ï†ÜH¹\t8¿ ÐÍË\bª\u0001$þ«Çٞ]ï^~¦ýÿß\u0015²\u0002!⯃€Î\u000b±\r)ò¡‰‚ï\u000f©\u001b8âðŒÌÈ\u0006¯\r-ð®ÌÍÌ\u000b´\f#¾£Í‡Ê\u001f‚\t!ý¯ÐÌË\u0001­A\"âänjØ\t±\u0000)õð’ٝVå[}֣ͤÇ\u0013©\u001f;«åŒ„Î\u0015¿\n)õ¥€Ã\u000e¾\u0004gø¤Ç†×8»\u0006$ô¹Œ‡É\u0017ó\u0005;¿®Ì”Á\u000b²\u000e,«û™ÑžQêX\u0014ÿºÑŒÂ\u000e®\nhò«ÏÍ\u0006¾\u0004bðŠË—Û\u0017®Ug¾­Â‘Í\u0002¼\u000b'¿©ÏŠÌ\fò\u0006\u0026õ¯Û¼É\u000e±\n;¾®Å“\r®A,þ½ÍÀ\u0006¹Uy«ø’Û›R\u0001=Ѣחß\u0014ç@gö«ÑÊ\u0006¹\u0000fò¦Ê€ÄH´\u0001,ô²ü…Æ\u000b¸\u001cgõ¬ÓÍÅ\u0014ó\u000b'æ¤ÏŒÎ\u0003ç^r£û•Ô˜;³\u001f:þ§ÊÊG¾\u000e$ý¨Â€ÄM¼/ å¾Ó•Hò\b)ã¨Æ‚Ë\bó\f$ø©ÈÌÆ\t¹\n0άʏÊ\u0014ò\u000b.áäɐ\u0003²\u0018\u0026ý¥Â‡•Vç]y©þ–¿Á\u0012\u0007\u003cåºÐـHº\u000e:ó¯Â‡ÀI¾\u0003!ò¡ŒŠÁ\u0003¸\u0017\u0017÷£Ï†ÜH¹\t8¿ ÐÍË\bª\u0001$þ«Çٞ]ï^~¦ýÿß\u0015²\u0002!⯃€Î\u000b±\r)ò¡‰‚ï\u000f©\u001b8âðŒÌÈ\u0006¯\r-ð®ÌÍÌ\u000b´\f#¾£Í‡Ê\u001f‚\t!ý¯ÐÌË\u0001­A\"âänjØ\t±\u0000)õð’ٝVå[}֣ͤÇ\u0013©\u001f;«åŒ„Î\u0015¿\n)õ¥€Ã\u000e¾\u0004gø¤Ç†×8»\u0006$ô¹Œ‡É\u0017ó\u0005;¿®Ì”Á\u000b²\u000e,«û™ÑžQêX\u0014ÿºÑŒÂ\u000e®\nhò«ÏÍ\u0006¾\u0004bðŠË—Û\u0017®Ug¾­Â‘Í\u0002¼\u000b'¿©ÏŠÌ\fò\u0006\u0026õ¯Û¼É\u000e±\n;¾®Å“\r®A,þ½ÍÀ\u0006¹Uy«ø’Û›R\u0001=Ѣחß\u0014ç@gö«ÑÊ\u0006¹\u0000fò¦Ê€ÄH´\u0001,ô²ü…Æ\u000b¸\u001cgõ¬ÓÍÅ\u0014ó\u000b'æ¤ÏŒÎ\u0003ç^r£û•Ô˜;³\u001f:þ§ÊÊG¾\u000e$ý¨Â€ÄM¼/ å¾Ó•Hò\b)ã¨Æ‚Ë\bó\f$ø©ÈÌÆ\t¹\n0άʏÊ\u0014ò\u000b.áäɐ\u0003²\u0018\u0026ý¥Â‡•Vç]y©þ–¿Á\u0002òS\bù¾×“Ü]ò@/ð¸Á†Î\u0003²A+ý£Àˆ€\u000e³\u000b-é•ÅŠÃ\u0002®@,÷º‰ÜI¹\u0000?ÿ¦Ì‚Ë]ìUz ò–Õó\t¸/ å¾Ó•Hò\b)ã¨Æ‚Ë\bó\f$ø©ÈÌÆ\t¹\n0άʏÊ\u0014ò\u000b.áäɐ\u0003²\u0018\u0026ý¥Â‡•Vç]y§ø¿Á\u0014\u0007\u003cåºÐـHº\u000e:ó¯Â‡ÀI¾\u0003!ò¡ŒŠÁ\u0003¸\u0017\u0017÷£Ï†ÜH¹\t8¿ ÐÍË\bª\u0001$þ«Çٞ]ï\\|§ÿÿæ'µ\u001b\u003cṙ̀\u0000¼\u001d*ô«ÇŒ\u0004±\u0006+úåʍË\u0002¥0.ø¦Æ€\u0003»\u001ffû¹‡À\u0010³\u0003'ð®™Ò•UèZ| –Í°ÊH­S\bù¾×“Ü]ò@/ð¸Á†Î\u0003²A+ý£Àˆ€\u000e³\u000b-é•ÅŠÃ\u0002®@,÷º‰ÜI¹\u0000?ÿ¦Ì‚Ë]ìUq¡ü›Ðó\t­\u001d'ü£Ð†\u0004¼\u0003$ó«Àˆ…4¸/ å¾Ó•Hò\b)ã¨Æ‚Ë\bó\f$ø©ÈÌÆ\t¹\n0άʏÊ\u0014ò\u000b.áäɐ\u0003²\u0018\u0026ý¥Â‡•VçVx§ÿš¿Á\u0015á@t¾öã‹Û\u0013­\u001cr¾åĂÝ\u0005¸\u000e,þäÀÆ\u0004¶@!ÿ®Æ›ð\u0001´\u0003-âåDžßI·\u001cfõ¥ÔÃ\b¼\u000br ð‘Ó›Uä_\u0014ÿÑ̓Há/ å¾Ó•Hò\b)ã¨Æ‚Ë\bó\f$ø©ÈÌÆ\t¹\n0άʏÊ\u0014ò\u000b.áäɐ\u0003²\u0018\u0026ý¥Â‡•VçWx¢ó—¿Á\bò\fg­åŸ£Ç\u0013©\u001f;«åŒ„Î\u0015¿\n)õ¥€Ã\u000e¾\u0004gø¤Ç†×8»\u0006$ô¹Œ‡É\u0017ó\u0005;¿®Ì”Á\u000b²\u000e,«û™Ñ_èX\u0014ÿ¥Œ€€[\u0007\u003cåºÐـHº\u000e:ó¯Â‡ÀI¾\u0003!ò¡ŒŠÁ\u0003¸\u0017\u0017÷£Ï†ÜH¹\t8¿ ÐÍË\bª\u0001$þ«Çٞ]ï]q§øÿÊHá/ å¾Ó•Hò\b)ã¨Æ‚Ë\bó\f$ø©ÈÌÆ\t¹\n0άʏÊ\u0014ò\u000b.áäɐ\u0003²\u0018\u0026ý¥Â‡•Vç]y©ý›¿Á\u0002\u0007\u003cåºÐـHº\u000e:ó¯Â‡ÀI¾\u0003!ò¡ŒŠÁ\u0003¸\u0017\u0017÷£Ï†ÜH¹\t8¿ ÐÍË\bª\u0001$þ«Çٞ]ï^~£ùÿõ\u0015\u0007\u003cåºÐـHº\u000e:ó¯Â‡ÀI¾\u0003!ò¡ŒŠÁ\u0003¸\u0017\u0017÷£Ï†ÜH¹\t8¿ ÐÍË\bª\u0001$þ«Çٞ]å_z¥üÿÝ[òS\bù¾×“Ü]ò@/ð¸Á†Î\u0003²A+ý£Àˆ€\u000e³\u000b-é•ÅŠÃ\u0002®@,÷º‰ÜI¹\u0000?ÿ¦Ì‚Ë]ìUz¡ø›Úž;³\u0000gòåŸÌ“'µ\u001b\u003cṙ̀\u0000¼\u001d*ô«ÇŒ\u0004±\u0006+úåʍË\u0002¥0.ø¦Æ€\u0003»\u001ffû¹‡À\u0010³\u0003'ð®™Ò•UïW}¦–ÍŒ€\u0004òS\bù¾×“Ü]ò@/ð¸Á†Î\u0003²A+ý£Àˆ€\u000e³\u000b-é•ÅŠÃ\u0002®@,÷º‰ÜI¹\u0000?ÿ¦Ì‚Ë]ìUz£ó•Ñó\t¸@tѢחß\u0014ç@gö«ÑÊ\u0006¹\u0000fò¦Ê€ÄH´\u0001,ô²ü…Æ\u000b¸\u001cgõ¬ÓÍÅ\u0014ó\u000b'æ¤ÏŒÎ\u0003ç^r£û›Ô—;³\n\bù¾×“Ü]ò@/ð¸Á†Î\u0003²A+ý£Àˆ€\u000e³\u000b-é•ÅŠÃ\u0002®@,÷º‰ÜI¹\u0000?ÿ¦Ì‚Ë]ìUz ü‘Ðó\t¯S\bù¾×“Ü]ò@/ð¸Á†Î\u0003²A+ý£Àˆ€\u000e³\u000b-é•ÅŠÃ\u0002®@,÷º‰ÜI¹\u0000?ÿ¦Ì‚Ë]ìUz¡øÐ—;³/ å¾Ó•Hò\b)ã¨Æ‚Ë\bó\f$ø©ÈÌÆ\t¹\n0άʏÊ\u0014ò\u000b.áäɐ\u0003²\u0018\u0026ý¥Â‡•Vç]x¥ÿ‘Óó\t\u0007\u003cåºÐـHº\u000e:ó¯Â‡ÀI¾\u0003!ò¡ŒŠÁ\u0003¸\u0017\u0017÷£Ï†ÜH¹\t8¿ ÐÍË\bª\u0001$þ«Çٞ]ï_}¢ý’¿Á'µ\u001b\u003cṙ̀\u0000¼\u001d*ô«ÇŒ\u0004±\u0006+úåʍË\u0002¥0.ø¦Æ€\u0003»\u001ffû¹‡À\u0010³\u0003'ð®™Ò•UíYx¤üÿï\u000f©\u001b8âðŒÌÈ\u0006¯\r-ð®ÌÍÌ\u000b´\f#¾£Í‡Ê\u001f‚\t!ý¯ÐÌË\u0001­A\"âänjØ\t±\u0000)õð’ٝWë_~¡–ÍÁÒKÿ\u001cy£ùÙÔE®Mr¡æ•]ÿ]x ú“ÒŸVÿ\u0012d³¹’ОEç\u0014jâè™ÓƒE«MrÊèÀÎ\u0014®Md³¦ÂÈE€\u0012d³¹’ÐœEç\u0014jâè™ÓƒE«Mr³‘́Å\u0002¾\u001bhԲ׆Ý\t¼\u0003\u0015³·ÁÜVîYj«±]íCjç虗Ý\u0012¸\u0012d³¹’×—Eç\u0014jâè™ÓƒE«Mr³¬ÖÌ\u0013´\u0000\u0026±¨ÊËOôO3ͤƒÃG†\u0001)å£Õ†\u0004²\u000b-̖͞\u001añM; þšÁ•\u001cÿ\u001cj«ç’ύ\u0011ÿU\u0026ä¦ÏžƒE®^}¡è™˜\u0014ÿUx½èÕÁ•\u001cÿ\u0000=å¯Ñ´Æ\u0003©\u0007j«û‘ÛŸKÿ\u0000=å¯Ñ«Ê\u000eº\u0007\u003c³ð’ӝSñM!ÿ¤Æ‘ø\u000e¹\u001b ³ð’Ñ—WñM!ÿ¤Æ‘ç\u0002´\b åè™ÒŸUé\u00125½èÐҚPÿU3³¹ÙŸKÿ\u0019j«±‚Ø\u0002®\u0000%ø¿ÎÁ•\u0001¼\u0003;ô恀Ê\u0001ÿU.ð¦Ð†ƒE¾\n.â¢Â‘ßEç\t)ý¹Æύ\u0004²\u000e+ù ÐÁ•\u0001¼\u0003;ô恅Â\u000e³\n:³ðłÃ\u0014¸Cjö¯ÁÁ•\u0001¼\u0003;ô恍Æ\u0000µ\u001b%ð¸Æ‰ÜEç\t)ý¹Æύ\u0017µ\u000e\u0026å¥Î‚ÜEç\t)ý¹Æύ\u0017µ\u000e\u0026å¥Î‰ÜEç\t)ý¹Æύ\u0015µ\u0006\u0026þ虅Î\u000b®\nd³¹ÆÊ\t´\u001a%³ðłÃ\u0014¸Cjæ¯Á‡Ý\u000e«\n:ø¥ÙÉ\u0006±\u001c-½èԆÍ\u0003¯\u0006\u003eô¸ÙÉ\u0006±\u001c-½èˆÎ\u0003±\n;â•À‹Ý\b°\nj«¬ÂÜ\u0002 \u0012d³¹’ӝEç\u0014jâè™ÓƒE«Mr÷«ÏÊ\u001añM; û›Á•\u001cÿ\u001cj«úÁÙEç\u001b:ä¯Þύ\u0014ì]x³ðØÁÜEç_d³¼ÙÉ\u0006±\u001c-ì恐žTíMrêèÐÁ•WñM\u003e³ðøÁÉ\u0012³\f\u003cø¥ÍÁƒE»\u001a\u0026ò¾ÊŒÁE€\u0012d³¹’НEç\u0014jâè™ÓƒE«Mr³¬ÖÌ\u0013´\u0000\u0026±©ÏŒÜ\u0002õFhê–ÍÏGý4\u0026ð¾Ê•ÊG¾\u0000,ô—ÿÒE CjâûÖ]¦M;³ð“ύ\u0011ÿUzì恐žTäMrêèÐÁ•WñM\u003e³ðבÚ\u0002 Cjâû—э]¦M;³ð“ύ\u0011ÿU.ð¦Ð†ÒKÿ\u001cy¥þÙÔE®Mr¼øÁÙEç\u0001=ý¦Þύ\u0014ì[}³ðØÁÜEç_d³¼ÙôE«\u0006*ã«×†Kÿ\u0005)ç«æÎ\u0005±\n,³æ„Ê\u0013š\u000e%ôºÂ‡ÜEñM:ô»Ö†Ü\u0013\u0026\f؋À€Ê\u0014®Md³§Ì™è\u0002©:;ô¸î†Ë\u000e¼Md³¹ÆË%¸\u000e+þ¤Ï\u0015¸\u001e=ô¹×®Ê\u0003´\u000e\u0003ô³ðšÜ\u0013¸\u0002\tò©ÆÜEñM/ô¾â–Û\b­\u0003)èšÌÆ\u0004¤Md³¸Æ„Æ\u0014©\n:Á¸Ì—À\u0004²\u0003\u0000ð¤ÇÊ\u0015ÿCjå«ÊÛ\"³\u000e*ý¯ÇÁƒE“\u000e\u003eø­Â—À\u0015ÿ25½èÐқQÿU3³¹ÙŸKÿ\u0019j«¬ÂÜ\u0002 Cjâû–ҍ]¦M;³ðŽÒƒE«Mrÿ¿ÏÒKÿ\u001cy¤øÙÔE®Mr¡æ•]ï\u0012d³¹’ÖœEç\u0014jâè™ÓƒE«Mrå¸Ö†ÒKÿ\u001cy¤ÿÙÔE®Mr¡æ•]¦\u00125½èÐҚQÿU3³¹ÙŸKÿ\u0019j«‘þžƒE®^}¨è™˜\u0014ÿUx½èÕÁ•\u0001¼\u0003;ô·ÁÜVë]j«±]íCjç虅Î\u000b®\n5½èÐҙTÿU3³¹Ù‚VñM\u003e³ð͖Ã\u000b Cjâû•Ö]¦M;³ð“ύ\u0011ÿU3³£Ð·Ý\u0012®\u001b-õ虅Î\u000b®\n5ì恐žQëMrêèÐÁ•WñM\u003e³ðØÁÃEç[y½èÓÁ•\u003c¦M!³ð‘ύ\tÿUjö¯×¤Î\n¸\u001f)õ¹žƒ\u001cÿ\u0006j«ø”ύ\tÿUjæ¯Á‡Ý\u000e«\n:³·˜\u000eÿU{©æ]ÿ\u0000\u0026ݣ͆\u001a€\u00125½èÐڛEç\u0014jâè™Î›Kÿ\u0019j«±–]ÿ_} ¨ÐÍUðV{ðÿŽÚ›R¾B,¡òÎš\u0001¹Z~𯚀˜\u0004¼Md³¯ÙôE¾\u000e\u0026õ£Ç‚Û\u0002ç_h êö§ÿGï^z£ø–ÑšSîO}÷ò›ÓŸ\u0006ïBxð©ÁΛUé\fe©û—Ñ‚^»[£þŀÉWë\nfý¥À‚ÃGë_{¤ûƒ—Ö\u0017ý\u0007'⾁ύ\u0004¼\u0001,ø®Â—Ê]ìOy±žà³Uì_}¤ø—ט^ýZ.©ò“ÓÎUð_)ò¨Ž×S¾Bp þ‘Ζ\u0001éXz¥¬À…ŸQ¸A$þ©Â^ý\u001b1áêˌÜ\u0013ý\u001b+á¾Ú“ÊG¼\f\u003cø¼ÆÁòKÿ\u001cj«‘þžÒKÿ\u001cy§þÙÔE®Mr¼øÁÙEç\u0001=ý¦Þύ\u000b¯MrʗÁÚ\u0015±Mr³¢×—ß\u0014ç@gö«ÑÊ\u0006¹\u0000fò¦Ê€ÄHÿCjâÿ–Á•\u001cÿ\u001cj«ç’ύ\u0011ÿU\u0026ä¦ÏžÒ"}},"response":{"raw":"HTTP/1.1 404 Not Found\r\nDate: Sat, 21 Feb 2026 21:50:24 GMT\r\nServer: Apache\r\nContent-Length: 355\r\nKeep-Alive: timeout=5, max=95\r\nConnection: Keep-Alive\r\nContent-Type: text/html; charset=iso-8859-1\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":355,"size_decoded":0,"mime_type":"text/html; charset=iso-8859-1","magic":"HTML document, ASCII text","md5":"4525b2d648f7c457a689fd96421783a5","sha1":"11bfe30ce44585a15a38e86bc094224ddfe2c08e","sha256":"cc0b4e42510d49c6decd464123ecf3b14ae9b47f9b4ed2ee64893e2d6520a264","sha512":"94e3e8246cf38ff7740e51aa115c8c455b14f78e672c2686b782c0ce30b6fa2dbd91a78b29b3964d9c0414aabd4b9391fd5db326665e25b4b8e73dae60ffe979","ssdeep":"","tlshash":"71e0c04f4057b3474011a2907dc01291e505236b38a152f93ac09467500897dc4aa2dd","first_seen":"2025-12-09T03:51:58.5943Z","last_seen":"2026-06-08T11:44:51.543966Z","times_seen":39269,"resource_available":true,"data":null}},"time_used":24,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-21","alert":"Phishing Block","trigger":"garbeado.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-21","alert":"Sinkholed","trigger":"garbeado.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-21","alert":"Sinkholed","trigger":"garbeado.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-21","alert":"Sinkholed","trigger":"garbeado.click","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - PayPal","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with PayPal phishing","tags":["paypal","phishing","financial"],"meta":null}]}},{"url":{"schema":"https","addr":"garbeado.click/index_files/ngrlCaptcha.min.js.download","fqdn":"garbeado.click","domain":"garbeado.click","tld":"click"},"ip":{"addr":"185.221.216.117","port":443,"asn":393960,"as":"HOST4GEEKS-LLC","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://garbeado.click/","date":"2026-02-21T21:50:23.269Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"garbeado.click","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Feb 2026 05:23:17 GMT","end":"Tue, 05 May 2026 05:23:16 GMT"},"fingerprint":{"sha1":"D8:DB:B4:49:42:CD:44:B1:3D:35:97:AF:DD:B6:58:E1:D0:F9:D4:3B","sha256":"87:0C:08:40:8F:7C:89:23:47:ED:CB:35:4D:05:EE:DB:86:CC:CF:BA:B7:30:86:90:FC:B3:68:90:C9:BF:14:57"}}},"request":{"raw":"GET /index_files/ngrlCaptcha.min.js.download HTTP/1.1\r\nHost: garbeado.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://garbeado.click/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sat, 21 Feb 2026 21:50:23 GMT\r\nServer: Apache\r\nLast-Modified: Tue, 13 May 2025 13:12:42 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 23125\r\nKeep-Alive: timeout=5, max=100\r\nConnection: Keep-Alive\r\nContent-Type: text/javascript\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":23125,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (23125), with no line terminators","md5":"243eda4543153156c0ae9df9e8c5833d","sha1":"dfa372f408889fa3f4a6ca29847f4a379ed246a8","sha256":"d81bfefd8585b694222d3e94e9dee5d7935049c65355f9fd096800301d51545b","sha512":"bc2e170a94bb45624ed4392b2049fa017411c244dc765b5e862093e2264ec9580752a29a86e6739e2ecba2f16b6880fdbf9ab1ecb6647e739b391b46a5bf9aa9","ssdeep":"384:v0Ap5n5P9Nxf4hfWGwR+EkE+n4QnZ/X2NWKW4BCCMHxDkZbaXpweyGobcUWfgMcC:J5n51f4hfWGwR+Tnn4QnZ/b3J7yGQMUE","tlshash":"faa2c6d9378074b30bdb22ba712fa247f1b2459aac4dd050a614dcf12c7ceda8516fad","first_seen":"2024-06-05T17:44:09Z","last_seen":"2026-06-07T20:24:04.996399Z","times_seen":1160,"resource_available":true,"data":null}},"time_used":216,"timings":{"blocked":77,"dns":1,"connect":27,"send":0,"wait":29,"receive":24,"ssl":48},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-21","alert":"Phishing Block","trigger":"garbeado.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-21","alert":"Sinkholed","trigger":"garbeado.click","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-21","alert":"Sinkholed","trigger":"garbeado.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-21","alert":"Sinkholed","trigger":"garbeado.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - PayPal","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with PayPal phishing","tags":["paypal","phishing","financial"],"meta":null}]}},{"url":{"schema":"https","addr":"garbeado.click/index_files/contextualLoginElementalUIv5_1.css","fqdn":"garbeado.click","domain":"garbeado.click","tld":"click"},"ip":{"addr":"185.221.216.117","port":443,"asn":393960,"as":"HOST4GEEKS-LLC","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://garbeado.click/","date":"2026-02-21T21:50:23.272Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"garbeado.click","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Feb 2026 05:23:17 GMT","end":"Tue, 05 May 2026 05:23:16 GMT"},"fingerprint":{"sha1":"D8:DB:B4:49:42:CD:44:B1:3D:35:97:AF:DD:B6:58:E1:D0:F9:D4:3B","sha256":"87:0C:08:40:8F:7C:89:23:47:ED:CB:35:4D:05:EE:DB:86:CC:CF:BA:B7:30:86:90:FC:B3:68:90:C9:BF:14:57"}}},"request":{"raw":"GET /index_files/contextualLoginElementalUIv5_1.css HTTP/1.1\r\nHost: garbeado.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://garbeado.click/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sat, 21 Feb 2026 21:50:23 GMT\r\nServer: Apache\r\nLast-Modified: Tue, 13 May 2025 13:12:42 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 210232\r\nKeep-Alive: timeout=5, max=98\r\nConnection: Keep-Alive\r\nContent-Type: text/css\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":210232,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (586)","md5":"00b7fa9f4bb0cc0f1bab26c3f83aed74","sha1":"1680f74c4e640e91aaea8c6ae25cf2f93e3fc3c7","sha256":"b08097e48cd4ccc47578fa909a7fbf13dcd028ae3f67366e661f91ac80f06aa1","sha512":"690ecfcc307a5bd4d25a58662cb02fd31398fa0f02db55fec37c30410f6820a45d6a566aae79fd1967bad05f45021b5b4d8ffb8c119dbd5c0cb9837fc1d93e7c","ssdeep":"6144:gwI6EdhKNeI6E/I6EtI6EAI6EJI6ECLQdb6HrImfh46I6EzI6ElI6Ea6I6EXI6Ec:gwI6EdhKNeI6E/I6EtI6EAI6EJI6ECLj","tlshash":"eb24a4ea9ae50501b91bc46075667b90a32d8003c94fdcbdbbe5306cefc96d992b334d","first_seen":"2025-05-11T17:43:44.161241Z","last_seen":"2026-02-22T00:14:23.740026Z","times_seen":4,"resource_available":false,"data":null}},"time_used":100,"timings":{"blocked":69,"dns":0,"connect":0,"send":0,"wait":24,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-21","alert":"Sinkholed","trigger":"garbeado.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-21","alert":"Phishing Block","trigger":"garbeado.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-21","alert":"Sinkholed","trigger":"garbeado.click","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-21","alert":"Sinkholed","trigger":"garbeado.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - PayPal","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with PayPal phishing","tags":["paypal","phishing","financial"],"meta":null}]}}]}