{"report_id":"1e9ac4bc-8218-4b43-9820-a11d4af9eddf","version":6,"status":"done","tags":[],"date":"2026-05-17T14:00:57Z","url":{"schema":"https","addr":"vurextueow.com","fqdn":"vurextueow.com","domain":"vurextueow.com","tld":"com"},"ip":{"addr":"159.100.6.19","port":0,"asn":44066,"as":"firstcolo GmbH","country":"Germany","country_code":"DE"},"final":{"url":{"schema":"https","addr":"vurextueow.com/","fqdn":"vurextueow.com","domain":"vurextueow.com","tld":"com"},"title":"ALEX - HOME","dom":{"size":23880,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"5a04228a6b8e85365bb9487909a18fc9","sha1":"d7a88904a4308b488f50ecbc4b4d3b153914369b","sha256":"7a4649d3f0fdf21ed65d040786e3d3134fc48e32fa0b7b042e7ad039fa32df5c","sha512":"a570582865fc0b47a9053d8511f7cc97e838377e57d71b70a3efd498419add93f404ac1267cffcbd4e7d6e3bd704d14350c0ec29ae51d9e0de54b2f661d163c2","ssdeep":"192:TTk2P1oezWDDmytkyuT8rWKPZLetCtJMyN6eyP5tEwxb8+6wM9UfUyL8cYVlyMn9:XCvm1/Bd8ViJ/75zNTVRzN41W5IUBni","tlshash":"b2b2546a2de310296417e0b85bfb67482276d013e10acd7d3bcd2689cf51bd48ed3789","dom_hash":"domhashe9930c006330b33c8e1b322b3d101cd8","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"vurextueow.com","fqdn":"vurextueow.com","domain":"vurextueow.com","tld":"com"},"ip":{"addr":"159.100.6.19","port":0,"asn":44066,"as":"firstcolo GmbH","country":"Germany","country_code":"DE"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-06-21T14:00:57Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":null},"summary":[{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-05-10T22:17:57.86744Z","alert_count":0,"request_count":4,"received_data":132772,"sent_data":2222,"comment":"","tags":null,"fingerprints":null},{"fqdn":"vurextueow.com","ip":{"addr":"159.100.6.19","port":443,"asn":44066,"as":"firstcolo GmbH","country":"Germany","country_code":"DE"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":18,"received_data":12814921,"sent_data":8748,"comment":"","tags":null,"fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.74","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-05-10T22:20:44.526759Z","alert_count":0,"request_count":1,"received_data":7734,"sent_data":473,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"vurextueow.com/","fqdn":"vurextueow.com","domain":"vurextueow.com","tld":"com"},"ip":{"addr":"159.100.6.19","port":443,"asn":44066,"as":"firstcolo GmbH","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":true,"md5":"c7b1496eea9876fb056a040cb80d3a60","sha1":"30cf79618b79a43dbb82525dc100c00b9076f25f","sha256":"cdb3419fb6704b2647e2e670d7a8344e52858b3d6d6215b2fec568bde31722f6","sha512":"84f3353b974506c739af951956e64c9824a0b451cf572397fb1137223986887d52f8a4b9c1c9574f15e683d0d948cf2c59159e2596045a39b63c195154cce2ab","ssdeep":"","tlshash":"06519c2f76b71039407bf03b5b9fa3c9367300472545cd963e5d8a450fa1da82ae2ada","size":3049,"data":"","first_seen":"2026-05-17T14:01:06.781406Z","last_seen":"2026-05-17T14:22:02.936339Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"vurextueow.com/heartbeat.php","fqdn":"vurextueow.com","domain":"vurextueow.com","tld":"com"},"ip":{"addr":"159.100.6.19","port":443,"asn":44066,"as":"firstcolo GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://vurextueow.com/","date":"2026-05-17T14:00:43.389Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webmail.vurextueow.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 16 May 2026 06:14:03 GMT","end":"Fri, 14 Aug 2026 06:14:02 GMT"},"fingerprint":{"sha1":"34:E7:38:DE:97:F3:07:68:42:FD:8B:1B:4D:F4:38:09:49:96:F2:E1","sha256":"A5:63:D3:4A:FB:1B:15:C3:AB:9F:D0:97:D7:88:DD:AF:88:E8:3E:F2:8D:79:F7:4E:35:DD:89:72:0D:16:9D:0F"}}},"request":{"raw":"GET /heartbeat.php HTTP/1.1\r\nHost: vurextueow.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://vurextueow.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=ef1192a4b6f2410fdfbeb5f3e512f3c0\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\ncontent-type: application/json\r\ncontent-length: 28\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Sun, 17 May 2026 14:00:43 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":24,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"4f89be19276d0ba55a7d63f229d359aa","sha1":"da6c0546366e326ed04ffb92b4d6f4a392d30931","sha256":"437f4c62afc71e086fd909d42ae8cd477fe374b4382cc3eee67eda3bd22da8a0","sha512":"747621e44a33c4ae4a0cb65d3fec343268e9b3580c42b17c9c92a6528a6b004d487df91461b15de6189a24dbfd0486ab3e431dd2cc3e211dc0b961c47bcec1bc","ssdeep":"","tlshash":"bb70002008a80820880803082800ba00a82fa0a30080000a200830888322a0a0223a23","first_seen":"2026-05-17T14:01:06.75455Z","last_seen":"2026-05-17T14:19:23.36254Z","times_seen":2,"resource_available":false,"data":null}},"time_used":420,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":420,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vurextueow.com/heartbeat.php","fqdn":"vurextueow.com","domain":"vurextueow.com","tld":"com"},"ip":{"addr":"159.100.6.19","port":443,"asn":44066,"as":"firstcolo GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://vurextueow.com/","date":"2026-05-17T14:00:49.390Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webmail.vurextueow.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 16 May 2026 06:14:03 GMT","end":"Fri, 14 Aug 2026 06:14:02 GMT"},"fingerprint":{"sha1":"34:E7:38:DE:97:F3:07:68:42:FD:8B:1B:4D:F4:38:09:49:96:F2:E1","sha256":"A5:63:D3:4A:FB:1B:15:C3:AB:9F:D0:97:D7:88:DD:AF:88:E8:3E:F2:8D:79:F7:4E:35:DD:89:72:0D:16:9D:0F"}}},"request":{"raw":"GET /heartbeat.php HTTP/1.1\r\nHost: vurextueow.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://vurextueow.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=ef1192a4b6f2410fdfbeb5f3e512f3c0\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\ncontent-type: application/json\r\ncontent-length: 28\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Sun, 17 May 2026 14:00:49 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":24,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"4f89be19276d0ba55a7d63f229d359aa","sha1":"da6c0546366e326ed04ffb92b4d6f4a392d30931","sha256":"437f4c62afc71e086fd909d42ae8cd477fe374b4382cc3eee67eda3bd22da8a0","sha512":"747621e44a33c4ae4a0cb65d3fec343268e9b3580c42b17c9c92a6528a6b004d487df91461b15de6189a24dbfd0486ab3e431dd2cc3e211dc0b961c47bcec1bc","ssdeep":"","tlshash":"bb70002008a80820880803082800ba00a82fa0a30080000a200830888322a0a0223a23","first_seen":"2026-05-17T14:01:06.75455Z","last_seen":"2026-05-17T14:19:23.36254Z","times_seen":2,"resource_available":false,"data":null}},"time_used":143,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":142,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vurextueow.com/assets/Alex_Bank_Logo.svg","fqdn":"vurextueow.com","domain":"vurextueow.com","tld":"com"},"ip":{"addr":"159.100.6.19","port":443,"asn":44066,"as":"firstcolo GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vurextueow.com/","date":"2026-05-17T14:00:31.166Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webmail.vurextueow.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 16 May 2026 06:14:03 GMT","end":"Fri, 14 Aug 2026 06:14:02 GMT"},"fingerprint":{"sha1":"34:E7:38:DE:97:F3:07:68:42:FD:8B:1B:4D:F4:38:09:49:96:F2:E1","sha256":"A5:63:D3:4A:FB:1B:15:C3:AB:9F:D0:97:D7:88:DD:AF:88:E8:3E:F2:8D:79:F7:4E:35:DD:89:72:0D:16:9D:0F"}}},"request":{"raw":"GET /assets/Alex_Bank_Logo.svg HTTP/1.1\r\nHost: vurextueow.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vurextueow.com/\r\nCookie: PHPSESSID=ef1192a4b6f2410fdfbeb5f3e512f3c0\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 24 May 2026 14:00:31 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Fri, 15 May 2026 20:36:10 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 18550\r\ndate: Sun, 17 May 2026 14:00:31 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":72546,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"04281ac9bf7ea0cde069e696559b062f","sha1":"95c0fd1615a475c4e7b87cbd95fc54fb07b72130","sha256":"1cf8d2885bc694a1785fdfe3301a192c97dab34132a5ed2bdb490aa6cca4c35a","sha512":"3fe08013dba9d9ef9dedb9f5670cac9e9ac24233bd6838523c595b80a3f26e6cfef49f9709c18b9d56df84cae394b9baef77e12ea84cbcf359346c3fea77ecc9","ssdeep":"1536:P8cyrFA34oSfYxoPbCUhukPmmLFYVyOIbRQ1CtVW4iFBpA:i","tlshash":"a86394dcb32d2bd0f74eb2f1e9e22055be1f25ee2b054577c65d2c9098271acc9a94c2","first_seen":"2026-05-17T14:01:06.757213Z","last_seen":"2026-05-17T14:03:19.798104Z","times_seen":2,"resource_available":false,"data":null}},"time_used":46,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":44,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vurextueow.com/assets/watch_alexbank.png","fqdn":"vurextueow.com","domain":"vurextueow.com","tld":"com"},"ip":{"addr":"159.100.6.19","port":443,"asn":44066,"as":"firstcolo GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vurextueow.com/","date":"2026-05-17T14:00:31.170Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webmail.vurextueow.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 16 May 2026 06:14:03 GMT","end":"Fri, 14 Aug 2026 06:14:02 GMT"},"fingerprint":{"sha1":"34:E7:38:DE:97:F3:07:68:42:FD:8B:1B:4D:F4:38:09:49:96:F2:E1","sha256":"A5:63:D3:4A:FB:1B:15:C3:AB:9F:D0:97:D7:88:DD:AF:88:E8:3E:F2:8D:79:F7:4E:35:DD:89:72:0D:16:9D:0F"}}},"request":{"raw":"GET /assets/watch_alexbank.png HTTP/1.1\r\nHost: vurextueow.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vurextueow.com/\r\nCookie: PHPSESSID=ef1192a4b6f2410fdfbeb5f3e512f3c0\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 24 May 2026 14:00:31 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 15 May 2026 21:37:30 GMT\r\naccept-ranges: bytes\r\ncontent-length: 1194912\r\ndate: Sun, 17 May 2026 14:00:31 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1194912,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1254 x 1254, 8-bit/color RGBA, non-interlaced","md5":"161296c63995b91aa29e6367b71b1c5a","sha1":"c5775bd37cc9a82fa4b5b3ed8bb4a845bfec08bd","sha256":"f3de5a671c54ca3a02c318d25e81098c15159822a23a90b6c677946ec4ed2fd3","sha512":"97deb3f98bea8de4873b371916711353b688d7b560e1ee2f10fc38bb518ce2ab8f325b3512448d382d2adf6e4d81ce400508810c64ff39d63e935c544b4c3f36","ssdeep":"24576:0mHFmP2D86saLDrmTfSoK9qZOqYzF4kd6yQtmIi:07+wDQf3xZBUyGRi","tlshash":"32253350dcb4bb459235e54762b838b4fed0958aeef14602e0afe5d1e4f8139828c6db","first_seen":"2026-05-17T14:01:06.759662Z","last_seen":"2026-05-17T14:03:19.798897Z","times_seen":2,"resource_available":false,"data":null}},"time_used":2286,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":171,"receive":2115,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vurextueow.com/heartbeat.php","fqdn":"vurextueow.com","domain":"vurextueow.com","tld":"com"},"ip":{"addr":"159.100.6.19","port":443,"asn":44066,"as":"firstcolo GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://vurextueow.com/","date":"2026-05-17T14:00:37.391Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webmail.vurextueow.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 16 May 2026 06:14:03 GMT","end":"Fri, 14 Aug 2026 06:14:02 GMT"},"fingerprint":{"sha1":"34:E7:38:DE:97:F3:07:68:42:FD:8B:1B:4D:F4:38:09:49:96:F2:E1","sha256":"A5:63:D3:4A:FB:1B:15:C3:AB:9F:D0:97:D7:88:DD:AF:88:E8:3E:F2:8D:79:F7:4E:35:DD:89:72:0D:16:9D:0F"}}},"request":{"raw":"GET /heartbeat.php HTTP/1.1\r\nHost: vurextueow.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://vurextueow.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=ef1192a4b6f2410fdfbeb5f3e512f3c0\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\ncontent-type: application/json\r\ncontent-length: 28\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Sun, 17 May 2026 14:00:37 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":24,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"2e668b6197727cd632f164211099024d","sha1":"5261a801efced652ac252cadba09fa32361b5511","sha256":"d14c60cb2cb669a7c3c0bbda764575bdd597a2240801a95e814a131aa329bb2a","sha512":"d35f7e3b44303e42ff3cb783fd716264631ed86e66aa06b016a9918364eb84624db4dff815ec9460c2baf3afdf7acc564c10ff2f6a5f941177b8c64c581796ef","ssdeep":"","tlshash":"2870002808a80022880803080800ba00a82fa0a30080000a20083088032220a0223a23","first_seen":"2026-05-17T14:01:06.76174Z","last_seen":"2026-05-17T14:19:23.36799Z","times_seen":3,"resource_available":false,"data":null}},"time_used":239,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":239,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vurextueow.com/heartbeat.php","fqdn":"vurextueow.com","domain":"vurextueow.com","tld":"com"},"ip":{"addr":"159.100.6.19","port":443,"asn":44066,"as":"firstcolo GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://vurextueow.com/","date":"2026-05-17T14:00:40.389Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webmail.vurextueow.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 16 May 2026 06:14:03 GMT","end":"Fri, 14 Aug 2026 06:14:02 GMT"},"fingerprint":{"sha1":"34:E7:38:DE:97:F3:07:68:42:FD:8B:1B:4D:F4:38:09:49:96:F2:E1","sha256":"A5:63:D3:4A:FB:1B:15:C3:AB:9F:D0:97:D7:88:DD:AF:88:E8:3E:F2:8D:79:F7:4E:35:DD:89:72:0D:16:9D:0F"}}},"request":{"raw":"GET /heartbeat.php HTTP/1.1\r\nHost: vurextueow.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://vurextueow.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=ef1192a4b6f2410fdfbeb5f3e512f3c0\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\ncontent-type: application/json\r\ncontent-length: 28\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Sun, 17 May 2026 14:00:40 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":24,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"2e668b6197727cd632f164211099024d","sha1":"5261a801efced652ac252cadba09fa32361b5511","sha256":"d14c60cb2cb669a7c3c0bbda764575bdd597a2240801a95e814a131aa329bb2a","sha512":"d35f7e3b44303e42ff3cb783fd716264631ed86e66aa06b016a9918364eb84624db4dff815ec9460c2baf3afdf7acc564c10ff2f6a5f941177b8c64c581796ef","ssdeep":"","tlshash":"2870002808a80022880803080800ba00a82fa0a30080000a20083088032220a0223a23","first_seen":"2026-05-17T14:01:06.76174Z","last_seen":"2026-05-17T14:19:23.36799Z","times_seen":3,"resource_available":false,"data":null}},"time_used":82,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":81,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Cairo:wght@300;400;600;700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.74","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://vurextueow.com/","date":"2026-05-17T14:00:31.163Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Apr 2026 08:36:41 GMT","end":"Mon, 13 Jul 2026 08:36:40 GMT"},"fingerprint":{"sha1":"02:32:5A:C8:A9:9E:51:3B:E6:B9:C2:90:57:59:03:86:2E:5E:AF:0C","sha256":"B4:3F:61:34:DD:CF:DC:F3:4F:B9:A3:80:2B:A9:7F:C1:65:62:81:5A:B1:86:17:32:64:43:A8:E7:64:F6:2D:D9"}}},"request":{"raw":"GET /css2?family=Cairo:wght@300;400;600;700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vurextueow.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sun, 17 May 2026 14:00:31 GMT\r\ndate: Sun, 17 May 2026 14:00:31 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7048,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (649)","md5":"5fdc90f6f8ac461f0c9cd5beef5f705c","sha1":"2ba2685af072151d94e3052a59c911c89cb7aa99","sha256":"a41c905bcb01091042229a640a442248a2f3bd2779f37ead9009e3c7b4484f32","sha512":"d56a48e58cdcf2f2d9634c1834bdac9b6ccd14063268afe14597ab2019fa199949b5f2130e5a3cde260dee3ff99fa4ad332e09783653918801325275bb0fc34c","ssdeep":"96:tO1a8A0Zl8DCK9cHlO1ajJc+uZO1aHN0OEa8A0Zl8DCK9cHlOEajJc+uZOEaHN02:zbClb3UlbCl63JDbClw338bClX3QO","tlshash":"5ce19ed00c1e4184bf475dc2638d6e23ee0ee1956494886cabfd2b8b9cabc27739575c","first_seen":"2025-09-24T12:30:44.457156Z","last_seen":"2026-05-17T14:22:02.910198Z","times_seen":270,"resource_available":false,"data":null}},"time_used":253,"timings":{"blocked":98,"dns":1,"connect":28,"send":0,"wait":45,"receive":0,"ssl":77},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vurextueow.com/assets/alexbank_banner.png","fqdn":"vurextueow.com","domain":"vurextueow.com","tld":"com"},"ip":{"addr":"159.100.6.19","port":443,"asn":44066,"as":"firstcolo GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vurextueow.com/","date":"2026-05-17T14:00:31.168Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webmail.vurextueow.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 16 May 2026 06:14:03 GMT","end":"Fri, 14 Aug 2026 06:14:02 GMT"},"fingerprint":{"sha1":"34:E7:38:DE:97:F3:07:68:42:FD:8B:1B:4D:F4:38:09:49:96:F2:E1","sha256":"A5:63:D3:4A:FB:1B:15:C3:AB:9F:D0:97:D7:88:DD:AF:88:E8:3E:F2:8D:79:F7:4E:35:DD:89:72:0D:16:9D:0F"}}},"request":{"raw":"GET /assets/alexbank_banner.png HTTP/1.1\r\nHost: vurextueow.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vurextueow.com/\r\nCookie: PHPSESSID=ef1192a4b6f2410fdfbeb5f3e512f3c0\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 24 May 2026 14:00:31 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 15 May 2026 21:30:12 GMT\r\naccept-ranges: bytes\r\ncontent-length: 2795935\r\ndate: Sun, 17 May 2026 14:00:31 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2795935,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1679 x 937, 8-bit/color RGBA, non-interlaced","md5":"b46d574065511ec796510c524d11adff","sha1":"6782b1d9ea2226cfcfd3a9b04c5aeacf6f1297f6","sha256":"f594f97902012cefb5245484de5e433385ac8ce7fb8a92d9a7990d72ea3b51ab","sha512":"e0b9196ec447d344a950a9d70365edcc445490621f14ea6a80c7b24f4073306a4bb202cb5351db86084d97f5272cd4a9dde36cd568bba56481573f68c002cf77","ssdeep":"24576:uwsYhM8p135VcIvyxONLGcYrN5U3XNLs/npjSGNH:LB6KN5mIKxOVKohuSGp","tlshash":"cb2533e0dee84873e19f27e25ca2ec3752f275c4cfbe872010a8116a752f55ac519f29","first_seen":"2026-05-17T14:01:06.764627Z","last_seen":"2026-05-17T14:03:19.804226Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1851,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":45,"receive":1806,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vurextueow.com/assets/watch3_alexbank.png","fqdn":"vurextueow.com","domain":"vurextueow.com","tld":"com"},"ip":{"addr":"159.100.6.19","port":443,"asn":44066,"as":"firstcolo GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vurextueow.com/","date":"2026-05-17T14:00:31.173Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webmail.vurextueow.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 16 May 2026 06:14:03 GMT","end":"Fri, 14 Aug 2026 06:14:02 GMT"},"fingerprint":{"sha1":"34:E7:38:DE:97:F3:07:68:42:FD:8B:1B:4D:F4:38:09:49:96:F2:E1","sha256":"A5:63:D3:4A:FB:1B:15:C3:AB:9F:D0:97:D7:88:DD:AF:88:E8:3E:F2:8D:79:F7:4E:35:DD:89:72:0D:16:9D:0F"}}},"request":{"raw":"GET /assets/watch3_alexbank.png HTTP/1.1\r\nHost: vurextueow.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vurextueow.com/\r\nCookie: PHPSESSID=ef1192a4b6f2410fdfbeb5f3e512f3c0\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 24 May 2026 14:00:31 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 15 May 2026 21:55:25 GMT\r\naccept-ranges: bytes\r\ncontent-length: 1555779\r\ndate: Sun, 17 May 2026 14:00:31 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1555779,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1254 x 1254, 8-bit/color RGBA, non-interlaced","md5":"47d9a56f1224842ac1f9dd03bcc87e3d","sha1":"24f7790a8ce368c714964b1b7b8809801d1e31e3","sha256":"0b93fc29b468939376e7d505d6aa70d503e5c561000177169f1f2bc5759f76b9","sha512":"860290292c1ab1155c534c7f49807e87300c225201631f596bb4284b3712a8465fcda659d00b551332310500c6bc3fb1c8ec95e05b6476b012afc79de415ff48","ssdeep":"24576:nM8ezexCmshQNTxb8DQwkee/+No4JPiSTvKwHCfX:MpexCmshQNlbsQ2f1J6SKwiP","tlshash":"502533ac89acae7f9689a5055a7c0a6390cceb564570dfd950ec7de0f23cc0244ba377","first_seen":"2026-05-17T14:01:06.766664Z","last_seen":"2026-05-17T14:03:19.802294Z","times_seen":2,"resource_available":false,"data":null}},"time_used":3440,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1639,"receive":1801,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vurextueow.com/assets/watch2_alexbank.png","fqdn":"vurextueow.com","domain":"vurextueow.com","tld":"com"},"ip":{"addr":"159.100.6.19","port":443,"asn":44066,"as":"firstcolo GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vurextueow.com/","date":"2026-05-17T14:00:31.174Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webmail.vurextueow.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 16 May 2026 06:14:03 GMT","end":"Fri, 14 Aug 2026 06:14:02 GMT"},"fingerprint":{"sha1":"34:E7:38:DE:97:F3:07:68:42:FD:8B:1B:4D:F4:38:09:49:96:F2:E1","sha256":"A5:63:D3:4A:FB:1B:15:C3:AB:9F:D0:97:D7:88:DD:AF:88:E8:3E:F2:8D:79:F7:4E:35:DD:89:72:0D:16:9D:0F"}}},"request":{"raw":"GET /assets/watch2_alexbank.png HTTP/1.1\r\nHost: vurextueow.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vurextueow.com/\r\nCookie: PHPSESSID=ef1192a4b6f2410fdfbeb5f3e512f3c0\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 24 May 2026 14:00:31 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 15 May 2026 22:05:42 GMT\r\naccept-ranges: bytes\r\ncontent-length: 1618025\r\ndate: Sun, 17 May 2026 14:00:31 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1618025,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1254 x 1254, 8-bit/color RGBA, non-interlaced","md5":"2f4de4ad0f87f2628d480822972fbb2e","sha1":"8503afa860e767cda25e45c02b98a635103e8a12","sha256":"4510e4ab53785574af51bba2a35e89412e4399b070c284471f49c2ae0fcacab9","sha512":"7a184fe23ae47a2e2d94ad6bae66f0e4f30ece2e35b5444a852b7f0e06ab7fa0af311502b9ae8ee5960aa9a9bc382fd3048cf73dcd4651cafaae540fa06aeee4","ssdeep":"24576:6nLdrPo0Iee9vHjzKRvR3Q4qgv46oH9FZwkE0uYT7XDEx:6Lxzj2HjzKRJ9wZH90kig7XDEx","tlshash":"95253367a6ec33722c5de0f4b89e0ff55583b1b453351cb45238b36582ec91a8ae931a","first_seen":"2026-05-17T14:01:06.76886Z","last_seen":"2026-05-17T14:03:19.800238Z","times_seen":2,"resource_available":false,"data":null}},"time_used":4065,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2345,"receive":1720,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vurextueow.com/heartbeat.php","fqdn":"vurextueow.com","domain":"vurextueow.com","tld":"com"},"ip":{"addr":"159.100.6.19","port":443,"asn":44066,"as":"firstcolo GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://vurextueow.com/","date":"2026-05-17T14:00:46.389Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webmail.vurextueow.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 16 May 2026 06:14:03 GMT","end":"Fri, 14 Aug 2026 06:14:02 GMT"},"fingerprint":{"sha1":"34:E7:38:DE:97:F3:07:68:42:FD:8B:1B:4D:F4:38:09:49:96:F2:E1","sha256":"A5:63:D3:4A:FB:1B:15:C3:AB:9F:D0:97:D7:88:DD:AF:88:E8:3E:F2:8D:79:F7:4E:35:DD:89:72:0D:16:9D:0F"}}},"request":{"raw":"GET /heartbeat.php HTTP/1.1\r\nHost: vurextueow.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://vurextueow.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=ef1192a4b6f2410fdfbeb5f3e512f3c0\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\ncontent-type: application/json\r\ncontent-length: 28\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Sun, 17 May 2026 14:00:46 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":24,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"4f89be19276d0ba55a7d63f229d359aa","sha1":"da6c0546366e326ed04ffb92b4d6f4a392d30931","sha256":"437f4c62afc71e086fd909d42ae8cd477fe374b4382cc3eee67eda3bd22da8a0","sha512":"747621e44a33c4ae4a0cb65d3fec343268e9b3580c42b17c9c92a6528a6b004d487df91461b15de6189a24dbfd0486ab3e431dd2cc3e211dc0b961c47bcec1bc","ssdeep":"","tlshash":"bb70002008a80820880803082800ba00a82fa0a30080000a200830888322a0a0223a23","first_seen":"2026-05-17T14:01:06.75455Z","last_seen":"2026-05-17T14:19:23.36254Z","times_seen":2,"resource_available":false,"data":null}},"time_used":108,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":107,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vurextueow.com/assets/watch4_alexbank.png","fqdn":"vurextueow.com","domain":"vurextueow.com","tld":"com"},"ip":{"addr":"159.100.6.19","port":443,"asn":44066,"as":"firstcolo GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vurextueow.com/","date":"2026-05-17T14:00:31.171Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webmail.vurextueow.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 16 May 2026 06:14:03 GMT","end":"Fri, 14 Aug 2026 06:14:02 GMT"},"fingerprint":{"sha1":"34:E7:38:DE:97:F3:07:68:42:FD:8B:1B:4D:F4:38:09:49:96:F2:E1","sha256":"A5:63:D3:4A:FB:1B:15:C3:AB:9F:D0:97:D7:88:DD:AF:88:E8:3E:F2:8D:79:F7:4E:35:DD:89:72:0D:16:9D:0F"}}},"request":{"raw":"GET /assets/watch4_alexbank.png HTTP/1.1\r\nHost: vurextueow.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vurextueow.com/\r\nCookie: PHPSESSID=ef1192a4b6f2410fdfbeb5f3e512f3c0\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 24 May 2026 14:00:31 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 15 May 2026 21:47:30 GMT\r\naccept-ranges: bytes\r\ncontent-length: 1507101\r\ndate: Sun, 17 May 2026 14:00:31 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1507101,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1254 x 1254, 8-bit/color RGBA, non-interlaced","md5":"3a868f06bce87dcd4adcba8218ca3f69","sha1":"87ebbb426af426a255f52b890dc1276bcc001c12","sha256":"6c3f2365e1eac2c67eaddd0d895e8498f6a3d037ae098b0510c25600c0bb1013","sha512":"120f917b6cea95442c861b2e49005cb877139033ea83242ae4eb5c8ff92203efdae6f18c8be22963e101885bc8ee3baf195544b79014f91ddc07399f941867bb","ssdeep":"24576:SKZhAOKGcv/0PIAvBGYcTHwqbH6oe0gOb7D7PrzS:HAVP/0fpYnTtg8n7PrzS","tlshash":"ba2533ebeec6075dfb0790421e288bb79df9b47a17fc308b5d9890d4246b0961254fac","first_seen":"2026-05-17T14:01:06.77068Z","last_seen":"2026-05-17T14:03:19.799564Z","times_seen":2,"resource_available":false,"data":null}},"time_used":2866,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":680,"receive":2186,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vurextueow.com/assets/watch1_alexbank.png","fqdn":"vurextueow.com","domain":"vurextueow.com","tld":"com"},"ip":{"addr":"159.100.6.19","port":443,"asn":44066,"as":"firstcolo GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vurextueow.com/","date":"2026-05-17T14:00:31.177Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webmail.vurextueow.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 16 May 2026 06:14:03 GMT","end":"Fri, 14 Aug 2026 06:14:02 GMT"},"fingerprint":{"sha1":"34:E7:38:DE:97:F3:07:68:42:FD:8B:1B:4D:F4:38:09:49:96:F2:E1","sha256":"A5:63:D3:4A:FB:1B:15:C3:AB:9F:D0:97:D7:88:DD:AF:88:E8:3E:F2:8D:79:F7:4E:35:DD:89:72:0D:16:9D:0F"}}},"request":{"raw":"GET /assets/watch1_alexbank.png HTTP/1.1\r\nHost: vurextueow.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vurextueow.com/\r\nCookie: PHPSESSID=ef1192a4b6f2410fdfbeb5f3e512f3c0\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 24 May 2026 14:00:31 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 15 May 2026 22:16:53 GMT\r\naccept-ranges: bytes\r\ncontent-length: 1314614\r\ndate: Sun, 17 May 2026 14:00:31 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1314614,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1254 x 1254, 8-bit/color RGBA, non-interlaced","md5":"7bafb14e9facc9f970bf0688b6ad4a9f","sha1":"563d71df9673f42e58efb8e1146965b81426d681","sha256":"62efd31cde80b1e4c41c8e288b6bd6f9d7cb15630214ca262fdd785a7bb9691c","sha512":"47e816315e2122a9f2768bf94aadfc4d324b36b98a78c0e9896e00a80ee14c3a6fb67ef5d5b35588311a30f5b9ebc00c09d287fe7ccd9d749fd6fa16ead0d056","ssdeep":"24576:OxGLoCgnKXu1GipdAq4zHmkPrMnp8BP+Jm24QC3:fkCved6mkPgnp8Bcm24j","tlshash":"f72533c5d490aa306cb17e5bcab510fc37a62b403e35e44fd26bc6d39a3994878b5349","first_seen":"2026-05-17T14:01:06.772223Z","last_seen":"2026-05-17T14:03:19.804986Z","times_seen":2,"resource_available":false,"data":null}},"time_used":5604,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4114,"receive":1490,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vurextueow.com/assets/watch6_alexbank.png","fqdn":"vurextueow.com","domain":"vurextueow.com","tld":"com"},"ip":{"addr":"159.100.6.19","port":443,"asn":44066,"as":"firstcolo GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vurextueow.com/","date":"2026-05-17T14:00:31.178Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webmail.vurextueow.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 16 May 2026 06:14:03 GMT","end":"Fri, 14 Aug 2026 06:14:02 GMT"},"fingerprint":{"sha1":"34:E7:38:DE:97:F3:07:68:42:FD:8B:1B:4D:F4:38:09:49:96:F2:E1","sha256":"A5:63:D3:4A:FB:1B:15:C3:AB:9F:D0:97:D7:88:DD:AF:88:E8:3E:F2:8D:79:F7:4E:35:DD:89:72:0D:16:9D:0F"}}},"request":{"raw":"GET /assets/watch6_alexbank.png HTTP/1.1\r\nHost: vurextueow.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vurextueow.com/\r\nCookie: PHPSESSID=ef1192a4b6f2410fdfbeb5f3e512f3c0\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 24 May 2026 14:00:31 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 15 May 2026 22:21:37 GMT\r\naccept-ranges: bytes\r\ncontent-length: 1192261\r\ndate: Sun, 17 May 2026 14:00:31 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1192261,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1254 x 1254, 8-bit/color RGBA, non-interlaced","md5":"2e901149a8ca02fbda0fb5708cab0ba2","sha1":"27ed7b6f7d294c5645a89e4db65531328c63dc35","sha256":"04b7e2858ff1a4b08d396466b86635b951de24a66e627bf6a33fb1c856236521","sha512":"970074976d69a4b46f51f3969f9b4154f54a170fd576b81a026b8b182c608657607a4b7c5942d9229527dea9218f7ef83cef5e8733f5aea93ee0e569e7ad5664","ssdeep":"24576:aKL2wU2W1api7IfCMi82+vHJjUvzf7upS+sJ7G/Oxf8J7Ifc6Z89K5Af:P4jSRvHJYrSBsJ7GbIU6Z8c2","tlshash":"e5253390f2dec4f5e77364881630609955acbbb841e7a850df2bf4eea1054ac36e3ec5","first_seen":"2026-05-17T14:01:06.773932Z","last_seen":"2026-05-17T14:03:19.803554Z","times_seen":2,"resource_available":false,"data":null}},"time_used":6014,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4964,"receive":1050,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/cairo/v31/SLXVc1nY6HkvangtZmpQdkhzfH5lkSscRiyS8pg_RWH1.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://vurextueow.com/","date":"2026-05-17T14:00:31.366Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Apr 2026 08:36:40 GMT","end":"Mon, 13 Jul 2026 08:36:39 GMT"},"fingerprint":{"sha1":"7F:B3:C1:48:F4:27:B8:68:3C:19:02:13:E1:6F:23:04:AC:C8:65:17","sha256":"FC:08:6D:DD:C4:AF:25:5E:6A:51:A0:A1:4E:27:4A:FF:E3:A5:37:ED:A4:1A:33:C1:27:48:DE:AB:71:AE:5D:2D"}}},"request":{"raw":"GET /s/cairo/v31/SLXVc1nY6HkvangtZmpQdkhzfH5lkSscRiyS8pg_RWH1.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://vurextueow.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 33820\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 14 May 2026 16:06:59 GMT\r\nexpires: Fri, 14 May 2027 16:06:59 GMT\r\ncache-control: public, max-age=31536000\r\nage: 251612\r\nlast-modified: Tue, 16 Sep 2025 03:39:24 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":33820,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 33820, version 1.0","md5":"3c9597566d23234e05dc818314188491","sha1":"caa2f572bcbbe2985a96a9d59a459b2d1990b356","sha256":"82c13cbd1352d76e97c3d335caa912ae68fecdc3949a43cf8d149eb892384c1b","sha512":"d76f835a4a850b0225c5e93170423220970e6a40a9bfcd2ddf1e4cf054a543eb640e591495d5250437b9f5dee704feb3b16065318f8b926fb26dfc89baed0034","ssdeep":"768:cKG0/+s/RooAoTwdJMehHY+8ko/9givnjHYzIvg0Hk2Oeej:TGiR/RoqIVpT8+ivjHQyg0HkheS","tlshash":"fee2f214abfa7963912a2ba7bf354f6fe753f391ce0da844074e03d644699409f8030c","first_seen":"2025-06-03T03:54:51.937094Z","last_seen":"2026-05-20T20:26:55.980402Z","times_seen":4207,"resource_available":false,"data":null}},"time_used":230,"timings":{"blocked":96,"dns":2,"connect":27,"send":0,"wait":36,"receive":8,"ssl":58},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/cairo/v31/SLXVc1nY6HkvangtZmpQdkhzfH5lkSscRiyS8pg_RWH1.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://vurextueow.com/","date":"2026-05-17T14:00:31.372Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Apr 2026 08:36:40 GMT","end":"Mon, 13 Jul 2026 08:36:39 GMT"},"fingerprint":{"sha1":"7F:B3:C1:48:F4:27:B8:68:3C:19:02:13:E1:6F:23:04:AC:C8:65:17","sha256":"FC:08:6D:DD:C4:AF:25:5E:6A:51:A0:A1:4E:27:4A:FF:E3:A5:37:ED:A4:1A:33:C1:27:48:DE:AB:71:AE:5D:2D"}}},"request":{"raw":"GET /s/cairo/v31/SLXVc1nY6HkvangtZmpQdkhzfH5lkSscRiyS8pg_RWH1.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://vurextueow.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 33820\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 14 May 2026 16:06:59 GMT\r\nexpires: Fri, 14 May 2027 16:06:59 GMT\r\ncache-control: public, max-age=31536000\r\nage: 251612\r\nlast-modified: Tue, 16 Sep 2025 03:39:24 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":33820,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 33820, version 1.0","md5":"3c9597566d23234e05dc818314188491","sha1":"caa2f572bcbbe2985a96a9d59a459b2d1990b356","sha256":"82c13cbd1352d76e97c3d335caa912ae68fecdc3949a43cf8d149eb892384c1b","sha512":"d76f835a4a850b0225c5e93170423220970e6a40a9bfcd2ddf1e4cf054a543eb640e591495d5250437b9f5dee704feb3b16065318f8b926fb26dfc89baed0034","ssdeep":"768:cKG0/+s/RooAoTwdJMehHY+8ko/9givnjHYzIvg0Hk2Oeej:TGiR/RoqIVpT8+ivjHQyg0HkheS","tlshash":"fee2f214abfa7963912a2ba7bf354f6fe753f391ce0da844074e03d644699409f8030c","first_seen":"2025-06-03T03:54:51.937094Z","last_seen":"2026-05-20T20:26:55.980402Z","times_seen":4207,"resource_available":false,"data":null}},"time_used":215,"timings":{"blocked":87,"dns":1,"connect":28,"send":0,"wait":29,"receive":9,"ssl":58},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vurextueow.com/heartbeat.php","fqdn":"vurextueow.com","domain":"vurextueow.com","tld":"com"},"ip":{"addr":"159.100.6.19","port":443,"asn":44066,"as":"firstcolo GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://vurextueow.com/","date":"2026-05-17T14:00:31.384Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webmail.vurextueow.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 16 May 2026 06:14:03 GMT","end":"Fri, 14 Aug 2026 06:14:02 GMT"},"fingerprint":{"sha1":"34:E7:38:DE:97:F3:07:68:42:FD:8B:1B:4D:F4:38:09:49:96:F2:E1","sha256":"A5:63:D3:4A:FB:1B:15:C3:AB:9F:D0:97:D7:88:DD:AF:88:E8:3E:F2:8D:79:F7:4E:35:DD:89:72:0D:16:9D:0F"}}},"request":{"raw":"GET /heartbeat.php HTTP/1.1\r\nHost: vurextueow.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://vurextueow.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=ef1192a4b6f2410fdfbeb5f3e512f3c0\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\ncontent-type: application/json\r\ncontent-length: 28\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Sun, 17 May 2026 14:00:31 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":24,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"5bc38d8ac20e4e64b41474cbcc6af7fb","sha1":"9509662f0d12681ac286e5cadc291287d13e8090","sha256":"3b1c54bd402f832b3feaaa405a601f06dcd3d140ed6cd18c4ae059b331974b00","sha512":"b13a6bbe7efcaba7094342fcf182096911c093658ebccaf80e8a80c3768e50acfcdbf05c8dfcd702ddc70a1659f13897c4c1586a22506e25ffc844cc736b57a2","ssdeep":"","tlshash":"7570002028a8002c880803080800ba00a82fa0a300a0000a20083088032220a022be23","first_seen":"2026-05-17T14:01:06.776488Z","last_seen":"2026-05-17T14:19:23.366415Z","times_seen":2,"resource_available":false,"data":null}},"time_used":58,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":58,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vurextueow.com/heartbeat.php","fqdn":"vurextueow.com","domain":"vurextueow.com","tld":"com"},"ip":{"addr":"159.100.6.19","port":443,"asn":44066,"as":"firstcolo GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://vurextueow.com/","date":"2026-05-17T14:00:34.389Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webmail.vurextueow.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 16 May 2026 06:14:03 GMT","end":"Fri, 14 Aug 2026 06:14:02 GMT"},"fingerprint":{"sha1":"34:E7:38:DE:97:F3:07:68:42:FD:8B:1B:4D:F4:38:09:49:96:F2:E1","sha256":"A5:63:D3:4A:FB:1B:15:C3:AB:9F:D0:97:D7:88:DD:AF:88:E8:3E:F2:8D:79:F7:4E:35:DD:89:72:0D:16:9D:0F"}}},"request":{"raw":"GET /heartbeat.php HTTP/1.1\r\nHost: vurextueow.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://vurextueow.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=ef1192a4b6f2410fdfbeb5f3e512f3c0\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\ncontent-type: application/json\r\ncontent-length: 28\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Sun, 17 May 2026 14:00:34 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":24,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"2e668b6197727cd632f164211099024d","sha1":"5261a801efced652ac252cadba09fa32361b5511","sha256":"d14c60cb2cb669a7c3c0bbda764575bdd597a2240801a95e814a131aa329bb2a","sha512":"d35f7e3b44303e42ff3cb783fd716264631ed86e66aa06b016a9918364eb84624db4dff815ec9460c2baf3afdf7acc564c10ff2f6a5f941177b8c64c581796ef","ssdeep":"","tlshash":"2870002808a80022880803080800ba00a82fa0a30080000a20083088032220a0223a23","first_seen":"2026-05-17T14:01:06.76174Z","last_seen":"2026-05-17T14:19:23.36799Z","times_seen":3,"resource_available":false,"data":null}},"time_used":145,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":145,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vurextueow.com/","fqdn":"vurextueow.com","domain":"vurextueow.com","tld":"com"},"ip":{"addr":"159.100.6.19","port":443,"asn":44066,"as":"firstcolo GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-05-17T14:00:30.744Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webmail.vurextueow.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 16 May 2026 06:14:03 GMT","end":"Fri, 14 Aug 2026 06:14:02 GMT"},"fingerprint":{"sha1":"34:E7:38:DE:97:F3:07:68:42:FD:8B:1B:4D:F4:38:09:49:96:F2:E1","sha256":"A5:63:D3:4A:FB:1B:15:C3:AB:9F:D0:97:D7:88:DD:AF:88:E8:3E:F2:8D:79:F7:4E:35:DD:89:72:0D:16:9D:0F"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: vurextueow.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nset-cookie: PHPSESSID=ef1192a4b6f2410fdfbeb5f3e512f3c0; path=/; secure\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 4596\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Sun, 17 May 2026 14:00:30 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":24669,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with CRLF, LF line terminators","md5":"c440bc395d7550635246773e291d4e7e","sha1":"fe128d7b867e953921235d83b8b7a61d6ed54617","sha256":"9d93d84cfb6f8916b36c555fa2de4567fc6252773ff581ec6db59db51556821f","sha512":"66c363b315c7660e64d17133469049f21e9e9104d42c4826600554027bc655b91d82f5ab3c5653850265c66269d7f699012de4aa4bfbacc19f8f507dbd081c6d","ssdeep":"384:OpK6D4Xyj2fdma+au2TrUrtGsRDfy1wmaVe0K:IXQyj2fdma+au2TrUZptfy1wfVe0K","tlshash":"acb2332aa94010195437e3b8dbf35748e6774023d2038ebd7bcd66474f719588aa3f99","first_seen":"2026-05-17T14:01:06.777879Z","last_seen":"2026-05-17T14:03:19.796639Z","times_seen":2,"resource_available":true,"data":null}},"time_used":342,"timings":{"blocked":113,"dns":45,"connect":44,"send":0,"wait":108,"receive":0,"ssl":29},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vurextueow.com/assets/watch5_alexbank.png","fqdn":"vurextueow.com","domain":"vurextueow.com","tld":"com"},"ip":{"addr":"159.100.6.19","port":443,"asn":44066,"as":"firstcolo GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vurextueow.com/","date":"2026-05-17T14:00:31.176Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webmail.vurextueow.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 16 May 2026 06:14:03 GMT","end":"Fri, 14 Aug 2026 06:14:02 GMT"},"fingerprint":{"sha1":"34:E7:38:DE:97:F3:07:68:42:FD:8B:1B:4D:F4:38:09:49:96:F2:E1","sha256":"A5:63:D3:4A:FB:1B:15:C3:AB:9F:D0:97:D7:88:DD:AF:88:E8:3E:F2:8D:79:F7:4E:35:DD:89:72:0D:16:9D:0F"}}},"request":{"raw":"GET /assets/watch5_alexbank.png HTTP/1.1\r\nHost: vurextueow.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vurextueow.com/\r\nCookie: PHPSESSID=ef1192a4b6f2410fdfbeb5f3e512f3c0\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 24 May 2026 14:00:31 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 15 May 2026 22:12:34 GMT\r\naccept-ranges: bytes\r\ncontent-length: 1460873\r\ndate: Sun, 17 May 2026 14:00:31 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1460873,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1254 x 1254, 8-bit/color RGBA, non-interlaced","md5":"77252b831b6603298dfd30cd8a5a0826","sha1":"00793089e59b10503494967aa8f7f2338e09dcb6","sha256":"1ef791cfd79ade8ca08ee8dc81e0c120d66e1957f27391a97021df7d344340b6","sha512":"10b0184d6ff72b60ee4fd7fe6ead12377431ec22afbb398fafa69a0e2ea4f7e0eaa8e08609a425bbc63b1136057bd7421b5b52e46dd0aea1740ed3e4f372f39d","ssdeep":"24576:rAQwgq/xcZsfbuUTKHpR+yuxdX/h/wPBvc/5:rAYkcZsfqCeeFxH8S5","tlshash":"f52533eeb2f44809d2b2a195c0e2788766d4b38543fa9f131c2dd1e471b5af8c77a25c","first_seen":"2026-05-17T14:01:06.779303Z","last_seen":"2026-05-17T14:03:19.802882Z","times_seen":2,"resource_available":false,"data":null}},"time_used":4806,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4028,"receive":778,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/cairo/v31/SLXVc1nY6HkvangtZmpQdkhzfH5lkSscQyyS8pg_RWH1vCk.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://vurextueow.com/","date":"2026-05-17T14:00:31.371Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Apr 2026 08:36:40 GMT","end":"Mon, 13 Jul 2026 08:36:39 GMT"},"fingerprint":{"sha1":"7F:B3:C1:48:F4:27:B8:68:3C:19:02:13:E1:6F:23:04:AC:C8:65:17","sha256":"FC:08:6D:DD:C4:AF:25:5E:6A:51:A0:A1:4E:27:4A:FF:E3:A5:37:ED:A4:1A:33:C1:27:48:DE:AB:71:AE:5D:2D"}}},"request":{"raw":"GET /s/cairo/v31/SLXVc1nY6HkvangtZmpQdkhzfH5lkSscQyyS8pg_RWH1vCk.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://vurextueow.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 30896\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 16 May 2026 00:08:59 GMT\r\nexpires: Sun, 16 May 2027 00:08:59 GMT\r\ncache-control: public, max-age=31536000\r\nage: 136292\r\nlast-modified: Tue, 16 Sep 2025 03:39:28 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":30896,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 30896, version 1.0","md5":"4d90a59cb1819bdd41f970549ab90a16","sha1":"714d40cf07db15fa9268ea607211c31438e4ded4","sha256":"748022f50c427456ad66031e855349be3448ee1f05a5f1eb59574ebe0c686749","sha512":"a0acca1df3a6abcd7b6f4c2757862b77af98571e283adb26be5c5f386c3c1e59afd1e1186ee17a4642c410ca7d2eb60e3cf51df731010bdc5ad9a5b3a7f8eec1","ssdeep":"768:6L9cTVSKprJeCIyonOLwDIzFBO5CTJH0mtCFiCv:k9GteHyonM9ZBO09HxMv","tlshash":"bed2e1c2bca5cd835d7e7f721239a96f008c1c8b776c99fc5cf21e644494dad028aa91","first_seen":"2025-09-17T15:48:15.244682Z","last_seen":"2026-05-20T20:26:55.981005Z","times_seen":2473,"resource_available":false,"data":null}},"time_used":202,"timings":{"blocked":85,"dns":1,"connect":15,"send":0,"wait":16,"receive":16,"ssl":65},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/cairo/v31/SLXVc1nY6HkvangtZmpQdkhzfH5lkSscQyyS8pg_RWH1vCk.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://vurextueow.com/","date":"2026-05-17T14:00:31.375Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Apr 2026 08:36:40 GMT","end":"Mon, 13 Jul 2026 08:36:39 GMT"},"fingerprint":{"sha1":"7F:B3:C1:48:F4:27:B8:68:3C:19:02:13:E1:6F:23:04:AC:C8:65:17","sha256":"FC:08:6D:DD:C4:AF:25:5E:6A:51:A0:A1:4E:27:4A:FF:E3:A5:37:ED:A4:1A:33:C1:27:48:DE:AB:71:AE:5D:2D"}}},"request":{"raw":"GET /s/cairo/v31/SLXVc1nY6HkvangtZmpQdkhzfH5lkSscQyyS8pg_RWH1vCk.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://vurextueow.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 30896\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 16 May 2026 00:08:59 GMT\r\nexpires: Sun, 16 May 2027 00:08:59 GMT\r\ncache-control: public, max-age=31536000\r\nage: 136292\r\nlast-modified: Tue, 16 Sep 2025 03:39:28 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":30896,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 30896, version 1.0","md5":"4d90a59cb1819bdd41f970549ab90a16","sha1":"714d40cf07db15fa9268ea607211c31438e4ded4","sha256":"748022f50c427456ad66031e855349be3448ee1f05a5f1eb59574ebe0c686749","sha512":"a0acca1df3a6abcd7b6f4c2757862b77af98571e283adb26be5c5f386c3c1e59afd1e1186ee17a4642c410ca7d2eb60e3cf51df731010bdc5ad9a5b3a7f8eec1","ssdeep":"768:6L9cTVSKprJeCIyonOLwDIzFBO5CTJH0mtCFiCv:k9GteHyonM9ZBO09HxMv","tlshash":"bed2e1c2bca5cd835d7e7f721239a96f008c1c8b776c99fc5cf21e644494dad028aa91","first_seen":"2025-09-17T15:48:15.244682Z","last_seen":"2026-05-20T20:26:55.981005Z","times_seen":2473,"resource_available":false,"data":null}},"time_used":253,"timings":{"blocked":128,"dns":0,"connect":0,"send":0,"wait":16,"receive":3,"ssl":106},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vurextueow.com/assets/Alex_Bank_Logo.svg","fqdn":"vurextueow.com","domain":"vurextueow.com","tld":"com"},"ip":{"addr":"159.100.6.19","port":443,"asn":44066,"as":"firstcolo GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vurextueow.com/","date":"2026-05-17T14:00:32.379Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webmail.vurextueow.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 16 May 2026 06:14:03 GMT","end":"Fri, 14 Aug 2026 06:14:02 GMT"},"fingerprint":{"sha1":"34:E7:38:DE:97:F3:07:68:42:FD:8B:1B:4D:F4:38:09:49:96:F2:E1","sha256":"A5:63:D3:4A:FB:1B:15:C3:AB:9F:D0:97:D7:88:DD:AF:88:E8:3E:F2:8D:79:F7:4E:35:DD:89:72:0D:16:9D:0F"}}},"request":{"raw":"GET /assets/Alex_Bank_Logo.svg HTTP/1.1\r\nHost: vurextueow.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vurextueow.com/\r\nCookie: PHPSESSID=ef1192a4b6f2410fdfbeb5f3e512f3c0\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 24 May 2026 14:00:32 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Fri, 15 May 2026 20:36:10 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 18550\r\ndate: Sun, 17 May 2026 14:00:32 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":72546,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"04281ac9bf7ea0cde069e696559b062f","sha1":"95c0fd1615a475c4e7b87cbd95fc54fb07b72130","sha256":"1cf8d2885bc694a1785fdfe3301a192c97dab34132a5ed2bdb490aa6cca4c35a","sha512":"3fe08013dba9d9ef9dedb9f5670cac9e9ac24233bd6838523c595b80a3f26e6cfef49f9709c18b9d56df84cae394b9baef77e12ea84cbcf359346c3fea77ecc9","ssdeep":"1536:P8cyrFA34oSfYxoPbCUhukPmmLFYVyOIbRQ1CtVW4iFBpA:i","tlshash":"a86394dcb32d2bd0f74eb2f1e9e22055be1f25ee2b054577c65d2c9098271acc9a94c2","first_seen":"2026-05-17T14:01:06.757213Z","last_seen":"2026-05-17T14:03:19.798104Z","times_seen":2,"resource_available":false,"data":null}},"time_used":103,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":98,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}