{"report_id":"0d59a498-a62e-45c2-86ca-3c905c316ada","version":0,"status":"done","tags":[],"date":"2026-08-15T07:31:52Z","url":{"schema":"https","addr":"lwemuhpbrhwujqu7x-ugk3vphvutaw96z0lcdyzswo.vercel.app/gkjrd6sdgb32dfhnysr5b.html","fqdn":"lwemuhpbrhwujqu7x-ugk3vphvutaw96z0lcdyzswo.vercel.app","domain":"lwemuhpbrhwujqu7x-ugk3vphvutaw96z0lcdyzswo.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.3","port":0,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"15uyjwqr5yzsle4mkathv9uut7onloux3fb41-cg14v.vercel.app/10007745768379/trnbugwqA9454m2fLoBp.html","fqdn":"15uyjwqr5yzsle4mkathv9uut7onloux3fb41-cg14v.vercel.app","domain":"15uyjwqr5yzsle4mkathv9uut7onloux3fb41-cg14v.vercel.app","tld":"vercel.app"},"title":"Advertising Policies Help","dom":{"size":62713,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (10728)","md5":"1a5c311fcd047e89f326f5f2b6571c4a","sha1":"da1efac47762cdea89503b863890892c037ec70f","sha256":"7948577fb0ce74d54cc1910f5880dce6ae30d2b8e8b52eb3a5ed5386bea88744","sha512":"641a16e814cc9d635ff7883f2b6945ebd8f0adc6f8baaafb39de222abfe5e08720778676172f83b94311a94e5938a08f445193b3c4aaaded2f3a7253d91299f9","ssdeep":"768:kJ2lCHX1gWFinXN9gJleH+qpBaDQl13qF2hnjh:k/eH+qpUDQl13Fh","tlshash":"795384b252f8227f506382c1aa275b0a3be6e997e622456573bd17b41fe7cd3f807014","dom_hash":"domhash7307c7dbb91b42e321e839a30874780f","first_seen":"2026-08-14T10:32:59.788824Z","last_seen":"2026-08-15T09:09:05.532105Z","times_seen":9,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"lwemuhpbrhwujqu7x-ugk3vphvutaw96z0lcdyzswo.vercel.app/gkjrd6sdgb32dfhnysr5b.html","fqdn":"lwemuhpbrhwujqu7x-ugk3vphvutaw96z0lcdyzswo.vercel.app","domain":"lwemuhpbrhwujqu7x-ugk3vphvutaw96z0lcdyzswo.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.3","port":0,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"tags":["openphish"],"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-09-19T07:31:52Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-15","alert":"Sinkholed","trigger":"lwemuhpbrhwujqu7x-ugk3vphvutaw96z0lcdyzswo.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"ipapi.co","ip":{"addr":"172.67.69.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2016-04-19","domain_rank":7936,"first_seen":"2017-01-31T09:07:01Z","last_seen":"2026-08-13T02:30:49.996096Z","alert_count":0,"request_count":1,"received_data":2570,"sent_data":534,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"flagcdn.com","ip":{"addr":"104.21.31.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2020-04-05","domain_rank":30920,"first_seen":"2020-04-05T08:17:33Z","last_seen":"2026-08-14T07:58:13.761388Z","alert_count":0,"request_count":1,"received_data":970,"sent_data":574,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"cdn.jsdelivr.net","ip":{"addr":"151.101.1.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2012-05-16","domain_rank":1678,"first_seen":"2012-09-30T00:15:09Z","last_seen":"2026-08-09T23:02:50.69879Z","alert_count":0,"request_count":1,"received_data":81457,"sent_data":552,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"15uyjwqr5yzsle4mkathv9uut7onloux3fb41-cg14v.vercel.app","ip":{"addr":"64.29.17.131","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-08-15T07:31:53.558574Z","last_seen":"2026-08-15T07:31:53.558574Z","alert_count":0,"request_count":14,"received_data":839375,"sent_data":8653,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]},{"name":"Bootstrap:5.3.2","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]}]},{"fqdn":"lwemuhpbrhwujqu7x-ugk3vphvutaw96z0lcdyzswo.vercel.app","ip":{"addr":"216.198.79.195","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-08-15T07:31:53.553669Z","last_seen":"2026-08-15T07:31:53.553669Z","alert_count":4,"request_count":4,"received_data":21715,"sent_data":2252,"comment":"","tags":null,"fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"15uyjwqr5yzsle4mkathv9uut7onloux3fb41-cg14v.vercel.app/10007745768379/flow-form.js","fqdn":"15uyjwqr5yzsle4mkathv9uut7onloux3fb41-cg14v.vercel.app","domain":"15uyjwqr5yzsle4mkathv9uut7onloux3fb41-cg14v.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.131","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"e2e3cf77d9c15da9358037e2e40b7838","sha1":"78638840f54fb2889314ac59a29226fb4a073601","sha256":"45be6626e07200f8147c5bc1b4d4335a68ea264dc3a8adc762a1059cb65e4ed4","sha512":"21ba4eb2a19b477541a8a44a599b732f5b65b61703f04d3422271cd703e64268fef70486980085147072e5a63c79010e664eddad29b9105cd8718d932c9f8b0c","ssdeep":"768:rRKBx9s4QVFZtzh/1rL7KroOpwxvrXS8Isd4gNIFS/0VY7g7TAbQHnsHqV2uz2/e:Q392iroehsdLaY7g7TAbQHnsHqV2uz2W","tlshash":"eef2a36d95f725a69ebb727a5bbf5205327090074900cd007c5c93481fa8c6ba7fabec","size":36747,"data":"","first_seen":"2026-08-14T10:32:59.792314Z","last_seen":"2026-08-15T09:09:05.53741Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lwemuhpbrhwujqu7x-ugk3vphvutaw96z0lcdyzswo.vercel.app/gkjrd6sdgb32dfhnysr5b","fqdn":"lwemuhpbrhwujqu7x-ugk3vphvutaw96z0lcdyzswo.vercel.app","domain":"lwemuhpbrhwujqu7x-ugk3vphvutaw96z0lcdyzswo.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.195","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"66a48a9333c541eae8f4990e65c8562c","sha1":"53fc3092468ea1b45a0cb11c286e2fd4cc09d490","sha256":"6d7a411ff5b23f4711e544183d1feb2550315b31a0b9755e7f06b61a76cff26b","sha512":"1e4fbf94eddde25371b4c87c6895eff687a50af26ef943f1a395243a0e10caa288df67d3e59d809949efda881ad9a5c5d74c031c35a7a57c33002eaf42f2c1a8","ssdeep":"48:KmYL/1p6FyZscJtX5eTNEf7X/hUdEGwoY3+HHtrbI2kxp+4A:KRkUscJtaNQ7X/I7LtrbIzxc4A","tlshash":"74d177f344c594a65dcb948d62aa370cbbbfc70a9c223962916f186813a79d7ec3471c","size":6536,"data":"","first_seen":"2026-08-15T07:31:25.040719Z","last_seen":"2026-08-15T07:31:57.034517Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"15uyjwqr5yzsle4mkathv9uut7onloux3fb41-cg14v.vercel.app/fghj354erwgdfsahaerdt.html","fqdn":"15uyjwqr5yzsle4mkathv9uut7onloux3fb41-cg14v.vercel.app","domain":"15uyjwqr5yzsle4mkathv9uut7onloux3fb41-cg14v.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.131","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"5d947972abaae02a41f58470be4f2d62","sha1":"4307410e356df549823d365ed104f7a7e5f37ac4","sha256":"afefa0b0be18cfc85f1593f02dadc69f091be0a78ff237b16b99795c0ac7d240","sha512":"8cbe70afa3555193b4756c25ab54e0adcd4963b4ec2377a7919507f287fffa6e08d981a2828176e1e945bbdac0f4ce5c19a24bf28fa80d783a51f0bf8fe79e74","ssdeep":"","tlshash":"4cb0929904e22106169e40a6467a3586247331ba96898a701849c6604e512af92227cc","size":108,"data":"","first_seen":"2026-08-14T17:39:52.334766Z","last_seen":"2026-08-15T07:31:57.035091Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"15uyjwqr5yzsle4mkathv9uut7onloux3fb41-cg14v.vercel.app/styles/jquery.min.js.download","fqdn":"15uyjwqr5yzsle4mkathv9uut7onloux3fb41-cg14v.vercel.app","domain":"15uyjwqr5yzsle4mkathv9uut7onloux3fb41-cg14v.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.131","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"2c872dbe60f4ba70fb85356113d8b35e","sha1":"ee48592d1fff952fcf06ce0b666ed4785493afdc","sha256":"fc9a93dd241f6b045cbff0481cf4e1901becd0e12fb45166a8f17f95823f0b1a","sha512":"bf6089ed4698cb8270a8b0c8ad9508ff886a7a842278e98064d5c1790ca3a36d5d69d9f047ef196882554fc104da2c88eb5395f1ee8cf0f3f6ff8869408350fe","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKr:sHNwcv9VBQpLl88SMBQ47GKr","tlshash":"3983f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","size":87533,"data":"","first_seen":"2023-08-31T16:03:19Z","last_seen":"2026-08-15T08:47:05.950925Z","times_seen":185785,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"15uyjwqr5yzsle4mkathv9uut7onloux3fb41-cg14v.vercel.app/10007745768379/trnbugwqA9454m2fLoBp.html","fqdn":"15uyjwqr5yzsle4mkathv9uut7onloux3fb41-cg14v.vercel.app","domain":"15uyjwqr5yzsle4mkathv9uut7onloux3fb41-cg14v.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.131","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"eee434d6a953ee74829b86d6471bd9ac","sha1":"8f705426f3982f3424c7f52c50b431303ab94cb2","sha256":"80c9f7ba05b21470ab6d802902378e4208cd38408de4c61a4f9ec9f08ded7934","sha512":"0ab231ae28ab10f68aff12588c632a195702338557bd4cd4bbb5e9608e10723e12079e6eebba6dbf874e8a368c89c273a0ef8289396542015c8a98e87b363bc0","ssdeep":"","tlshash":"c1a00457504015400577d557d305f51df143551d0ddc47d5c5044045151c15745345fc","size":74,"data":"","first_seen":"2026-08-14T10:32:59.813637Z","last_seen":"2026-08-15T09:09:05.549646Z","times_seen":15,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/bootstrap@5.3.2/dist/js/bootstrap.bundle.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.1.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"6baf57f25796c332144ed58a2a0cd9ee","sha1":"f7fd0f3dc84b2cf93bf81e832505a673f354e0a3","sha256":"82f64f62bb03c1bc1824b0f9c9e05f70dba33e146818e63cdf5c306c8cf3dedd","sha512":"5ff6240d9ca34dfe30c9cd95cb5e981823c7c0063cad9258f8f3a0a24663401da684844524272410673a6325fd78db0f7e7d0fcd3844b8db3eb9aa2613908ee8","ssdeep":"1536:Qmw0iELO+TBR2t472RirWyKsVfK5GEfy3YJtCRv/45wZbqbXZTbYWU178:VwXza3YCl45wZODZTbYR8","tlshash":"cc73c5593244b4730ade85b68037430bf2265998b24b812cb57cadde2a7dcc67277f78","size":80663,"data":"","first_seen":"2023-09-18T01:21:14Z","last_seen":"2026-08-15T07:49:13.250216Z","times_seen":21376,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"15uyjwqr5yzsle4mkathv9uut7onloux3fb41-cg14v.vercel.app/img/ndtsbv.png","fqdn":"15uyjwqr5yzsle4mkathv9uut7onloux3fb41-cg14v.vercel.app","domain":"15uyjwqr5yzsle4mkathv9uut7onloux3fb41-cg14v.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.131","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://15uyjwqr5yzsle4mkathv9uut7onloux3fb41-cg14v.vercel.app/10007745768379/trnbugwqA9454m2fLoBp.html","date":"2026-08-15T07:31:30.611Z","timestamp":1786779090611,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 13:27:57 GMT","end":"Sat, 26 Sep 2026 13:27:56 GMT"},"fingerprint":{"sha1":"67:7E:08:96:CE:36:50:12:25:03:0A:77:67:C2:A8:60:CD:38:21:41","sha256":"EE:54:CB:11:F1:6C:C3:11:B3:AC:BA:E5:7F:8F:BB:03:F3:38:C1:B2:A2:0D:E7:27:22:C3:EA:FD:0D:AE:01:40"}}},"request":{"raw":"GET /img/ndtsbv.png HTTP/1.1\r\nHost: 15uyjwqr5yzsle4mkathv9uut7onloux3fb41-cg14v.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://15uyjwqr5yzsle4mkathv9uut7onloux3fb41-cg14v.vercel.app/10007745768379/trnbugwqA9454m2fLoBp.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 29921\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"ndtsbv.png\"\r\ncontent-type: image/png\r\ndate: Sat, 15 Aug 2026 07:31:30 GMT\r\netag: \"81bb5cf1e451109cf0b1868b2152914b\"\r\nlast-modified: Fri, 14 Aug 2026 23:12:48 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::24xnq-1786779090611-be3ab7a7695f\r\ncontent-length: 42676\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":42676,"size_decoded":43216,"mime_type":"image/png","magic":"PNG image data, 1200 x 1200, 8-bit/color RGBA, non-interlaced","md5":"81bb5cf1e451109cf0b1868b2152914b","sha1":"b70017639afc079394be1ea8625f7c4beb44d617","sha256":"676c83478e410d324fe56aca428d3305505732c648667b22e15c8222117c75e6","sha512":"1782966b78f57cc91392f3ff03f05d37e0a5fd8b04b0997b2ef708d13c162ea4aad607e7705a36e0539d6a6b60337432ef271bff062f7170018b42c9b8b81de6","ssdeep":"768:QJ6R1m5mLWd4WdvyQqjv9YRNt2ZDmzqSqBoruj6f3drrFpY85JW81Cl1xB+aArel:QJ41emLWxdv7C8Nt2UzqSuu46v9rvY8I","tlshash":"b613f1da546bcdfec2f950b418ffe653f43ad07b1a8c446fe644eca2ec518a024e2641","first_seen":"2024-01-09T09:55:04Z","last_seen":"2026-08-15T09:09:05.548663Z","times_seen":15810,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lwemuhpbrhwujqu7x-ugk3vphvutaw96z0lcdyzswo.vercel.app/gkjrd6sdgb32dfhnysr5b.html","fqdn":"lwemuhpbrhwujqu7x-ugk3vphvutaw96z0lcdyzswo.vercel.app","domain":"lwemuhpbrhwujqu7x-ugk3vphvutaw96z0lcdyzswo.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.195","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-08-15T07:31:22.648Z","timestamp":1786779082648,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 13:27:57 GMT","end":"Sat, 26 Sep 2026 13:27:56 GMT"},"fingerprint":{"sha1":"67:7E:08:96:CE:36:50:12:25:03:0A:77:67:C2:A8:60:CD:38:21:41","sha256":"EE:54:CB:11:F1:6C:C3:11:B3:AC:BA:E5:7F:8F:BB:03:F3:38:C1:B2:A2:0D:E7:27:22:C3:EA:FD:0D:AE:01:40"}}},"request":{"raw":"GET /gkjrd6sdgb32dfhnysr5b.html HTTP/1.1\r\nHost: lwemuhpbrhwujqu7x-ugk3vphvutaw96z0lcdyzswo.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 308 \r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-type: text/html\r\ndate: Sat, 15 Aug 2026 07:31:22 GMT\r\nlocation: /gkjrd6sdgb32dfhnysr5b\r\nrefresh: 0;url=/gkjrd6sdgb32dfhnysr5b\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-id: arn1::fn8fj-1786779082684-1e911aad6556\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"308","status_text":"Permanent Redirect","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-15T08:46:19.269091Z","times_seen":17900155,"resource_available":true,"data":null}},"time_used":45,"timings":{"blocked":-1,"dns":4,"connect":1,"send":0,"wait":11,"receive":0,"ssl":29},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-15","alert":"Sinkholed","trigger":"lwemuhpbrhwujqu7x-ugk3vphvutaw96z0lcdyzswo.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"15uyjwqr5yzsle4mkathv9uut7onloux3fb41-cg14v.vercel.app/img/fdashhq3a54h.mp4","fqdn":"15uyjwqr5yzsle4mkathv9uut7onloux3fb41-cg14v.vercel.app","domain":"15uyjwqr5yzsle4mkathv9uut7onloux3fb41-cg14v.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.131","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://15uyjwqr5yzsle4mkathv9uut7onloux3fb41-cg14v.vercel.app/fghj354erwgdfsahaerdt.html","date":"2026-08-15T07:31:24.402Z","timestamp":1786779084402,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 13:27:57 GMT","end":"Sat, 26 Sep 2026 13:27:56 GMT"},"fingerprint":{"sha1":"67:7E:08:96:CE:36:50:12:25:03:0A:77:67:C2:A8:60:CD:38:21:41","sha256":"EE:54:CB:11:F1:6C:C3:11:B3:AC:BA:E5:7F:8F:BB:03:F3:38:C1:B2:A2:0D:E7:27:22:C3:EA:FD:0D:AE:01:40"}}},"request":{"raw":"GET /img/fdashhq3a54h.mp4 HTTP/1.1\r\nHost: 15uyjwqr5yzsle4mkathv9uut7onloux3fb41-cg14v.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nRange: bytes=0-\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://15uyjwqr5yzsle4mkathv9uut7onloux3fb41-cg14v.vercel.app/fghj354erwgdfsahaerdt.html\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 206 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 30467\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"fdashhq3a54h.mp4\"\r\ncontent-range: bytes 0-145289/145290\r\ncontent-type: video/mp4\r\ndate: Sat, 15 Aug 2026 07:31:24 GMT\r\netag: \"5a2dbf8142fe6692b61417bb7dd12219\"\r\nlast-modified: Fri, 14 Aug 2026 23:03:37 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::565xc-1786779084403-b3219488706b\r\ncontent-length: 145290\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":145290,"size_decoded":145875,"mime_type":"video/mp4","magic":"ISO Media, MP4 Base Media v1 [ISO 14496-12:2003]","md5":"5a2dbf8142fe6692b61417bb7dd12219","sha1":"157286e49c8be3ed6b18f557cb05eea8c599e3af","sha256":"7098556eb307507b9d9646384e59c5ec2cdd3c621b21d2378fad3860153d10b0","sha512":"5d1eb558b7dd44d4c1025488a8b91067b8ff4d98bd7fa20499690e11a503355e692615926cd6c277b8e05c1fea3785f3f1a4caad5fe4e402224a6087a0cae965","ssdeep":"3072:9p94clqWIyeeQ3jMiYkGdafhcnFtqjmvpVbEYq8EDDsyRtelu:9MmLLeeuMiTG2+Ftqyx7qns8telu","tlshash":"6ee30291d3eb340ace3c32b956cc63a7b322f585e54a2fdb0584610bdf6b15a5d0ed82","first_seen":"2026-05-10T12:34:58.854575Z","last_seen":"2026-08-15T07:47:24.283029Z","times_seen":7,"resource_available":false,"data":null}},"time_used":36,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":27,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"15uyjwqr5yzsle4mkathv9uut7onloux3fb41-cg14v.vercel.app/styles/bootstrap.min.css","fqdn":"15uyjwqr5yzsle4mkathv9uut7onloux3fb41-cg14v.vercel.app","domain":"15uyjwqr5yzsle4mkathv9uut7onloux3fb41-cg14v.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.131","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://15uyjwqr5yzsle4mkathv9uut7onloux3fb41-cg14v.vercel.app/10007745768379/trnbugwqA9454m2fLoBp.html","date":"2026-08-15T07:31:30.388Z","timestamp":1786779090388,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 13:27:57 GMT","end":"Sat, 26 Sep 2026 13:27:56 GMT"},"fingerprint":{"sha1":"67:7E:08:96:CE:36:50:12:25:03:0A:77:67:C2:A8:60:CD:38:21:41","sha256":"EE:54:CB:11:F1:6C:C3:11:B3:AC:BA:E5:7F:8F:BB:03:F3:38:C1:B2:A2:0D:E7:27:22:C3:EA:FD:0D:AE:01:40"}}},"request":{"raw":"GET /styles/bootstrap.min.css HTTP/1.1\r\nHost: 15uyjwqr5yzsle4mkathv9uut7onloux3fb41-cg14v.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://15uyjwqr5yzsle4mkathv9uut7onloux3fb41-cg14v.vercel.app/10007745768379/trnbugwqA9454m2fLoBp.html\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\nage: 31273\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"bootstrap.min.css\"\r\ncontent-encoding: br\r\ncontent-type: text/css; charset=utf-8\r\ndate: Sat, 15 Aug 2026 07:31:30 GMT\r\netag: W/\"eb810b53e9666d5788b902bf6c7ff6cb\"\r\nlast-modified: Fri, 14 Aug 2026 22:50:16 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::24xnq-1786779090390-b1dc4e60490a\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":185725,"size_decoded":27686,"mime_type":"text/css; charset=utf-8","magic":"Unicode text, UTF-8 text, with very long lines (334)","md5":"eb810b53e9666d5788b902bf6c7ff6cb","sha1":"8b671ee502dfcd4298d5bf727253f71f0d98c6e9","sha256":"66010e637f0e9c997d58b946d60ee1710797b080dc9993b926730057f43bf4dd","sha512":"9ce3c3d41d6ff63f41de4528fd7fa6aae849b187f44447fac8a6f92aab6cc2e135b417f2c118702713554c3d8eead8652def4bf8eaa827370adbf3419d7d3bf2","ssdeep":"1536:j9o0pe3VX8IFqCvnUEE9RMPenjyCFeDm9M5FKBnpNfL:jRe3CxM5FKBnpNfL","tlshash":"77045499fdf128085a178558a443bbf97b2d1085b709ee79f4a33651e3883c1e4f3e89","first_seen":"2026-08-13T03:10:00.922573Z","last_seen":"2026-08-15T09:09:05.533747Z","times_seen":10,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"15uyjwqr5yzsle4mkathv9uut7onloux3fb41-cg14v.vercel.app/img/gdrebrdf.png","fqdn":"15uyjwqr5yzsle4mkathv9uut7onloux3fb41-cg14v.vercel.app","domain":"15uyjwqr5yzsle4mkathv9uut7onloux3fb41-cg14v.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.131","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://15uyjwqr5yzsle4mkathv9uut7onloux3fb41-cg14v.vercel.app/10007745768379/trnbugwqA9454m2fLoBp.html","date":"2026-08-15T07:31:30.613Z","timestamp":1786779090613,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 13:27:57 GMT","end":"Sat, 26 Sep 2026 13:27:56 GMT"},"fingerprint":{"sha1":"67:7E:08:96:CE:36:50:12:25:03:0A:77:67:C2:A8:60:CD:38:21:41","sha256":"EE:54:CB:11:F1:6C:C3:11:B3:AC:BA:E5:7F:8F:BB:03:F3:38:C1:B2:A2:0D:E7:27:22:C3:EA:FD:0D:AE:01:40"}}},"request":{"raw":"GET /img/gdrebrdf.png HTTP/1.1\r\nHost: 15uyjwqr5yzsle4mkathv9uut7onloux3fb41-cg14v.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://15uyjwqr5yzsle4mkathv9uut7onloux3fb41-cg14v.vercel.app/10007745768379/trnbugwqA9454m2fLoBp.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 29921\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"gdrebrdf.png\"\r\ncontent-type: image/png\r\ndate: Sat, 15 Aug 2026 07:31:30 GMT\r\netag: \"ffba640622dd859d554ee43a03d53769\"\r\nlast-modified: Fri, 14 Aug 2026 23:12:49 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::nf5lq-1786779090613-405a64354d26\r\ncontent-length: 105511\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":105511,"size_decoded":106054,"mime_type":"image/png","magic":"PNG image data, 900 x 240, 8-bit/color RGBA, non-interlaced","md5":"ffba640622dd859d554ee43a03d53769","sha1":"c91a100db7bfc04df9a5f3223d5b6f17536bf5ee","sha256":"139d38d0fbfed2fd9f2b782af9b3eb08005b9bc75faaa31fe29720cc64bcab0f","sha512":"70c7c4df14a22e00a0caf1daf001e608454604fa0b4c13583efac7a8caff6c726d62c024f9e0626760b524f7d08184e4e30cf4a49be505acb1f9d29cfce35993","ssdeep":"1536:VudXKa4pprle5L3Ve48HXzXl4F4fTy9AeC9hhxVK0cYUFLWyMjmy/Yu:/xe5UHDaCTy9bmPJURWBjma","tlshash":"efa3022ee1d5311eced3515032d47e985a86ace5cf421c08758cca9b8f34e994aed3ea","first_seen":"2024-01-09T09:55:04Z","last_seen":"2026-08-15T09:09:05.545652Z","times_seen":15773,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"15uyjwqr5yzsle4mkathv9uut7onloux3fb41-cg14v.vercel.app/img/fgjgh3.png","fqdn":"15uyjwqr5yzsle4mkathv9uut7onloux3fb41-cg14v.vercel.app","domain":"15uyjwqr5yzsle4mkathv9uut7onloux3fb41-cg14v.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.131","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://15uyjwqr5yzsle4mkathv9uut7onloux3fb41-cg14v.vercel.app/10007745768379/trnbugwqA9454m2fLoBp.html","date":"2026-08-15T07:31:30.614Z","timestamp":1786779090614,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 13:27:57 GMT","end":"Sat, 26 Sep 2026 13:27:56 GMT"},"fingerprint":{"sha1":"67:7E:08:96:CE:36:50:12:25:03:0A:77:67:C2:A8:60:CD:38:21:41","sha256":"EE:54:CB:11:F1:6C:C3:11:B3:AC:BA:E5:7F:8F:BB:03:F3:38:C1:B2:A2:0D:E7:27:22:C3:EA:FD:0D:AE:01:40"}}},"request":{"raw":"GET /img/fgjgh3.png HTTP/1.1\r\nHost: 15uyjwqr5yzsle4mkathv9uut7onloux3fb41-cg14v.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://15uyjwqr5yzsle4mkathv9uut7onloux3fb41-cg14v.vercel.app/10007745768379/trnbugwqA9454m2fLoBp.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 29921\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"fgjgh3.png\"\r\ncontent-type: image/png\r\ndate: Sat, 15 Aug 2026 07:31:30 GMT\r\netag: \"aa62798f77573b7f65369b335ec7faa5\"\r\nlast-modified: Fri, 14 Aug 2026 23:12:49 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::v2f4r-1786779090614-d18130390920\r\ncontent-length: 82388\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":82388,"size_decoded":82928,"mime_type":"image/png","magic":"PNG image data, 599 x 263, 8-bit/color RGBA, non-interlaced","md5":"aa62798f77573b7f65369b335ec7faa5","sha1":"e57466251b1b4b19f6f2ace0667d5625ed01f5d3","sha256":"7e5dafb94573756bb7f7be628d6c80b572684488b75c96016a1ae6a284a180d0","sha512":"1f971a9f32cedde6107c6dff520b3da80033e7d34fea1778194d1af7158cd1f310151f61a7285907fd0ab1c48f0fca0beff06d6463940bc608e106f9add1a696","ssdeep":"1536:FSUsS42KJpasEtcsmf+OS2DpJmU6zz2V3l84+DFsBT1x0Fda58QGb:FSUsSh2prEC/fc2DKryVa4/B1WQub","tlshash":"1783126cea1185f3e891a752f0d219f7d9953ea3181eff96fc827b0d401c16320ba897","first_seen":"2026-08-13T03:10:00.944634Z","last_seen":"2026-08-15T09:09:05.546713Z","times_seen":16,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lwemuhpbrhwujqu7x-ugk3vphvutaw96z0lcdyzswo.vercel.app/gkjrd6sdgb32dfhnysr5b","fqdn":"lwemuhpbrhwujqu7x-ugk3vphvutaw96z0lcdyzswo.vercel.app","domain":"lwemuhpbrhwujqu7x-ugk3vphvutaw96z0lcdyzswo.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.195","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-08-15T07:31:22.710Z","timestamp":1786779082710,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 13:27:57 GMT","end":"Sat, 26 Sep 2026 13:27:56 GMT"},"fingerprint":{"sha1":"67:7E:08:96:CE:36:50:12:25:03:0A:77:67:C2:A8:60:CD:38:21:41","sha256":"EE:54:CB:11:F1:6C:C3:11:B3:AC:BA:E5:7F:8F:BB:03:F3:38:C1:B2:A2:0D:E7:27:22:C3:EA:FD:0D:AE:01:40"}}},"request":{"raw":"GET /gkjrd6sdgb32dfhnysr5b HTTP/1.1\r\nHost: lwemuhpbrhwujqu7x-ugk3vphvutaw96z0lcdyzswo.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\nage: 26106\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"gkjrd6sdgb32dfhnysr5b\"\r\ncontent-encoding: br\r\ncontent-type: text/html; charset=utf-8\r\ndate: Sat, 15 Aug 2026 07:31:22 GMT\r\netag: W/\"2e261be67a0dd6d27dfc1a4d560e1920\"\r\nlast-modified: Sat, 15 Aug 2026 00:16:15 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::fn8fj-1786779082711-979f40a3b2f9\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7019,"size_decoded":3026,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (577)","md5":"2e261be67a0dd6d27dfc1a4d560e1920","sha1":"a917d1083c77475c81f8bfdd4f48bde27e783117","sha256":"2006a2c41c38226886e62f37c7639178eca3091a3b027ca5e79f08ff88e2077d","sha512":"61ecbdf6fd398d437b1323e8114a3f235c131e88d5ba72d0e8062d61ee8531bdedc39d843470d3f61272a637f42351c02b271b9cd9190f3f6c665614211cb871","ssdeep":"48:m+awslWFmYL/1p6FyZscJtX5eTNEf7X/hUdEGwoY3+HHtrbI2kxp+4Xj:XslWFRkUscJtaNQ7X/I7LtrbIzxc4z","tlshash":"3be188f344c494a659cb948d66aa370cbbbfc70b9c223d62916f186813a79d7ec3471c","first_seen":"2026-08-15T07:31:25.030021Z","last_seen":"2026-08-15T07:31:57.026015Z","times_seen":2,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-15","alert":"Sinkholed","trigger":"lwemuhpbrhwujqu7x-ugk3vphvutaw96z0lcdyzswo.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lwemuhpbrhwujqu7x-ugk3vphvutaw96z0lcdyzswo.vercel.app/styles/ico.ico","fqdn":"lwemuhpbrhwujqu7x-ugk3vphvutaw96z0lcdyzswo.vercel.app","domain":"lwemuhpbrhwujqu7x-ugk3vphvutaw96z0lcdyzswo.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.195","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lwemuhpbrhwujqu7x-ugk3vphvutaw96z0lcdyzswo.vercel.app/gkjrd6sdgb32dfhnysr5b","date":"2026-08-15T07:31:22.999Z","timestamp":1786779082999,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 13:27:57 GMT","end":"Sat, 26 Sep 2026 13:27:56 GMT"},"fingerprint":{"sha1":"67:7E:08:96:CE:36:50:12:25:03:0A:77:67:C2:A8:60:CD:38:21:41","sha256":"EE:54:CB:11:F1:6C:C3:11:B3:AC:BA:E5:7F:8F:BB:03:F3:38:C1:B2:A2:0D:E7:27:22:C3:EA:FD:0D:AE:01:40"}}},"request":{"raw":"GET /styles/ico.ico HTTP/1.1\r\nHost: lwemuhpbrhwujqu7x-ugk3vphvutaw96z0lcdyzswo.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://lwemuhpbrhwujqu7x-ugk3vphvutaw96z0lcdyzswo.vercel.app/gkjrd6sdgb32dfhnysr5b\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\nage: 23637\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-disposition: inline; filename=\"ico.ico\"\r\ncontent-encoding: br\r\ncontent-type: image/vnd.microsoft.icon\r\ndate: Sat, 15 Aug 2026 07:31:23 GMT\r\netag: W/\"6701a4ba0b931af579be35b93631da04\"\r\nlast-modified: Sat, 15 Aug 2026 00:57:25 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::fcxhr-1786779083000-530f7696a5f9\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":5430,"size_decoded":1441,"mime_type":"image/vnd.microsoft.icon","magic":"MS Windows icon resource - 2 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel","md5":"6701a4ba0b931af579be35b93631da04","sha1":"c8161484acccdd0cae1cd6484f56942cb7ffd7dc","sha256":"ce8a22ece441cfd0f09fb0359b8d683fed0e66f8bec0bbc067a8257c95b05fd8","sha512":"c09e65509b04f904bb74c8aa78c099f4d195426293711f5eb6f3c47d6c27b9c278898cfd718fafa5418e40498b7904d818a8dd654a956694550d0b43048151c2","ssdeep":"24:Eg5ed8vZa+/kffJTyN5J5iXSvjTxatgFFjiZq1MJMaDgD6VDcl2HPwFf5zaTrZ4l:yfqHUs6hcEI5KrZ4jaJV9HxG8Q","tlshash":"55b1aca0b2931348f4f811b0c343748d7bec2c438ca25a53a6bb3acd5dfc19892531d2","first_seen":"2023-12-25T05:22:02Z","last_seen":"2026-08-15T09:09:05.539716Z","times_seen":13735,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-15","alert":"Sinkholed","trigger":"lwemuhpbrhwujqu7x-ugk3vphvutaw96z0lcdyzswo.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"15uyjwqr5yzsle4mkathv9uut7onloux3fb41-cg14v.vercel.app/fghj354erwgdfsahaerdt.html","fqdn":"15uyjwqr5yzsle4mkathv9uut7onloux3fb41-cg14v.vercel.app","domain":"15uyjwqr5yzsle4mkathv9uut7onloux3fb41-cg14v.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.131","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-08-15T07:31:24.224Z","timestamp":1786779084224,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 13:27:57 GMT","end":"Sat, 26 Sep 2026 13:27:56 GMT"},"fingerprint":{"sha1":"67:7E:08:96:CE:36:50:12:25:03:0A:77:67:C2:A8:60:CD:38:21:41","sha256":"EE:54:CB:11:F1:6C:C3:11:B3:AC:BA:E5:7F:8F:BB:03:F3:38:C1:B2:A2:0D:E7:27:22:C3:EA:FD:0D:AE:01:40"}}},"request":{"raw":"GET /fghj354erwgdfsahaerdt.html HTTP/1.1\r\nHost: 15uyjwqr5yzsle4mkathv9uut7onloux3fb41-cg14v.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://lwemuhpbrhwujqu7x-ugk3vphvutaw96z0lcdyzswo.vercel.app/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\nage: 31273\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"fghj354erwgdfsahaerdt.html\"\r\ncontent-encoding: br\r\ncontent-type: text/html; charset=utf-8\r\ndate: Sat, 15 Aug 2026 07:31:24 GMT\r\netag: W/\"7991fe45bc3bfea543e55afb27694c41\"\r\nlast-modified: Fri, 14 Aug 2026 22:50:10 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::gx5dh-1786779084266-3f6e76f733f4\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1209,"size_decoded":1256,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"7991fe45bc3bfea543e55afb27694c41","sha1":"46dfef7342b199425a35ce668b71265c352c221d","sha256":"ef3947a43d102d807fe473078c034fc795fcc6fa7c3a3b6df6468e3e04a2e42f","sha512":"c30ccf4dd2c30a60c172137c64e08a768fea4e9c46b25c3c3bb7dfe285e3e1e46d5189331c82e42b6c0c97c646180e0ba121443f057575c0ee395bfd958cc779","ssdeep":"","tlshash":"6821fe1509c24429027282b17fe07464e3a7d4a757090ea4b8da606f6ff6309c5a37d4","first_seen":"2026-08-14T17:39:52.325456Z","last_seen":"2026-08-15T07:31:57.027365Z","times_seen":4,"resource_available":false,"data":null}},"time_used":52,"timings":{"blocked":0,"dns":14,"connect":1,"send":0,"wait":11,"receive":0,"ssl":26},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"15uyjwqr5yzsle4mkathv9uut7onloux3fb41-cg14v.vercel.app/img/bfvb.png","fqdn":"15uyjwqr5yzsle4mkathv9uut7onloux3fb41-cg14v.vercel.app","domain":"15uyjwqr5yzsle4mkathv9uut7onloux3fb41-cg14v.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.131","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://15uyjwqr5yzsle4mkathv9uut7onloux3fb41-cg14v.vercel.app/10007745768379/trnbugwqA9454m2fLoBp.html","date":"2026-08-15T07:31:30.609Z","timestamp":1786779090609,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 13:27:57 GMT","end":"Sat, 26 Sep 2026 13:27:56 GMT"},"fingerprint":{"sha1":"67:7E:08:96:CE:36:50:12:25:03:0A:77:67:C2:A8:60:CD:38:21:41","sha256":"EE:54:CB:11:F1:6C:C3:11:B3:AC:BA:E5:7F:8F:BB:03:F3:38:C1:B2:A2:0D:E7:27:22:C3:EA:FD:0D:AE:01:40"}}},"request":{"raw":"GET /img/bfvb.png HTTP/1.1\r\nHost: 15uyjwqr5yzsle4mkathv9uut7onloux3fb41-cg14v.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://15uyjwqr5yzsle4mkathv9uut7onloux3fb41-cg14v.vercel.app/10007745768379/trnbugwqA9454m2fLoBp.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 31273\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"bfvb.png\"\r\ncontent-type: image/png\r\ndate: Sat, 15 Aug 2026 07:31:30 GMT\r\netag: \"8d3bcd1278891fc1e52d38e72549b3d0\"\r\nlast-modified: Fri, 14 Aug 2026 22:50:16 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::nf5lq-1786779090609-3e29948dda22\r\ncontent-length: 7550\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7550,"size_decoded":8087,"mime_type":"image/png","magic":"PNG image data, 120 x 120, 8-bit colormap, non-interlaced","md5":"8d3bcd1278891fc1e52d38e72549b3d0","sha1":"af1ab86b5a3993c468c3be9c59a8ed3d9091454d","sha256":"8fc3f44a189200b47c93a90ad8dffe40fcdeda8a718e62bb4baf98f00d536e97","sha512":"e8c73ab69e70bdca02c1c7004947186455c632692311b4ca91d1bea143ce7f0b986dc0b0623b8ae82f9561549337171b3e89a55f7bcd92964fe214ddab1c4feb","ssdeep":"192:ri4sn8ZlCLFUm5Dk3CqDEkV8YaTETosC1nEDuO0f+htV:rfsn4CBnKCqYkaUoseEDuO0C7","tlshash":"d8f18e4d66788d2d74db13ab8c3b69b38d3e2b809e52692ecb574058356962e830fc06","first_seen":"2023-12-25T05:22:02Z","last_seen":"2026-08-15T09:09:05.544402Z","times_seen":15941,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"15uyjwqr5yzsle4mkathv9uut7onloux3fb41-cg14v.vercel.app/styles/ico.ico","fqdn":"15uyjwqr5yzsle4mkathv9uut7onloux3fb41-cg14v.vercel.app","domain":"15uyjwqr5yzsle4mkathv9uut7onloux3fb41-cg14v.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.131","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://15uyjwqr5yzsle4mkathv9uut7onloux3fb41-cg14v.vercel.app/10007745768379/trnbugwqA9454m2fLoBp.html","date":"2026-08-15T07:31:30.747Z","timestamp":1786779090747,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 13:27:57 GMT","end":"Sat, 26 Sep 2026 13:27:56 GMT"},"fingerprint":{"sha1":"67:7E:08:96:CE:36:50:12:25:03:0A:77:67:C2:A8:60:CD:38:21:41","sha256":"EE:54:CB:11:F1:6C:C3:11:B3:AC:BA:E5:7F:8F:BB:03:F3:38:C1:B2:A2:0D:E7:27:22:C3:EA:FD:0D:AE:01:40"}}},"request":{"raw":"GET /styles/ico.ico HTTP/1.1\r\nHost: 15uyjwqr5yzsle4mkathv9uut7onloux3fb41-cg14v.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://15uyjwqr5yzsle4mkathv9uut7onloux3fb41-cg14v.vercel.app/10007745768379/trnbugwqA9454m2fLoBp.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\nage: 30473\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"ico.ico\"\r\ncontent-encoding: br\r\ncontent-type: image/vnd.microsoft.icon\r\ndate: Sat, 15 Aug 2026 07:31:30 GMT\r\netag: W/\"6701a4ba0b931af579be35b93631da04\"\r\nlast-modified: Fri, 14 Aug 2026 23:03:37 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::zdd9l-1786779090748-5a970f8d5717\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":5430,"size_decoded":1440,"mime_type":"image/vnd.microsoft.icon","magic":"MS Windows icon resource - 2 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel","md5":"6701a4ba0b931af579be35b93631da04","sha1":"c8161484acccdd0cae1cd6484f56942cb7ffd7dc","sha256":"ce8a22ece441cfd0f09fb0359b8d683fed0e66f8bec0bbc067a8257c95b05fd8","sha512":"c09e65509b04f904bb74c8aa78c099f4d195426293711f5eb6f3c47d6c27b9c278898cfd718fafa5418e40498b7904d818a8dd654a956694550d0b43048151c2","ssdeep":"24:Eg5ed8vZa+/kffJTyN5J5iXSvjTxatgFFjiZq1MJMaDgD6VDcl2HPwFf5zaTrZ4l:yfqHUs6hcEI5KrZ4jaJV9HxG8Q","tlshash":"55b1aca0b2931348f4f811b0c343748d7bec2c438ca25a53a6bb3acd5dfc19892531d2","first_seen":"2023-12-25T05:22:02Z","last_seen":"2026-08-15T09:09:05.539716Z","times_seen":13735,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ipapi.co/json/","fqdn":"ipapi.co","domain":"ipapi.co","tld":"co"},"ip":{"addr":"172.67.69.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://15uyjwqr5yzsle4mkathv9uut7onloux3fb41-cg14v.vercel.app/10007745768379/trnbugwqA9454m2fLoBp.html","date":"2026-08-15T07:31:30.751Z","timestamp":1786779090751,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"ipapi.co","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 13 Aug 2026 09:56:10 GMT","end":"Wed, 11 Nov 2026 10:56:07 GMT"},"fingerprint":{"sha1":"F3:18:40:3B:2F:29:8F:72:5D:C9:F9:8D:83:FF:1A:13:26:F5:A1:7A","sha256":"17:EB:45:1D:BC:F6:67:CB:CB:85:0A:03:6F:55:93:30:F8:33:F4:78:1A:C0:46:17:64:09:C8:78:62:38:02:5D"}}},"request":{"raw":"GET /json/ HTTP/1.1\r\nHost: ipapi.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://15uyjwqr5yzsle4mkathv9uut7onloux3fb41-cg14v.vercel.app/\r\nOrigin: https://15uyjwqr5yzsle4mkathv9uut7onloux3fb41-cg14v.vercel.app\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sat, 15 Aug 2026 07:31:30 GMT\r\ncontent-type: application/json\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nallow: HEAD, OPTIONS, OPTIONS, POST, GET\r\nx-frame-options: DENY\r\nvary: Host, origin\r\naccess-control-allow-origin: https://15uyjwqr5yzsle4mkathv9uut7onloux3fb41-cg14v.vercel.app\r\nx-content-type-options: nosniff\r\nreferrer-policy: same-origin\r\ncross-origin-opener-policy: same-origin\r\ncontent-security-policy-report-only: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.stripe.com https://*.paddle.com https://www.google.com https://www.gstatic.com https://maps.gstatic.com https://maps.googleapis.com https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/; style-src 'self' 'unsafe-inline' https://*.paddle.com https://fonts.gstatic.com https://fonts.googleapis.com; img-src 'self' data: https://ipapi.co https://maps.gstatic.com https://maps.googleapis.com https://*.stripe.com; font-src 'self' data: https://fonts.gstatic.com https://fonts.googleapis.com; frame-src 'self' https://www.google.com https://*.stripe.com https://*.paddle.com https://www.google.com/recaptcha/ https://recaptcha.google.com/recaptcha/ https://challenges.cloudflare.com/; connect-src 'self' https://ipapi.co/ https://*.paddle.com https://*.stripe.com https://maps.googleapis.com https://www.google.com/recaptcha/; object-src 'none'; frame-ancestors 'none'; base-uri 'self'; form-action 'self';\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MsO0GJnnk7GD9drVQuKLSlvZEHa3KofLlMSl%2BOI3qBCM9DQWQ1DlR3MiKeIyYFExSHRobUlM%2BpKYXRO5SpAln0FYBPB9SWSl8pz7D52%2Fxm%2FTS6dNZACx0eJC\"}]}\r\ncontent-encoding: br\r\ncf-ray: a2b680054b86b28a-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":742,"size_decoded":2178,"mime_type":"application/json","magic":"JSON text data","md5":"c072daa1c2cda30d0f3f81ca812ae319","sha1":"d5445a8099ed4730982271c1ed6f80fa78de8c14","sha256":"33c5189253a521d59112bc6a96710c6dee86b2d05e85e945f5bd56ac736c425c","sha512":"84df51623e52eb7458514c9b46c5fac80f3293a9123643f4f411ee7fbaec100ce117dd72327d9a9c16254ab67b90c36d536b902c003b5a10c304974f44478743","ssdeep":"","tlshash":"f6012f68e4780e7b9cb813587078690b103422176e523a8e7bc0a74d0f8d8bf30b035e","first_seen":"2026-08-03T13:31:59.23668Z","last_seen":"2026-08-15T09:09:05.540739Z","times_seen":421,"resource_available":false,"data":null}},"time_used":214,"timings":{"blocked":0,"dns":3,"connect":1,"send":0,"wait":199,"receive":0,"ssl":11},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lwemuhpbrhwujqu7x-ugk3vphvutaw96z0lcdyzswo.vercel.app/styles/dot.css","fqdn":"lwemuhpbrhwujqu7x-ugk3vphvutaw96z0lcdyzswo.vercel.app","domain":"lwemuhpbrhwujqu7x-ugk3vphvutaw96z0lcdyzswo.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.195","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://lwemuhpbrhwujqu7x-ugk3vphvutaw96z0lcdyzswo.vercel.app/gkjrd6sdgb32dfhnysr5b","date":"2026-08-15T07:31:22.961Z","timestamp":1786779082961,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 13:27:57 GMT","end":"Sat, 26 Sep 2026 13:27:56 GMT"},"fingerprint":{"sha1":"67:7E:08:96:CE:36:50:12:25:03:0A:77:67:C2:A8:60:CD:38:21:41","sha256":"EE:54:CB:11:F1:6C:C3:11:B3:AC:BA:E5:7F:8F:BB:03:F3:38:C1:B2:A2:0D:E7:27:22:C3:EA:FD:0D:AE:01:40"}}},"request":{"raw":"GET /styles/dot.css HTTP/1.1\r\nHost: lwemuhpbrhwujqu7x-ugk3vphvutaw96z0lcdyzswo.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://lwemuhpbrhwujqu7x-ugk3vphvutaw96z0lcdyzswo.vercel.app/gkjrd6sdgb32dfhnysr5b\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\nage: 23637\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-disposition: inline; filename=\"dot.css\"\r\ncontent-encoding: br\r\ncontent-type: text/css; charset=utf-8\r\ndate: Sat, 15 Aug 2026 07:31:22 GMT\r\netag: W/\"dab90d04b99fc0843d83519b9bef92ac\"\r\nlast-modified: Sat, 15 Aug 2026 00:57:25 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::fcxhr-1786779082961-bca56e677fe4\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7295,"size_decoded":2193,"mime_type":"text/css; charset=utf-8","magic":"Unicode text, UTF-8 text","md5":"dab90d04b99fc0843d83519b9bef92ac","sha1":"7a908e6d777860fbbbc7b3eae82edaa6bdf60b0a","sha256":"71a98e720197bab327afc7af82cd8b07112a4f1e1565a0153dc65abdd0ba1881","sha512":"18208ff7b7dfb2832e64219b7755a8c2c66d2071cadcfd01da4549f196a0d94e08cbc67694434857c0c76ed09d43323c5febfa3c96563c88dd2593cad815e4a5","ssdeep":"192:u7O+w2HnOBuMmSY1qTSybxNRKxSwGEVOEa8QBz3yq1H9z+QyUrvlufPh:c9HnOcMmSY1qTSybxNRKxSwGEMBziq1E","tlshash":"5ae101a10b900871fb2f529953dd4e1c6379a4420d0aecea7366142d4f85fac639f3be","first_seen":"2026-08-14T17:39:52.316637Z","last_seen":"2026-08-15T07:47:24.275329Z","times_seen":6,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-15","alert":"Sinkholed","trigger":"lwemuhpbrhwujqu7x-ugk3vphvutaw96z0lcdyzswo.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w20/ar.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"104.21.31.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://15uyjwqr5yzsle4mkathv9uut7onloux3fb41-cg14v.vercel.app/10007745768379/trnbugwqA9454m2fLoBp.html","date":"2026-08-15T07:31:30.753Z","timestamp":1786779090753,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 29 Jul 2026 01:47:23 GMT","end":"Tue, 27 Oct 2026 02:42:40 GMT"},"fingerprint":{"sha1":"DB:70:D4:5F:B8:7E:38:F4:35:F1:23:C7:66:98:1A:51:08:78:F6:40","sha256":"47:2A:A2:91:C2:CC:37:AC:9C:8E:B5:A6:FD:21:5C:06:B6:3E:13:2D:D0:DF:E8:55:90:D7:80:3D:D5:34:02:A8"}}},"request":{"raw":"GET /w20/ar.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://15uyjwqr5yzsle4mkathv9uut7onloux3fb41-cg14v.vercel.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 15 Aug 2026 07:31:30 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 01 Jul 2025 15:39:52 GMT\r\netag: \"68640148-87\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\npriority: u=4,i\r\nage: 1723333\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=W%2BO5Ev%2BYwf68MP%2FhTcGM%2B3M9MLaqYxopwTFjAvwzTpXCFj6vgaVs%2Ftnh9c8y2CBhGr%2FiwjKa37ztBLd6YK53c6lAQd1H88ydozoSVAfFZg5V76rlnhytfN3lX3DeFw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: a2b680054e6f56ca-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 135\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":135,"size_decoded":970,"mime_type":"image/png","magic":"PNG image data, 20 x 13, 4-bit colormap, non-interlaced","md5":"d6769220ca02030f9bd368d8b709b347","sha1":"7241a12fb2b2ad322bf1bd520e1f27e1c23c3fe2","sha256":"2c964bc2ca4a04acc7b8b11e05404006c332135fb2f766f5f110b630956bbdba","sha512":"b27b93ebd01c71538631a507d225990fea4565c8d9d0cefa2eff1d38d9545610fc7fe67e65bf9c4071c439fcbf6c6751fa7b75b41e07781911dbd27068030d93","ssdeep":"","tlshash":"e0c02bd3db831d228b031237d308e0a29e60d67812646067000ecf350011008944e713","first_seen":"2025-01-02T03:50:15.871426Z","last_seen":"2026-08-15T09:09:05.542674Z","times_seen":570,"resource_available":false,"data":null}},"time_used":68,"timings":{"blocked":-1,"dns":4,"connect":11,"send":0,"wait":53,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"15uyjwqr5yzsle4mkathv9uut7onloux3fb41-cg14v.vercel.app/10007745768379/trnbugwqA9454m2fLoBp.html","fqdn":"15uyjwqr5yzsle4mkathv9uut7onloux3fb41-cg14v.vercel.app","domain":"15uyjwqr5yzsle4mkathv9uut7onloux3fb41-cg14v.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.131","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-08-15T07:31:30.323Z","timestamp":1786779090323,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 13:27:57 GMT","end":"Sat, 26 Sep 2026 13:27:56 GMT"},"fingerprint":{"sha1":"67:7E:08:96:CE:36:50:12:25:03:0A:77:67:C2:A8:60:CD:38:21:41","sha256":"EE:54:CB:11:F1:6C:C3:11:B3:AC:BA:E5:7F:8F:BB:03:F3:38:C1:B2:A2:0D:E7:27:22:C3:EA:FD:0D:AE:01:40"}}},"request":{"raw":"GET /10007745768379/trnbugwqA9454m2fLoBp.html HTTP/1.1\r\nHost: 15uyjwqr5yzsle4mkathv9uut7onloux3fb41-cg14v.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://15uyjwqr5yzsle4mkathv9uut7onloux3fb41-cg14v.vercel.app/fghj354erwgdfsahaerdt.html\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\nage: 31273\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"trnbugwqA9454m2fLoBp.html\"\r\ncontent-encoding: br\r\ncontent-type: text/html; charset=utf-8\r\ndate: Sat, 15 Aug 2026 07:31:30 GMT\r\netag: W/\"0680031af2fd35a3b47d5b31b65e65e4\"\r\nlast-modified: Fri, 14 Aug 2026 22:50:16 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::24xnq-1786779090325-b4d65e3bc6cd\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"Bootstrap:5.3.2","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]}],"data":{"size":52007,"size_decoded":11814,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1905)","md5":"0680031af2fd35a3b47d5b31b65e65e4","sha1":"ef4083c461e2df9799692c7c4d5cf1782b05fc85","sha256":"c98cb406f4f5761ce782d9b88be205cc687adcfd0871478aaa51c7b4dea39a41","sha512":"8b9e954931f4152457ec9f754150e0f5385b9caba6b04c5c64809c69087f87e9871608b175363e9670977c240e36c1ff8434baa8f28e268dbdb5a82bfa8a20bd","ssdeep":"768:Gp2FCHX1AWlinXN9gJlmeaDQl13CF2hGH9:y/m7DQl13I9","tlshash":"6b3365b112fc23be51978294ab231b0b7fa5edd7a6224224726c1be40f97cd3dd0b164","first_seen":"2026-08-14T10:32:59.796092Z","last_seen":"2026-08-15T09:09:05.547616Z","times_seen":9,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"15uyjwqr5yzsle4mkathv9uut7onloux3fb41-cg14v.vercel.app/styles/jquery.min.js.download","fqdn":"15uyjwqr5yzsle4mkathv9uut7onloux3fb41-cg14v.vercel.app","domain":"15uyjwqr5yzsle4mkathv9uut7onloux3fb41-cg14v.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.131","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://15uyjwqr5yzsle4mkathv9uut7onloux3fb41-cg14v.vercel.app/10007745768379/trnbugwqA9454m2fLoBp.html","date":"2026-08-15T07:31:30.390Z","timestamp":1786779090390,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 13:27:57 GMT","end":"Sat, 26 Sep 2026 13:27:56 GMT"},"fingerprint":{"sha1":"67:7E:08:96:CE:36:50:12:25:03:0A:77:67:C2:A8:60:CD:38:21:41","sha256":"EE:54:CB:11:F1:6C:C3:11:B3:AC:BA:E5:7F:8F:BB:03:F3:38:C1:B2:A2:0D:E7:27:22:C3:EA:FD:0D:AE:01:40"}}},"request":{"raw":"GET /styles/jquery.min.js.download HTTP/1.1\r\nHost: 15uyjwqr5yzsle4mkathv9uut7onloux3fb41-cg14v.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://15uyjwqr5yzsle4mkathv9uut7onloux3fb41-cg14v.vercel.app/10007745768379/trnbugwqA9454m2fLoBp.html\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\nage: 29922\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"jquery.min.js.download\"\r\ncontent-encoding: br\r\ncontent-type: application/octet-stream\r\ndate: Sat, 15 Aug 2026 07:31:30 GMT\r\netag: W/\"2c872dbe60f4ba70fb85356113d8b35e\"\r\nlast-modified: Fri, 14 Aug 2026 23:12:48 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::fcxhr-1786779090393-1722d53eacad\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":87533,"size_decoded":32703,"mime_type":"application/octet-stream","magic":"JavaScript source, ASCII text, with very long lines (65447)","md5":"2c872dbe60f4ba70fb85356113d8b35e","sha1":"ee48592d1fff952fcf06ce0b666ed4785493afdc","sha256":"fc9a93dd241f6b045cbff0481cf4e1901becd0e12fb45166a8f17f95823f0b1a","sha512":"bf6089ed4698cb8270a8b0c8ad9508ff886a7a842278e98064d5c1790ca3a36d5d69d9f047ef196882554fc104da2c88eb5395f1ee8cf0f3f6ff8869408350fe","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKr:sHNwcv9VBQpLl88SMBQ47GKr","tlshash":"3983f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","first_seen":"2023-08-31T16:03:19Z","last_seen":"2026-08-15T08:47:05.950925Z","times_seen":185785,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"15uyjwqr5yzsle4mkathv9uut7onloux3fb41-cg14v.vercel.app/styles/style.css","fqdn":"15uyjwqr5yzsle4mkathv9uut7onloux3fb41-cg14v.vercel.app","domain":"15uyjwqr5yzsle4mkathv9uut7onloux3fb41-cg14v.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.131","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://15uyjwqr5yzsle4mkathv9uut7onloux3fb41-cg14v.vercel.app/10007745768379/trnbugwqA9454m2fLoBp.html","date":"2026-08-15T07:31:30.591Z","timestamp":1786779090591,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 13:27:57 GMT","end":"Sat, 26 Sep 2026 13:27:56 GMT"},"fingerprint":{"sha1":"67:7E:08:96:CE:36:50:12:25:03:0A:77:67:C2:A8:60:CD:38:21:41","sha256":"EE:54:CB:11:F1:6C:C3:11:B3:AC:BA:E5:7F:8F:BB:03:F3:38:C1:B2:A2:0D:E7:27:22:C3:EA:FD:0D:AE:01:40"}}},"request":{"raw":"GET /styles/style.css HTTP/1.1\r\nHost: 15uyjwqr5yzsle4mkathv9uut7onloux3fb41-cg14v.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://15uyjwqr5yzsle4mkathv9uut7onloux3fb41-cg14v.vercel.app/10007745768379/trnbugwqA9454m2fLoBp.html\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\nage: 31273\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"style.css\"\r\ncontent-encoding: br\r\ncontent-type: text/css; charset=utf-8\r\ndate: Sat, 15 Aug 2026 07:31:30 GMT\r\netag: W/\"edef4eb7ea055fb9fdcb06c341578d27\"\r\nlast-modified: Fri, 14 Aug 2026 22:50:16 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::nf5lq-1786779090593-10d607b3c3ac\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":25414,"size_decoded":7112,"mime_type":"text/css; charset=utf-8","magic":"Unicode text, UTF-8 text","md5":"edef4eb7ea055fb9fdcb06c341578d27","sha1":"78f313a9243d92ce3a838a6b4c24f0c9e0025a99","sha256":"6a7e2da058ae86221f7767fe0649527415af9255ded5caeb78cc12df28d0ae13","sha512":"911579318a943d5c0ce1e19aa42c4df29393ff8a69f6c9f729e9ae8b29a58fc1fa27b8258079853d95b9b77d07bba4aa83d7bde7294be2ade6b11ee5b095abd8","ssdeep":"768:21L89hNFcYFOyFJu+3y9P4vN68VJR6xytzPxl:JhNT9yr9856xytzPD","tlshash":"e6b260875aa70506b51a85687bfa9b4a735e8403920ecdbc7fdc324c8f4a3d495b27cc","first_seen":"2026-08-13T03:10:00.936105Z","last_seen":"2026-08-15T09:09:05.535006Z","times_seen":10,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/bootstrap@5.3.2/dist/js/bootstrap.bundle.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.1.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://15uyjwqr5yzsle4mkathv9uut7onloux3fb41-cg14v.vercel.app/10007745768379/trnbugwqA9454m2fLoBp.html","date":"2026-08-15T07:31:30.594Z","timestamp":1786779090594,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2026 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 20 May 2026 15:48:47 GMT","end":"Sat, 05 Dec 2026 14:48:47 GMT"},"fingerprint":{"sha1":"D4:05:C2:EC:C7:EE:2B:D0:08:68:0D:3D:33:77:48:78:43:E7:D1:E1","sha256":"ED:84:90:EE:71:BC:6B:5E:B3:D2:50:B0:23:3A:06:0D:E0:50:C6:B6:A9:09:36:E6:CE:FE:E8:66:89:EB:4E:C5"}}},"request":{"raw":"GET /npm/bootstrap@5.3.2/dist/js/bootstrap.bundle.min.js HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://15uyjwqr5yzsle4mkathv9uut7onloux3fb41-cg14v.vercel.app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: application/javascript; charset=utf-8\r\nx-jsd-version: 5.3.2\r\nx-jsd-version-type: version\r\netag: W/\"13b17-9/0PPchLLPk7+B6DJQWmc/NU4KM\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\ndate: Sat, 15 Aug 2026 07:31:30 GMT\r\nage: 422460\r\nx-served-by: cache-fra-etou8220020-FRA, cache-bma-essb1270054-BMA\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 24440\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":80663,"size_decoded":25234,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65299)","md5":"6baf57f25796c332144ed58a2a0cd9ee","sha1":"f7fd0f3dc84b2cf93bf81e832505a673f354e0a3","sha256":"82f64f62bb03c1bc1824b0f9c9e05f70dba33e146818e63cdf5c306c8cf3dedd","sha512":"5ff6240d9ca34dfe30c9cd95cb5e981823c7c0063cad9258f8f3a0a24663401da684844524272410673a6325fd78db0f7e7d0fcd3844b8db3eb9aa2613908ee8","ssdeep":"1536:Qmw0iELO+TBR2t472RirWyKsVfK5GEfy3YJtCRv/45wZbqbXZTbYWU178:VwXza3YCl45wZODZTbYR8","tlshash":"cc73c5593244b4730ade85b68037430bf2265998b24b812cb57cadde2a7dcc67277f78","first_seen":"2023-09-18T01:21:14Z","last_seen":"2026-08-15T07:49:13.250216Z","times_seen":21376,"resource_available":true,"data":null}},"time_used":42,"timings":{"blocked":-1,"dns":2,"connect":9,"send":0,"wait":9,"receive":3,"ssl":19},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"15uyjwqr5yzsle4mkathv9uut7onloux3fb41-cg14v.vercel.app/10007745768379/flow-form.js","fqdn":"15uyjwqr5yzsle4mkathv9uut7onloux3fb41-cg14v.vercel.app","domain":"15uyjwqr5yzsle4mkathv9uut7onloux3fb41-cg14v.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.131","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://15uyjwqr5yzsle4mkathv9uut7onloux3fb41-cg14v.vercel.app/10007745768379/trnbugwqA9454m2fLoBp.html","date":"2026-08-15T07:31:30.596Z","timestamp":1786779090596,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 13:27:57 GMT","end":"Sat, 26 Sep 2026 13:27:56 GMT"},"fingerprint":{"sha1":"67:7E:08:96:CE:36:50:12:25:03:0A:77:67:C2:A8:60:CD:38:21:41","sha256":"EE:54:CB:11:F1:6C:C3:11:B3:AC:BA:E5:7F:8F:BB:03:F3:38:C1:B2:A2:0D:E7:27:22:C3:EA:FD:0D:AE:01:40"}}},"request":{"raw":"GET /10007745768379/flow-form.js HTTP/1.1\r\nHost: 15uyjwqr5yzsle4mkathv9uut7onloux3fb41-cg14v.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://15uyjwqr5yzsle4mkathv9uut7onloux3fb41-cg14v.vercel.app/10007745768379/trnbugwqA9454m2fLoBp.html\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\nage: 29922\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"flow-form.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Sat, 15 Aug 2026 07:31:30 GMT\r\netag: W/\"5bef42855f3748290e34d2dfaf7fb103\"\r\nlast-modified: Fri, 14 Aug 2026 23:12:48 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::fcxhr-1786779090596-55f9c04d11b5\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":36767,"size_decoded":10975,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (2379)","md5":"e2e3cf77d9c15da9358037e2e40b7838","sha1":"78638840f54fb2889314ac59a29226fb4a073601","sha256":"45be6626e07200f8147c5bc1b4d4335a68ea264dc3a8adc762a1059cb65e4ed4","sha512":"21ba4eb2a19b477541a8a44a599b732f5b65b61703f04d3422271cd703e64268fef70486980085147072e5a63c79010e664eddad29b9105cd8718d932c9f8b0c","ssdeep":"768:rRKBx9s4QVFZtzh/1rL7KroOpwxvrXS8Isd4gNIFS/0VY7g7TAbQHnsHqV2uz2/e:Q392iroehsdLaY7g7TAbQHnsHqV2uz2W","tlshash":"eef2a36d95f725a69ebb727a5bbf5205327090074900cd007c5c93481fa8c6ba7fabec","first_seen":"2026-08-14T10:32:59.792314Z","last_seen":"2026-08-15T09:09:05.53741Z","times_seen":9,"resource_available":true,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"15uyjwqr5yzsle4mkathv9uut7onloux3fb41-cg14v.vercel.app/img/bsrbretnb.png","fqdn":"15uyjwqr5yzsle4mkathv9uut7onloux3fb41-cg14v.vercel.app","domain":"15uyjwqr5yzsle4mkathv9uut7onloux3fb41-cg14v.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.131","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://15uyjwqr5yzsle4mkathv9uut7onloux3fb41-cg14v.vercel.app/10007745768379/trnbugwqA9454m2fLoBp.html","date":"2026-08-15T07:31:30.607Z","timestamp":1786779090607,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 13:27:57 GMT","end":"Sat, 26 Sep 2026 13:27:56 GMT"},"fingerprint":{"sha1":"67:7E:08:96:CE:36:50:12:25:03:0A:77:67:C2:A8:60:CD:38:21:41","sha256":"EE:54:CB:11:F1:6C:C3:11:B3:AC:BA:E5:7F:8F:BB:03:F3:38:C1:B2:A2:0D:E7:27:22:C3:EA:FD:0D:AE:01:40"}}},"request":{"raw":"GET /img/bsrbretnb.png HTTP/1.1\r\nHost: 15uyjwqr5yzsle4mkathv9uut7onloux3fb41-cg14v.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://15uyjwqr5yzsle4mkathv9uut7onloux3fb41-cg14v.vercel.app/10007745768379/trnbugwqA9454m2fLoBp.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 31273\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"bsrbretnb.png\"\r\ncontent-type: image/png\r\ndate: Sat, 15 Aug 2026 07:31:30 GMT\r\netag: \"38b73468f90ae4c5c8ffe2c4c4870dd6\"\r\nlast-modified: Fri, 14 Aug 2026 22:50:16 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::fcxhr-1786779090609-116f876a43d0\r\ncontent-length: 48531\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":48531,"size_decoded":49074,"mime_type":"image/png","magic":"PNG image data, 1200 x 1200, 8-bit/color RGBA, non-interlaced","md5":"38b73468f90ae4c5c8ffe2c4c4870dd6","sha1":"c694f66552ea202ef4062b23cda5695d3f4d28eb","sha256":"e41f77fb685cb8246e98dfa7fa39b3bd691f83aedc592fad9ad7658eea8c3708","sha512":"987284479e07319cd644f5ee0c9b91ea71fb70985938bba39061c1a253f574f9515ac2b2e09d6fb5e7b44c87c6ddc52ff83b6f44a2ce619e90ac42ad7d989fcd","ssdeep":"768:K/mfJ8m7zd7x1Y+rJeGUix0NrSfGP1oDgGCCUTqEZLzdOxqJzLOowAFaxcHiX6/7:K/a8WR7vJ4GUixxGPKmDTl1zgqJz4AFn","tlshash":"9e23f173aa80e155f671fbb16f4c2c7c3179491d6e057bdd126ea092dd5b1a38808e0e","first_seen":"2026-02-27T13:53:45.935346Z","last_seen":"2026-08-15T09:09:05.543565Z","times_seen":28,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"15uyjwqr5yzsle4mkathv9uut7onloux3fb41-cg14v.vercel.app/img/vds.png","fqdn":"15uyjwqr5yzsle4mkathv9uut7onloux3fb41-cg14v.vercel.app","domain":"15uyjwqr5yzsle4mkathv9uut7onloux3fb41-cg14v.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.131","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://15uyjwqr5yzsle4mkathv9uut7onloux3fb41-cg14v.vercel.app/10007745768379/trnbugwqA9454m2fLoBp.html","date":"2026-08-15T07:31:30.610Z","timestamp":1786779090610,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 13:27:57 GMT","end":"Sat, 26 Sep 2026 13:27:56 GMT"},"fingerprint":{"sha1":"67:7E:08:96:CE:36:50:12:25:03:0A:77:67:C2:A8:60:CD:38:21:41","sha256":"EE:54:CB:11:F1:6C:C3:11:B3:AC:BA:E5:7F:8F:BB:03:F3:38:C1:B2:A2:0D:E7:27:22:C3:EA:FD:0D:AE:01:40"}}},"request":{"raw":"GET /img/vds.png HTTP/1.1\r\nHost: 15uyjwqr5yzsle4mkathv9uut7onloux3fb41-cg14v.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://15uyjwqr5yzsle4mkathv9uut7onloux3fb41-cg14v.vercel.app/10007745768379/trnbugwqA9454m2fLoBp.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 29921\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"vds.png\"\r\ncontent-type: image/png\r\ndate: Sat, 15 Aug 2026 07:31:30 GMT\r\netag: \"95382a6dab40d5911185a921c53e6f6b\"\r\nlast-modified: Fri, 14 Aug 2026 23:12:48 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::bscsx-1786779090610-2dff9041294b\r\ncontent-length: 5723\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5723,"size_decoded":6259,"mime_type":"image/png","magic":"PNG image data, 60 x 60, 8-bit/color RGBA, non-interlaced","md5":"95382a6dab40d5911185a921c53e6f6b","sha1":"4229cb577571111d747021988aac9dd6cd50634f","sha256":"e341d9055288dfcd7dd5facab6c915f6b7bcffbf80f8b48468c7275b8cada069","sha512":"58dfd1656f931bf14044a8d4d790ccd3369a33d42aea35774bf4b0f2242173795c86fde3280d74849be492bbc50d4515f3f3985f93766559544da37e9988bc03","ssdeep":"96:upH/omZ4SOy3uxD+WxV6jD9/zIvNVCvEknBgSjERtW82iAsuFQAIFbISS2V0wZ:upHRZ3qKvZzMGvBg5RuaAIFc5ohZ","tlshash":"89c1af99f79ec4b282d44b322cab03918b39702160116bed319d9375fe9d74cc9284f1","first_seen":"2023-12-25T05:22:01Z","last_seen":"2026-08-15T09:09:05.538564Z","times_seen":15935,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}