{"report_id":"1df5193d-0b3a-40e0-967e-e9743a5afe49","version":0,"status":"done","tags":[],"date":"2026-10-08T14:51:12Z","url":{"schema":"http","addr":"nordverdholm.com/","fqdn":"nordverdholm.com","domain":"nordverdholm.com","tld":"com"},"ip":{"addr":"158.94.210.119","port":0,"asn":202412,"as":"Omegatech LTD","country":"The Netherlands","country_code":"NL"},"final":{"url":{"schema":"https","addr":"finzy6-ad33.sbs/?d=NAkJ96G0qcPfABd8ztNaA4zWKUHuWZWlpvnf8cb7yJAHkJdFAYmUek6xb1H6zKreW49ABz0EuH%2Ffh2IC8SyW39d%2FLkdxBWBHklPHp15yM6SCvmFTtyzCHAQCV%2Bv9vh2TaOSlnLAU1q6dbfHC6P0ctFcVpKY1PM%2FvXI4W1sHqSswPBbvm6mQbD9wgpBZvg%2FFUvdqtYkihd6BDo6WIacvmRvRagwWJMkzKrn1pJN7BqrD%2F41o6dhbxwt1uYQhHRTVg\u0026on=Nord+Verdholm","fqdn":"finzy6-ad33.sbs","domain":"finzy6-ad33.sbs","tld":"sbs"},"title":"Nord Verdholm","dom":{"size":143439,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (60205)","md5":"0687488e54994fc4681e9286ecefaccc","sha1":"4d64cc3fd90d70a878d6fa484aed5e90f9f120a2","sha256":"cc04d5b1500c1f3ec52a90b5212b88754fd157c8868dc9bd75a5479590942be7","sha512":"23b75b663f5d66e0eb46d985f12e28388601f2f6b0dc7252862c8a843a6cc726215c0275ef9ed23cb7875d221eaa75daa6ad8f7f1f6e52a566fa6bc043c4be63","ssdeep":"1536:RJetsEJPjQBq1Wixx2xm0ZQHKahhuC5DLh:vmLqHZ/ahMC5DV","tlshash":"9be32133426a34230537c2d520ea5b37e2a69d4ff9a74e003edcd7e62fe9ca07156259","dom_hash":"domhash24e05ca7227738dcf2f9481b0946e497","first_seen":"2026-10-08T14:51:16.57825Z","last_seen":"2026-10-08T14:51:16.57825Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"nordverdholm.com/","fqdn":"nordverdholm.com","domain":"nordverdholm.com","tld":"com"},"ip":{"addr":"158.94.210.119","port":0,"asn":202412,"as":"Omegatech LTD","country":"The Netherlands","country_code":"NL"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-11-12T14:51:12Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":5}},"detection":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"nordverdholm.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-08","alert":"Phishing Block","trigger":"nordverdholm.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"nordverdholm.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"nordverdholm.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"nordverdholm.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"finzy6-ad33.sbs","ip":{"addr":"104.21.84.53","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-10-08","domain_rank":0,"first_seen":"2026-10-08T14:32:04.276304Z","last_seen":"2026-10-08T14:32:04.276305Z","alert_count":0,"request_count":20,"received_data":147996,"sent_data":17103,"comment":"","tags":null,"fingerprints":[{"name":"cdnjs","description":"cdnjs is a free distributed JS library delivery service.","website":"https://cdnjs.com","common_platform_enumeration":"","icon":"cdnjs.svg","categories":["CDN"]},{"name":"jQuery:2.2.4","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"cdn.jsdelivr.net","ip":{"addr":"151.101.1.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2012-05-16","domain_rank":1678,"first_seen":"2012-09-30T00:15:09Z","last_seen":"2026-10-04T23:23:27.025218Z","alert_count":0,"request_count":3,"received_data":311494,"sent_data":1572,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"api.studlink-proof.pro","ip":{"addr":"104.21.73.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-10-07T23:30:54.132542Z","last_seen":"2026-10-07T23:30:54.132542Z","alert_count":0,"request_count":3,"received_data":2015,"sent_data":1494,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"cdnjs.cloudflare.com","ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2009-02-17","domain_rank":1222,"first_seen":"2012-05-23T12:49:49Z","last_seen":"2026-10-04T23:38:02.393941Z","alert_count":0,"request_count":1,"received_data":86603,"sent_data":502,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"nordverdholm.com","ip":{"addr":"158.94.210.119","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":5,"request_count":1,"received_data":388,"sent_data":485,"comment":"","tags":null,"fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/intl-tel-input@23.1.0/build/js/intlTelInput.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.1.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"36c669ec0441cb86af5cc6455dd49814","sha1":"d2968313ee9f69fdf42f66bf3c86b387e4e499b7","sha256":"465db316c23377fcb8fb433083ef373d8c8871236e6cea0b4eb6532788ab5801","sha512":"9d2bf84e61ca88575629c0042acf8e5b8addf4e3e8e1934d547c61a48423fdd6702d20eb8cef0baba6099f903315e170a97680faef71755bd16df91f1314e42e","ssdeep":"768:W603Xlqn/kiIzJT9FSRzA4xXnT2nYdn24X68Q:WDiIz8A4knYdm","tlshash":"10d2e7aeb365673ba6fd82a270a54503af7f79444604083d78ac8ede0288ed171f5b34","size":29870,"data":"","first_seen":"2024-06-29T11:55:39Z","last_seen":"2026-10-14T19:21:06.32642Z","times_seen":1587,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/jquery/2.2.4/jquery.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"2f6b11a7e914718e0290410e85366fe9","sha1":"69bb69e25ca7d5ef0935317584e6153f3fd9a88c","sha256":"05b85d96f41fff14d8f608dad03ab71e2c1017c2da0914d7c59291bad7a54f8e","sha512":"0d40bccaa59fedecf7243d63b33c42592541d0330fefc78ec81a4c6b9689922d5b211011ca4be23ae22621cce4c658f52a1552c92d7ac3615241eb640f8514db","ssdeep":"1536:EYE1JVoiB9JqZdXXe2pD3PgoIiulrUndZ6a4tfOR7WpfWBZ2BJda4w9W3qG9a986:v4J+OlfOhWppCW6G9a98Hr2","tlshash":"1e83c6d9b2d6706297b734b850bf410bb17a98dab44c8c60f059d4e47eb4a8e507bf2c","size":85578,"data":"","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-10-15T02:27:56.090371Z","times_seen":301109,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"finzy6-ad33.sbs/landings/GmOduUo3eYSV/assets/js/script.js","fqdn":"finzy6-ad33.sbs","domain":"finzy6-ad33.sbs","tld":"sbs"},"ip":{"addr":"104.21.84.53","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d61af9b56ccdf7ac0608d6d611b4ff8d","sha1":"684d420c5f0eee7d116b72734e97dcb98ab71227","sha256":"66466c71ea9cc91b64599d3c480961e73f41150dd9e745b3d8158ef3d477899a","sha512":"fe520a74cdae2f46c6507795d9dd79cf2b261a613fe5a21f4bb69b14a3aeaddfb7cffe6884e3ef26ec5f4e994409906803d337d4b5f5f2e9ab85361801bb2790","ssdeep":"","tlshash":"4e016b5505280039823fa26a97d193ddf97041bfe186854a786d418d2ffaab206f0be6","size":851,"data":"","first_seen":"2026-04-27T01:17:56.351427Z","last_seen":"2026-10-14T08:56:29.872984Z","times_seen":597,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/intl-tel-input@23.1.0/build/js/utils.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.1.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"6eae88fad6fe723d8c8d2386a63dd152","sha1":"42046e250c7f2eeff4619a89b0be7b83e01e5edf","sha256":"a4000409a897003b1c5a8e1f9f32e18a11b022452151cc47c17ecdcb76d5223b","sha512":"d356bd87f7170499fbf445353afeda69dbaccc391eb41826290a30752475735a27d56ce1d642af1dcb02f93a1405926a440add5cb38000b7d112cab0f918bd6e","ssdeep":"3072:9klM0hpJjFs3OwPss3MwPKm7i9T2xFM8Mp2xHsNBWUsD56kmLNTg/QKWVRphmVEw:9klMipBKxxFM8Mp2qbZQ","tlshash":"1144f1ebd63c9737a1e97b35968eb3cd5a8cbca3c848567826c3b54f52784e0706c205","size":258914,"data":"","first_seen":"2024-07-10T10:54:41Z","last_seen":"2026-10-14T08:56:29.849903Z","times_seen":3191,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"finzy6-ad33.sbs/?d=NAkJ96G0qcPfABd8ztNaA4zWKUHuWZWlpvnf8cb7yJAHkJdFAYmUek6xb1H6zKreW49ABz0EuH%2Ffh2IC8SyW39d%2FLkdxBWBHklPHp15yM6SCvmFTtyzCHAQCV%2Bv9vh2TaOSlnLAU1q6dbfHC6P0ctFcVpKY1PM%2FvXI4W1sHqSswPBbvm6mQbD9wgpBZvg%2FFUvdqtYkihd6BDo6WIacvmRvRagwWJMkzKrn1pJN7BqrD%2F41o6dhbxwt1uYQhHRTVg\u0026on=Nord+Verdholm","fqdn":"finzy6-ad33.sbs","domain":"finzy6-ad33.sbs","tld":"sbs"},"ip":{"addr":"104.21.84.53","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"e93a7eb0af63448682230e9f4a9eccf0","sha1":"60fb8264f3bf348c802429926ac7b36a26407726","sha256":"08632d44a9b0d0e67d748d4ff030d7d3a30e35993c605fd006d9fc35bcd39205","sha512":"a877bd678b6e7a47f925ab284d473fef6a833b875f8ae7bf663b581fa24b25061f012a2d59637bf073a436ef2ca8902aae17b448be96e46cdb1ffe65a7033330","ssdeep":"","tlshash":"598000222802ae808383e080aac28a002cee80802ac02eb2080820c00cce220c008a83","size":31,"data":"","first_seen":"2026-04-19T03:33:25.296442Z","last_seen":"2026-10-14T08:56:29.882712Z","times_seen":609,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"finzy6-ad33.sbs/landings/GmOduUo3eYSV/app/loader.js","fqdn":"finzy6-ad33.sbs","domain":"finzy6-ad33.sbs","tld":"sbs"},"ip":{"addr":"104.21.84.53","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"82f05a966efe3eb7bdb96cd927379326","sha1":"b798fedf42122ca705ec317b333bef1878390529","sha256":"0a59565c5d4f3234c826ec37adbb1af67f8581998bc4029c738a963e718d9048","sha512":"44232d202d2b14813c63af86721fd80159cff9b09a8a71db585731b8647d49a90e61ffa7b90772340d40b0b521b75b81de9ae181c0d020e5752b262c4b7c0b03","ssdeep":"96:iIaQ1lMQkBCe6poSoVifw9GLqYRCU8bZ3RxYVWLyyy1:IHQkBCRiSoAfw9GLqYRCU8bZ3RxYVWLk","tlshash":"80b153482bb74418944bd06d2bef3b8531384803b90adc8b7bdc828cdf85ad9d5627ed","size":5345,"data":"","first_seen":"2023-08-11T09:03:01Z","last_seen":"2026-10-14T08:56:29.843718Z","times_seen":1451,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":[{"level":"log","text":"intl input init","filename":"https://finzy6-ad33.sbs/?d=NAkJ96G0qcPfABd8ztNaA4zWKUHuWZWlpvnf8cb7yJAHkJdFAYmUek6xb1H6zKreW49ABz0EuH%2Ffh2IC8SyW39d%2FLkdxBWBHklPHp15yM6SCvmFTtyzCHAQCV%2Bv9vh2TaOSlnLAU1q6dbfHC6P0ctFcVpKY1PM%2FvXI4W1sHqSswPBbvm6mQbD9wgpBZvg%2FFUvdqtYkihd6BDo6WIacvmRvRagwWJMkzKrn1pJN7BqrD%2F41o6dhbxwt1uYQhHRTVg\u0026on=Nord+Verdholm","line_number":427,"column_number":17},{"level":"log","text":"Back button protection activated after user interaction","filename":"https://finzy6-ad33.sbs/?d=NAkJ96G0qcPfABd8ztNaA4zWKUHuWZWlpvnf8cb7yJAHkJdFAYmUek6xb1H6zKreW49ABz0EuH%2Ffh2IC8SyW39d%2FLkdxBWBHklPHp15yM6SCvmFTtyzCHAQCV%2Bv9vh2TaOSlnLAU1q6dbfHC6P0ctFcVpKY1PM%2FvXI4W1sHqSswPBbvm6mQbD9wgpBZvg%2FFUvdqtYkihd6BDo6WIacvmRvRagwWJMkzKrn1pJN7BqrD%2F41o6dhbxwt1uYQhHRTVg\u0026on=Nord+Verdholm","line_number":288,"column_number":17}]},"http":[{"url":{"schema":"https","addr":"finzy6-ad33.sbs/?d=NAkJ96G0qcPfABd8ztNaA4zWKUHuWZWlpvnf8cb7yJAHkJdFAYmUek6xb1H6zKreW49ABz0EuH%2Ffh2IC8SyW39d%2FLkdxBWBHklPHp15yM6SCvmFTtyzCHAQCV%2Bv9vh2TaOSlnLAU1q6dbfHC6P0ctFcVpKY1PM%2FvXI4W1sHqSswPBbvm6mQbD9wgpBZvg%2FFUvdqtYkihd6BDo6WIacvmRvRagwWJMkzKrn1pJN7BqrD%2F41o6dhbxwt1uYQhHRTVg\u0026on=Nord+Verdholm","fqdn":"finzy6-ad33.sbs","domain":"finzy6-ad33.sbs","tld":"sbs"},"ip":{"addr":"104.21.84.53","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-10-08T14:49:37.614Z","timestamp":1791470977614,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"finzy6-ad33.sbs","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 08 Oct 2026 09:07:57 GMT","end":"Wed, 06 Jan 2027 09:07:56 GMT"},"fingerprint":{"sha1":"C1:BB:52:60:49:E9:58:67:D9:00:4F:3D:9B:53:3F:25:18:B8:02:9F","sha256":"7F:1F:80:E2:07:D6:32:78:E7:6D:12:02:2D:43:5F:AE:B2:58:BE:71:8D:C4:42:4A:1B:B7:11:5B:B9:94:3F:CB"}}},"request":{"raw":"GET /?d=NAkJ96G0qcPfABd8ztNaA4zWKUHuWZWlpvnf8cb7yJAHkJdFAYmUek6xb1H6zKreW49ABz0EuH%2Ffh2IC8SyW39d%2FLkdxBWBHklPHp15yM6SCvmFTtyzCHAQCV%2Bv9vh2TaOSlnLAU1q6dbfHC6P0ctFcVpKY1PM%2FvXI4W1sHqSswPBbvm6mQbD9wgpBZvg%2FFUvdqtYkihd6BDo6WIacvmRvRagwWJMkzKrn1pJN7BqrD%2F41o6dhbxwt1uYQhHRTVg\u0026on=Nord+Verdholm HTTP/1.1\r\nHost: finzy6-ad33.sbs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nordverdholm.com/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 08 Oct 2026 14:49:37 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8M%2F61c%2Fb1wz%2F8%2Bc5lVHGLKcoGqQxN%2BnriOvL%2BkErDo1g1Q0bxvEWMWgRa3tmBI9ixFC0NQSCqY5xgAfiJ5kgQf%2Ft3JKqIoK%2Bsx7sBuPwwyGbsU1Vzkj8X3j1c7%2BEwCeMTrs%3D\"}]}\r\npriority: u=0,i\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\nset-cookie: __cf_clicked=27861c05-5503-62; expires=Thu, 15 Oct 2026 14:49:37 GMT; Max-Age=604800; path=/\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: zstd\r\ncf-ray: a475f40a4f050daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":[{"name":"__cf_clicked","value":"27861c05-5503-62","quoted":false,"path":"/","expires":"2026-10-15T14:49:37Z","raw_expires":"Thu, 15 Oct 2026 14:49:37 GMT","max_age":604800,"secure":false,"http_only":false,"same_site":"","partitioned":false,"raw":"__cf_clicked=27861c05-5503-62; expires=Thu, 15 Oct 2026 14:49:37 GMT; Max-Age=604800; path=/"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"cdnjs","description":"cdnjs is a free distributed JS library delivery service.","website":"https://cdnjs.com","common_platform_enumeration":"","icon":"cdnjs.svg","categories":["CDN"]},{"name":"jQuery:2.2.4","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":59795,"size_decoded":16621,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (411), with CRLF, LF line terminators","md5":"4e7d652a620047ad296a19b7510f3f14","sha1":"98dc3b18a04f516ec5f95b902fe188d7dd6713ea","sha256":"abf04bf68d5366ab376389c99e792e984e5d62da77645d583203448f7e1fd26c","sha512":"fcab0c7c6b52c193fcc244b4bbb6ddeb02b8bba888d8eb6098e77e7519c240c8935e2d659da5127e205e45d0631a5b117cd0740a01fbe5d13e9cac23d0316693","ssdeep":"768:JTCdPQHYFJZoWmZFVKKwxXOYPZM0D/TYQHlMPtTldBVjApfZTEPR67bq:psPQitCtlmZwZCG","tlshash":"7543096965b110321877b3b6dfe68e0afba94127850182067dbc86141ff1d5583b6ffc","first_seen":"2026-10-08T14:51:16.58148Z","last_seen":"2026-10-08T14:51:16.58148Z","times_seen":1,"resource_available":true,"data":null}},"time_used":372,"timings":{"blocked":-1,"dns":25,"connect":10,"send":0,"wait":337,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"finzy6-ad33.sbs/landings/GmOduUo3eYSV/assets/img/logo.webp","fqdn":"finzy6-ad33.sbs","domain":"finzy6-ad33.sbs","tld":"sbs"},"ip":{"addr":"104.21.84.53","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://finzy6-ad33.sbs/?d=NAkJ96G0qcPfABd8ztNaA4zWKUHuWZWlpvnf8cb7yJAHkJdFAYmUek6xb1H6zKreW49ABz0EuH%2Ffh2IC8SyW39d%2FLkdxBWBHklPHp15yM6SCvmFTtyzCHAQCV%2Bv9vh2TaOSlnLAU1q6dbfHC6P0ctFcVpKY1PM%2FvXI4W1sHqSswPBbvm6mQbD9wgpBZvg%2FFUvdqtYkihd6BDo6WIacvmRvRagwWJMkzKrn1pJN7BqrD%2F41o6dhbxwt1uYQhHRTVg\u0026on=Nord+Verdholm","date":"2026-10-08T14:49:38.276Z","timestamp":1791470978276,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"finzy6-ad33.sbs","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 08 Oct 2026 09:07:57 GMT","end":"Wed, 06 Jan 2027 09:07:56 GMT"},"fingerprint":{"sha1":"C1:BB:52:60:49:E9:58:67:D9:00:4F:3D:9B:53:3F:25:18:B8:02:9F","sha256":"7F:1F:80:E2:07:D6:32:78:E7:6D:12:02:2D:43:5F:AE:B2:58:BE:71:8D:C4:42:4A:1B:B7:11:5B:B9:94:3F:CB"}}},"request":{"raw":"GET /landings/GmOduUo3eYSV/assets/img/logo.webp HTTP/1.1\r\nHost: finzy6-ad33.sbs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://finzy6-ad33.sbs/?d=NAkJ96G0qcPfABd8ztNaA4zWKUHuWZWlpvnf8cb7yJAHkJdFAYmUek6xb1H6zKreW49ABz0EuH%2Ffh2IC8SyW39d%2FLkdxBWBHklPHp15yM6SCvmFTtyzCHAQCV%2Bv9vh2TaOSlnLAU1q6dbfHC6P0ctFcVpKY1PM%2FvXI4W1sHqSswPBbvm6mQbD9wgpBZvg%2FFUvdqtYkihd6BDo6WIacvmRvRagwWJMkzKrn1pJN7BqrD%2F41o6dhbxwt1uYQhHRTVg\u0026on=Nord+Verdholm\r\nCookie: __cf_clicked=27861c05-5503-62\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"__cf_clicked","value":"27861c05-5503-62"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 08 Oct 2026 14:49:38 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Mon, 22 Dec 2025 11:24:48 GMT\r\npriority: u=5,i\r\netag: \"69492a80-750\"\r\nexpires: Sat, 07 Nov 2026 14:31:36 GMT\r\ncache-control: public, max-age=2592000, immutable\r\naccept-ranges: bytes\r\nage: 1082\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gr0ptbVemS5optvRPml6UqQsqV7MDQCxp10YbZisSmfuHiK5nQfOW9EQia3zjO6cag5notD9%2FmjncsZM%2BoxDcHytccsZGocBMF7QXTxD9vNbfVCNPyp6uvASxI0%2F54vSl5E%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a475f40e39850daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1872\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1872,"size_decoded":2631,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"1675c0760b32237311eaff166b849794","sha1":"05a7aa45be2a4c45a608e4f1d9c6abb97081b576","sha256":"42a851165553b99acf971c2fcc05db55701a6c3655d3327a6132dd9c5ede113a","sha512":"9ac4f01811892dabd60fd33ed75cceab4f7c37926a6714c3effb0975a2167dc118a02fe50df9e33db4d20e8f8a724e8c48eb1f4be031cc544ca2a93148900154","ssdeep":"","tlshash":"50313987b3903a8d8e520e6ca6c32395d4c70a88cac0c5a1ed327fa534af879e450da0","first_seen":"2026-04-19T03:33:25.271535Z","last_seen":"2026-10-14T08:56:29.863239Z","times_seen":619,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"finzy6-ad33.sbs/landings/GmOduUo3eYSV/assets/img/user-2.webp","fqdn":"finzy6-ad33.sbs","domain":"finzy6-ad33.sbs","tld":"sbs"},"ip":{"addr":"104.21.84.53","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://finzy6-ad33.sbs/?d=NAkJ96G0qcPfABd8ztNaA4zWKUHuWZWlpvnf8cb7yJAHkJdFAYmUek6xb1H6zKreW49ABz0EuH%2Ffh2IC8SyW39d%2FLkdxBWBHklPHp15yM6SCvmFTtyzCHAQCV%2Bv9vh2TaOSlnLAU1q6dbfHC6P0ctFcVpKY1PM%2FvXI4W1sHqSswPBbvm6mQbD9wgpBZvg%2FFUvdqtYkihd6BDo6WIacvmRvRagwWJMkzKrn1pJN7BqrD%2F41o6dhbxwt1uYQhHRTVg\u0026on=Nord+Verdholm","date":"2026-10-08T14:49:38.279Z","timestamp":1791470978279,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"finzy6-ad33.sbs","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 08 Oct 2026 09:07:57 GMT","end":"Wed, 06 Jan 2027 09:07:56 GMT"},"fingerprint":{"sha1":"C1:BB:52:60:49:E9:58:67:D9:00:4F:3D:9B:53:3F:25:18:B8:02:9F","sha256":"7F:1F:80:E2:07:D6:32:78:E7:6D:12:02:2D:43:5F:AE:B2:58:BE:71:8D:C4:42:4A:1B:B7:11:5B:B9:94:3F:CB"}}},"request":{"raw":"GET /landings/GmOduUo3eYSV/assets/img/user-2.webp HTTP/1.1\r\nHost: finzy6-ad33.sbs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://finzy6-ad33.sbs/?d=NAkJ96G0qcPfABd8ztNaA4zWKUHuWZWlpvnf8cb7yJAHkJdFAYmUek6xb1H6zKreW49ABz0EuH%2Ffh2IC8SyW39d%2FLkdxBWBHklPHp15yM6SCvmFTtyzCHAQCV%2Bv9vh2TaOSlnLAU1q6dbfHC6P0ctFcVpKY1PM%2FvXI4W1sHqSswPBbvm6mQbD9wgpBZvg%2FFUvdqtYkihd6BDo6WIacvmRvRagwWJMkzKrn1pJN7BqrD%2F41o6dhbxwt1uYQhHRTVg\u0026on=Nord+Verdholm\r\nCookie: __cf_clicked=27861c05-5503-62\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"__cf_clicked","value":"27861c05-5503-62"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 08 Oct 2026 14:49:38 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Mon, 22 Dec 2025 11:24:48 GMT\r\npriority: u=5,i\r\netag: \"69492a80-400\"\r\nexpires: Sat, 07 Nov 2026 14:31:36 GMT\r\ncache-control: public, max-age=2592000, immutable\r\naccept-ranges: bytes\r\nage: 1082\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2%2BuotpGVzsWq0LqBw3gTSgKwGC7u1pgfNruUDZ9y%2FvgyP4RNe7%2BUYOEof2mO8kGFwUSEsTfhD%2Fxt0crZh55CoPY0DGMOU5Y1A8dGXO%2F1vXKQ2JGO5X0RrLOXQQBE11sVsQA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a475f40e39870daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1024\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1024,"size_decoded":1787,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"fd0c05f43444f9441f71869db9bc1a1c","sha1":"4db67ddb4f67919b4e7bcd10307e876ba1a66904","sha256":"b565490605585dbec54019eac7820a4c556e960ab491ebbd374d7d1f19045514","sha512":"de93bc651d3056adfddcfe1c6245d6c7af6753a5088e0935e5f459f835b0a3578d5f35e23f66a907b20f55b35089db607ad70c5430199a5a520c4e1c29ad0433","ssdeep":"","tlshash":"0c11a8acd5142124cf9e7522a0e9009c7b6d1d67481e6303a7d46ce0516329ed02f70f","first_seen":"2026-04-27T01:17:56.334431Z","last_seen":"2026-10-14T08:56:29.840475Z","times_seen":597,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"finzy6-ad33.sbs/landings/GmOduUo3eYSV/assets/img/user-6.webp","fqdn":"finzy6-ad33.sbs","domain":"finzy6-ad33.sbs","tld":"sbs"},"ip":{"addr":"104.21.84.53","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://finzy6-ad33.sbs/?d=NAkJ96G0qcPfABd8ztNaA4zWKUHuWZWlpvnf8cb7yJAHkJdFAYmUek6xb1H6zKreW49ABz0EuH%2Ffh2IC8SyW39d%2FLkdxBWBHklPHp15yM6SCvmFTtyzCHAQCV%2Bv9vh2TaOSlnLAU1q6dbfHC6P0ctFcVpKY1PM%2FvXI4W1sHqSswPBbvm6mQbD9wgpBZvg%2FFUvdqtYkihd6BDo6WIacvmRvRagwWJMkzKrn1pJN7BqrD%2F41o6dhbxwt1uYQhHRTVg\u0026on=Nord+Verdholm","date":"2026-10-08T14:49:38.287Z","timestamp":1791470978287,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"finzy6-ad33.sbs","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 08 Oct 2026 09:07:57 GMT","end":"Wed, 06 Jan 2027 09:07:56 GMT"},"fingerprint":{"sha1":"C1:BB:52:60:49:E9:58:67:D9:00:4F:3D:9B:53:3F:25:18:B8:02:9F","sha256":"7F:1F:80:E2:07:D6:32:78:E7:6D:12:02:2D:43:5F:AE:B2:58:BE:71:8D:C4:42:4A:1B:B7:11:5B:B9:94:3F:CB"}}},"request":{"raw":"GET /landings/GmOduUo3eYSV/assets/img/user-6.webp HTTP/1.1\r\nHost: finzy6-ad33.sbs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://finzy6-ad33.sbs/?d=NAkJ96G0qcPfABd8ztNaA4zWKUHuWZWlpvnf8cb7yJAHkJdFAYmUek6xb1H6zKreW49ABz0EuH%2Ffh2IC8SyW39d%2FLkdxBWBHklPHp15yM6SCvmFTtyzCHAQCV%2Bv9vh2TaOSlnLAU1q6dbfHC6P0ctFcVpKY1PM%2FvXI4W1sHqSswPBbvm6mQbD9wgpBZvg%2FFUvdqtYkihd6BDo6WIacvmRvRagwWJMkzKrn1pJN7BqrD%2F41o6dhbxwt1uYQhHRTVg\u0026on=Nord+Verdholm\r\nCookie: __cf_clicked=27861c05-5503-62\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"__cf_clicked","value":"27861c05-5503-62"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 08 Oct 2026 14:49:38 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Mon, 22 Dec 2025 11:24:50 GMT\r\npriority: u=5,i\r\netag: \"69492a82-33c\"\r\nexpires: Sat, 07 Nov 2026 14:31:36 GMT\r\ncache-control: public, max-age=2592000, immutable\r\naccept-ranges: bytes\r\nage: 1082\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=84idjJmr8%2FA7TxwS064YpfyK9jjgaAVFhsP%2Bq7PfsdXKu4gW0LdblWOPk%2FbW1tVHJAHtV9%2BjoxnKdGRGYpifu0HwlLCmKMl8nb3wfMgFxY34LnyMWWdDRR5Fw%2FyBoVelcwc%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a475f40e49910daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 828\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":828,"size_decoded":1590,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"f70e2383b1aa6a9c501f3716d8b1df46","sha1":"c05de256bfc26bd6c96b2ea611d59c0a3998f1a0","sha256":"8aa85a81f718535618b73af22e1c0cf6eb33c3ee8a3dfcd160f5b7d5ea7bb8bf","sha512":"4573511f0ab29723db2a452acd7eddd60da43ec46683f37b6563475b6e0a06364d6dabb9ff97b1c5bd401311524d10e668d1a5030c4a3e10038d2173092d5955","ssdeep":"","tlshash":"6e01860c847826509c4e95a8b7d93cc9bbde4e17c034a222b92a14c9405426ab82ce53","first_seen":"2026-04-27T01:17:56.343087Z","last_seen":"2026-10-14T08:56:29.827482Z","times_seen":597,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"finzy6-ad33.sbs/landings/GmOduUo3eYSV/assets/img/favicon-16x16.png","fqdn":"finzy6-ad33.sbs","domain":"finzy6-ad33.sbs","tld":"sbs"},"ip":{"addr":"104.21.84.53","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://finzy6-ad33.sbs/?d=NAkJ96G0qcPfABd8ztNaA4zWKUHuWZWlpvnf8cb7yJAHkJdFAYmUek6xb1H6zKreW49ABz0EuH%2Ffh2IC8SyW39d%2FLkdxBWBHklPHp15yM6SCvmFTtyzCHAQCV%2Bv9vh2TaOSlnLAU1q6dbfHC6P0ctFcVpKY1PM%2FvXI4W1sHqSswPBbvm6mQbD9wgpBZvg%2FFUvdqtYkihd6BDo6WIacvmRvRagwWJMkzKrn1pJN7BqrD%2F41o6dhbxwt1uYQhHRTVg\u0026on=Nord+Verdholm","date":"2026-10-08T14:49:38.445Z","timestamp":1791470978445,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"finzy6-ad33.sbs","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 08 Oct 2026 09:07:57 GMT","end":"Wed, 06 Jan 2027 09:07:56 GMT"},"fingerprint":{"sha1":"C1:BB:52:60:49:E9:58:67:D9:00:4F:3D:9B:53:3F:25:18:B8:02:9F","sha256":"7F:1F:80:E2:07:D6:32:78:E7:6D:12:02:2D:43:5F:AE:B2:58:BE:71:8D:C4:42:4A:1B:B7:11:5B:B9:94:3F:CB"}}},"request":{"raw":"GET /landings/GmOduUo3eYSV/assets/img/favicon-16x16.png HTTP/1.1\r\nHost: finzy6-ad33.sbs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://finzy6-ad33.sbs/?d=NAkJ96G0qcPfABd8ztNaA4zWKUHuWZWlpvnf8cb7yJAHkJdFAYmUek6xb1H6zKreW49ABz0EuH%2Ffh2IC8SyW39d%2FLkdxBWBHklPHp15yM6SCvmFTtyzCHAQCV%2Bv9vh2TaOSlnLAU1q6dbfHC6P0ctFcVpKY1PM%2FvXI4W1sHqSswPBbvm6mQbD9wgpBZvg%2FFUvdqtYkihd6BDo6WIacvmRvRagwWJMkzKrn1pJN7BqrD%2F41o6dhbxwt1uYQhHRTVg\u0026on=Nord+Verdholm\r\nCookie: __cf_clicked=27861c05-5503-62\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"__cf_clicked","value":"27861c05-5503-62"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 08 Oct 2026 14:49:38 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Mon, 22 Dec 2025 11:24:46 GMT\r\npriority: u=6,i=?0\r\netag: \"69492a7e-2cd\"\r\nexpires: Sat, 07 Nov 2026 14:31:36 GMT\r\ncache-control: public, max-age=2592000, immutable\r\naccept-ranges: bytes\r\nage: 1081\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=n%2FMfCBvEmGWj8rFAAZAWOpqnvZtZ3X39%2Fc0MiHrnulVDgZcPnzKlH1LNB5xo9Q%2FQselTHQTRABKSXtgIswlOvSUl2IMjxdOapxXrFKMS9r0vjAh61JsbtzqxMOYfaIMaDA8%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a475f40f4a190daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 717\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":717,"size_decoded":1477,"mime_type":"image/png","magic":"PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced","md5":"e32483f1da349a4cbe8313a3bc52c7aa","sha1":"004a9757163554b3216c4cd2cb2de62a69497fbc","sha256":"8a0b8b79ee7c69c9f9dc11f6fc2b85d389205c2431b9234854d1b1490a1aae74","sha512":"75700f347663fd8afdfb11a44b9cd76f95056a210f2e8f9d0dfc2f03221a16a4b5ab999c4a5f6f064b5fd59e25ac049c5f6a97ad18bc53e604fcd72f9f556d70","ssdeep":"","tlshash":"f2019473f14ade1c4d5e433f67aa69a78b08c9010c71a55a1d6f4c620cb98cdb2a0de2","first_seen":"2026-04-19T03:33:25.288201Z","last_seen":"2026-10-14T08:56:29.853064Z","times_seen":618,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/intl-tel-input@23.1.0/build/js/intlTelInput.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.1.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://finzy6-ad33.sbs/?d=NAkJ96G0qcPfABd8ztNaA4zWKUHuWZWlpvnf8cb7yJAHkJdFAYmUek6xb1H6zKreW49ABz0EuH%2Ffh2IC8SyW39d%2FLkdxBWBHklPHp15yM6SCvmFTtyzCHAQCV%2Bv9vh2TaOSlnLAU1q6dbfHC6P0ctFcVpKY1PM%2FvXI4W1sHqSswPBbvm6mQbD9wgpBZvg%2FFUvdqtYkihd6BDo6WIacvmRvRagwWJMkzKrn1pJN7BqrD%2F41o6dhbxwt1uYQhHRTVg\u0026on=Nord+Verdholm","date":"2026-10-08T14:49:38.451Z","timestamp":1791470978451,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2026 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 20 May 2026 15:48:47 GMT","end":"Sat, 05 Dec 2026 14:48:47 GMT"},"fingerprint":{"sha1":"D4:05:C2:EC:C7:EE:2B:D0:08:68:0D:3D:33:77:48:78:43:E7:D1:E1","sha256":"ED:84:90:EE:71:BC:6B:5E:B3:D2:50:B0:23:3A:06:0D:E0:50:C6:B6:A9:09:36:E6:CE:FE:E8:66:89:EB:4E:C5"}}},"request":{"raw":"GET /npm/intl-tel-input@23.1.0/build/js/intlTelInput.min.js HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://finzy6-ad33.sbs/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: application/javascript; charset=utf-8\r\nx-jsd-version: 23.1.0\r\nx-jsd-version-type: version\r\netag: W/\"74ae-0paDE+6faf30L2a/PIazh+Tkmbc\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\ndate: Thu, 08 Oct 2026 14:49:38 GMT\r\nage: 1769955\r\nx-served-by: cache-fra-eddf8230162-FRA, cache-bma-essb1270076-BMA\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 11510\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":29870,"size_decoded":12305,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (29514)","md5":"36c669ec0441cb86af5cc6455dd49814","sha1":"d2968313ee9f69fdf42f66bf3c86b387e4e499b7","sha256":"465db316c23377fcb8fb433083ef373d8c8871236e6cea0b4eb6532788ab5801","sha512":"9d2bf84e61ca88575629c0042acf8e5b8addf4e3e8e1934d547c61a48423fdd6702d20eb8cef0baba6099f903315e170a97680faef71755bd16df91f1314e42e","ssdeep":"768:W603Xlqn/kiIzJT9FSRzA4xXnT2nYdn24X68Q:WDiIz8A4knYdm","tlshash":"10d2e7aeb365673ba6fd82a270a54503af7f79444604083d78ac8ede0288ed171f5b34","first_seen":"2024-06-29T11:55:39Z","last_seen":"2026-10-14T19:21:06.32642Z","times_seen":1587,"resource_available":true,"data":null}},"time_used":43,"timings":{"blocked":-1,"dns":3,"connect":9,"send":0,"wait":10,"receive":0,"ssl":21},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.studlink-proof.pro/engagement/ping","fqdn":"api.studlink-proof.pro","domain":"studlink-proof.pro","tld":"pro"},"ip":{"addr":"104.21.73.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://finzy6-ad33.sbs/?d=NAkJ96G0qcPfABd8ztNaA4zWKUHuWZWlpvnf8cb7yJAHkJdFAYmUek6xb1H6zKreW49ABz0EuH%2Ffh2IC8SyW39d%2FLkdxBWBHklPHp15yM6SCvmFTtyzCHAQCV%2Bv9vh2TaOSlnLAU1q6dbfHC6P0ctFcVpKY1PM%2FvXI4W1sHqSswPBbvm6mQbD9wgpBZvg%2FFUvdqtYkihd6BDo6WIacvmRvRagwWJMkzKrn1pJN7BqrD%2F41o6dhbxwt1uYQhHRTVg\u0026on=Nord+Verdholm","date":"2026-10-08T14:49:58.411Z","timestamp":1791470998411,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"studlink-proof.pro","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 23 Sep 2026 11:05:21 GMT","end":"Tue, 22 Dec 2026 11:05:20 GMT"},"fingerprint":{"sha1":"DE:AA:50:54:30:5F:28:F8:31:DC:84:48:7E:69:27:2D:C2:8B:8B:22","sha256":"35:1D:18:EC:E7:F7:31:42:A1:58:14:F4:06:E0:57:4E:BB:CD:45:1A:4B:91:B5:20:5F:BD:39:E7:BF:12:4A:D0"}}},"request":{"raw":"POST /engagement/ping HTTP/1.1\r\nHost: api.studlink-proof.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: text/plain;charset=UTF-8\r\nReferer: https://finzy6-ad33.sbs/\r\nContent-Length: 58\r\nOrigin: https://finzy6-ad33.sbs\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":58,"data":"{\"uuid\":\"27861c05-5503-62\",\"landing_type\":1,\"t\":20,\"s\":62}"}},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 08 Oct 2026 14:49:58 GMT\r\ncontent-type: application/json; charset=UTF-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nKcWWm5ZmNxTr4ZXLLSumWKh%2FYkfC6e%2FUWtMim%2BMAKg0JELE8FWCthqrdLTVQYWw%2FGFmwgVnLLnAdmnlTMkLXq69qCmuIYA5TWxVIYNwk1ftzj%2BscSAaJxoLltpCysy%2FiXKuSQ1ejW1e\"}]}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a475f48c1a5f568a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11,"size_decoded":695,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"82380d1e263b6093f3c7535690fcdd75","sha1":"022d91f218046ab2e61cac1eb13d6a718f75df2b","sha256":"4062edaf750fb8074e7e83e0c9028c94e32468a8b6f1614774328ef045150f93","sha512":"180ea3cf6e7a00cb12ecff7ce095b8cef1921621de681a64e5e53e3efc0cf6053e557205f2bdb9b9d5af4de3d54c79d1c9b1c474b83897590c647b1e92d9c93a","ssdeep":"","tlshash":"2a500003000c0030c00003000300ff30000300300000000c000c3000033000c0003c03","first_seen":"2023-04-05T15:24:10Z","last_seen":"2026-10-15T02:22:27.592405Z","times_seen":25276,"resource_available":true,"data":null}},"time_used":145,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":145,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"finzy6-ad33.sbs/landings/GmOduUo3eYSV/assets/img/arrow.webp","fqdn":"finzy6-ad33.sbs","domain":"finzy6-ad33.sbs","tld":"sbs"},"ip":{"addr":"104.21.84.53","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://finzy6-ad33.sbs/?d=NAkJ96G0qcPfABd8ztNaA4zWKUHuWZWlpvnf8cb7yJAHkJdFAYmUek6xb1H6zKreW49ABz0EuH%2Ffh2IC8SyW39d%2FLkdxBWBHklPHp15yM6SCvmFTtyzCHAQCV%2Bv9vh2TaOSlnLAU1q6dbfHC6P0ctFcVpKY1PM%2FvXI4W1sHqSswPBbvm6mQbD9wgpBZvg%2FFUvdqtYkihd6BDo6WIacvmRvRagwWJMkzKrn1pJN7BqrD%2F41o6dhbxwt1uYQhHRTVg\u0026on=Nord+Verdholm","date":"2026-10-08T14:49:38.289Z","timestamp":1791470978289,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"finzy6-ad33.sbs","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 08 Oct 2026 09:07:57 GMT","end":"Wed, 06 Jan 2027 09:07:56 GMT"},"fingerprint":{"sha1":"C1:BB:52:60:49:E9:58:67:D9:00:4F:3D:9B:53:3F:25:18:B8:02:9F","sha256":"7F:1F:80:E2:07:D6:32:78:E7:6D:12:02:2D:43:5F:AE:B2:58:BE:71:8D:C4:42:4A:1B:B7:11:5B:B9:94:3F:CB"}}},"request":{"raw":"GET /landings/GmOduUo3eYSV/assets/img/arrow.webp HTTP/1.1\r\nHost: finzy6-ad33.sbs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://finzy6-ad33.sbs/?d=NAkJ96G0qcPfABd8ztNaA4zWKUHuWZWlpvnf8cb7yJAHkJdFAYmUek6xb1H6zKreW49ABz0EuH%2Ffh2IC8SyW39d%2FLkdxBWBHklPHp15yM6SCvmFTtyzCHAQCV%2Bv9vh2TaOSlnLAU1q6dbfHC6P0ctFcVpKY1PM%2FvXI4W1sHqSswPBbvm6mQbD9wgpBZvg%2FFUvdqtYkihd6BDo6WIacvmRvRagwWJMkzKrn1pJN7BqrD%2F41o6dhbxwt1uYQhHRTVg\u0026on=Nord+Verdholm\r\nCookie: __cf_clicked=27861c05-5503-62\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"__cf_clicked","value":"27861c05-5503-62"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 08 Oct 2026 14:49:38 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Mon, 22 Dec 2025 11:24:46 GMT\r\npriority: u=5,i\r\netag: \"69492a7e-70\"\r\nexpires: Sat, 07 Nov 2026 14:31:36 GMT\r\ncache-control: public, max-age=2592000, immutable\r\naccept-ranges: bytes\r\nage: 1082\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=X%2FI2rARcFzLRkybdy4%2F7LzHNkqMSwUMnzYh2FmV03WLCDDS4FXNZ2K%2FRaX8YOCAf1ndNp6mO2RVZztPHVxXERLgO%2F5CVCZQc8PFSZB6OGhpHxyFbz%2FN%2Btw9KYx7pP43RyVU%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a475f40e49940daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 112\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":112,"size_decoded":875,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"3ed35d7aee08e1ee0c1ea424093781db","sha1":"9e2f224cb29573e0a6d35a6bb30990d922e1ce7b","sha256":"1e68d8ddcad69dfd83e1d5e0ad8206ff79cac33a559693590015599a5451d336","sha512":"65acae892b6ee89c0089ceff575012f4aebc273612809afe17c32ecdd54c3540dc964ff8fdcbc98986ce1006bbe077beb1715ba79e059cef4b1e6ef598ecd2f7","ssdeep":"","tlshash":"a2b092b217939590ce080d3e44bc0220a25b6904af86e9a6860780702a418a9ae279e8","first_seen":"2026-04-27T01:17:56.326635Z","last_seen":"2026-10-14T08:56:29.865777Z","times_seen":597,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"finzy6-ad33.sbs/landings/GmOduUo3eYSV/assets/img/mail.webp","fqdn":"finzy6-ad33.sbs","domain":"finzy6-ad33.sbs","tld":"sbs"},"ip":{"addr":"104.21.84.53","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://finzy6-ad33.sbs/?d=NAkJ96G0qcPfABd8ztNaA4zWKUHuWZWlpvnf8cb7yJAHkJdFAYmUek6xb1H6zKreW49ABz0EuH%2Ffh2IC8SyW39d%2FLkdxBWBHklPHp15yM6SCvmFTtyzCHAQCV%2Bv9vh2TaOSlnLAU1q6dbfHC6P0ctFcVpKY1PM%2FvXI4W1sHqSswPBbvm6mQbD9wgpBZvg%2FFUvdqtYkihd6BDo6WIacvmRvRagwWJMkzKrn1pJN7BqrD%2F41o6dhbxwt1uYQhHRTVg\u0026on=Nord+Verdholm","date":"2026-10-08T14:49:38.292Z","timestamp":1791470978292,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"finzy6-ad33.sbs","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 08 Oct 2026 09:07:57 GMT","end":"Wed, 06 Jan 2027 09:07:56 GMT"},"fingerprint":{"sha1":"C1:BB:52:60:49:E9:58:67:D9:00:4F:3D:9B:53:3F:25:18:B8:02:9F","sha256":"7F:1F:80:E2:07:D6:32:78:E7:6D:12:02:2D:43:5F:AE:B2:58:BE:71:8D:C4:42:4A:1B:B7:11:5B:B9:94:3F:CB"}}},"request":{"raw":"GET /landings/GmOduUo3eYSV/assets/img/mail.webp HTTP/1.1\r\nHost: finzy6-ad33.sbs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://finzy6-ad33.sbs/?d=NAkJ96G0qcPfABd8ztNaA4zWKUHuWZWlpvnf8cb7yJAHkJdFAYmUek6xb1H6zKreW49ABz0EuH%2Ffh2IC8SyW39d%2FLkdxBWBHklPHp15yM6SCvmFTtyzCHAQCV%2Bv9vh2TaOSlnLAU1q6dbfHC6P0ctFcVpKY1PM%2FvXI4W1sHqSswPBbvm6mQbD9wgpBZvg%2FFUvdqtYkihd6BDo6WIacvmRvRagwWJMkzKrn1pJN7BqrD%2F41o6dhbxwt1uYQhHRTVg\u0026on=Nord+Verdholm\r\nCookie: __cf_clicked=27861c05-5503-62\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"__cf_clicked","value":"27861c05-5503-62"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 08 Oct 2026 14:49:38 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Mon, 22 Dec 2025 11:24:48 GMT\r\npriority: u=5,i\r\netag: \"69492a80-a0\"\r\nexpires: Sat, 07 Nov 2026 14:31:36 GMT\r\ncache-control: public, max-age=2592000, immutable\r\naccept-ranges: bytes\r\nage: 1082\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FGM2m08oBZfmJvtzZ9rse%2BIUFGjCWhqW8GG%2BmSoCeXt1uhNOaLj%2Fns0Avn1vcbSljgUPCzeP8LRevaGKoZDiN4TjCcGYj1YKB199kXbwmZg2iS%2FNBuFRSSHCqurE1yittHM%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a475f40e59990daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 160\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":160,"size_decoded":919,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"de6a9f2422ad3bdac6a7aea1bcda2c2e","sha1":"acaef0983b6670ad7c9d36ca74814e6fff6ea60c","sha256":"446c8c1e347fcbcc4bc26cdc7603ffb480e6f74a85603ae69ad6bd06f21783fe","sha512":"8b1e02e5deb14555ae1066f93226ec76a9c140e4c4294a85c144957e82a8d896b43aa6fabcaf1eca94d977ad22458f0e0eea7f16be60e03eba31395d72c72dfe","ssdeep":"","tlshash":"1cc0802fc9444155dd061c96567311525917d40c85854555410551792d4f740352a2c6","first_seen":"2026-04-27T01:17:56.327995Z","last_seen":"2026-10-14T08:56:29.814848Z","times_seen":597,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"finzy6-ad33.sbs/landings/GmOduUo3eYSV/app/loader.js","fqdn":"finzy6-ad33.sbs","domain":"finzy6-ad33.sbs","tld":"sbs"},"ip":{"addr":"104.21.84.53","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://finzy6-ad33.sbs/?d=NAkJ96G0qcPfABd8ztNaA4zWKUHuWZWlpvnf8cb7yJAHkJdFAYmUek6xb1H6zKreW49ABz0EuH%2Ffh2IC8SyW39d%2FLkdxBWBHklPHp15yM6SCvmFTtyzCHAQCV%2Bv9vh2TaOSlnLAU1q6dbfHC6P0ctFcVpKY1PM%2FvXI4W1sHqSswPBbvm6mQbD9wgpBZvg%2FFUvdqtYkihd6BDo6WIacvmRvRagwWJMkzKrn1pJN7BqrD%2F41o6dhbxwt1uYQhHRTVg\u0026on=Nord+Verdholm","date":"2026-10-08T14:49:38.449Z","timestamp":1791470978449,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"finzy6-ad33.sbs","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 08 Oct 2026 09:07:57 GMT","end":"Wed, 06 Jan 2027 09:07:56 GMT"},"fingerprint":{"sha1":"C1:BB:52:60:49:E9:58:67:D9:00:4F:3D:9B:53:3F:25:18:B8:02:9F","sha256":"7F:1F:80:E2:07:D6:32:78:E7:6D:12:02:2D:43:5F:AE:B2:58:BE:71:8D:C4:42:4A:1B:B7:11:5B:B9:94:3F:CB"}}},"request":{"raw":"GET /landings/GmOduUo3eYSV/app/loader.js HTTP/1.1\r\nHost: finzy6-ad33.sbs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://finzy6-ad33.sbs/?d=NAkJ96G0qcPfABd8ztNaA4zWKUHuWZWlpvnf8cb7yJAHkJdFAYmUek6xb1H6zKreW49ABz0EuH%2Ffh2IC8SyW39d%2FLkdxBWBHklPHp15yM6SCvmFTtyzCHAQCV%2Bv9vh2TaOSlnLAU1q6dbfHC6P0ctFcVpKY1PM%2FvXI4W1sHqSswPBbvm6mQbD9wgpBZvg%2FFUvdqtYkihd6BDo6WIacvmRvRagwWJMkzKrn1pJN7BqrD%2F41o6dhbxwt1uYQhHRTVg\u0026on=Nord+Verdholm\r\nCookie: __cf_clicked=27861c05-5503-62\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"__cf_clicked","value":"27861c05-5503-62"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 08 Oct 2026 14:49:38 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 22 Dec 2025 11:07:00 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sSaY%2BtYyGV%2Fmqrx4YJhbhSSUhZJN2nA9j%2FN7%2Fp5%2FI%2FbgPQVbAmD07B1uFFdsoNAGCpZHMZ0f3oo3NiXlS5Wyf6%2BBPxMa1EPaxTkVC%2BGftSe2EZEb9EduIGr9jIWeZI8bZXI%3D\"}]}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69492654-14e1\"\r\nexpires: Sat, 07 Nov 2026 14:31:36 GMT\r\ncache-control: public, max-age=2592000, immutable\r\ncontent-encoding: gzip\r\nage: 1082\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a475f40f4a1b0daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5345,"size_decoded":2564,"mime_type":"application/javascript","magic":"C++ source, Unicode text, UTF-8 text","md5":"82f05a966efe3eb7bdb96cd927379326","sha1":"b798fedf42122ca705ec317b333bef1878390529","sha256":"0a59565c5d4f3234c826ec37adbb1af67f8581998bc4029c738a963e718d9048","sha512":"44232d202d2b14813c63af86721fd80159cff9b09a8a71db585731b8647d49a90e61ffa7b90772340d40b0b521b75b81de9ae181c0d020e5752b262c4b7c0b03","ssdeep":"96:iIaQ1lMQkBCe6poSoVifw9GLqYRCU8bZ3RxYVWLyyy1:IHQkBCRiSoAfw9GLqYRCU8bZ3RxYVWLk","tlshash":"80b153482bb74418944bd06d2bef3b8531384803b90adc8b7bdc828cdf85ad9d5627ed","first_seen":"2023-08-11T09:03:01Z","last_seen":"2026-10-14T08:56:29.843718Z","times_seen":1451,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"finzy6-ad33.sbs/landings/GmOduUo3eYSV/assets/img/apple-touch-icon.png","fqdn":"finzy6-ad33.sbs","domain":"finzy6-ad33.sbs","tld":"sbs"},"ip":{"addr":"104.21.84.53","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://finzy6-ad33.sbs/?d=NAkJ96G0qcPfABd8ztNaA4zWKUHuWZWlpvnf8cb7yJAHkJdFAYmUek6xb1H6zKreW49ABz0EuH%2Ffh2IC8SyW39d%2FLkdxBWBHklPHp15yM6SCvmFTtyzCHAQCV%2Bv9vh2TaOSlnLAU1q6dbfHC6P0ctFcVpKY1PM%2FvXI4W1sHqSswPBbvm6mQbD9wgpBZvg%2FFUvdqtYkihd6BDo6WIacvmRvRagwWJMkzKrn1pJN7BqrD%2F41o6dhbxwt1uYQhHRTVg\u0026on=Nord+Verdholm","date":"2026-10-08T14:49:38.444Z","timestamp":1791470978444,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"finzy6-ad33.sbs","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 08 Oct 2026 09:07:57 GMT","end":"Wed, 06 Jan 2027 09:07:56 GMT"},"fingerprint":{"sha1":"C1:BB:52:60:49:E9:58:67:D9:00:4F:3D:9B:53:3F:25:18:B8:02:9F","sha256":"7F:1F:80:E2:07:D6:32:78:E7:6D:12:02:2D:43:5F:AE:B2:58:BE:71:8D:C4:42:4A:1B:B7:11:5B:B9:94:3F:CB"}}},"request":{"raw":"GET /landings/GmOduUo3eYSV/assets/img/apple-touch-icon.png HTTP/1.1\r\nHost: finzy6-ad33.sbs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://finzy6-ad33.sbs/?d=NAkJ96G0qcPfABd8ztNaA4zWKUHuWZWlpvnf8cb7yJAHkJdFAYmUek6xb1H6zKreW49ABz0EuH%2Ffh2IC8SyW39d%2FLkdxBWBHklPHp15yM6SCvmFTtyzCHAQCV%2Bv9vh2TaOSlnLAU1q6dbfHC6P0ctFcVpKY1PM%2FvXI4W1sHqSswPBbvm6mQbD9wgpBZvg%2FFUvdqtYkihd6BDo6WIacvmRvRagwWJMkzKrn1pJN7BqrD%2F41o6dhbxwt1uYQhHRTVg\u0026on=Nord+Verdholm\r\nCookie: __cf_clicked=27861c05-5503-62\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"__cf_clicked","value":"27861c05-5503-62"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 08 Oct 2026 14:49:38 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Mon, 22 Dec 2025 11:24:46 GMT\r\npriority: u=6,i=?0\r\netag: \"69492a7e-9ca5\"\r\nexpires: Sat, 07 Nov 2026 14:31:36 GMT\r\ncache-control: public, max-age=2592000, immutable\r\naccept-ranges: bytes\r\nage: 1081\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=iPXzyQ%2BR46VUmBJPWpEiKEVB8AcA8Pn9L953Tx7Bv6m2ETZqTZIB2DnD%2F%2FFWKWUrQYAF7WpIMReN%2FwkiILE%2FLA0sYUTC5sXBltp5ALiuFOIzg3%2FcIjy9FCQlxg2hqojqhiE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a475f40f4a180daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 40101\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":40101,"size_decoded":40870,"mime_type":"image/png","magic":"PNG image data, 180 x 180, 8-bit/color RGBA, non-interlaced","md5":"f7067b20a897933b455ebeb81c66b7af","sha1":"754cc0486cb6c1a90caeb1242776a40a7629ad0a","sha256":"bbd9a64f51de897bd806bf23e4fb154fafde707b317a8f8c9ee920ffafe4bead","sha512":"5bb78ee1840a282be969e74f2a8b2996a7a854ae648672626149772459df8a22b92f64870f08ea60a697d55ae18c00a9ee840529058003d4aeb76671f5cc3506","ssdeep":"768:KBEVi/bXpjNYYvykcA1wXuYDNBULiOWLwxjCSOv2DRd8NwxWCTGyhs5BjMCCHCyu:wvdpYcrcTXueNB1ODvZDRGmEC6yEBou9","tlshash":"88030147e9d410b021350f923f9e145a853469d66ef34f86ac6f6ead630e335e833a39","first_seen":"2026-04-19T03:33:25.281836Z","last_seen":"2026-10-14T08:56:29.852193Z","times_seen":617,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"finzy6-ad33.sbs/landings/GmOduUo3eYSV/assets/img/user-4.webp","fqdn":"finzy6-ad33.sbs","domain":"finzy6-ad33.sbs","tld":"sbs"},"ip":{"addr":"104.21.84.53","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://finzy6-ad33.sbs/?d=NAkJ96G0qcPfABd8ztNaA4zWKUHuWZWlpvnf8cb7yJAHkJdFAYmUek6xb1H6zKreW49ABz0EuH%2Ffh2IC8SyW39d%2FLkdxBWBHklPHp15yM6SCvmFTtyzCHAQCV%2Bv9vh2TaOSlnLAU1q6dbfHC6P0ctFcVpKY1PM%2FvXI4W1sHqSswPBbvm6mQbD9wgpBZvg%2FFUvdqtYkihd6BDo6WIacvmRvRagwWJMkzKrn1pJN7BqrD%2F41o6dhbxwt1uYQhHRTVg\u0026on=Nord+Verdholm","date":"2026-10-08T14:49:38.283Z","timestamp":1791470978283,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"finzy6-ad33.sbs","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 08 Oct 2026 09:07:57 GMT","end":"Wed, 06 Jan 2027 09:07:56 GMT"},"fingerprint":{"sha1":"C1:BB:52:60:49:E9:58:67:D9:00:4F:3D:9B:53:3F:25:18:B8:02:9F","sha256":"7F:1F:80:E2:07:D6:32:78:E7:6D:12:02:2D:43:5F:AE:B2:58:BE:71:8D:C4:42:4A:1B:B7:11:5B:B9:94:3F:CB"}}},"request":{"raw":"GET /landings/GmOduUo3eYSV/assets/img/user-4.webp HTTP/1.1\r\nHost: finzy6-ad33.sbs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://finzy6-ad33.sbs/?d=NAkJ96G0qcPfABd8ztNaA4zWKUHuWZWlpvnf8cb7yJAHkJdFAYmUek6xb1H6zKreW49ABz0EuH%2Ffh2IC8SyW39d%2FLkdxBWBHklPHp15yM6SCvmFTtyzCHAQCV%2Bv9vh2TaOSlnLAU1q6dbfHC6P0ctFcVpKY1PM%2FvXI4W1sHqSswPBbvm6mQbD9wgpBZvg%2FFUvdqtYkihd6BDo6WIacvmRvRagwWJMkzKrn1pJN7BqrD%2F41o6dhbxwt1uYQhHRTVg\u0026on=Nord+Verdholm\r\nCookie: __cf_clicked=27861c05-5503-62\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"__cf_clicked","value":"27861c05-5503-62"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 08 Oct 2026 14:49:38 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Mon, 22 Dec 2025 11:24:50 GMT\r\npriority: u=5,i\r\netag: \"69492a82-2ea\"\r\nexpires: Sat, 07 Nov 2026 14:31:36 GMT\r\ncache-control: public, max-age=2592000, immutable\r\naccept-ranges: bytes\r\nage: 1082\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OfAaPwyJeYHuhdq0dQAD7W8DhKUE9LxkyXTWXMVzv4rban7Tdh7HhKo87TV9PqepKKo7bydsmCIvyE1nLet6SpyZNZKvy%2BTtcsRFtIAD9OFnxyxQSQFdp7%2BlhgQyUPL2hq4%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a475f40e498c0daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 746\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":746,"size_decoded":1502,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"8a84c9372fb977caa39c3bc91a398c34","sha1":"7c8de3de4164f8ee32fa210e5d0e0497af7a158a","sha256":"00e734351ba530fd72bc148d9613d984d1503ae307edbccfd20423ac7a2805b7","sha512":"b85504adaa43be8adebf4278f75b20ce64cbfb83252f74fb7bd104c418534f3a6ccde632f9b1eb32f75434079583dbf57cb65cde9e7e0f39587d6c207de1ed1f","ssdeep":"","tlshash":"640165ecaf901214eecc9d9392eb2c80f90d3d51840ca2136ad228a550936b6b978f52","first_seen":"2026-04-27T01:17:56.305515Z","last_seen":"2026-10-14T08:56:29.809896Z","times_seen":597,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"finzy6-ad33.sbs/landings/GmOduUo3eYSV/assets/img/telegram.webp","fqdn":"finzy6-ad33.sbs","domain":"finzy6-ad33.sbs","tld":"sbs"},"ip":{"addr":"104.21.84.53","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://finzy6-ad33.sbs/?d=NAkJ96G0qcPfABd8ztNaA4zWKUHuWZWlpvnf8cb7yJAHkJdFAYmUek6xb1H6zKreW49ABz0EuH%2Ffh2IC8SyW39d%2FLkdxBWBHklPHp15yM6SCvmFTtyzCHAQCV%2Bv9vh2TaOSlnLAU1q6dbfHC6P0ctFcVpKY1PM%2FvXI4W1sHqSswPBbvm6mQbD9wgpBZvg%2FFUvdqtYkihd6BDo6WIacvmRvRagwWJMkzKrn1pJN7BqrD%2F41o6dhbxwt1uYQhHRTVg\u0026on=Nord+Verdholm","date":"2026-10-08T14:49:38.291Z","timestamp":1791470978291,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"finzy6-ad33.sbs","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 08 Oct 2026 09:07:57 GMT","end":"Wed, 06 Jan 2027 09:07:56 GMT"},"fingerprint":{"sha1":"C1:BB:52:60:49:E9:58:67:D9:00:4F:3D:9B:53:3F:25:18:B8:02:9F","sha256":"7F:1F:80:E2:07:D6:32:78:E7:6D:12:02:2D:43:5F:AE:B2:58:BE:71:8D:C4:42:4A:1B:B7:11:5B:B9:94:3F:CB"}}},"request":{"raw":"GET /landings/GmOduUo3eYSV/assets/img/telegram.webp HTTP/1.1\r\nHost: finzy6-ad33.sbs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://finzy6-ad33.sbs/?d=NAkJ96G0qcPfABd8ztNaA4zWKUHuWZWlpvnf8cb7yJAHkJdFAYmUek6xb1H6zKreW49ABz0EuH%2Ffh2IC8SyW39d%2FLkdxBWBHklPHp15yM6SCvmFTtyzCHAQCV%2Bv9vh2TaOSlnLAU1q6dbfHC6P0ctFcVpKY1PM%2FvXI4W1sHqSswPBbvm6mQbD9wgpBZvg%2FFUvdqtYkihd6BDo6WIacvmRvRagwWJMkzKrn1pJN7BqrD%2F41o6dhbxwt1uYQhHRTVg\u0026on=Nord+Verdholm\r\nCookie: __cf_clicked=27861c05-5503-62\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"__cf_clicked","value":"27861c05-5503-62"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 08 Oct 2026 14:49:38 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Mon, 22 Dec 2025 11:24:48 GMT\r\npriority: u=5,i\r\netag: \"69492a80-d8\"\r\nexpires: Sat, 07 Nov 2026 14:31:36 GMT\r\ncache-control: public, max-age=2592000, immutable\r\naccept-ranges: bytes\r\nage: 1082\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DzZ1UwZTx6vJ3G3Jr959A%2FEc9DnX45ugNtBdlaKPZTnfy%2FEsgjENpePBNrtC89WZ%2F7yh7PCnj1LZ60OffzTENNzP3zxZyfOvfBQ3r8318oa5rfZwi9TQYiLrxYwcma5VPPQ%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a475f40e49980daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 216\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":216,"size_decoded":973,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"c59a41207f94a0fb54d8a6927bbb8b0e","sha1":"d2e92b46b472c66be057963160309f3ddb6e0c77","sha256":"11770298d080d2032db19c82208524caeff861efe711c1819493443ba0cd52b3","sha512":"5b76b7c417c6172bc70043070aef9995580aeeb2e3be9896090489dc026cf5dc969bfbbf9392bd099906714cb774368cfd3882c17771d4f934ba15cbacd74ae6","ssdeep":"","tlshash":"cbd0236f7285d451dedb5cf045f771a5446745494f5158c190cf04b73d1f8045a5730f","first_seen":"2026-04-27T01:17:56.306584Z","last_seen":"2026-10-14T08:56:29.81088Z","times_seen":597,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"finzy6-ad33.sbs/landings/GmOduUo3eYSV/assets/img/appstore.webp","fqdn":"finzy6-ad33.sbs","domain":"finzy6-ad33.sbs","tld":"sbs"},"ip":{"addr":"104.21.84.53","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://finzy6-ad33.sbs/?d=NAkJ96G0qcPfABd8ztNaA4zWKUHuWZWlpvnf8cb7yJAHkJdFAYmUek6xb1H6zKreW49ABz0EuH%2Ffh2IC8SyW39d%2FLkdxBWBHklPHp15yM6SCvmFTtyzCHAQCV%2Bv9vh2TaOSlnLAU1q6dbfHC6P0ctFcVpKY1PM%2FvXI4W1sHqSswPBbvm6mQbD9wgpBZvg%2FFUvdqtYkihd6BDo6WIacvmRvRagwWJMkzKrn1pJN7BqrD%2F41o6dhbxwt1uYQhHRTVg\u0026on=Nord+Verdholm","date":"2026-10-08T14:49:38.293Z","timestamp":1791470978293,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"finzy6-ad33.sbs","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 08 Oct 2026 09:07:57 GMT","end":"Wed, 06 Jan 2027 09:07:56 GMT"},"fingerprint":{"sha1":"C1:BB:52:60:49:E9:58:67:D9:00:4F:3D:9B:53:3F:25:18:B8:02:9F","sha256":"7F:1F:80:E2:07:D6:32:78:E7:6D:12:02:2D:43:5F:AE:B2:58:BE:71:8D:C4:42:4A:1B:B7:11:5B:B9:94:3F:CB"}}},"request":{"raw":"GET /landings/GmOduUo3eYSV/assets/img/appstore.webp HTTP/1.1\r\nHost: finzy6-ad33.sbs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://finzy6-ad33.sbs/?d=NAkJ96G0qcPfABd8ztNaA4zWKUHuWZWlpvnf8cb7yJAHkJdFAYmUek6xb1H6zKreW49ABz0EuH%2Ffh2IC8SyW39d%2FLkdxBWBHklPHp15yM6SCvmFTtyzCHAQCV%2Bv9vh2TaOSlnLAU1q6dbfHC6P0ctFcVpKY1PM%2FvXI4W1sHqSswPBbvm6mQbD9wgpBZvg%2FFUvdqtYkihd6BDo6WIacvmRvRagwWJMkzKrn1pJN7BqrD%2F41o6dhbxwt1uYQhHRTVg\u0026on=Nord+Verdholm\r\nCookie: __cf_clicked=27861c05-5503-62\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"__cf_clicked","value":"27861c05-5503-62"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 08 Oct 2026 14:49:38 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Mon, 22 Dec 2025 11:24:46 GMT\r\npriority: u=5,i\r\netag: \"69492a7e-5b4\"\r\nexpires: Sat, 07 Nov 2026 14:31:36 GMT\r\ncache-control: public, max-age=2592000, immutable\r\naccept-ranges: bytes\r\nage: 1082\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GuAXmMG%2BAapwasoZAmyug9lqtO1l2Igqt5GqPPPzquTzvRliJY%2F2S0mPJrczEJpcooposaQfZX01JyqK%2BpO68rBoQLhNXB0b5l5N7p9R2Fc1XEdM2UNK4vwKW2wD2BSG0tw%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a475f40e599c0daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1460\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1460,"size_decoded":2219,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"fa52b2def41095a1a20ebf17fa597121","sha1":"afe4c607fb0c733f2f15ef5f6942d2119923ec3e","sha256":"f034c3e15b7f798b95828d563a9dc869933240857b79d0377bfc1a5b20041aab","sha512":"a76bfc53bf2372f35ecca8223f9accbc2909ea7bd5836d658e85c6d2b7b1d1c06a31c70e4b73ed2cea280666aefe280f5046935c110f9242e4df013b2ae4a646","ssdeep":"","tlshash":"ca3119ec71500377f604f5f6729101fc0bc1d1288e1f12617e8c0685a8c6433bbb9b09","first_seen":"2026-04-27T01:17:56.308123Z","last_seen":"2026-10-14T08:56:29.874885Z","times_seen":597,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/intl-tel-input@23.1.0/build/css/intlTelInput.css","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.1.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://finzy6-ad33.sbs/?d=NAkJ96G0qcPfABd8ztNaA4zWKUHuWZWlpvnf8cb7yJAHkJdFAYmUek6xb1H6zKreW49ABz0EuH%2Ffh2IC8SyW39d%2FLkdxBWBHklPHp15yM6SCvmFTtyzCHAQCV%2Bv9vh2TaOSlnLAU1q6dbfHC6P0ctFcVpKY1PM%2FvXI4W1sHqSswPBbvm6mQbD9wgpBZvg%2FFUvdqtYkihd6BDo6WIacvmRvRagwWJMkzKrn1pJN7BqrD%2F41o6dhbxwt1uYQhHRTVg\u0026on=Nord+Verdholm","date":"2026-10-08T14:49:38.452Z","timestamp":1791470978452,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2026 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 20 May 2026 15:48:47 GMT","end":"Sat, 05 Dec 2026 14:48:47 GMT"},"fingerprint":{"sha1":"D4:05:C2:EC:C7:EE:2B:D0:08:68:0D:3D:33:77:48:78:43:E7:D1:E1","sha256":"ED:84:90:EE:71:BC:6B:5E:B3:D2:50:B0:23:3A:06:0D:E0:50:C6:B6:A9:09:36:E6:CE:FE:E8:66:89:EB:4E:C5"}}},"request":{"raw":"GET /npm/intl-tel-input@23.1.0/build/css/intlTelInput.css HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://finzy6-ad33.sbs/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-length: 3384\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: text/css; charset=utf-8\r\nx-jsd-version: 23.1.0\r\nx-jsd-version-type: version\r\netag: W/\"4f9c-YW++h4sxifKlsVyMHgLARnQAuWE\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\ndate: Thu, 08 Oct 2026 14:49:38 GMT\r\nage: 880608\r\nx-served-by: cache-fra-etou8220166-FRA, cache-bma-essb1270067-BMA\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":20380,"size_decoded":4143,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (830)","md5":"b46140e6a10359c79822e7b801f0391b","sha1":"616fbe878b3189f2a5b15c8c1e02c0467400b961","sha256":"def1a0f6d2bd2a01f1f842475b7e7da7f2596f2783fd8872c37624ae406425af","sha512":"3a44a85b26a849c8d784e9bced73b9843cf51396eebe6d9a024abee73266698a72940d0e289e67a39a9ce1946b980a686971205dcde7d22c954b5ab91608898e","ssdeep":"192:WTxfNDsX5uVsAPkkk8ii/yE9y6czvZzorr8/zJHVyT1bK0VN12o7tHPVEVtVaVb2:IVsXk1kdCqE9y6mporr8LJj0H12o7U5","tlshash":"c5929e2346b00d3e965dc1fa38a2c1b5773f0c8a35eecc96eed9504a5887b90e5ebc54","first_seen":"2024-06-08T15:25:15Z","last_seen":"2026-10-14T19:21:10.461989Z","times_seen":2473,"resource_available":true,"data":null}},"time_used":261,"timings":{"blocked":-1,"dns":2,"connect":10,"send":0,"wait":9,"receive":0,"ssl":14},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.studlink-proof.pro/engagement/ping","fqdn":"api.studlink-proof.pro","domain":"studlink-proof.pro","tld":"pro"},"ip":{"addr":"104.21.73.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://finzy6-ad33.sbs/?d=NAkJ96G0qcPfABd8ztNaA4zWKUHuWZWlpvnf8cb7yJAHkJdFAYmUek6xb1H6zKreW49ABz0EuH%2Ffh2IC8SyW39d%2FLkdxBWBHklPHp15yM6SCvmFTtyzCHAQCV%2Bv9vh2TaOSlnLAU1q6dbfHC6P0ctFcVpKY1PM%2FvXI4W1sHqSswPBbvm6mQbD9wgpBZvg%2FFUvdqtYkihd6BDo6WIacvmRvRagwWJMkzKrn1pJN7BqrD%2F41o6dhbxwt1uYQhHRTVg\u0026on=Nord+Verdholm","date":"2026-10-08T14:49:41.411Z","timestamp":1791470981411,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"studlink-proof.pro","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 23 Sep 2026 11:05:21 GMT","end":"Tue, 22 Dec 2026 11:05:20 GMT"},"fingerprint":{"sha1":"DE:AA:50:54:30:5F:28:F8:31:DC:84:48:7E:69:27:2D:C2:8B:8B:22","sha256":"35:1D:18:EC:E7:F7:31:42:A1:58:14:F4:06:E0:57:4E:BB:CD:45:1A:4B:91:B5:20:5F:BD:39:E7:BF:12:4A:D0"}}},"request":{"raw":"POST /engagement/ping HTTP/1.1\r\nHost: api.studlink-proof.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: text/plain;charset=UTF-8\r\nReferer: https://finzy6-ad33.sbs/\r\nContent-Length: 57\r\nOrigin: https://finzy6-ad33.sbs\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":57,"data":"{\"uuid\":\"27861c05-5503-62\",\"landing_type\":1,\"t\":3,\"s\":62}"}},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 08 Oct 2026 14:49:41 GMT\r\ncontent-type: application/json; charset=UTF-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0KkGV998PLqfMWaiI32MdToWOmJaaD36l%2FULX11rXJZ6yGqqwU35vv5x26XaVsaMDrEXbmhIXzxLA6lxpFrmzjVklbFindBa3lUbqhQ6glx3DwFyWNdkRSzuAI1VtjDIMFcWb3PdLc%2Bf\"}]}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a475f421fe9d568a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11,"size_decoded":687,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"82380d1e263b6093f3c7535690fcdd75","sha1":"022d91f218046ab2e61cac1eb13d6a718f75df2b","sha256":"4062edaf750fb8074e7e83e0c9028c94e32468a8b6f1614774328ef045150f93","sha512":"180ea3cf6e7a00cb12ecff7ce095b8cef1921621de681a64e5e53e3efc0cf6053e557205f2bdb9b9d5af4de3d54c79d1c9b1c474b83897590c647b1e92d9c93a","ssdeep":"","tlshash":"2a500003000c0030c00003000300ff30000300300000000c000c3000033000c0003c03","first_seen":"2023-04-05T15:24:10Z","last_seen":"2026-10-15T02:22:27.592405Z","times_seen":25276,"resource_available":true,"data":null}},"time_used":151,"timings":{"blocked":0,"dns":3,"connect":20,"send":0,"wait":128,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/jquery/2.2.4/jquery.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://finzy6-ad33.sbs/?d=NAkJ96G0qcPfABd8ztNaA4zWKUHuWZWlpvnf8cb7yJAHkJdFAYmUek6xb1H6zKreW49ABz0EuH%2Ffh2IC8SyW39d%2FLkdxBWBHklPHp15yM6SCvmFTtyzCHAQCV%2Bv9vh2TaOSlnLAU1q6dbfHC6P0ctFcVpKY1PM%2FvXI4W1sHqSswPBbvm6mQbD9wgpBZvg%2FFUvdqtYkihd6BDo6WIacvmRvRagwWJMkzKrn1pJN7BqrD%2F41o6dhbxwt1uYQhHRTVg\u0026on=Nord+Verdholm","date":"2026-10-08T14:49:38.263Z","timestamp":1791470978263,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Sep 2026 14:43:48 GMT","end":"Sun, 06 Dec 2026 15:43:45 GMT"},"fingerprint":{"sha1":"70:B5:44:5C:25:65:CF:4A:4B:DB:6F:16:E1:4E:D9:85:C7:F3:75:4E","sha256":"63:B5:DA:B8:4F:95:99:9A:4B:77:FF:DB:3F:8D:7E:3D:1A:62:AD:A9:D9:06:9E:C3:59:6F:4A:61:A2:D2:20:CB"}}},"request":{"raw":"GET /ajax/libs/jquery/2.2.4/jquery.min.js HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://finzy6-ad33.sbs/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nserver: cloudflare\r\ndate: Thu, 08 Oct 2026 14:49:38 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\npriority: u=2,i=?0\r\ncf-cache-status: BYPASS\r\naccess-control-allow-origin: *\r\nage: 1267214\r\ncache-control: no-transform, public, s-maxage=30672000, max-age=30672000, immutable\r\ncontent-encoding: br\r\nlast-modified: Mon, 04 May 2020 16:11:48 GMT\r\nvary: Accept-Encoding\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/r2\r\nx-cdnjs-cache: HIT\r\nstrict-transport-security: max-age=15780000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fWZGR5OZCxa3bZvjHwy4Cdd%2BB4TxjfMgbGeBxuFDVPnavBB%2BLReZ4Zeauzas8hybb839krR%2FjwR7Ac92EhrbszRvoAXUeTuGvc66%2FTczYrYipI0F38g0%2Bx5l7JJOfidCxpa4dxr%2F\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\ncf-ray: a475f40e4d0fb28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 26909\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":85578,"size_decoded":27934,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (32065)","md5":"2f6b11a7e914718e0290410e85366fe9","sha1":"69bb69e25ca7d5ef0935317584e6153f3fd9a88c","sha256":"05b85d96f41fff14d8f608dad03ab71e2c1017c2da0914d7c59291bad7a54f8e","sha512":"0d40bccaa59fedecf7243d63b33c42592541d0330fefc78ec81a4c6b9689922d5b211011ca4be23ae22621cce4c658f52a1552c92d7ac3615241eb640f8514db","ssdeep":"1536:EYE1JVoiB9JqZdXXe2pD3PgoIiulrUndZ6a4tfOR7WpfWBZ2BJda4w9W3qG9a986:v4J+OlfOhWppCW6G9a98Hr2","tlshash":"1e83c6d9b2d6706297b734b850bf410bb17a98dab44c8c60f059d4e47eb4a8e507bf2c","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-10-15T02:27:56.090371Z","times_seen":301109,"resource_available":true,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":3,"connect":14,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"finzy6-ad33.sbs/landings/GmOduUo3eYSV/assets/img/twitter.webp","fqdn":"finzy6-ad33.sbs","domain":"finzy6-ad33.sbs","tld":"sbs"},"ip":{"addr":"104.21.84.53","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://finzy6-ad33.sbs/?d=NAkJ96G0qcPfABd8ztNaA4zWKUHuWZWlpvnf8cb7yJAHkJdFAYmUek6xb1H6zKreW49ABz0EuH%2Ffh2IC8SyW39d%2FLkdxBWBHklPHp15yM6SCvmFTtyzCHAQCV%2Bv9vh2TaOSlnLAU1q6dbfHC6P0ctFcVpKY1PM%2FvXI4W1sHqSswPBbvm6mQbD9wgpBZvg%2FFUvdqtYkihd6BDo6WIacvmRvRagwWJMkzKrn1pJN7BqrD%2F41o6dhbxwt1uYQhHRTVg\u0026on=Nord+Verdholm","date":"2026-10-08T14:49:38.296Z","timestamp":1791470978296,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"finzy6-ad33.sbs","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 08 Oct 2026 09:07:57 GMT","end":"Wed, 06 Jan 2027 09:07:56 GMT"},"fingerprint":{"sha1":"C1:BB:52:60:49:E9:58:67:D9:00:4F:3D:9B:53:3F:25:18:B8:02:9F","sha256":"7F:1F:80:E2:07:D6:32:78:E7:6D:12:02:2D:43:5F:AE:B2:58:BE:71:8D:C4:42:4A:1B:B7:11:5B:B9:94:3F:CB"}}},"request":{"raw":"GET /landings/GmOduUo3eYSV/assets/img/twitter.webp HTTP/1.1\r\nHost: finzy6-ad33.sbs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://finzy6-ad33.sbs/?d=NAkJ96G0qcPfABd8ztNaA4zWKUHuWZWlpvnf8cb7yJAHkJdFAYmUek6xb1H6zKreW49ABz0EuH%2Ffh2IC8SyW39d%2FLkdxBWBHklPHp15yM6SCvmFTtyzCHAQCV%2Bv9vh2TaOSlnLAU1q6dbfHC6P0ctFcVpKY1PM%2FvXI4W1sHqSswPBbvm6mQbD9wgpBZvg%2FFUvdqtYkihd6BDo6WIacvmRvRagwWJMkzKrn1pJN7BqrD%2F41o6dhbxwt1uYQhHRTVg\u0026on=Nord+Verdholm\r\nCookie: __cf_clicked=27861c05-5503-62\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"__cf_clicked","value":"27861c05-5503-62"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 08 Oct 2026 14:49:38 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Mon, 22 Dec 2025 11:24:48 GMT\r\npriority: u=5,i\r\netag: \"69492a80-118\"\r\nexpires: Sat, 07 Nov 2026 14:31:36 GMT\r\ncache-control: public, max-age=2592000, immutable\r\naccept-ranges: bytes\r\nage: 1082\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DuDvxc1b%2FUHwXSYBwN23vwKaWH6rvF6qjO1waRKZpWkS1DuTX9c4tafDeA7%2BUdgrDmsVRfPCJqCIUAutsbmXTo3kBHh7dxEs6XEJ0lNHXtI7%2BxFueRzaGQqAouPSdHWhmOg%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a475f40e599e0daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 280\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":280,"size_decoded":1038,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"b46d58890d1b7fa4c34f55a543332f84","sha1":"8b5a196cadb66d30d6a85c01b9e458ce507538dc","sha256":"625966e1328ca273b509cf7fb56491baecaa3f6615838dcbf7a16157c894f358","sha512":"d52ae824a9c5e8034f1976166848f4e0c45b33b41f3cac319b32425cb9cd5cf9eb8ce6c1e1a95fe5d14f735db3f0a3d3ad79715dba0fcd6aa8bad6fb6a03ab70","ssdeep":"","tlshash":"a7d02b1f21d606afea10763116e4264a43644e9a0601f60a059b19e41586e481682ff8","first_seen":"2026-04-27T01:17:56.348512Z","last_seen":"2026-10-14T08:56:29.880021Z","times_seen":597,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.studlink-proof.pro/engagement/ping","fqdn":"api.studlink-proof.pro","domain":"studlink-proof.pro","tld":"pro"},"ip":{"addr":"104.21.73.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://finzy6-ad33.sbs/?d=NAkJ96G0qcPfABd8ztNaA4zWKUHuWZWlpvnf8cb7yJAHkJdFAYmUek6xb1H6zKreW49ABz0EuH%2Ffh2IC8SyW39d%2FLkdxBWBHklPHp15yM6SCvmFTtyzCHAQCV%2Bv9vh2TaOSlnLAU1q6dbfHC6P0ctFcVpKY1PM%2FvXI4W1sHqSswPBbvm6mQbD9wgpBZvg%2FFUvdqtYkihd6BDo6WIacvmRvRagwWJMkzKrn1pJN7BqrD%2F41o6dhbxwt1uYQhHRTVg\u0026on=Nord+Verdholm","date":"2026-10-08T14:49:48.412Z","timestamp":1791470988412,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"studlink-proof.pro","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 23 Sep 2026 11:05:21 GMT","end":"Tue, 22 Dec 2026 11:05:20 GMT"},"fingerprint":{"sha1":"DE:AA:50:54:30:5F:28:F8:31:DC:84:48:7E:69:27:2D:C2:8B:8B:22","sha256":"35:1D:18:EC:E7:F7:31:42:A1:58:14:F4:06:E0:57:4E:BB:CD:45:1A:4B:91:B5:20:5F:BD:39:E7:BF:12:4A:D0"}}},"request":{"raw":"POST /engagement/ping HTTP/1.1\r\nHost: api.studlink-proof.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: text/plain;charset=UTF-8\r\nReferer: https://finzy6-ad33.sbs/\r\nContent-Length: 58\r\nOrigin: https://finzy6-ad33.sbs\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":58,"data":"{\"uuid\":\"27861c05-5503-62\",\"landing_type\":1,\"t\":10,\"s\":62}"}},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 08 Oct 2026 14:49:48 GMT\r\ncontent-type: application/json; charset=UTF-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NF3zTiUzUZYHY4n4pkl4w57AObVCzASEW74VqCoou5X80sGyHVJWVjLC7qKaKkVRI0C4N995%2F%2FP8DOGTlGLKvcNp8L5%2BGASzCc3WmbabWB9BimfBqw5D%2BFgsFU56BVhBD1%2BdNIMfHWTA\"}]}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a475f44d9b23568a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11,"size_decoded":693,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"82380d1e263b6093f3c7535690fcdd75","sha1":"022d91f218046ab2e61cac1eb13d6a718f75df2b","sha256":"4062edaf750fb8074e7e83e0c9028c94e32468a8b6f1614774328ef045150f93","sha512":"180ea3cf6e7a00cb12ecff7ce095b8cef1921621de681a64e5e53e3efc0cf6053e557205f2bdb9b9d5af4de3d54c79d1c9b1c474b83897590c647b1e92d9c93a","ssdeep":"","tlshash":"2a500003000c0030c00003000300ff30000300300000000c000c3000033000c0003c03","first_seen":"2023-04-05T15:24:10Z","last_seen":"2026-10-15T02:22:27.592405Z","times_seen":25276,"resource_available":true,"data":null}},"time_used":132,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":132,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"finzy6-ad33.sbs/landings/GmOduUo3eYSV/assets/css/style.css","fqdn":"finzy6-ad33.sbs","domain":"finzy6-ad33.sbs","tld":"sbs"},"ip":{"addr":"104.21.84.53","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://finzy6-ad33.sbs/?d=NAkJ96G0qcPfABd8ztNaA4zWKUHuWZWlpvnf8cb7yJAHkJdFAYmUek6xb1H6zKreW49ABz0EuH%2Ffh2IC8SyW39d%2FLkdxBWBHklPHp15yM6SCvmFTtyzCHAQCV%2Bv9vh2TaOSlnLAU1q6dbfHC6P0ctFcVpKY1PM%2FvXI4W1sHqSswPBbvm6mQbD9wgpBZvg%2FFUvdqtYkihd6BDo6WIacvmRvRagwWJMkzKrn1pJN7BqrD%2F41o6dhbxwt1uYQhHRTVg\u0026on=Nord+Verdholm","date":"2026-10-08T14:49:38.266Z","timestamp":1791470978266,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"finzy6-ad33.sbs","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 08 Oct 2026 09:07:57 GMT","end":"Wed, 06 Jan 2027 09:07:56 GMT"},"fingerprint":{"sha1":"C1:BB:52:60:49:E9:58:67:D9:00:4F:3D:9B:53:3F:25:18:B8:02:9F","sha256":"7F:1F:80:E2:07:D6:32:78:E7:6D:12:02:2D:43:5F:AE:B2:58:BE:71:8D:C4:42:4A:1B:B7:11:5B:B9:94:3F:CB"}}},"request":{"raw":"GET /landings/GmOduUo3eYSV/assets/css/style.css HTTP/1.1\r\nHost: finzy6-ad33.sbs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://finzy6-ad33.sbs/?d=NAkJ96G0qcPfABd8ztNaA4zWKUHuWZWlpvnf8cb7yJAHkJdFAYmUek6xb1H6zKreW49ABz0EuH%2Ffh2IC8SyW39d%2FLkdxBWBHklPHp15yM6SCvmFTtyzCHAQCV%2Bv9vh2TaOSlnLAU1q6dbfHC6P0ctFcVpKY1PM%2FvXI4W1sHqSswPBbvm6mQbD9wgpBZvg%2FFUvdqtYkihd6BDo6WIacvmRvRagwWJMkzKrn1pJN7BqrD%2F41o6dhbxwt1uYQhHRTVg\u0026on=Nord+Verdholm\r\nCookie: __cf_clicked=27861c05-5503-62\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"__cf_clicked","value":"27861c05-5503-62"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 08 Oct 2026 14:49:38 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 22 Dec 2025 11:24:46 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zINJ1xXFGCYawy4BCpbMq2MWp7cprXhVF2nbwiUKXri7xYTg6jYgoDKluJP5R12a6Jgyfdwm0qSVDmP4pgEUvIW2xlqtNK1JdQ7nT5cuEbaGXSkyDUsfANIzZdz8G3YWBoQ%3D\"}]}\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69492a7e-3887\"\r\nexpires: Sat, 07 Nov 2026 14:31:36 GMT\r\ncache-control: public, max-age=2592000, immutable\r\ncontent-encoding: gzip\r\nage: 1082\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a475f40e297a0daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14471,"size_decoded":3516,"mime_type":"text/css","magic":"ASCII text, with very long lines (14471), with no line terminators","md5":"84700c10f6c458bc9e8ab04549796b2d","sha1":"846df2180747fd32b80268c84dd90eabc7de15d3","sha256":"4636d40ac4f591e08ee2b118d202add759f47684d3fca6d4e27c461cd9686c74","sha512":"e71d1058a028140f2b9accc9484c062805154b1c4916fc38d4485ce029a9437121415d4a1e3a9949dc8c8be82f8ba72872fdfe8324a613da212c64c0c0cc3e69","ssdeep":"384:2pYL3PnJxlixVmbUKwKpjmjPec+CD2JNk97:FLfJxg4Q2J297","tlshash":"575230335912370cb03bcc5193c46a666168c127d01726fbed62aa18cbc7ad76af275f","first_seen":"2026-04-27T01:17:56.338433Z","last_seen":"2026-10-14T08:56:29.864838Z","times_seen":596,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"finzy6-ad33.sbs/landings/GmOduUo3eYSV/assets/js/script.js","fqdn":"finzy6-ad33.sbs","domain":"finzy6-ad33.sbs","tld":"sbs"},"ip":{"addr":"104.21.84.53","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://finzy6-ad33.sbs/?d=NAkJ96G0qcPfABd8ztNaA4zWKUHuWZWlpvnf8cb7yJAHkJdFAYmUek6xb1H6zKreW49ABz0EuH%2Ffh2IC8SyW39d%2FLkdxBWBHklPHp15yM6SCvmFTtyzCHAQCV%2Bv9vh2TaOSlnLAU1q6dbfHC6P0ctFcVpKY1PM%2FvXI4W1sHqSswPBbvm6mQbD9wgpBZvg%2FFUvdqtYkihd6BDo6WIacvmRvRagwWJMkzKrn1pJN7BqrD%2F41o6dhbxwt1uYQhHRTVg\u0026on=Nord+Verdholm","date":"2026-10-08T14:49:38.273Z","timestamp":1791470978273,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"finzy6-ad33.sbs","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 08 Oct 2026 09:07:57 GMT","end":"Wed, 06 Jan 2027 09:07:56 GMT"},"fingerprint":{"sha1":"C1:BB:52:60:49:E9:58:67:D9:00:4F:3D:9B:53:3F:25:18:B8:02:9F","sha256":"7F:1F:80:E2:07:D6:32:78:E7:6D:12:02:2D:43:5F:AE:B2:58:BE:71:8D:C4:42:4A:1B:B7:11:5B:B9:94:3F:CB"}}},"request":{"raw":"GET /landings/GmOduUo3eYSV/assets/js/script.js HTTP/1.1\r\nHost: finzy6-ad33.sbs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://finzy6-ad33.sbs/?d=NAkJ96G0qcPfABd8ztNaA4zWKUHuWZWlpvnf8cb7yJAHkJdFAYmUek6xb1H6zKreW49ABz0EuH%2Ffh2IC8SyW39d%2FLkdxBWBHklPHp15yM6SCvmFTtyzCHAQCV%2Bv9vh2TaOSlnLAU1q6dbfHC6P0ctFcVpKY1PM%2FvXI4W1sHqSswPBbvm6mQbD9wgpBZvg%2FFUvdqtYkihd6BDo6WIacvmRvRagwWJMkzKrn1pJN7BqrD%2F41o6dhbxwt1uYQhHRTVg\u0026on=Nord+Verdholm\r\nCookie: __cf_clicked=27861c05-5503-62\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"__cf_clicked","value":"27861c05-5503-62"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 08 Oct 2026 14:49:38 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 22 Dec 2025 11:24:46 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dGb9QRVqwSswUeSwzQueP95mteWC7chVnaQOeFo1441S01MTHRZmS36xgSCNxuOiRbJhLY4mtwWjUhZzLBXQgQIFiUbHRCq%2Byw12dFXVCJ5HDmAndb9LehQZJ96yNC8JQgI%3D\"}]}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69492a7e-353\"\r\nexpires: Sat, 07 Nov 2026 14:31:36 GMT\r\ncache-control: public, max-age=2592000, immutable\r\ncontent-encoding: gzip\r\nage: 1082\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a475f40e397f0daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":851,"size_decoded":1093,"mime_type":"application/javascript","magic":"ASCII text, with CRLF line terminators","md5":"d61af9b56ccdf7ac0608d6d611b4ff8d","sha1":"684d420c5f0eee7d116b72734e97dcb98ab71227","sha256":"66466c71ea9cc91b64599d3c480961e73f41150dd9e745b3d8158ef3d477899a","sha512":"fe520a74cdae2f46c6507795d9dd79cf2b261a613fe5a21f4bb69b14a3aeaddfb7cffe6884e3ef26ec5f4e994409906803d337d4b5f5f2e9ab85361801bb2790","ssdeep":"","tlshash":"4e016b5505280039823fa26a97d193ddf97041bfe186854a786d418d2ffaab206f0be6","first_seen":"2026-04-27T01:17:56.351427Z","last_seen":"2026-10-14T08:56:29.872984Z","times_seen":597,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"finzy6-ad33.sbs/landings/GmOduUo3eYSV/assets/img/googleplay.webp","fqdn":"finzy6-ad33.sbs","domain":"finzy6-ad33.sbs","tld":"sbs"},"ip":{"addr":"104.21.84.53","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://finzy6-ad33.sbs/?d=NAkJ96G0qcPfABd8ztNaA4zWKUHuWZWlpvnf8cb7yJAHkJdFAYmUek6xb1H6zKreW49ABz0EuH%2Ffh2IC8SyW39d%2FLkdxBWBHklPHp15yM6SCvmFTtyzCHAQCV%2Bv9vh2TaOSlnLAU1q6dbfHC6P0ctFcVpKY1PM%2FvXI4W1sHqSswPBbvm6mQbD9wgpBZvg%2FFUvdqtYkihd6BDo6WIacvmRvRagwWJMkzKrn1pJN7BqrD%2F41o6dhbxwt1uYQhHRTVg\u0026on=Nord+Verdholm","date":"2026-10-08T14:49:38.295Z","timestamp":1791470978295,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"finzy6-ad33.sbs","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 08 Oct 2026 09:07:57 GMT","end":"Wed, 06 Jan 2027 09:07:56 GMT"},"fingerprint":{"sha1":"C1:BB:52:60:49:E9:58:67:D9:00:4F:3D:9B:53:3F:25:18:B8:02:9F","sha256":"7F:1F:80:E2:07:D6:32:78:E7:6D:12:02:2D:43:5F:AE:B2:58:BE:71:8D:C4:42:4A:1B:B7:11:5B:B9:94:3F:CB"}}},"request":{"raw":"GET /landings/GmOduUo3eYSV/assets/img/googleplay.webp HTTP/1.1\r\nHost: finzy6-ad33.sbs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://finzy6-ad33.sbs/?d=NAkJ96G0qcPfABd8ztNaA4zWKUHuWZWlpvnf8cb7yJAHkJdFAYmUek6xb1H6zKreW49ABz0EuH%2Ffh2IC8SyW39d%2FLkdxBWBHklPHp15yM6SCvmFTtyzCHAQCV%2Bv9vh2TaOSlnLAU1q6dbfHC6P0ctFcVpKY1PM%2FvXI4W1sHqSswPBbvm6mQbD9wgpBZvg%2FFUvdqtYkihd6BDo6WIacvmRvRagwWJMkzKrn1pJN7BqrD%2F41o6dhbxwt1uYQhHRTVg\u0026on=Nord+Verdholm\r\nCookie: __cf_clicked=27861c05-5503-62\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"__cf_clicked","value":"27861c05-5503-62"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 08 Oct 2026 14:49:38 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Mon, 22 Dec 2025 11:24:48 GMT\r\npriority: u=5,i\r\netag: \"69492a80-5a2\"\r\nexpires: Sat, 07 Nov 2026 14:31:36 GMT\r\ncache-control: public, max-age=2592000, immutable\r\naccept-ranges: bytes\r\nage: 1082\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6pHYBQ5plbhHjPkk9WIXMqSL9ufpUqiYA%2BpRW6l%2BwtV5NLVzgwvtaSS8n4aOU%2Fm%2B2RNTi4P7ItwaHSwSXeUOzLkSU81JGiVR4H9ytSqrZ8t%2FkIVVnGOcYy8vSkXNslk9hsI%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a475f40e599d0daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1442\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1442,"size_decoded":2205,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"2dfb7c00fb318f392cd9509fd404b122","sha1":"35025be916e82289009e6825ac7cb5f580cd99b5","sha256":"171ce7d277ec5ac4cdfb75c9a7ebb0abd633153a3470ce835d720e4134f9903b","sha512":"7a05b34d815a99ecbcceedb29cd3919a2fde52d1ab3fa35e2227dd04baaad864d8f8b5968fc68fae4c80a38d91ed8a2623ff4d629eb98e4ccf4c30398a613991","ssdeep":"","tlshash":"34210b5c785730c1112aea45a2acb14f7043148f4c8ebe425959b71407b8c7ad33dade","first_seen":"2026-04-27T01:17:56.309564Z","last_seen":"2026-10-14T08:56:29.872042Z","times_seen":597,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"finzy6-ad33.sbs/landings/GmOduUo3eYSV/assets/img/viber.webp","fqdn":"finzy6-ad33.sbs","domain":"finzy6-ad33.sbs","tld":"sbs"},"ip":{"addr":"104.21.84.53","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://finzy6-ad33.sbs/?d=NAkJ96G0qcPfABd8ztNaA4zWKUHuWZWlpvnf8cb7yJAHkJdFAYmUek6xb1H6zKreW49ABz0EuH%2Ffh2IC8SyW39d%2FLkdxBWBHklPHp15yM6SCvmFTtyzCHAQCV%2Bv9vh2TaOSlnLAU1q6dbfHC6P0ctFcVpKY1PM%2FvXI4W1sHqSswPBbvm6mQbD9wgpBZvg%2FFUvdqtYkihd6BDo6WIacvmRvRagwWJMkzKrn1pJN7BqrD%2F41o6dhbxwt1uYQhHRTVg\u0026on=Nord+Verdholm","date":"2026-10-08T14:49:38.297Z","timestamp":1791470978297,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"finzy6-ad33.sbs","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 08 Oct 2026 09:07:57 GMT","end":"Wed, 06 Jan 2027 09:07:56 GMT"},"fingerprint":{"sha1":"C1:BB:52:60:49:E9:58:67:D9:00:4F:3D:9B:53:3F:25:18:B8:02:9F","sha256":"7F:1F:80:E2:07:D6:32:78:E7:6D:12:02:2D:43:5F:AE:B2:58:BE:71:8D:C4:42:4A:1B:B7:11:5B:B9:94:3F:CB"}}},"request":{"raw":"GET /landings/GmOduUo3eYSV/assets/img/viber.webp HTTP/1.1\r\nHost: finzy6-ad33.sbs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://finzy6-ad33.sbs/?d=NAkJ96G0qcPfABd8ztNaA4zWKUHuWZWlpvnf8cb7yJAHkJdFAYmUek6xb1H6zKreW49ABz0EuH%2Ffh2IC8SyW39d%2FLkdxBWBHklPHp15yM6SCvmFTtyzCHAQCV%2Bv9vh2TaOSlnLAU1q6dbfHC6P0ctFcVpKY1PM%2FvXI4W1sHqSswPBbvm6mQbD9wgpBZvg%2FFUvdqtYkihd6BDo6WIacvmRvRagwWJMkzKrn1pJN7BqrD%2F41o6dhbxwt1uYQhHRTVg\u0026on=Nord+Verdholm\r\nCookie: __cf_clicked=27861c05-5503-62\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"__cf_clicked","value":"27861c05-5503-62"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 08 Oct 2026 14:49:38 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Mon, 22 Dec 2025 11:24:50 GMT\r\npriority: u=5,i\r\netag: \"69492a82-16c\"\r\nexpires: Sat, 07 Nov 2026 14:31:36 GMT\r\ncache-control: public, max-age=2592000, immutable\r\naccept-ranges: bytes\r\nage: 1082\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fmeeGhH5%2BDUQj8NzXWH9eVmo4zt4BqMosCYDfJVBFQtAxCTf6oTKz6KSPKxxTggNqsq7IOpkIUUr8CCuKL6VGlJXsEF52dAjqfFl2zeuWYHfTn92vfdBXqzboYlKpn%2FcW0I%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a475f40e599f0daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 364\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":364,"size_decoded":1120,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"752bd6205616b7a11413cc4d079597cd","sha1":"aaf4585fc4194088628c543a2af1ca7528d36cff","sha256":"7526c3b8d4ad512e9dc566542866923ee38a7d55d39d9774a934b8521b4c4080","sha512":"63b61a6da61942a7c68361d1b8fad88c844d49ec0ce42bab3a82f9b2d060e0eccd6dbf426a7843ec55e133cc36af9c1ccf5878914a3de31a7037c8fc061c89b6","ssdeep":"","tlshash":"9be0c0a997820a34fe5a2b697cf63183d15729f6c7a0c19b01d56a351508450e378fc8","first_seen":"2026-04-27T01:17:56.33006Z","last_seen":"2026-10-14T08:56:29.817674Z","times_seen":597,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"finzy6-ad33.sbs/landings/GmOduUo3eYSV/assets/img/user-1.webp","fqdn":"finzy6-ad33.sbs","domain":"finzy6-ad33.sbs","tld":"sbs"},"ip":{"addr":"104.21.84.53","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://finzy6-ad33.sbs/?d=NAkJ96G0qcPfABd8ztNaA4zWKUHuWZWlpvnf8cb7yJAHkJdFAYmUek6xb1H6zKreW49ABz0EuH%2Ffh2IC8SyW39d%2FLkdxBWBHklPHp15yM6SCvmFTtyzCHAQCV%2Bv9vh2TaOSlnLAU1q6dbfHC6P0ctFcVpKY1PM%2FvXI4W1sHqSswPBbvm6mQbD9wgpBZvg%2FFUvdqtYkihd6BDo6WIacvmRvRagwWJMkzKrn1pJN7BqrD%2F41o6dhbxwt1uYQhHRTVg\u0026on=Nord+Verdholm","date":"2026-10-08T14:49:38.278Z","timestamp":1791470978278,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"finzy6-ad33.sbs","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 08 Oct 2026 09:07:57 GMT","end":"Wed, 06 Jan 2027 09:07:56 GMT"},"fingerprint":{"sha1":"C1:BB:52:60:49:E9:58:67:D9:00:4F:3D:9B:53:3F:25:18:B8:02:9F","sha256":"7F:1F:80:E2:07:D6:32:78:E7:6D:12:02:2D:43:5F:AE:B2:58:BE:71:8D:C4:42:4A:1B:B7:11:5B:B9:94:3F:CB"}}},"request":{"raw":"GET /landings/GmOduUo3eYSV/assets/img/user-1.webp HTTP/1.1\r\nHost: finzy6-ad33.sbs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://finzy6-ad33.sbs/?d=NAkJ96G0qcPfABd8ztNaA4zWKUHuWZWlpvnf8cb7yJAHkJdFAYmUek6xb1H6zKreW49ABz0EuH%2Ffh2IC8SyW39d%2FLkdxBWBHklPHp15yM6SCvmFTtyzCHAQCV%2Bv9vh2TaOSlnLAU1q6dbfHC6P0ctFcVpKY1PM%2FvXI4W1sHqSswPBbvm6mQbD9wgpBZvg%2FFUvdqtYkihd6BDo6WIacvmRvRagwWJMkzKrn1pJN7BqrD%2F41o6dhbxwt1uYQhHRTVg\u0026on=Nord+Verdholm\r\nCookie: __cf_clicked=27861c05-5503-62\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"__cf_clicked","value":"27861c05-5503-62"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 08 Oct 2026 14:49:38 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Mon, 22 Dec 2025 11:24:48 GMT\r\npriority: u=5,i\r\netag: \"69492a80-3d0\"\r\nexpires: Sat, 07 Nov 2026 14:31:36 GMT\r\ncache-control: public, max-age=2592000, immutable\r\naccept-ranges: bytes\r\nage: 1082\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XFD5YyP3tATFPsWzJqxLgUD5FKlnjwrMwVdayeX8qGIBAMUKSghl2f2OgA8vFqyzGu4gHYBEszmI%2B2a1kfSIkICvbF1z26dpoECV702PD7s8bLzgZUDX8wWbDg2UAvc8FMg%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a475f40e39860daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 976\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":976,"size_decoded":1730,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"bface885898486d862c6271cf9bf2f41","sha1":"f03bdfa630a119c5150f3b0e27d75387fd16ec63","sha256":"c09cbf1b5bb44c31a34b88623917ebdda6f44b8098342cdf340733c02897b148","sha512":"cf7b7de39b5db574c91e511b037d8777fc7c4c1a03ed955a515cead1d567b45b683dc014975d8368965cdd14d306547691670a06e43a9513c0bef1903b2f546c","ssdeep":"","tlshash":"32119cdcb9a40536ff0f9150258618d9d53f4a9f4d167d077145707418484d9a51da89","first_seen":"2026-04-27T01:17:56.339722Z","last_seen":"2026-10-14T08:56:29.835421Z","times_seen":597,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"finzy6-ad33.sbs/landings/GmOduUo3eYSV/assets/img/user-3.webp","fqdn":"finzy6-ad33.sbs","domain":"finzy6-ad33.sbs","tld":"sbs"},"ip":{"addr":"104.21.84.53","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://finzy6-ad33.sbs/?d=NAkJ96G0qcPfABd8ztNaA4zWKUHuWZWlpvnf8cb7yJAHkJdFAYmUek6xb1H6zKreW49ABz0EuH%2Ffh2IC8SyW39d%2FLkdxBWBHklPHp15yM6SCvmFTtyzCHAQCV%2Bv9vh2TaOSlnLAU1q6dbfHC6P0ctFcVpKY1PM%2FvXI4W1sHqSswPBbvm6mQbD9wgpBZvg%2FFUvdqtYkihd6BDo6WIacvmRvRagwWJMkzKrn1pJN7BqrD%2F41o6dhbxwt1uYQhHRTVg\u0026on=Nord+Verdholm","date":"2026-10-08T14:49:38.280Z","timestamp":1791470978280,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"finzy6-ad33.sbs","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 08 Oct 2026 09:07:57 GMT","end":"Wed, 06 Jan 2027 09:07:56 GMT"},"fingerprint":{"sha1":"C1:BB:52:60:49:E9:58:67:D9:00:4F:3D:9B:53:3F:25:18:B8:02:9F","sha256":"7F:1F:80:E2:07:D6:32:78:E7:6D:12:02:2D:43:5F:AE:B2:58:BE:71:8D:C4:42:4A:1B:B7:11:5B:B9:94:3F:CB"}}},"request":{"raw":"GET /landings/GmOduUo3eYSV/assets/img/user-3.webp HTTP/1.1\r\nHost: finzy6-ad33.sbs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://finzy6-ad33.sbs/?d=NAkJ96G0qcPfABd8ztNaA4zWKUHuWZWlpvnf8cb7yJAHkJdFAYmUek6xb1H6zKreW49ABz0EuH%2Ffh2IC8SyW39d%2FLkdxBWBHklPHp15yM6SCvmFTtyzCHAQCV%2Bv9vh2TaOSlnLAU1q6dbfHC6P0ctFcVpKY1PM%2FvXI4W1sHqSswPBbvm6mQbD9wgpBZvg%2FFUvdqtYkihd6BDo6WIacvmRvRagwWJMkzKrn1pJN7BqrD%2F41o6dhbxwt1uYQhHRTVg\u0026on=Nord+Verdholm\r\nCookie: __cf_clicked=27861c05-5503-62\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"__cf_clicked","value":"27861c05-5503-62"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 08 Oct 2026 14:49:38 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Mon, 22 Dec 2025 11:24:50 GMT\r\npriority: u=5,i\r\netag: \"69492a82-404\"\r\nexpires: Sat, 07 Nov 2026 14:31:36 GMT\r\ncache-control: public, max-age=2592000, immutable\r\naccept-ranges: bytes\r\nage: 1082\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rkZ%2F2KDs8qHMeDrY3EhnRPgA8h2BFDeh2RHp0BASOLsHjIcnaVYgJrEmKouMDQ8zVwr2Xyi%2BVSiabW03VJZL9uiWXU%2Bmddvlzy9Do5lXMmHDH%2FCiPv4ZTw5Ai93NPqfLOEI%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a475f40e398a0daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1028\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1028,"size_decoded":1789,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"7adb015f20b3f6e4e9d563dd1291eb47","sha1":"4560de275edca24d7be8125c085e50c4ca663cc7","sha256":"6264b1fa909435f00b77a090b4e89871dda128b94f3fdc086af93d703e21877b","sha512":"865d5ec398ede0e3b7c5ac249e02f8205009ab4a443a330a6a0bda5806c4da48b75f3ca0285ba703098366d9d293f812fd246c12ea16c8ac11260735687e21a5","ssdeep":"","tlshash":"ab11a594c8ad372cd9ca7ea7a4ab144cadc7218394319d923e553687601742b211ab6b","first_seen":"2026-04-27T01:17:56.34148Z","last_seen":"2026-10-14T08:56:29.839066Z","times_seen":597,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"finzy6-ad33.sbs/landings/GmOduUo3eYSV/assets/img/user-5.webp","fqdn":"finzy6-ad33.sbs","domain":"finzy6-ad33.sbs","tld":"sbs"},"ip":{"addr":"104.21.84.53","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://finzy6-ad33.sbs/?d=NAkJ96G0qcPfABd8ztNaA4zWKUHuWZWlpvnf8cb7yJAHkJdFAYmUek6xb1H6zKreW49ABz0EuH%2Ffh2IC8SyW39d%2FLkdxBWBHklPHp15yM6SCvmFTtyzCHAQCV%2Bv9vh2TaOSlnLAU1q6dbfHC6P0ctFcVpKY1PM%2FvXI4W1sHqSswPBbvm6mQbD9wgpBZvg%2FFUvdqtYkihd6BDo6WIacvmRvRagwWJMkzKrn1pJN7BqrD%2F41o6dhbxwt1uYQhHRTVg\u0026on=Nord+Verdholm","date":"2026-10-08T14:49:38.285Z","timestamp":1791470978285,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"finzy6-ad33.sbs","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 08 Oct 2026 09:07:57 GMT","end":"Wed, 06 Jan 2027 09:07:56 GMT"},"fingerprint":{"sha1":"C1:BB:52:60:49:E9:58:67:D9:00:4F:3D:9B:53:3F:25:18:B8:02:9F","sha256":"7F:1F:80:E2:07:D6:32:78:E7:6D:12:02:2D:43:5F:AE:B2:58:BE:71:8D:C4:42:4A:1B:B7:11:5B:B9:94:3F:CB"}}},"request":{"raw":"GET /landings/GmOduUo3eYSV/assets/img/user-5.webp HTTP/1.1\r\nHost: finzy6-ad33.sbs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://finzy6-ad33.sbs/?d=NAkJ96G0qcPfABd8ztNaA4zWKUHuWZWlpvnf8cb7yJAHkJdFAYmUek6xb1H6zKreW49ABz0EuH%2Ffh2IC8SyW39d%2FLkdxBWBHklPHp15yM6SCvmFTtyzCHAQCV%2Bv9vh2TaOSlnLAU1q6dbfHC6P0ctFcVpKY1PM%2FvXI4W1sHqSswPBbvm6mQbD9wgpBZvg%2FFUvdqtYkihd6BDo6WIacvmRvRagwWJMkzKrn1pJN7BqrD%2F41o6dhbxwt1uYQhHRTVg\u0026on=Nord+Verdholm\r\nCookie: __cf_clicked=27861c05-5503-62\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"__cf_clicked","value":"27861c05-5503-62"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 08 Oct 2026 14:49:38 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Mon, 22 Dec 2025 11:24:50 GMT\r\npriority: u=5,i\r\netag: \"69492a82-3bc\"\r\nexpires: Sat, 07 Nov 2026 14:31:36 GMT\r\ncache-control: public, max-age=2592000, immutable\r\naccept-ranges: bytes\r\nage: 1082\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PA%2FNHNXda%2BiiWxdZFqNryiH0hYcRtvjjF%2BJatlG28yN6XUePdGu10vL1FwUiy7rS%2FS8HsjQm%2FEyNb%2B1liyGsFo5pyv0%2B9Wl2KgBFmCtcLLR4pti%2BaHuBQ5BdAvhNafAqtWM%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a475f40e498f0daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 956\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":956,"size_decoded":1724,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"f4c777203f0521cfb88cb8ac888a90d6","sha1":"3e43c1e19ab5e6eba1f68f8cd12b93dbfa0ceece","sha256":"d3bd278c1a85079288d586b37e97b5fa84f63852a5bf8901029ac17863abf5ee","sha512":"3f10733a949a53af7cf5a48cc3166fb2dfdd067b82b727e621b7ef41535a9fa32970e3b068e875effdfc9f310543a3fc51f7f0a2beeac81de91d1657ac6ae225","ssdeep":"","tlshash":"a711cc4c80fc259d5bc40613d7fe440d60658d73040cd7837e425c00685d12d653cb5f","first_seen":"2026-04-27T01:17:56.335782Z","last_seen":"2026-10-14T08:56:29.825938Z","times_seen":597,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/intl-tel-input@23.1.0/build/js/utils.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.1.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://finzy6-ad33.sbs/?d=NAkJ96G0qcPfABd8ztNaA4zWKUHuWZWlpvnf8cb7yJAHkJdFAYmUek6xb1H6zKreW49ABz0EuH%2Ffh2IC8SyW39d%2FLkdxBWBHklPHp15yM6SCvmFTtyzCHAQCV%2Bv9vh2TaOSlnLAU1q6dbfHC6P0ctFcVpKY1PM%2FvXI4W1sHqSswPBbvm6mQbD9wgpBZvg%2FFUvdqtYkihd6BDo6WIacvmRvRagwWJMkzKrn1pJN7BqrD%2F41o6dhbxwt1uYQhHRTVg\u0026on=Nord+Verdholm","date":"2026-10-08T14:49:38.728Z","timestamp":1791470978728,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2026 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 20 May 2026 15:48:47 GMT","end":"Sat, 05 Dec 2026 14:48:47 GMT"},"fingerprint":{"sha1":"D4:05:C2:EC:C7:EE:2B:D0:08:68:0D:3D:33:77:48:78:43:E7:D1:E1","sha256":"ED:84:90:EE:71:BC:6B:5E:B3:D2:50:B0:23:3A:06:0D:E0:50:C6:B6:A9:09:36:E6:CE:FE:E8:66:89:EB:4E:C5"}}},"request":{"raw":"GET /npm/intl-tel-input@23.1.0/build/js/utils.js HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://finzy6-ad33.sbs\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cdn.jsdelivr.net/npm/intl-tel-input@23.1.0/build/js/intlTelInput.min.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-length: 61923\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: application/javascript; charset=utf-8\r\nx-jsd-version: 23.1.0\r\nx-jsd-version-type: version\r\netag: W/\"3f362-QgRuJQx/Lu/0YZqJsL57g+AeXt8\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\ndate: Thu, 08 Oct 2026 14:49:38 GMT\r\nage: 1855825\r\nx-served-by: cache-fra-eddf8230035-FRA, cache-bma-essb1270067-BMA\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":258914,"size_decoded":62699,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (1903)","md5":"6eae88fad6fe723d8c8d2386a63dd152","sha1":"42046e250c7f2eeff4619a89b0be7b83e01e5edf","sha256":"a4000409a897003b1c5a8e1f9f32e18a11b022452151cc47c17ecdcb76d5223b","sha512":"d356bd87f7170499fbf445353afeda69dbaccc391eb41826290a30752475735a27d56ce1d642af1dcb02f93a1405926a440add5cb38000b7d112cab0f918bd6e","ssdeep":"3072:9klM0hpJjFs3OwPss3MwPKm7i9T2xFM8Mp2xHsNBWUsD56kmLNTg/QKWVRphmVEw:9klMipBKxxFM8Mp2qbZQ","tlshash":"1144f1ebd63c9737a1e97b35968eb3cd5a8cbca3c848567826c3b54f52784e0706c205","first_seen":"2024-07-10T10:54:41Z","last_seen":"2026-10-14T08:56:29.849903Z","times_seen":3191,"resource_available":true,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nordverdholm.com/","fqdn":"nordverdholm.com","domain":"nordverdholm.com","tld":"com"},"ip":{"addr":"158.94.210.119","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-10-08T14:49:35.960Z","timestamp":1791470975960,"http_version":"HTTP/2","security_state":"secure","security_info":null,"request":{"raw":"GET / HTTP/1.1\r\nHost: nordverdholm.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nalt-svc: h3=\":443\"; ma=2592000\r\ncache-control: no-cache, no-store, must-revalidate\r\ncontent-encoding: zstd\r\ncontent-type: text/html; charset=utf-8\r\ndate: Thu, 08 Oct 2026 14:49:37 GMT\r\nset-cookie: cf-c=27861c05-5503-62; Path=/; HttpOnly; SameSite=Lax; Max-Age=31536000\r\nvary: Accept-Encoding\r\nvia: 1.1 Caddy\r\nx-powered-by: Express\r\ncontent-length: 405\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":[{"name":"cf-c","value":"27861c05-5503-62","quoted":false,"path":"/","max_age":31536000,"secure":false,"http_only":true,"same_site":"Lax","partitioned":false,"raw":"cf-c=27861c05-5503-62; Path=/; HttpOnly; SameSite=Lax; Max-Age=31536000"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-15T02:38:36.053238Z","times_seen":19112269,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"nordverdholm.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-08","alert":"Phishing Block","trigger":"nordverdholm.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"nordverdholm.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"nordverdholm.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"nordverdholm.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}