{"report_id":"20b832f9-6255-4a40-8bc3-90dfadea041d","version":6,"status":"done","tags":[],"date":"2025-10-15T06:27:06Z","url":{"schema":"http","addr":"wizja.cc","fqdn":"wizja.cc","domain":"wizja.cc","tld":"cc"},"ip":{"addr":"172.67.150.84","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"wizja.cc/","fqdn":"wizja.cc","domain":"wizja.cc","tld":"cc"},"title":"Wizja"},"submit":{"url":{"schema":"http","addr":"wizja.cc","fqdn":"wizja.cc","domain":"wizja.cc","tld":"cc"},"ip":{"addr":"172.67.150.84","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null,"user":{"user_id":"akbkyowd9geqr98"}},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-11-19T06:27:06Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":12}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-15","alert":"Sinkholed","trigger":"embed.wizja.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-15","alert":"Sinkholed","trigger":"wizja.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"usrpubtrk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"usrpubtrk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"usrpubtrk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"acscdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"adexchangeclear.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-15","alert":"Sinkholed","trigger":"tvdarmowa.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-10-15","alert":"Sinkholed","trigger":"tvdarmowa.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-15","alert":"Sinkholed","trigger":"tvdarmowa.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-15","alert":"Phishing Block","trigger":"tvdarmowa.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-15","alert":"Sinkholed","trigger":"tvdarmowa.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2025-10-12T22:12:25.402635Z","alert_count":0,"request_count":6,"received_data":405378,"sent_data":3297,"comment":"","tags":null,"fingerprints":null},{"fqdn":"embed.wizja.cc","ip":{"addr":"104.21.79.248","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":5,"request_count":5,"received_data":416526,"sent_data":2141,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"wizja.cc","ip":{"addr":"172.67.150.84","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-10-09","domain_rank":0,"first_seen":"2025-10-15T06:27:07.395696Z","last_seen":"2025-10-15T06:27:07.395696Z","alert_count":31,"request_count":32,"received_data":726772,"sent_data":13678,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Tailwind CSS","description":"Tailwind is a utility-first CSS framework.","website":"https://tailwindcss.com/","common_platform_enumeration":"","icon":"tailwindcss.svg","categories":["UI frameworks"]},{"name":"Cloudflare Browser Insights","description":"Cloudflare Browser Insights is a tool that measures the performance of websites from the perspective of users.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Analytics","RUM"]}]},{"fqdn":"usrpubtrk.com","ip":{"addr":"172.67.186.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-06-16","domain_rank":6824,"first_seen":"2025-06-17T13:34:00.105327Z","last_seen":"2025-10-08T13:20:00.058427Z","alert_count":3,"request_count":1,"received_data":520,"sent_data":476,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}]},{"fqdn":"tvdarmowa.cc","ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2025-07-23","domain_rank":0,"first_seen":"2025-09-26T12:56:10.847965Z","last_seen":"2025-09-26T12:56:10.847965Z","alert_count":5,"request_count":1,"received_data":0,"sent_data":426,"comment":"","tags":null,"fingerprints":null},{"fqdn":"static.cloudflareinsights.com","ip":{"addr":"104.16.79.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2019-08-30","domain_rank":4073,"first_seen":"2019-09-24T14:34:56Z","last_seen":"2025-10-12T22:13:55.789176Z","alert_count":0,"request_count":1,"received_data":20344,"sent_data":494,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"acscdn.com","ip":{"addr":"104.18.17.201","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2020-05-05","domain_rank":18769,"first_seen":"2020-05-06T08:07:13Z","last_seen":"2025-10-13T02:58:42.667249Z","alert_count":3,"request_count":3,"received_data":270750,"sent_data":1228,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}]},{"fqdn":"adexchangeclear.com","ip":{"addr":"172.67.223.87","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2015-04-27","domain_rank":24943,"first_seen":"2025-07-16T08:40:02.47428Z","last_seen":"2025-10-13T01:12:01.180815Z","alert_count":4,"request_count":4,"received_data":4962,"sent_data":3001,"comment":"","tags":null,"fingerprints":[{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"216.58.211.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2025-10-12T22:12:24.910527Z","alert_count":0,"request_count":1,"received_data":10794,"sent_data":467,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"cdn.tailwindcss.com","ip":{"addr":"172.66.155.116","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2017-07-20","domain_rank":117330,"first_seen":"2018-07-09T05:46:13Z","last_seen":"2025-10-12T22:26:38.0432Z","alert_count":0,"request_count":2,"received_data":815356,"sent_data":808,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":null}],"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"cdn.tailwindcss.com/","fqdn":"cdn.tailwindcss.com","domain":"tailwindcss.com","tld":"com"},"ip":{"addr":"172.66.155.116","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"7a614b9a197e532c00d09a23b0996b5f","sha1":"1ff1738a40f3716e30e9031b181b0955ae578955","sha256":"176e894661aa9cdc9a5cba6c720044cbbf7b8bd80d1c9a142a7c24b1b6c50d15","sha512":"a67bc26f52d938358471be5671ff4b79e11af4e68b486aaf73a35a4c9bf3777aab51101af81563b4e5b7ba4b04dd8971fcfa9ee2c41fb10a0c1ee5604a99abd6","ssdeep":"12288:fpgrZxSAoNbJb0Wie75aUXGuyQZhK4O0s:RCVoNB0Wie75aUWmnO0s","tlshash":"e8844aa57396702647eb51e850ea1042f2beaa38840c44bcf7edd4da39e5e4440fbf79","size":407279,"data":"","first_seen":"2025-07-28T16:58:08.903462Z","last_seen":"2026-04-04T04:11:39.174587Z","times_seen":28722,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wizja.cc/","fqdn":"wizja.cc","domain":"wizja.cc","tld":"cc"},"ip":{"addr":"172.67.150.84","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"9b7aada9964252e970f7a71036d0b3eb","sha1":"2380374c94ab9a3834619b19ad87d44aefce23c6","sha256":"c37a3a31f9bc51ea218297201a7e05a2e5642f0c9a55743b95a018bb483c0c80","sha512":"5b5dba8f998370483577fdd25fdd604bb6983b89911184cf80da6667d30c60d6ec47d3b7074df6cf62d15c7f0fe5775ea0b0d60ba2414e9010d26d9077a31a09","ssdeep":"","tlshash":"24a0025aa921491a6381190c5679ed5554791443870024c58494c2b84e569c1044b50e","size":72,"data":"","first_seen":"2025-10-15T06:27:16.029579Z","last_seen":"2025-10-15T06:27:16.029579Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wizja.cc/script.js","fqdn":"wizja.cc","domain":"wizja.cc","tld":"cc"},"ip":{"addr":"172.67.150.84","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ad15a9c7f1e1fe4e05f40f3ce1fc4d62","sha1":"3de404d5147fbeaaeed1f63fb1ab3d2276b4edf0","sha256":"648f78c398b50b53374fc8ec0bf83073eea2b5857f492ae8cca076ab165a479a","sha512":"a2d5ef093742ca9c93ad028183d53a0b7ec5fe510b28d830ae19a1225616067b279e1cb75bbfd8f77aee369d6ac69d65d89debadead9997e9af359ee9bec5a3f","ssdeep":"768:gcOH07luxepQJVHclJ83HWJyGlNlwDtkr:tq07luaQJVHclJ8GJyQyD4","tlshash":"8d53d75b31b3203844b721fe678ba3443625b003f586c9987a6cca049fd6da9c6b77cd","size":64240,"data":"","first_seen":"2025-10-15T06:27:15.912352Z","last_seen":"2025-10-15T06:27:15.912352Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wizja.cc/","fqdn":"wizja.cc","domain":"wizja.cc","tld":"cc"},"ip":{"addr":"172.67.150.84","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"26eeec907b276221f30f065f487db50a","sha1":"1e7947c7792114f350c820be743359506c5ea67d","sha256":"1d0dd80a8d74e950029f86d66c3aeec217b61dbe1b4180fa306b30291a579be1","sha512":"a5af50913f47e7e12c9497b6a9ed1a572b8096b457d828921d0881c358db55b9f7baabeadb72aec85d16694332760c1da1c42716afaaf7c5b6a8d184c056d1cd","ssdeep":"","tlshash":"2080000c228c308200c83008e08b000800002808eb308c0caac000a28380228c882800","size":26,"data":"","first_seen":"2025-10-15T06:27:16.032914Z","last_seen":"2025-10-15T06:27:16.032914Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"acscdn.com/script/atagv2.js","fqdn":"acscdn.com","domain":"acscdn.com","tld":"com"},"ip":{"addr":"104.18.17.201","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"2859556c730429b6e832158a5b07f18f","sha1":"b68ce515d0974b6072f6c29670a6241e7bba507e","sha256":"887a889bfa309bdbb5fd306b320fd9a8463d6b576639bce739f656fc28531d93","sha512":"267dca57daf942983537fc3acc9ca81f10c13d9b56d0b48ba0db7fc3dce8364f745e3647e67cf7c5281fdce8d5a0055de6955673fe2dff40015583a54ad23b7c","ssdeep":"3072:Ly+T66IfNzIvra4jxM4McMnThVBSHmQqP:jdIorVVarSQP","tlshash":"7ea3c749b6d2b0f867d2a5e4842f5646e1372a24740d98d5fafac1d29879ecf1033e3c","size":104737,"data":"","first_seen":"2025-09-12T13:14:35.876215Z","last_seen":"2025-10-21T13:34:05.726957Z","times_seen":67,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"acscdn.com/script/inpagepushB.js","fqdn":"acscdn.com","domain":"acscdn.com","tld":"com"},"ip":{"addr":"104.18.17.201","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"b71561ee8a60ed0c339b45ff38f0de29","sha1":"77f35b6821b01a24715e8d9522ab5b6ab4305663","sha256":"d1a8ec482043c2ab955dd3c116481312c5f9db640951f39563c3fb1e06b54073","sha512":"47d98d83f25ef01df5ccdfafe90717bb4192cf909b4daf552de0b53e8e2540456826cd98cf5beac79d60dbe6636fa2925ef43bbff18cdec07dd406f7c20fe578","ssdeep":"384:oeu5onyOOAdeWgZ9VKN3RC9mSyXn3ja7LogdnVZywJKyTsykxkVQM8onwkevYdQJ:obbOOAdeWgZfKN3UESi3GnndVZywJKyi","tlshash":"1072d8752223033539d485dafc74ab81a5216168ba56c42cf1ec8cfaa25fcd93d74f78","size":16307,"data":"","first_seen":"2025-10-09T17:11:38.525971Z","last_seen":"2025-10-15T23:28:38.74179Z","times_seen":18,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"acscdn.com/script/aclib.js","fqdn":"acscdn.com","domain":"acscdn.com","tld":"com"},"ip":{"addr":"104.18.17.201","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"db3aaf4fe50df1ff419cc6478ab05d84","sha1":"0e3ee834059c65753de30bff41b40413c5123c88","sha256":"ff138668a76453af9faca5cb4df0335ba5612db0b603d7c4a10d4c9938a52644","sha512":"7ad14ae820cc21fc5a70f23a56007a2e5ea8a5d5b1556b9a058dfa37259351d1ef8a664607799f91c426eda83d9096dadc2f53ac963f55beccca64d0d9fc0cf5","ssdeep":"3072:G068+RhI8FvQeXO0AFQM4MmMnTQXvS1kKeq/1:B6phN1DF/SW41","tlshash":"a2e3e849bad2b0f867e261e4942f9646e1371624740e98d5f6fac5d1a879ecf0033e3c","size":147006,"data":"","first_seen":"2025-10-09T08:30:23.700944Z","last_seen":"2025-10-16T08:56:32.776525Z","times_seen":154,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wizja.cc/","fqdn":"wizja.cc","domain":"wizja.cc","tld":"cc"},"ip":{"addr":"172.67.150.84","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"381ffc059b1d1f39ba747b19f2e1708d","sha1":"906875beb0e6b637dabdcc35cd0736df19697e94","sha256":"888f71cd20cc9cdc479d916fb2ae8a8f1dfbae0e0e158e30f43266f5f8faa9aa","sha512":"5923fe733bd6df30630844850cf0cfc9b704d09fae7684c8dbcae1402247da9b5cd2a71f1e2960b25076f508583b2b7818ef8fd5cf9a9fae94ae9373520dbcee","ssdeep":"","tlshash":"81d0229803a21b134e16a450c0d60031ec66d2034c0a4c293a8c2110cf0c01a08f031d","size":241,"data":"","first_seen":"2025-10-15T06:27:16.036278Z","last_seen":"2025-10-15T06:27:16.036278Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.cloudflareinsights.com/beacon.min.js/vcd15cbe7772f49c399c6a5babf22c1241717689176015","fqdn":"static.cloudflareinsights.com","domain":"cloudflareinsights.com","tld":"com"},"ip":{"addr":"104.16.79.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ec18af6d41f6f278b6aed3bdabffa7bc","sha1":"62c9e2cab76b888829f3c5335e91c320b22329ae","sha256":"8a18d13015336bc184819a5a768447462202ef3105ec511bf42ed8304a7ed94f","sha512":"669b0e9a545057acbdd3b4c8d1d2811eaf4c776f679da1083e591ff38ae7684467abacef5af3d4aabd9fb7c335692dbca0def63ddac2cd28d8e14e95680c3511","ssdeep":"384:XriNpnjyMkg8XMtExRN1w29JIOzahXtO2nJ65:GijgSWuanfJ65","tlshash":"8d92d7def645723613f76076913f220b733b35a528068459812adbc22c3d98f6267f6e","size":19948,"data":"","first_seen":"2024-06-07T09:21:23Z","last_seen":"2026-04-04T04:43:52.01107Z","times_seen":330104,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null},"http":[{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa25L7W0I5nvwUgHU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://wizja.cc/","date":"2025-10-15T06:26:45.216Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Sep 2025 08:41:58 GMT","end":"Mon, 15 Dec 2025 08:41:57 GMT"},"fingerprint":{"sha1":"01:8A:1A:53:EB:C1:22:A3:A0:69:16:42:30:E0:DF:75:70:19:84:BA","sha256":"A0:39:D8:8F:4E:08:6C:CC:FB:5E:20:98:FA:7C:2B:9F:6F:D6:F3:10:BF:EF:02:93:42:E4:94:E6:FD:A4:8D:35"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa25L7W0I5nvwUgHU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://wizja.cc\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 84924\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 08 Oct 2025 17:35:21 GMT\r\nexpires: Thu, 08 Oct 2026 17:35:21 GMT\r\ncache-control: public, max-age=31536000\r\nage: 564684\r\nlast-modified: Tue, 09 Sep 2025 18:33:55 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":84924,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 84924, version 1.0","md5":"f5b588b5cfef2173838149769c8a0269","sha1":"5312086a01f8e8299094ddee5819b9727a19cae2","sha256":"b8811a6cd6f7e0707dfc9e9e6f1daf5f6f450b51e887e163945a9ade91c2720f","sha512":"05d5271c633bbe102775c0b6df9c5e110dae3a2517061714bb5c26ec66a00f8e1b62961135ec96962e7ccaf3942d8e32bd86f42558cbac8ee16ff6c333117886","ssdeep":"1536:PABWz4rSN/GzH27xN5UR1OnX+uyRsd1osLZBi/JGyQI01xDj+C:PAG4rCGa7L5UR1OnX+fGd/VB03QI+xP","tlshash":"378302b4ae71b3968f1c7fe46396273c2a7bdf41053950aeae44e16787f00dba148784","first_seen":"2025-05-29T19:39:57.235915Z","last_seen":"2026-04-04T04:42:23.934359Z","times_seen":7267,"resource_available":false,"data":null}},"time_used":404,"timings":{"blocked":186,"dns":1,"connect":30,"send":0,"wait":18,"receive":7,"ssl":158},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://wizja.cc/","date":"2025-10-15T06:26:45.218Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Sep 2025 08:41:58 GMT","end":"Mon, 15 Dec 2025 08:41:57 GMT"},"fingerprint":{"sha1":"01:8A:1A:53:EB:C1:22:A3:A0:69:16:42:30:E0:DF:75:70:19:84:BA","sha256":"A0:39:D8:8F:4E:08:6C:CC:FB:5E:20:98:FA:7C:2B:9F:6F:D6:F3:10:BF:EF:02:93:42:E4:94:E6:FD:A4:8D:35"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://wizja.cc\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 08 Oct 2025 17:22:44 GMT\r\nexpires: Thu, 08 Oct 2026 17:22:44 GMT\r\ncache-control: public, max-age=31536000\r\nage: 565441\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48532,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-04-04T04:45:27.528786Z","times_seen":132862,"resource_available":false,"data":null}},"time_used":390,"timings":{"blocked":182,"dns":0,"connect":28,"send":0,"wait":16,"receive":4,"ssl":151},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa25L7W0I5nvwUgHU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://wizja.cc/","date":"2025-10-15T06:26:45.224Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Sep 2025 08:41:58 GMT","end":"Mon, 15 Dec 2025 08:41:57 GMT"},"fingerprint":{"sha1":"01:8A:1A:53:EB:C1:22:A3:A0:69:16:42:30:E0:DF:75:70:19:84:BA","sha256":"A0:39:D8:8F:4E:08:6C:CC:FB:5E:20:98:FA:7C:2B:9F:6F:D6:F3:10:BF:EF:02:93:42:E4:94:E6:FD:A4:8D:35"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa25L7W0I5nvwUgHU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://wizja.cc\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 84924\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 08 Oct 2025 17:35:21 GMT\r\nexpires: Thu, 08 Oct 2026 17:35:21 GMT\r\ncache-control: public, max-age=31536000\r\nage: 564684\r\nlast-modified: Tue, 09 Sep 2025 18:33:55 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":84924,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 84924, version 1.0","md5":"f5b588b5cfef2173838149769c8a0269","sha1":"5312086a01f8e8299094ddee5819b9727a19cae2","sha256":"b8811a6cd6f7e0707dfc9e9e6f1daf5f6f450b51e887e163945a9ade91c2720f","sha512":"05d5271c633bbe102775c0b6df9c5e110dae3a2517061714bb5c26ec66a00f8e1b62961135ec96962e7ccaf3942d8e32bd86f42558cbac8ee16ff6c333117886","ssdeep":"1536:PABWz4rSN/GzH27xN5UR1OnX+uyRsd1osLZBi/JGyQI01xDj+C:PAG4rCGa7L5UR1OnX+fGd/VB03QI+xP","tlshash":"378302b4ae71b3968f1c7fe46396273c2a7bdf41053950aeae44e16787f00dba148784","first_seen":"2025-05-29T19:39:57.235915Z","last_seen":"2026-04-04T04:42:23.934359Z","times_seen":7267,"resource_available":false,"data":null}},"time_used":233,"timings":{"blocked":85,"dns":0,"connect":29,"send":0,"wait":37,"receive":21,"ssl":57},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.wizja.cc/cdn/eve/16.jpg","fqdn":"embed.wizja.cc","domain":"wizja.cc","tld":"cc"},"ip":{"addr":"104.21.79.248","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://wizja.cc/","date":"2025-10-15T06:26:45.567Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wizja.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 09 Oct 2025 11:29:55 GMT","end":"Wed, 07 Jan 2026 12:27:40 GMT"},"fingerprint":{"sha1":"43:A7:B5:0A:62:F0:C6:46:F4:5F:47:CF:3C:7C:14:81:C9:CE:08:25","sha256":"9D:A8:61:C5:9C:A6:96:6D:82:D8:7E:62:A8:35:7A:80:63:11:11:C6:7B:3D:08:13:7A:59:57:C4:D3:BB:DD:A7"}}},"request":{"raw":"GET /cdn/eve/16.jpg HTTP/1.1\r\nHost: embed.wizja.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://wizja.cc/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 15 Oct 2025 06:26:45 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 107469\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 22 Oct 2025 03:28:18 GMT\r\nlast-modified: Mon, 13 Oct 2025 14:49:27 GMT\r\naccept-ranges: bytes\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: same-origin\r\nalt-svc: h3=\":443\"; ma=86400\r\nage: 10707\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=P3To%2FGrmzOdhiROeVc9go29d%2FE9QG9b0ux6x82yBtSYAWFCsgFB%2FfWfGmZ2zCn7P2PPgzV2ksFfsw3pYps9oY6lYBxD53Uf8UBG4Tw%3D%3D\"}]}\r\nserver: cloudflare\r\ncf-ray: 98ed3f2afa2f56c5-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":107469,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1200x630, components 3","md5":"9a15491b4b21b3d2c1f2da30636f8c9d","sha1":"29108f874ba2fae1dd4384b94321c14dc2574ad0","sha256":"e6715c5d489c1222702715ad88b9c4c5759a8539ac15ce64a9b48a7eb589c994","sha512":"088bbad4527c1b60ef86dfb88e01fec433a376fae351f03d13025fe9b04d431a0d9eccbde1177954cbfb79d52c6f8e64622025b0c8e09e9c3745e5bf1ea87100","ssdeep":"3072:e/4virgNfnWLMOIIu1TMUkKx7ot0yDnyhEV1MoAWtvjTHR:6sNfWtuxMUkKRmbyhFoA6vjTx","tlshash":"44b3123d1ac0f7daf868423eacc837ccbd98955fc3a6b6c90111a1a8d51c5f39cd8a56","first_seen":"2025-10-15T06:27:15.843686Z","last_seen":"2025-10-15T06:27:15.843686Z","times_seen":1,"resource_available":false,"data":null}},"time_used":68,"timings":{"blocked":28,"dns":1,"connect":1,"send":0,"wait":7,"receive":6,"ssl":22},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-15","alert":"Sinkholed","trigger":"embed.wizja.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wizja.cc/logo/superpolsat.png","fqdn":"wizja.cc","domain":"wizja.cc","tld":"cc"},"ip":{"addr":"172.67.150.84","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://wizja.cc/","date":"2025-10-15T06:26:45.781Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wizja.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 09 Oct 2025 11:33:37 GMT","end":"Wed, 07 Jan 2026 12:33:30 GMT"},"fingerprint":{"sha1":"35:3B:EA:6D:70:E9:0E:CB:22:2F:6D:31:26:8A:47:4C:58:95:53:70","sha256":"B1:BA:DE:AA:2D:A5:9D:45:19:50:7D:17:E0:C1:B8:41:E3:A5:10:FD:D2:DE:62:F0:8A:1E:70:7C:22:F8:D0:1B"}}},"request":{"raw":"GET /logo/superpolsat.png HTTP/1.1\r\nHost: wizja.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://wizja.cc/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 40135\r\npriority: u=4,i=?0\r\ncontent-type: image/png\r\ncf-cache-status: REVALIDATED\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"40f964fe1103575203a0527625341243\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Hus8v3XpNJoGJkmdLo5%2F94HLHdr8n%2FZS0CrlIjlNdiYNSiEru3IAbY5oU1rohvJJGpmQ04VK5XHSox1l0s2FBz2d5DUfB5nHMJ4Q%2BqW8glt1tg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ndate: Wed, 15 Oct 2025 06:26:45 GMT\r\ncf-ray: 98ed3f2c08ee0b3d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":40135,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 576 x 767, 8-bit/color RGBA, non-interlaced","md5":"4ea0ab715ecf2fd65ce67bc3398ef9ca","sha1":"c9cd99866d532017a3bbcb3e36d791657bbee01f","sha256":"ed1101fbde65c0688f5e4be1831255cc78a01a7e4573780312824d988dcf69c0","sha512":"d2cc497db77ee4ecba1930a66eff60f6f12c0643af7ad112d7f6b89a3fe6cbcf58ac8fa65e40f891a4789a9d2dd30f0472a0b2e1f14d2db8d2d3318e6365bf10","ssdeep":"768:beJYKAPYckIgq6vZVmkce7Pbl1532UOGK0VYxPq9/Z+M3+n64Ne3jI1N7wnGK6m/:brKAPYa6hIe7PZ1532UUmYxPqCdnFOIg","tlshash":"7003f1543dfdf5a1ec5710b561c63fabf28f108a0bda7186c6a4ec1eda2ec056c1980d","first_seen":"2025-09-11T10:47:57.234822Z","last_seen":"2025-10-15T06:27:15.848662Z","times_seen":4,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-15","alert":"Sinkholed","trigger":"wizja.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wizja.cc/logo/tvphd.png","fqdn":"wizja.cc","domain":"wizja.cc","tld":"cc"},"ip":{"addr":"172.67.150.84","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://wizja.cc/","date":"2025-10-15T06:26:45.786Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wizja.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 09 Oct 2025 11:33:37 GMT","end":"Wed, 07 Jan 2026 12:33:30 GMT"},"fingerprint":{"sha1":"35:3B:EA:6D:70:E9:0E:CB:22:2F:6D:31:26:8A:47:4C:58:95:53:70","sha256":"B1:BA:DE:AA:2D:A5:9D:45:19:50:7D:17:E0:C1:B8:41:E3:A5:10:FD:D2:DE:62:F0:8A:1E:70:7C:22:F8:D0:1B"}}},"request":{"raw":"GET /logo/tvphd.png HTTP/1.1\r\nHost: wizja.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://wizja.cc/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 12725\r\npriority: u=4,i=?0\r\ncontent-type: image/png\r\ncf-cache-status: REVALIDATED\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"b45f57308df94ecece99b8e47dd6d4fa\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ppaTe401vd4O4uZjDsljYH1XT68WGoFpYOwn%2BTKXGnctdr4fY3WCggrLtLE%2B71%2Bd9L4k0K7bCJ9Qi8%2F56IB7G2QBWFCE8OrQXX%2Bjokpg1G0aaw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ndate: Wed, 15 Oct 2025 06:26:45 GMT\r\ncf-ray: 98ed3f2c08f10b3d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12725,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 330 x 198, 8-bit colormap, non-interlaced","md5":"b5283d89794f90cb7a314acbf169e9c0","sha1":"439337e1da2ab9ad566bd0dda3bbcc984aa030d3","sha256":"750b005f914bd69c3179379d4a031ff9e0f0b38775761b14df488f750a2af27e","sha512":"778d61e76458b2b662bd8c18a849adce5c41da6fb55c3932041cb8d6384c331180d7aab9dcf3c6f30dd7263389275e104fcafd9ed3c8d9ba34a674678870da19","ssdeep":"384:raYA94c+Dcph4dAwlCgRbD66pggdKAAvdn6Z:2vEDc3dSHpgD7vd6Z","tlshash":"3a42c0ac7ee4ccdd702544224e36012e9e47d5d3ae9222917e8073b6a91b2c27366e5c","first_seen":"2025-09-11T10:47:57.31588Z","last_seen":"2025-10-15T06:27:15.859595Z","times_seen":4,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://wizja.cc/","date":"2025-10-15T06:26:45.213Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Sep 2025 08:41:58 GMT","end":"Mon, 15 Dec 2025 08:41:57 GMT"},"fingerprint":{"sha1":"01:8A:1A:53:EB:C1:22:A3:A0:69:16:42:30:E0:DF:75:70:19:84:BA","sha256":"A0:39:D8:8F:4E:08:6C:CC:FB:5E:20:98:FA:7C:2B:9F:6F:D6:F3:10:BF:EF:02:93:42:E4:94:E6:FD:A4:8D:35"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://wizja.cc\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 08 Oct 2025 17:22:44 GMT\r\nexpires: Thu, 08 Oct 2026 17:22:44 GMT\r\ncache-control: public, max-age=31536000\r\nage: 565441\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48532,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-04-04T04:45:27.528786Z","times_seen":132862,"resource_available":false,"data":null}},"time_used":348,"timings":{"blocked":161,"dns":1,"connect":26,"send":0,"wait":16,"receive":6,"ssl":134},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"usrpubtrk.com/ut/hb.php?cb=0.6001894621635613\u0026v=1","fqdn":"usrpubtrk.com","domain":"usrpubtrk.com","tld":"com"},"ip":{"addr":"172.67.186.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://wizja.cc/","date":"2025-10-15T06:26:45.434Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usrpubtrk.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 12 Oct 2025 12:29:00 GMT","end":"Sat, 10 Jan 2026 13:27:25 GMT"},"fingerprint":{"sha1":"2D:85:E1:CC:5C:69:E9:00:F0:2A:D7:4D:EC:27:FD:E4:0E:99:3F:1F","sha256":"FF:B8:FC:07:03:69:0B:74:AC:FD:81:98:21:29:56:B1:D8:28:5E:79:5B:0B:DF:E3:6B:94:DB:9F:B8:AF:5B:7F"}}},"request":{"raw":"POST /ut/hb.php?cb=0.6001894621635613\u0026v=1 HTTP/1.1\r\nHost: usrpubtrk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://wizja.cc/\r\nContent-Type: text/plain; charset=utf-8\r\nContent-Length: 1045\r\nOrigin: https://wizja.cc\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Wed, 15 Oct 2025 06:26:45 GMT\r\nserver: cloudflare\r\naccess-control-allow-origin: *\r\nvia: 1.1 google\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fwvUayxnZDoJAGH1xfmzVeKX9AV8PMHanT2hOOWqZjSpfVys0wUC16fiJ19xXEmoaEDUv1VTS12ZnYiVxqgzMb2AnZwVowBOy8Iy\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 98ed3f2a2a3d568d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T04:46:10.842589Z","times_seen":13317089,"resource_available":true,"data":null}},"time_used":228,"timings":{"blocked":32,"dns":21,"connect":1,"send":0,"wait":154,"receive":0,"ssl":18},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"usrpubtrk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"usrpubtrk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"usrpubtrk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wizja.cc/logo/tvn7.png","fqdn":"wizja.cc","domain":"wizja.cc","tld":"cc"},"ip":{"addr":"172.67.150.84","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://wizja.cc/","date":"2025-10-15T06:26:45.769Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wizja.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 09 Oct 2025 11:33:37 GMT","end":"Wed, 07 Jan 2026 12:33:30 GMT"},"fingerprint":{"sha1":"35:3B:EA:6D:70:E9:0E:CB:22:2F:6D:31:26:8A:47:4C:58:95:53:70","sha256":"B1:BA:DE:AA:2D:A5:9D:45:19:50:7D:17:E0:C1:B8:41:E3:A5:10:FD:D2:DE:62:F0:8A:1E:70:7C:22:F8:D0:1B"}}},"request":{"raw":"GET /logo/tvn7.png HTTP/1.1\r\nHost: wizja.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://wizja.cc/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 40019\r\npriority: u=4,i=?0\r\ncontent-type: image/png\r\ncf-cache-status: REVALIDATED\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"2c3ac26178f5abb0fe07bd345a7ac26a\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gDyq%2BPM91PtFmejgqANjj%2BL5brt2%2BURWYTpKHgRRZ4JYtGjKqgC%2F1eE5DS82owKy3GYOZ82%2BkB95i8IuLaOs75hZ4UTU9sQ0NEaKhj2RC9%2FVFg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ndate: Wed, 15 Oct 2025 06:26:45 GMT\r\ncf-ray: 98ed3f2bf8e60b3d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":40019,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 330 x 198, 8-bit/color RGBA, non-interlaced","md5":"7d48a3d696c9dba038b4dd74ffd8c61a","sha1":"782aff329990fc081431b502baf16763e61a7f6d","sha256":"ca78724f5a9022780b56c515b3933671ca1bb4d4e1e04a1211419aff539ea004","sha512":"1f42a808b94faa0662382c01a19e0c54ebe18bd9b84ec79f6e3417fbe87edd6980a61957c0ea45a2612f1ea6809c6ee524adc3ce8b00f790d6d7c2b4d551cbc5","ssdeep":"768:5Fl2dg3kT5ul6+dJLfECn1P2b/9vCpqRZNuI+wOMhj7M536kqy:5Fl2dOk0dJ/1+DsqEd5q/M536C","tlshash":"1303f18bf4a11ed0e40d95b3b9e1e4881817801bef45734274defc97bb963e20b67195","first_seen":"2025-09-11T10:47:57.339805Z","last_seen":"2026-02-16T15:25:54.121411Z","times_seen":6,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-15","alert":"Sinkholed","trigger":"wizja.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wizja.cc/logo/tvppolonia.png","fqdn":"wizja.cc","domain":"wizja.cc","tld":"cc"},"ip":{"addr":"172.67.150.84","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://wizja.cc/","date":"2025-10-15T06:26:45.785Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wizja.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 09 Oct 2025 11:33:37 GMT","end":"Wed, 07 Jan 2026 12:33:30 GMT"},"fingerprint":{"sha1":"35:3B:EA:6D:70:E9:0E:CB:22:2F:6D:31:26:8A:47:4C:58:95:53:70","sha256":"B1:BA:DE:AA:2D:A5:9D:45:19:50:7D:17:E0:C1:B8:41:E3:A5:10:FD:D2:DE:62:F0:8A:1E:70:7C:22:F8:D0:1B"}}},"request":{"raw":"GET /logo/tvppolonia.png HTTP/1.1\r\nHost: wizja.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://wizja.cc/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 17526\r\npriority: u=4,i=?0\r\ncontent-type: image/png\r\ncf-cache-status: REVALIDATED\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"3771a5f4a15630cebaa500f4be10a579\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=n9eIVcMfFJATYS6xaKrd7QlFEgnvUnf0SgqGG4NSoPfKb876bt5sfgckNh0F0FmNeK27lFsMZf5Fi4%2FreJ1Mx0pOORkUHMBxiG18PheUUOeVcWnO\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ndate: Wed, 15 Oct 2025 06:26:45 GMT\r\ncf-ray: 98ed3f2c08f00b3d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":17526,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 330 x 198, 8-bit colormap, non-interlaced","md5":"d6d2d17553ca824c68acf8e8d2c567da","sha1":"384c86fd004071a4f6b7feb7cd87b715e9722161","sha256":"9f2e184f902e4ac5f5c700860abd9ed448cd1b3c7de5fcc49b3a3eb6159a905c","sha512":"79ce879de5e65086349f224164a6a9b8f63be3ff9c77eccbd76091053eb5651a20fcfde29806f406d86e26478eb06a0f5946f23127bbeff0c6c905c2f57f45a7","ssdeep":"384:s1BszuEZem95ykoMYqZ8gSl5RA8dIlvgz0s9KFpMgxYJY:sD/m95yk/zy3A8dkoz0s9KFpMgV","tlshash":"e072e1b10dd33350fac3a1a1f993c51091f62e86599d3ea97294aeaf32301dca4e41e8","first_seen":"2025-09-11T10:47:57.229695Z","last_seen":"2025-10-15T06:27:15.877858Z","times_seen":4,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-15","alert":"Sinkholed","trigger":"wizja.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wizja.cc/logo/zoom.png","fqdn":"wizja.cc","domain":"wizja.cc","tld":"cc"},"ip":{"addr":"172.67.150.84","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://wizja.cc/","date":"2025-10-15T06:26:45.787Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wizja.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 09 Oct 2025 11:33:37 GMT","end":"Wed, 07 Jan 2026 12:33:30 GMT"},"fingerprint":{"sha1":"35:3B:EA:6D:70:E9:0E:CB:22:2F:6D:31:26:8A:47:4C:58:95:53:70","sha256":"B1:BA:DE:AA:2D:A5:9D:45:19:50:7D:17:E0:C1:B8:41:E3:A5:10:FD:D2:DE:62:F0:8A:1E:70:7C:22:F8:D0:1B"}}},"request":{"raw":"GET /logo/zoom.png HTTP/1.1\r\nHost: wizja.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://wizja.cc/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 7304\r\npriority: u=4,i=?0\r\ncontent-type: image/png\r\ncf-cache-status: REVALIDATED\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"b1d7fed150be8a2cd4996360cccb0ff6\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gIGljYuo8tzQebdRyShcnrrkE0vjKeeMltRi9QVEvRQw2cbFasoJXKosq8ipIbmTEDrP5kmvezUIEMa5h0FiBflwbXqTRZQ23reLXMOie6P6pdHy\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ndate: Wed, 15 Oct 2025 06:26:45 GMT\r\ncf-ray: 98ed3f2c08f20b3d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7304,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 330 x 198, 8-bit colormap, non-interlaced","md5":"1ba3673575a6c4a3c1c526aaee9a147c","sha1":"189872b6db8db2ad43b4c0c12a9fd59030a55861","sha256":"2bf252e214a1e468ba3bc79cfd4c01cca848763005d3960616dfda70c49be61e","sha512":"0931d6803a0845788e7d9c79fa6ab10b2b6c188153dc3373350fc6bff667b976ce793e05607cb466e9778bfe1eb4fa622d69fbed1f1a519589e8bc14791c30aa","ssdeep":"192:mrwfTz6QBQpDhAORN6gN2PIPdQYJs2Pj2OIHI9K5K4CHIgvyRXEJQ/X:mrwfTz6QBKDe0N6gN2hEKOaK4CHvvyRp","tlshash":"e4e17eddd97145fe88f633f9fdb740292b2580b509081c09e93e58331215bcfa427baa","first_seen":"2025-09-11T10:47:57.349603Z","last_seen":"2025-10-15T06:27:15.885781Z","times_seen":4,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-15","alert":"Sinkholed","trigger":"wizja.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wizja.cc/logo/tvc.png","fqdn":"wizja.cc","domain":"wizja.cc","tld":"cc"},"ip":{"addr":"172.67.150.84","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://wizja.cc/","date":"2025-10-15T06:26:45.796Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wizja.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 09 Oct 2025 11:33:37 GMT","end":"Wed, 07 Jan 2026 12:33:30 GMT"},"fingerprint":{"sha1":"35:3B:EA:6D:70:E9:0E:CB:22:2F:6D:31:26:8A:47:4C:58:95:53:70","sha256":"B1:BA:DE:AA:2D:A5:9D:45:19:50:7D:17:E0:C1:B8:41:E3:A5:10:FD:D2:DE:62:F0:8A:1E:70:7C:22:F8:D0:1B"}}},"request":{"raw":"GET /logo/tvc.png HTTP/1.1\r\nHost: wizja.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://wizja.cc/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 33619\r\npriority: u=4,i=?0\r\ncontent-type: image/png\r\ncf-cache-status: REVALIDATED\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"84eb0806926c8791ebba566ad2e9d25f\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BvsAm5BkNdsRiL7rCWhnyYfUM3chdqvj9XfrS%2FGVn%2FFr8GayraN38oM51aaWTK9zZKxkx5G2OjJiRWq0jsvFvs13ZsghxrbYsxpn1HJpRToSIQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ndate: Wed, 15 Oct 2025 06:26:45 GMT\r\ncf-ray: 98ed3f2c18f50b3d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":33619,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 330 x 198, 8-bit/color RGBA, non-interlaced","md5":"99094670ad255d2ae7da24e3ac877241","sha1":"cf215c05831bc560a18c983b787dd50135304985","sha256":"687ed7b157afdda5cb1c454e7b5317ebf5781d11bf44a0ff27b2489733b426a2","sha512":"e626b6ec760da97c99a1d96ced0232aa18c4201d9724dc0ad6811365a9ed20bd663994c0a8f919747947ba0b5386904caa6600e56d852b24aaf55c893c00b0e5","ssdeep":"768:2/WgkUjOYdXF6HjuSakAT/q3f+i0TqnV2stzISOAcguTmQNtSYKR:gNyQXYHjuSaH/qmTgtzIycguyoKR","tlshash":"efe2f249713167f6e17f7318a589b7281a5a1371cb79934304b0c4b5fe930099b26bfe","first_seen":"2025-09-11T10:47:57.203611Z","last_seen":"2025-10-15T06:27:15.891213Z","times_seen":4,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-15","alert":"Sinkholed","trigger":"wizja.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wizja.cc/logo/trwam.png","fqdn":"wizja.cc","domain":"wizja.cc","tld":"cc"},"ip":{"addr":"172.67.150.84","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://wizja.cc/","date":"2025-10-15T06:26:45.792Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wizja.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 09 Oct 2025 11:33:37 GMT","end":"Wed, 07 Jan 2026 12:33:30 GMT"},"fingerprint":{"sha1":"35:3B:EA:6D:70:E9:0E:CB:22:2F:6D:31:26:8A:47:4C:58:95:53:70","sha256":"B1:BA:DE:AA:2D:A5:9D:45:19:50:7D:17:E0:C1:B8:41:E3:A5:10:FD:D2:DE:62:F0:8A:1E:70:7C:22:F8:D0:1B"}}},"request":{"raw":"GET /logo/trwam.png HTTP/1.1\r\nHost: wizja.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://wizja.cc/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 25469\r\npriority: u=4,i=?0\r\ncontent-type: image/png\r\ncf-cache-status: REVALIDATED\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"daf0b8d7a81bd0ded337fb9aa3af82be\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0pZBKiVNLH0FFwiBO5JPMKV4GM1F4Jd1HuLn3I1IpuPGqNlLEkM1tYMBkDRljRhFiSFHkmpQZ9jKBsIac55WZfVyFB%2FwR%2BYExeQI7EBSrjRuqhTe\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ndate: Wed, 15 Oct 2025 06:26:45 GMT\r\ncf-ray: 98ed3f2c18f40b3d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":25469,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 330 x 198, 8-bit colormap, non-interlaced","md5":"bcde3f99b4385def57122f9a2d484d32","sha1":"4786b93bac0481dfead6d5b33a306a0f5bbca072","sha256":"d7db8d8863f8ab5f7a6e1d8d28102bc9a4c1988d1769fdd6c18b19d965da4259","sha512":"b280ff6871608d549a0c7736dcd764d1fabe10e295451731c45fd535b3faa0225deeb9f03fd3232d67913324f009baa9f67ba26ba2836e23b56a868b15a44bb3","ssdeep":"384:UUvLWyb1JIPW02UQDwjQS35B7RJoGksncKV+MiB7t9i5Ue4F7m1CCxp:XiCbJ0Dt735BRuqFq7G5is17z","tlshash":"b4b2e139e04f1b7da9d4223b0b1657c8a8930fcb5f7ed0972902d9876a7259846c73c9","first_seen":"2025-09-11T10:47:57.35148Z","last_seen":"2025-10-15T06:27:15.89668Z","times_seen":4,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-15","alert":"Sinkholed","trigger":"wizja.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"embed.wizja.cc/cdn/eve/18.jpg","fqdn":"embed.wizja.cc","domain":"wizja.cc","tld":"cc"},"ip":{"addr":"104.21.79.248","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://wizja.cc/","date":"2025-10-15T06:27:01.931Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wizja.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 09 Oct 2025 11:29:55 GMT","end":"Wed, 07 Jan 2026 12:27:40 GMT"},"fingerprint":{"sha1":"43:A7:B5:0A:62:F0:C6:46:F4:5F:47:CF:3C:7C:14:81:C9:CE:08:25","sha256":"9D:A8:61:C5:9C:A6:96:6D:82:D8:7E:62:A8:35:7A:80:63:11:11:C6:7B:3D:08:13:7A:59:57:C4:D3:BB:DD:A7"}}},"request":{"raw":"GET /cdn/eve/18.jpg HTTP/1.1\r\nHost: embed.wizja.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://wizja.cc/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 22 Oct 2025 06:27:02 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Mon, 13 Oct 2025 14:49:27 GMT\r\naccept-ranges: bytes\r\ncontent-length: 106997\r\ndate: Wed, 15 Oct 2025 06:27:02 GMT\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: same-origin\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KpNdZUIhAN0vz3HwNHlEFAbzo%2FGUrNYkyVff%2BFuNdbgsbAcCNqHi9WNm6hCCZVn9Li8YEbfx3qqPlDhzOXIJkheQVf7MD8raiOlrVA%3D%3D\"}]}\r\ncf-ray: 98ed3f9118d75697-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":106997,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1200x675, components 3","md5":"7aaf650a8f4638dc03a0c640d956a7e9","sha1":"e91824f387cd4a37376d6e7d723a6664df82a52f","sha256":"99bff79bb7caf06dcb920b9f9a7cce63e787a0a61673f4246fa759d41586f206","sha512":"255a7f8a7c2b593a1904962cd575b5f156ee9e135fcd2771d2e498aa10757d376498b469eccf07192802cdf9a199313581fb198070f85e5f2f76a01b8050f395","ssdeep":"3072:CVDoOhlsFsqeWD9pIe91os7NOqrPkxx+Nspo6S:CxdhlsFsqeo/BaJpfS","tlshash":"4ba31297fe036d12116f79fe69073136c681f7a9d448a68c5205bf5c3bbcb2582b188d","first_seen":"2025-10-15T06:27:15.901941Z","last_seen":"2025-10-15T06:27:15.901941Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1233,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":579,"receive":654,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-15","alert":"Sinkholed","trigger":"embed.wizja.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wizja.cc/styles.css","fqdn":"wizja.cc","domain":"wizja.cc","tld":"cc"},"ip":{"addr":"172.67.150.84","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://wizja.cc/","date":"2025-10-15T06:26:44.405Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wizja.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 09 Oct 2025 11:33:37 GMT","end":"Wed, 07 Jan 2026 12:33:30 GMT"},"fingerprint":{"sha1":"35:3B:EA:6D:70:E9:0E:CB:22:2F:6D:31:26:8A:47:4C:58:95:53:70","sha256":"B1:BA:DE:AA:2D:A5:9D:45:19:50:7D:17:E0:C1:B8:41:E3:A5:10:FD:D2:DE:62:F0:8A:1E:70:7C:22:F8:D0:1B"}}},"request":{"raw":"GET /styles.css HTTP/1.1\r\nHost: wizja.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://wizja.cc/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ncontent-encoding: br\r\ncontent-type: text/html; charset=utf-8\r\ndate: Wed, 15 Oct 2025 06:26:44 GMT\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlink: \u003chttps://fonts.googleapis.com\u003e; rel=\"preconnect\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dUMMwCuRabQqDjeWKWjpdf5CD9mIefopB%2FmUK70fVRz6hNrZOx0%2B%2FdfynWuUl4J5JHLaoC8dzrMczRg6XxgS6vYl6ZyOBPk%2BcQPmDg67l9UP6g%3D%3D\"}]}\r\ncf-cache-status: REVALIDATED\r\npriority: u=2,i=?0\r\ncf-ray: 98ed3f2378250b3d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T04:46:10.842589Z","times_seen":13317089,"resource_available":true,"data":null}},"time_used":65,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":65,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-15","alert":"Sinkholed","trigger":"wizja.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"static.cloudflareinsights.com/beacon.min.js/vcd15cbe7772f49c399c6a5babf22c1241717689176015","fqdn":"static.cloudflareinsights.com","domain":"cloudflareinsights.com","tld":"com"},"ip":{"addr":"104.16.79.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://wizja.cc/","date":"2025-10-15T06:26:44.411Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cloudflareinsights.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 24 Aug 2025 02:39:12 GMT","end":"Sat, 22 Nov 2025 03:39:06 GMT"},"fingerprint":{"sha1":"B4:6C:D2:16:CA:52:EE:BD:22:D7:B4:2C:64:FF:A5:EF:67:D8:E1:F8","sha256":"FF:3A:23:84:D6:B2:73:DF:50:6E:1A:45:A4:AB:03:37:0B:C4:4A:8E:82:12:99:10:80:A2:F7:FC:71:E3:BA:1D"}}},"request":{"raw":"GET /beacon.min.js/vcd15cbe7772f49c399c6a5babf22c1241717689176015 HTTP/1.1\r\nHost: static.cloudflareinsights.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://wizja.cc/\r\nOrigin: https://wizja.cc\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 15 Oct 2025 06:26:44 GMT\r\ncontent-type: text/javascript;charset=UTF-8\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=86400\r\netag: W/\"2024.6.1\"\r\nlast-modified: Thu, 06 Jun 2024 15:52:56 GMT\r\ncross-origin-resource-policy: cross-origin\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 98ed3f24af0b783d-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19948,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (19948), with no line terminators","md5":"ec18af6d41f6f278b6aed3bdabffa7bc","sha1":"62c9e2cab76b888829f3c5335e91c320b22329ae","sha256":"8a18d13015336bc184819a5a768447462202ef3105ec511bf42ed8304a7ed94f","sha512":"669b0e9a545057acbdd3b4c8d1d2811eaf4c776f679da1083e591ff38ae7684467abacef5af3d4aabd9fb7c335692dbca0def63ddac2cd28d8e14e95680c3511","ssdeep":"384:XriNpnjyMkg8XMtExRN1w29JIOzahXtO2nJ65:GijgSWuanfJ65","tlshash":"8d92d7def645723613f76076913f220b733b35a528068459812adbc22c3d98f6267f6e","first_seen":"2024-06-07T09:21:23Z","last_seen":"2026-04-04T04:43:52.01107Z","times_seen":330104,"resource_available":true,"data":null}},"time_used":371,"timings":{"blocked":175,"dns":1,"connect":1,"send":0,"wait":12,"receive":0,"ssl":180},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wizja.cc/script.js","fqdn":"wizja.cc","domain":"wizja.cc","tld":"cc"},"ip":{"addr":"172.67.150.84","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://wizja.cc/","date":"2025-10-15T06:26:44.410Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wizja.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 09 Oct 2025 11:33:37 GMT","end":"Wed, 07 Jan 2026 12:33:30 GMT"},"fingerprint":{"sha1":"35:3B:EA:6D:70:E9:0E:CB:22:2F:6D:31:26:8A:47:4C:58:95:53:70","sha256":"B1:BA:DE:AA:2D:A5:9D:45:19:50:7D:17:E0:C1:B8:41:E3:A5:10:FD:D2:DE:62:F0:8A:1E:70:7C:22:F8:D0:1B"}}},"request":{"raw":"GET /script.js HTTP/1.1\r\nHost: wizja.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://wizja.cc/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 15 Oct 2025 06:26:44 GMT\r\npriority: u=3,i=?0\r\ncontent-type: text/javascript; charset=utf-8\r\ncf-cache-status: REVALIDATED\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8W01ssCoCRzmtQVYbslExnCrBGCTLZO7NC0QXZ5HT%2BxdulWaZUYjrMCdo0x4O7I7JbdfBOATqEMceUo9yO%2BSLKJtgyzqdQ%3D%3D\"}]}\r\netag: W/\"728410b3133fa1a91d0296c078818d79\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 98ed3f2388270b3d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":64240,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (756)","md5":"ad15a9c7f1e1fe4e05f40f3ce1fc4d62","sha1":"3de404d5147fbeaaeed1f63fb1ab3d2276b4edf0","sha256":"648f78c398b50b53374fc8ec0bf83073eea2b5857f492ae8cca076ab165a479a","sha512":"a2d5ef093742ca9c93ad028183d53a0b7ec5fe510b28d830ae19a1225616067b279e1cb75bbfd8f77aee369d6ac69d65d89debadead9997e9af359ee9bec5a3f","ssdeep":"768:gcOH07luxepQJVHclJ83HWJyGlNlwDtkr:tq07luaQJVHclJ8GJyQyD4","tlshash":"8d53d75b31b3203844b721fe678ba3443625b003f586c9987a6cca049fd6da9c6b77cd","first_seen":"2025-10-15T06:27:15.912352Z","last_seen":"2025-10-15T06:27:15.912352Z","times_seen":1,"resource_available":true,"data":null}},"time_used":42,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":40,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-15","alert":"Sinkholed","trigger":"wizja.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wizja.cc/events.json?t=1760509605241","fqdn":"wizja.cc","domain":"wizja.cc","tld":"cc"},"ip":{"addr":"172.67.150.84","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://wizja.cc/","date":"2025-10-15T06:26:45.245Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wizja.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 09 Oct 2025 11:33:37 GMT","end":"Wed, 07 Jan 2026 12:33:30 GMT"},"fingerprint":{"sha1":"35:3B:EA:6D:70:E9:0E:CB:22:2F:6D:31:26:8A:47:4C:58:95:53:70","sha256":"B1:BA:DE:AA:2D:A5:9D:45:19:50:7D:17:E0:C1:B8:41:E3:A5:10:FD:D2:DE:62:F0:8A:1E:70:7C:22:F8:D0:1B"}}},"request":{"raw":"GET /events.json?t=1760509605241 HTTP/1.1\r\nHost: wizja.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://wizja.cc/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 15 Oct 2025 06:26:45 GMT\r\npriority: u=4,i=?0\r\ncontent-type: application/json\r\ncf-cache-status: DYNAMIC\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RH4ODAiSLkWqHXxk%2Fkg55NBxo3fk3ILuU5d8PganldlrVomgWb5BwRbuJEqydKCbv8PFId9gUS9rBkihFI2yykuPbS86hg%3D%3D\"}]}\r\netag: W/\"4b0621ea96fb411779bea0122a3cc80c\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 98ed3f28c8ab0b3d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5464,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"09e29b04a3341723a139db163bbdc9e2","sha1":"1b5fc8f4552cbf9702d465820ca578a2d8abf3f4","sha256":"ab480ddce7b3ff1084149139b5db7c13e6d105096f9e52f2c45ddaad68340bd3","sha512":"ca502881cae30d981436e8dc79efec8a9415942162f9f54342c6285ec040cbb525f74612e1becb700b81bdc4d3b03eb5736d5ea5d8799194f1106851e8027932","ssdeep":"96:2Foh0/5BhrwyhwwLvhNPEh/JNhJ2P+hy3h0/qh0/5L3hrlhNQhJrhywXhfah0g4a:bh8hjhhhehDhjhIhPhO3h5hSh9hTXhfi","tlshash":"12b15b63c9a80c1316714095bc66a6e9f371431fb5851d8378b4c19c4ffac3b256ba2b","first_seen":"2025-10-15T06:27:15.916199Z","last_seen":"2025-10-15T06:27:15.916199Z","times_seen":1,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":2,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-15","alert":"Sinkholed","trigger":"wizja.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"acscdn.com/script/atagv2.js","fqdn":"acscdn.com","domain":"acscdn.com","tld":"com"},"ip":{"addr":"104.18.17.201","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://wizja.cc/","date":"2025-10-15T06:26:45.438Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"acscdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Sep 2025 21:39:20 GMT","end":"Sun, 07 Dec 2025 22:39:07 GMT"},"fingerprint":{"sha1":"97:5E:85:70:5C:6F:7D:F5:DB:22:A2:2D:88:C5:E3:69:E8:15:5A:F4","sha256":"AE:9E:71:84:C0:24:A8:E6:55:FE:84:6C:3B:AA:4F:74:9F:76:47:83:B6:3D:D6:4D:0A:0A:74:54:1D:14:B3:EE"}}},"request":{"raw":"GET /script/atagv2.js HTTP/1.1\r\nHost: acscdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://wizja.cc/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 15 Oct 2025 06:26:45 GMT\r\ncontent-type: text/javascript\r\nx-guploader-uploadid: AAwnv3JFJ86vrqlFuGi4cy-ZSNTjVxyhyTspZ3aMkOzHfJQ3EuwmXL9wC_ap8EXVMfoY57Rh\r\nx-goog-generation: 1757575607655045\r\nx-goog-metageneration: 2\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 104737\r\nx-goog-hash: crc32c=fMaCEA==, md5=KFlVbHMEKbboMhWKWwfxjw==\r\nx-goog-storage-class: MULTI_REGIONAL\r\naccess-control-allow-origin: *\r\nserver: cloudflare\r\naccess-control-expose-headers: Content-Length, Date, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace\r\nexpires: Wed, 15 Oct 2025 07:26:45 GMT\r\ncache-control: public, max-age=3600\r\nalt-svc: h3=\":443\"; ma=86400\r\nlast-modified: Thu, 11 Sep 2025 07:26:47 GMT\r\nvary: accept-encoding\r\nage: 684\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\netag: W/\"2859556c730429b6e832158a5b07f18f\"\r\ncontent-encoding: gzip\r\ncf-ray: 98ed3f29ffd15ebd-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":104737,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65493), with no line terminators","md5":"2859556c730429b6e832158a5b07f18f","sha1":"b68ce515d0974b6072f6c29670a6241e7bba507e","sha256":"887a889bfa309bdbb5fd306b320fd9a8463d6b576639bce739f656fc28531d93","sha512":"267dca57daf942983537fc3acc9ca81f10c13d9b56d0b48ba0db7fc3dce8364f745e3647e67cf7c5281fdce8d5a0055de6955673fe2dff40015583a54ad23b7c","ssdeep":"3072:Ly+T66IfNzIvra4jxM4McMnThVBSHmQqP:jdIorVVarSQP","tlshash":"7ea3c749b6d2b0f867d2a5e4842f5646e1372a24740d98d5fafac1d29879ecf1033e3c","first_seen":"2025-09-12T13:14:35.876215Z","last_seen":"2025-10-21T13:34:05.726957Z","times_seen":67,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"acscdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"adexchangeclear.com/script/suurl5.php?r=10133078\u0026atag=1\u0026cbur=0.14909473800379602\u0026cbiframe=0\u0026cbWidth=1280\u0026cbHeight=1024\u0026cbtitle=Wizja\u0026cbpage=https%3A%2F%2Fwizja.cc%2F\u0026cbref=\u0026cbdescription=Telewizjada%20-%20ogl%C4%85daj%20kana%C5%82y%20TV%20i%20transmisje%20sportowe%20online%20za%20darmo.%20Szybki%20start%20i%20responsywny%20uk%C5%82ad%20kana%C5%82%C3%B3w.\u0026cbkeywords=Telewizjada%2C%20TV%20online%2C%20kana%C5%82y%20TV%2C%20transmisje%20sportowe%2C%20stream\u0026cbcdn=acscdn.com\u0026ts=1760509605719\u0026atv=69.0\u0026ufp=Win32%2FMozilla%2FNetscape%2Ftrue%2Ffalse%2F1280x10240en-USunknown4824%20bits\u0026srs=c3dce1166794414d4d8887ced4bde9e0\u0026aggr=3\u0026czid=v8wllkse2i\u0026ppv=1\u0026ab_test=AdOpt_B_nocapping-2021-12-08v1\u0026cap=0","fqdn":"adexchangeclear.com","domain":"adexchangeclear.com","tld":"com"},"ip":{"addr":"172.67.223.87","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://wizja.cc/","date":"2025-10-15T06:26:45.723Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"adexchangeclear.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Oct 2025 20:14:35 GMT","end":"Tue, 06 Jan 2026 21:12:18 GMT"},"fingerprint":{"sha1":"7C:B6:62:0F:43:12:2D:86:DD:92:D1:44:95:36:24:C7:2F:BA:B0:B6","sha256":"06:21:18:21:3A:A8:90:A4:4D:D0:A6:7B:7B:C8:4A:3B:31:47:C3:5D:48:A5:94:AC:08:75:A0:A1:DF:D6:B9:3C"}}},"request":{"raw":"GET /script/suurl5.php?r=10133078\u0026atag=1\u0026cbur=0.14909473800379602\u0026cbiframe=0\u0026cbWidth=1280\u0026cbHeight=1024\u0026cbtitle=Wizja\u0026cbpage=https%3A%2F%2Fwizja.cc%2F\u0026cbref=\u0026cbdescription=Telewizjada%20-%20ogl%C4%85daj%20kana%C5%82y%20TV%20i%20transmisje%20sportowe%20online%20za%20darmo.%20Szybki%20start%20i%20responsywny%20uk%C5%82ad%20kana%C5%82%C3%B3w.\u0026cbkeywords=Telewizjada%2C%20TV%20online%2C%20kana%C5%82y%20TV%2C%20transmisje%20sportowe%2C%20stream\u0026cbcdn=acscdn.com\u0026ts=1760509605719\u0026atv=69.0\u0026ufp=Win32%2FMozilla%2FNetscape%2Ftrue%2Ffalse%2F1280x10240en-USunknown4824%20bits\u0026srs=c3dce1166794414d4d8887ced4bde9e0\u0026aggr=3\u0026czid=v8wllkse2i\u0026ppv=1\u0026ab_test=AdOpt_B_nocapping-2021-12-08v1\u0026cap=0 HTTP/1.1\r\nHost: adexchangeclear.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://wizja.cc/\r\nOrigin: https://wizja.cc\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 15 Oct 2025 06:26:45 GMT\r\ncontent-type: application/json; charset=utf-8\r\nserver: cloudflare\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Content-Type\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\ncontent-encoding: gzip\r\nvia: 1.1 google\r\ncf-cache-status: DYNAMIC\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BWXPw%2Fw2CH2xJQ3RVUJHKlFnHQtbo3x%2BaYi590v8avnpyE%2FFTvWY4ZO%2FdENLThWti21f1VWtWS2b1DeLXjPQNZvAcwTX8fcCfq4Nx7qja8NU\"}]}\r\ncf-ray: 98ed3f2bcfc156b1-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1061,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"50c3e8685f32f672cb673b1736e6312c","sha1":"64b2b08ad119d13875481d4065cd34955f3717f7","sha256":"48bda75346761feb97eeec88f0dc0dd4d2db4f2443a6ed5d9f20225991ee5570","sha512":"570b7cfd803bad2224c134bc20a72f3628bb6c86dca7a6b25ea589e131a32a7a0e9f71190efb77ef0df9bc522fc9c9d3192e3ca0d728dbec2deff51d984afa38","ssdeep":"","tlshash":"8111e9104560de1798ad8a8c2b7981598840b88ecec4e087b2eb78714fa47e0a8da811","first_seen":"2025-10-15T06:27:15.925008Z","last_seen":"2025-10-15T06:27:15.925008Z","times_seen":1,"resource_available":false,"data":null}},"time_used":202,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":201,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"adexchangeclear.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wizja.cc/logo/tv4.png","fqdn":"wizja.cc","domain":"wizja.cc","tld":"cc"},"ip":{"addr":"172.67.150.84","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://wizja.cc/","date":"2025-10-15T06:26:45.771Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wizja.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 09 Oct 2025 11:33:37 GMT","end":"Wed, 07 Jan 2026 12:33:30 GMT"},"fingerprint":{"sha1":"35:3B:EA:6D:70:E9:0E:CB:22:2F:6D:31:26:8A:47:4C:58:95:53:70","sha256":"B1:BA:DE:AA:2D:A5:9D:45:19:50:7D:17:E0:C1:B8:41:E3:A5:10:FD:D2:DE:62:F0:8A:1E:70:7C:22:F8:D0:1B"}}},"request":{"raw":"GET /logo/tv4.png HTTP/1.1\r\nHost: wizja.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://wizja.cc/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 11031\r\npriority: u=4,i=?0\r\ncontent-type: image/png\r\ncf-cache-status: REVALIDATED\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"f90a52d15e7542ba6dd98b4760fb767e\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TKINZerApyaRvy50i59Kuu0jw2eImV8ZMmfsT%2FinfubCdqJMB0WhguDjB%2BgYp3k1LW3DblBMxGAkD%2BtGgCs8zBbQS5g4qysCFqjcQfoiLr0z6CUp\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ndate: Wed, 15 Oct 2025 06:26:45 GMT\r\ncf-ray: 98ed3f2bf8e70b3d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11031,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 330 x 198, 8-bit/color RGBA, non-interlaced","md5":"fcd76d5a58768f6d46fb1e0c2bfe340c","sha1":"4a6a8c118d29588e61f2729f38ca0ea7a5fbcff1","sha256":"018eaaeff077a2840ab387e2a5bb3af1349f347f8b4647650f9361590310f3cc","sha512":"543079144562b6c97b7199d3d2edf61e4939c528a3af5c50fd40584fb0d3b163e8fc2582965090d399677da9cdd0468dfd3c07bd465de875f1754bee9ac35787","ssdeep":"192:9Gf9ck5Y2OT9qEN87rHnqNXYmN2aE+ZiUO2EtButvypTkwRmdBv3:9GVvm2OpqENGrHwYmDE+XtvWVAdR3","tlshash":"ed328e0ac4f6f691580b586e1bf55ad58473048f9a83dc28b9dd8c6adf703c18f0b6c6","first_seen":"2025-09-11T10:47:57.289974Z","last_seen":"2026-02-16T15:25:54.086995Z","times_seen":6,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-15","alert":"Sinkholed","trigger":"wizja.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"adexchangeclear.com/script/push.php?r=10133074\u0026ipp=1\u0026mads=2\u0026position=top\u0026czid=v8wllkse2i\u0026atag=1\u0026aggr=3\u0026rbd=1\u0026ppv=1\u0026ab_test=AdOpt_B_nocapping-2021-12-08v1\u0026srs=c3dce1166794414d4d8887ced4bde9e0\u0026ufp=Win32%2FMozilla%2FNetscape%2Ftrue%2Ffalse%2F1280x10240en-USunknown4824%20bits\u0026cbpage=https%3A%2F%2Fwizja.cc%2F\u0026atv=69.0-bp\u0026cbref=","fqdn":"adexchangeclear.com","domain":"adexchangeclear.com","tld":"com"},"ip":{"addr":"172.67.223.87","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://wizja.cc/","date":"2025-10-15T06:26:56.104Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"adexchangeclear.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Oct 2025 20:14:35 GMT","end":"Tue, 06 Jan 2026 21:12:18 GMT"},"fingerprint":{"sha1":"7C:B6:62:0F:43:12:2D:86:DD:92:D1:44:95:36:24:C7:2F:BA:B0:B6","sha256":"06:21:18:21:3A:A8:90:A4:4D:D0:A6:7B:7B:C8:4A:3B:31:47:C3:5D:48:A5:94:AC:08:75:A0:A1:DF:D6:B9:3C"}}},"request":{"raw":"GET /script/push.php?r=10133074\u0026ipp=1\u0026mads=2\u0026position=top\u0026czid=v8wllkse2i\u0026atag=1\u0026aggr=3\u0026rbd=1\u0026ppv=1\u0026ab_test=AdOpt_B_nocapping-2021-12-08v1\u0026srs=c3dce1166794414d4d8887ced4bde9e0\u0026ufp=Win32%2FMozilla%2FNetscape%2Ftrue%2Ffalse%2F1280x10240en-USunknown4824%20bits\u0026cbpage=https%3A%2F%2Fwizja.cc%2F\u0026atv=69.0-bp\u0026cbref= HTTP/1.1\r\nHost: adexchangeclear.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://wizja.cc/\r\nOrigin: https://wizja.cc\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 204 No Content\r\nserver: cloudflare\r\ndate: Wed, 15 Oct 2025 06:26:56 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Content-Type\r\nvia: 1.1 google\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TgeVspSkii2j2jYsvyFTSgaj24PZk%2FJI6J%2BFIFSKvpoU6oDqE%2BXzL7CEipoI%2BgHA2Brpcb%2Fy9lLhoIodSMsGf6facudOHrGPSLRLCIyLh7iiqv0%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 98ed3f6caab035a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T04:46:10.842589Z","times_seen":13317089,"resource_available":true,"data":null}},"time_used":155,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":155,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"adexchangeclear.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Inter:wght@400;600;700;800\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"216.58.211.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://wizja.cc/","date":"2025-10-15T06:26:44.404Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Sep 2025 08:41:52 GMT","end":"Mon, 15 Dec 2025 08:41:51 GMT"},"fingerprint":{"sha1":"04:E6:D3:58:E3:A1:E3:05:2B:C3:56:5D:68:BB:1B:0A:08:C6:E3:FB","sha256":"25:4C:B3:A3:9A:E1:D7:FD:25:B6:BF:E9:AA:97:95:20:5D:F2:15:EA:41:46:B6:6B:01:17:19:26:EC:EF:D3:CA"}}},"request":{"raw":"GET /css2?family=Inter:wght@400;600;700;800\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://wizja.cc/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Wed, 15 Oct 2025 06:26:44 GMT\r\ndate: Wed, 15 Oct 2025 06:26:44 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10108,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"299b29938336935b505d73a38b979026","sha1":"77e1afbb56893a48d93a1ed0dc93c3a0365f5933","sha256":"651acb9e15bd63e0c02b60f11dd6e06a3e10a4c51f07d1216b547240ff499925","sha512":"a69a6f843a65982f14688946e989389efa031e30902ad09ca743a870253425b0492dbc730775031d4954180e1ee3db4444aeaa52002799deab1b07523eabe232","ssdeep":"192:9NNIxO34OxDNNryfO3iExlONEhYO3RrxGfNx0NO3kCxHx:vXJp2+g7r","tlshash":"77228a92002ba400ab971dc233cf7f3aaece50856085d1b95ffd0dc59cead66436876d","first_seen":"2025-09-10T23:18:31.61487Z","last_seen":"2026-04-04T02:02:48.856097Z","times_seen":725,"resource_available":false,"data":null}},"time_used":492,"timings":{"blocked":234,"dns":0,"connect":7,"send":0,"wait":19,"receive":0,"ssl":229},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wizja.cc/logo/tvp1.png","fqdn":"wizja.cc","domain":"wizja.cc","tld":"cc"},"ip":{"addr":"172.67.150.84","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://wizja.cc/","date":"2025-10-15T06:26:45.756Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wizja.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 09 Oct 2025 11:33:37 GMT","end":"Wed, 07 Jan 2026 12:33:30 GMT"},"fingerprint":{"sha1":"35:3B:EA:6D:70:E9:0E:CB:22:2F:6D:31:26:8A:47:4C:58:95:53:70","sha256":"B1:BA:DE:AA:2D:A5:9D:45:19:50:7D:17:E0:C1:B8:41:E3:A5:10:FD:D2:DE:62:F0:8A:1E:70:7C:22:F8:D0:1B"}}},"request":{"raw":"GET /logo/tvp1.png HTTP/1.1\r\nHost: wizja.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://wizja.cc/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 15552\r\npriority: u=4,i=?0\r\ncontent-type: image/png\r\ncf-cache-status: REVALIDATED\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"2b960c380cf36d89d46d9d514d180b85\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EqSlFOuf73vHXEGBc4avdO4hbjHx7CPqTQqOFpn%2FvoUBi7sZgPZdvm%2BBDmhyzEcfGyU%2Fyoc2ZMYpxcV%2FLkIOrN%2BAzSos6YgTpjUfuOUKkJ5KXQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ndate: Wed, 15 Oct 2025 06:26:45 GMT\r\ncf-ray: 98ed3f2be8e00b3d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15552,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 330 x 198, 8-bit/color RGBA, non-interlaced","md5":"f07c4b2c7e334b9ff84e8a23ad5ea285","sha1":"7f974291de25f8a82c7c94b9f957362ed5c5f308","sha256":"a666ff4d80a2d64b25f4492b3c76c3f92404c25f5d6dac104e36edd2cd07c81e","sha512":"90791cad87a54dbe777634470749627281d1c5c9e290b2445677cedd47cc87a57850a0a019daa8cad7103ca0456ae7af8e3d3f7206cf52cd3eaf932941971419","ssdeep":"192:vmg6kJ8GRO35/Qwv/mnL4dW9OK+I5otraxjYB7ogWlE0osqo:vJJ7g3vxdVK+EqslE05","tlshash":"db629d5cd5f565654ddd913326c180b84bb29e0b4600688d788e7caf0fa07be13693cf","first_seen":"2025-10-15T06:27:15.933415Z","last_seen":"2025-10-15T06:27:15.933415Z","times_seen":1,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-15","alert":"Sinkholed","trigger":"wizja.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.tailwindcss.com/3.4.17","fqdn":"cdn.tailwindcss.com","domain":"tailwindcss.com","tld":"com"},"ip":{"addr":"172.66.155.116","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://wizja.cc/","date":"2025-10-15T06:26:44.526Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tailwindcss.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 25 Sep 2025 05:49:32 GMT","end":"Wed, 24 Dec 2025 06:49:31 GMT"},"fingerprint":{"sha1":"37:B8:AE:00:DB:7A:73:F7:AF:A6:35:4D:DA:CC:E2:3F:A9:F6:2D:08","sha256":"8A:02:37:DD:0E:05:31:6F:04:7F:E2:CF:14:B9:C1:2D:68:75:CC:A6:F5:E5:82:4D:53:69:13:D3:A5:8B:B9:A4"}}},"request":{"raw":"GET /3.4.17 HTTP/1.1\r\nHost: cdn.tailwindcss.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://wizja.cc/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 15 Oct 2025 06:26:44 GMT\r\ncontent-type: text/javascript\r\ncache-control: max-age=31536000\r\ncontent-encoding: br\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: MISS\r\nx-vercel-id: arn1::iad1::f7qtx-1754703953616-47530b9ea371\r\nlast-modified: Sat, 09 Aug 2025 01:45:54 GMT\r\nvary: accept-encoding\r\nage: 1557692\r\ncf-cache-status: HIT\r\ncf-ray: 98ed3f244db15a0f-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":407279,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (52853)","md5":"7a614b9a197e532c00d09a23b0996b5f","sha1":"1ff1738a40f3716e30e9031b181b0955ae578955","sha256":"176e894661aa9cdc9a5cba6c720044cbbf7b8bd80d1c9a142a7c24b1b6c50d15","sha512":"a67bc26f52d938358471be5671ff4b79e11af4e68b486aaf73a35a4c9bf3777aab51101af81563b4e5b7ba4b04dd8971fcfa9ee2c41fb10a0c1ee5604a99abd6","ssdeep":"12288:fpgrZxSAoNbJb0Wie75aUXGuyQZhK4O0s:RCVoNB0Wie75aUWmnO0s","tlshash":"e8844aa57396702647eb51e850ea1042f2beaa38840c44bcf7edd4da39e5e4440fbf79","first_seen":"2025-07-28T16:58:08.903462Z","last_seen":"2026-04-04T04:11:39.174587Z","times_seen":28722,"resource_available":true,"data":null}},"time_used":4,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wizja.cc/logo/polsat.png","fqdn":"wizja.cc","domain":"wizja.cc","tld":"cc"},"ip":{"addr":"172.67.150.84","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://wizja.cc/","date":"2025-10-15T06:26:45.761Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wizja.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 09 Oct 2025 11:33:37 GMT","end":"Wed, 07 Jan 2026 12:33:30 GMT"},"fingerprint":{"sha1":"35:3B:EA:6D:70:E9:0E:CB:22:2F:6D:31:26:8A:47:4C:58:95:53:70","sha256":"B1:BA:DE:AA:2D:A5:9D:45:19:50:7D:17:E0:C1:B8:41:E3:A5:10:FD:D2:DE:62:F0:8A:1E:70:7C:22:F8:D0:1B"}}},"request":{"raw":"GET /logo/polsat.png HTTP/1.1\r\nHost: wizja.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://wizja.cc/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 25820\r\npriority: u=4,i=?0\r\ncontent-type: image/png\r\ncf-cache-status: REVALIDATED\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"93159669e40a03622c6cdb6bebc73c1f\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=v%2FByzXXUqsalGUme2pNw%2F9qu9YtkSza4qiT%2FKokqfHFl5gnyTmetLTy8pL%2BAdNGIkC2e3vEzfgsqlXy8%2FUBC9qkX2VP3lwhysau8Qp6ed1mb6ODy\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ndate: Wed, 15 Oct 2025 06:26:45 GMT\r\ncf-ray: 98ed3f2bf8e30b3d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":25820,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 441 x 480, 8-bit/color RGBA, non-interlaced","md5":"32ba84829959fa5f220b9f759c52c457","sha1":"32c0f62660de439d2e256b2535a0fa10a002f855","sha256":"d09482291f465ce8a2aa0bde30a077f0ee711c9928da6fc5b6562c61fcf7dfb1","sha512":"29ba1079c502ae78c5dd1f395e5226ee92f047197bbc86ba07c23cbd27c269b70dbc784049cf614625f9521b26dc1192cb98f46cd5ff2d1b904157474a276b3a","ssdeep":"384:DjPXj9Gc+FHzcuRkRAEeDIh4KMLrjm4AGQ2ypZMQyZJRSP84tWYvlXszztknowi4:/fBGcOHc/MLr2G1MZM3RSPbWlCxPP","tlshash":"27c2e0a82fa695ec9f6e24b9fc432fe65e2f323240a4c4350759486a1f50b35b43153b","first_seen":"2025-09-11T10:47:57.253957Z","last_seen":"2025-10-15T06:27:15.938882Z","times_seen":4,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-15","alert":"Sinkholed","trigger":"wizja.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wizja.cc/logo/tv6.png","fqdn":"wizja.cc","domain":"wizja.cc","tld":"cc"},"ip":{"addr":"172.67.150.84","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://wizja.cc/","date":"2025-10-15T06:26:45.773Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wizja.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 09 Oct 2025 11:33:37 GMT","end":"Wed, 07 Jan 2026 12:33:30 GMT"},"fingerprint":{"sha1":"35:3B:EA:6D:70:E9:0E:CB:22:2F:6D:31:26:8A:47:4C:58:95:53:70","sha256":"B1:BA:DE:AA:2D:A5:9D:45:19:50:7D:17:E0:C1:B8:41:E3:A5:10:FD:D2:DE:62:F0:8A:1E:70:7C:22:F8:D0:1B"}}},"request":{"raw":"GET /logo/tv6.png HTTP/1.1\r\nHost: wizja.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://wizja.cc/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 19108\r\npriority: u=4,i=?0\r\ncontent-type: image/png\r\ncf-cache-status: REVALIDATED\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"3b0a71e2bda21068ba0a306949250323\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ByECjxpLVV%2B%2BKPwVToMkiU81%2BOGQPEQ4sNnvh7kP3XHIrVXYuSnGMM8eOKGIuZVjfKk34gZhp8r4qAphifEVWWYFCXeYbk5SR%2BbKu2yFHWc7t9mj\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ndate: Wed, 15 Oct 2025 06:26:45 GMT\r\ncf-ray: 98ed3f2bf8e80b3d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19108,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 330 x 198, 8-bit/color RGBA, non-interlaced","md5":"6754d9aa3513b4e3a68be5e14d16bb37","sha1":"8f2d45736f1de7f867a53d6d083bde2283d3057e","sha256":"16002bfdcc146ecc3b5928d31790bdb0b0892efbf379c5641cd669434898fb56","sha512":"57539bb427a14c4918383d3f46977f8d4f889e87f02cc373889eb64cb48fe4d4c00601ac7f5abfa9e9f9ebe4bf104822bd8abdb5be0dbbdc63d5c1fa98b8221a","ssdeep":"384:PGVvQ7CckRwKbsddi6v4Kp2ZSUTXFr5rLxi:u1QjdpRplUTLxi","tlshash":"7682c01e882330d865a8b3f2dfee95449135553a0cb29a3e7ccd566d2f243ef0c89955","first_seen":"2025-09-11T10:47:57.33763Z","last_seen":"2025-10-15T06:27:15.942113Z","times_seen":4,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-15","alert":"Sinkholed","trigger":"wizja.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wizja.cc/logo/polsat2.png","fqdn":"wizja.cc","domain":"wizja.cc","tld":"cc"},"ip":{"addr":"172.67.150.84","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://wizja.cc/","date":"2025-10-15T06:26:45.774Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wizja.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 09 Oct 2025 11:33:37 GMT","end":"Wed, 07 Jan 2026 12:33:30 GMT"},"fingerprint":{"sha1":"35:3B:EA:6D:70:E9:0E:CB:22:2F:6D:31:26:8A:47:4C:58:95:53:70","sha256":"B1:BA:DE:AA:2D:A5:9D:45:19:50:7D:17:E0:C1:B8:41:E3:A5:10:FD:D2:DE:62:F0:8A:1E:70:7C:22:F8:D0:1B"}}},"request":{"raw":"GET /logo/polsat2.png HTTP/1.1\r\nHost: wizja.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://wizja.cc/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 58272\r\npriority: u=4,i=?0\r\ncontent-type: image/png\r\ncf-cache-status: REVALIDATED\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"10823204f7a27bb37857c50181dcad03\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BbIUkJwDhENG%2Bc4z%2BCkRP64omZ1MEiRwSkymLUmCQ%2F%2BnNJF3WKm42DrQPjztqdAbhk3uxu%2FP92ad7qzG7ZfqAGhH2NGHmiBlUbUHKDMWxpnkSeOJ\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ndate: Wed, 15 Oct 2025 06:26:45 GMT\r\ncf-ray: 98ed3f2bf8e90b3d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":58272,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 576 x 506, 16-bit/color RGBA, non-interlaced","md5":"1f7ea9874075d8b7926969cfdbfe728a","sha1":"a714857a004c421de47c6dbe6a63e5960a48bfc0","sha256":"1a35b427a00d21ef889972a1ca8250574c0c7bfe703ec2eec6ef3441ea7bb2c0","sha512":"2e476989b9b60d3ba466c464a56077d7035a47db3b5c4ff91e783a3cd3243c6c63c1bb3cd0f77f416387713409ede119b86cdb0990363669dfd1040f3f35189d","ssdeep":"1536:kujIe/IzbttTfxtCZf9DvCoMTp/PedXbHAbVbz8D:kujqzpZfxtu+Tp/2XbH5D","tlshash":"6f43f196a86bdf8c9d32910eb16a619360c5f899993c24f2bdf4f67df8224d4c01187e","first_seen":"2025-09-11T10:47:57.325213Z","last_seen":"2025-10-15T06:27:15.945596Z","times_seen":4,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-15","alert":"Sinkholed","trigger":"wizja.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wizja.cc/logo/puls2.png","fqdn":"wizja.cc","domain":"wizja.cc","tld":"cc"},"ip":{"addr":"172.67.150.84","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://wizja.cc/","date":"2025-10-15T06:26:45.777Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wizja.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 09 Oct 2025 11:33:37 GMT","end":"Wed, 07 Jan 2026 12:33:30 GMT"},"fingerprint":{"sha1":"35:3B:EA:6D:70:E9:0E:CB:22:2F:6D:31:26:8A:47:4C:58:95:53:70","sha256":"B1:BA:DE:AA:2D:A5:9D:45:19:50:7D:17:E0:C1:B8:41:E3:A5:10:FD:D2:DE:62:F0:8A:1E:70:7C:22:F8:D0:1B"}}},"request":{"raw":"GET /logo/puls2.png HTTP/1.1\r\nHost: wizja.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://wizja.cc/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 18525\r\npriority: u=4,i=?0\r\ncontent-type: image/png\r\ncf-cache-status: REVALIDATED\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"7ec1764e532c0f22c100b42b563ff781\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kF0lVwU0BG1PkEKf365vMQLYcDrS92%2BCrYSw0gnqtFO%2BTwguv2JVq5HBbubAt38i%2Fqr4WcDL1zdztvnp4UH4ZGW9fXDRWg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ndate: Wed, 15 Oct 2025 06:26:45 GMT\r\ncf-ray: 98ed3f2bf8eb0b3d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":18525,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 330 x 198, 8-bit/color RGBA, non-interlaced","md5":"e4e9c28375936a0bbccb0fb9ba481a4a","sha1":"6d12ec8bd5d29335769142464b06d7f58f4ed996","sha256":"0c95b2f3fa548ffa8f6d462cadecdff46e88d3fe0e45cd3502bc515efed07113","sha512":"edabc4cb798255ab4bbd86f6d55238449f2445f6e49c6927e5a3bb1120ad04aa8e6de8a11d9ad52e1aa55fa3f0f2077adb80a72519aa2274114ac2dd2aefad19","ssdeep":"384:Jel+4C0EC79EIMyuVp0yg37YbquMSAkFZtaup:J2+4Adyub0ygr0uSfFZtB","tlshash":"c682df6e807974d0c75d005615eb00e7486b8de7ca8c8fcab95e0804bf15faa8e2ced3","first_seen":"2025-09-11T10:47:57.341768Z","last_seen":"2025-10-15T06:27:15.950463Z","times_seen":4,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-15","alert":"Sinkholed","trigger":"wizja.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wizja.cc/logo/itvnextra.png","fqdn":"wizja.cc","domain":"wizja.cc","tld":"cc"},"ip":{"addr":"172.67.150.84","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://wizja.cc/","date":"2025-10-15T06:26:45.780Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wizja.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 09 Oct 2025 11:33:37 GMT","end":"Wed, 07 Jan 2026 12:33:30 GMT"},"fingerprint":{"sha1":"35:3B:EA:6D:70:E9:0E:CB:22:2F:6D:31:26:8A:47:4C:58:95:53:70","sha256":"B1:BA:DE:AA:2D:A5:9D:45:19:50:7D:17:E0:C1:B8:41:E3:A5:10:FD:D2:DE:62:F0:8A:1E:70:7C:22:F8:D0:1B"}}},"request":{"raw":"GET /logo/itvnextra.png HTTP/1.1\r\nHost: wizja.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://wizja.cc/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 16689\r\npriority: u=4,i=?0\r\ncontent-type: image/png\r\ncf-cache-status: REVALIDATED\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"a21f18f1291abf74bad0fe24e18ec754\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0aiRreac1rFyUyPTMYy7og%2B3%2BBKJ%2F9mkWNzPk%2Bs0LkhffF6DKyYcvri%2FzJ3l4br4VqgdV20MKgBGMRq14gVGyFIj3udpxbOXoSVJ%2Bk1gJ2n4sw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ndate: Wed, 15 Oct 2025 06:26:45 GMT\r\ncf-ray: 98ed3f2c08ed0b3d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16689,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 330 x 198, 8-bit/color RGBA, non-interlaced","md5":"496b34fbfa65ab22d9d2147a890ed935","sha1":"34f90020368ae8506090f76393879564c0177b63","sha256":"3c4a19c922ba360a209e7084588c9817a6a65f9c7cb055de5117ac468ac4c067","sha512":"c3a70105a4fba77b5c05499d8d76562a48bc1c4886ab3cc4b0b106c5bf45690cd9c990eb6661b83f1807b47d5f74e7a9f60b6173eb14cefa8d0f7b7e6eaecece","ssdeep":"384:XOWOLv5qb+nx8aLVpgAlvALzgKQSy6RUEABQs2wVBaS6Rqn:X/O9nRf1ILMWUxQsFraRqn","tlshash":"2772d060fa04dec5a418be0dd2ca4183bbdedb278154d19fbc4903e258711a4d81dec9","first_seen":"2025-09-11T10:47:57.293715Z","last_seen":"2025-10-15T06:27:15.953984Z","times_seen":4,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-15","alert":"Sinkholed","trigger":"wizja.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wizja.cc/logo/metro.png","fqdn":"wizja.cc","domain":"wizja.cc","tld":"cc"},"ip":{"addr":"172.67.150.84","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://wizja.cc/","date":"2025-10-15T06:26:45.784Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wizja.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 09 Oct 2025 11:33:37 GMT","end":"Wed, 07 Jan 2026 12:33:30 GMT"},"fingerprint":{"sha1":"35:3B:EA:6D:70:E9:0E:CB:22:2F:6D:31:26:8A:47:4C:58:95:53:70","sha256":"B1:BA:DE:AA:2D:A5:9D:45:19:50:7D:17:E0:C1:B8:41:E3:A5:10:FD:D2:DE:62:F0:8A:1E:70:7C:22:F8:D0:1B"}}},"request":{"raw":"GET /logo/metro.png HTTP/1.1\r\nHost: wizja.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://wizja.cc/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 21828\r\npriority: u=4,i=?0\r\ncontent-type: image/png\r\ncf-cache-status: REVALIDATED\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"5debcc582751de28bc3efa84c92824b8\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fBfKvgbhoHPQY5n3cPzxe%2FsXXpN6RVZRt6mB%2FxGjGdFIGTovGZn1%2FM5pTt7fQhDPzVjhHVtM3u9Ke7QBslt1tPcdVEPYKMdapMdGKL2NApDOMvc3\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ndate: Wed, 15 Oct 2025 06:26:45 GMT\r\ncf-ray: 98ed3f2c08ef0b3d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":21828,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 330 x 198, 8-bit/color RGBA, non-interlaced","md5":"98a3b332a1ecbdcc1058b17787ef73d3","sha1":"bd2fa9550c371bb2abf799b585708110ed92f4bb","sha256":"7892663c498b89ffda0f6bc4e52fac23d1c4536622b699a0179c1e68f2bc7023","sha512":"978816223c94a790c6a43db0b2cf3676149927e89d566ea4a9714006b7a7d7bdb0ee4377e2080c69fbb7259d3d94f7d03e04a03ff5cde525b7228162dee71f9e","ssdeep":"384:XXE05M+npQZm3me62X6Z42LkSqcvJIm5IXBpAcmqJKc/f+2r3NAkr:n35jpKK4QcBW3Wql/22rNAe","tlshash":"6ca2c01672707f9dfb4cfa0209eaa126eeb1636445c26248fedd20672c62c76df415c3","first_seen":"2025-09-11T10:47:57.236141Z","last_seen":"2025-10-15T06:27:15.958807Z","times_seen":4,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-15","alert":"Sinkholed","trigger":"wizja.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wizja.cc/logo/tvpkultura.png","fqdn":"wizja.cc","domain":"wizja.cc","tld":"cc"},"ip":{"addr":"172.67.150.84","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://wizja.cc/","date":"2025-10-15T06:26:50.434Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wizja.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 09 Oct 2025 11:33:37 GMT","end":"Wed, 07 Jan 2026 12:33:30 GMT"},"fingerprint":{"sha1":"35:3B:EA:6D:70:E9:0E:CB:22:2F:6D:31:26:8A:47:4C:58:95:53:70","sha256":"B1:BA:DE:AA:2D:A5:9D:45:19:50:7D:17:E0:C1:B8:41:E3:A5:10:FD:D2:DE:62:F0:8A:1E:70:7C:22:F8:D0:1B"}}},"request":{"raw":"GET /logo/tvpkultura.png HTTP/1.1\r\nHost: wizja.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://wizja.cc/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 15162\r\npriority: u=4,i=?0\r\ncontent-type: image/png\r\ncf-cache-status: REVALIDATED\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"955b6d12601be65f3d038f8eab74cb4b\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FrX108xY959nNKo2sOWiNxcMQVsuwUcToTQrM9gXy2u3OzN5DDKBG3QB5bA5vkLWK02PHVxlPktqK3hGWXh%2FtsEpYJV%2FTX8v5MPrweL9d5VvZ1Ly\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ndate: Wed, 15 Oct 2025 06:26:50 GMT\r\ncf-ray: 98ed3f49399a0b3d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15162,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 330 x 198, 8-bit colormap, non-interlaced","md5":"95e63eb8745abaf7246ab6777227b2b3","sha1":"064ba05af9101a187e7174041b027fc5bbbb5987","sha256":"189b7d85263654fda5d9616e17a4365cef3548dac50f5b684821e4e79dccfbf7","sha512":"f985311f48526bd7093afb5908e6afb48eafdb744d0cc1394c1909a7fa32b7baa2fb269b75bf2eb6ecf9f165e9e013b21b0a47497a4559ae164f9a7cbfa9b052","ssdeep":"192:0+tW+gK5fSYW/xRnUxGSxgaIC00wOXGNT4TVf/1MeZ08qI3nnIPLb160ppS5Bdal:0eF5xW/xNzesC0iyCWeV0Th60pcwZotI","tlshash":"8a62d0931c0c5933c73271eaa51d1354ddf146929cbbba31afa81205e8bb3b29ac0276","first_seen":"2025-09-11T10:47:57.33395Z","last_seen":"2025-10-15T06:27:15.966043Z","times_seen":4,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":18,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-15","alert":"Sinkholed","trigger":"wizja.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://wizja.cc/","date":"2025-10-15T06:26:45.211Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Sep 2025 08:41:58 GMT","end":"Mon, 15 Dec 2025 08:41:57 GMT"},"fingerprint":{"sha1":"01:8A:1A:53:EB:C1:22:A3:A0:69:16:42:30:E0:DF:75:70:19:84:BA","sha256":"A0:39:D8:8F:4E:08:6C:CC:FB:5E:20:98:FA:7C:2B:9F:6F:D6:F3:10:BF:EF:02:93:42:E4:94:E6:FD:A4:8D:35"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://wizja.cc\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 08 Oct 2025 17:22:44 GMT\r\nexpires: Thu, 08 Oct 2026 17:22:44 GMT\r\ncache-control: public, max-age=31536000\r\nage: 565441\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48532,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-04-04T04:45:27.528786Z","times_seen":132862,"resource_available":false,"data":null}},"time_used":228,"timings":{"blocked":94,"dns":5,"connect":16,"send":0,"wait":18,"receive":22,"ssl":70},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wizja.cc/logo/error.png","fqdn":"wizja.cc","domain":"wizja.cc","tld":"cc"},"ip":{"addr":"172.67.150.84","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wizja.cc/","date":"2025-10-15T06:26:45.432Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wizja.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 09 Oct 2025 11:33:37 GMT","end":"Wed, 07 Jan 2026 12:33:30 GMT"},"fingerprint":{"sha1":"35:3B:EA:6D:70:E9:0E:CB:22:2F:6D:31:26:8A:47:4C:58:95:53:70","sha256":"B1:BA:DE:AA:2D:A5:9D:45:19:50:7D:17:E0:C1:B8:41:E3:A5:10:FD:D2:DE:62:F0:8A:1E:70:7C:22:F8:D0:1B"}}},"request":{"raw":"GET /logo/error.png HTTP/1.1\r\nHost: wizja.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://wizja.cc/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 7269\r\npriority: u=4,i=?0\r\ncontent-type: image/png\r\ncf-cache-status: REVALIDATED\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"fb98229b27da974d16bb530312762db0\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xD3anz9tgy17RAQrEjguOofWqVSxkMg6lqjtOoSHtmflfSTeDucc%2ByQvTMd7GYy7XpaTEq2U94HyFrcqi44tchvpHy7gpJU1p0X7NtRA2Lw%2Baw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ndate: Wed, 15 Oct 2025 06:26:45 GMT\r\ncf-ray: 98ed3f29e8c40b3d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7269,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 214 x 214, 8-bit/color RGBA, non-interlaced","md5":"9776e7bd169388dbcd8d02cf58ca7024","sha1":"0267a68902f186be00de65039b64d82b32acacb9","sha256":"3052a55c2d526889f56a4bf8a57fe497d05619be73a4da92c292207955182bec","sha512":"3ecf46160dbe105f907626a3d22499da2ef41711d57666a69e5b9d0d66f14de73274596b2ee03777871f3df3f23e069683667b614f74756c09e8f4c5de45b49b","ssdeep":"192:XSLwkbLfXEozDNPez+RQbfRSnzE0twM51ihU70xlI1MhAtKmby:CMkbDUQ5ofRSnzE0+huQadw","tlshash":"58e18ee0fa7c26f803401ef6482fc475b4ab14b61e6cf4455c1c28ad50fb2984cd1a6d","first_seen":"2025-10-15T06:27:15.969733Z","last_seen":"2025-10-15T06:27:15.969733Z","times_seen":1,"resource_available":false,"data":null}},"time_used":41,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":41,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-15","alert":"Sinkholed","trigger":"wizja.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"embed.wizja.cc/cdn/eve/15.jpg","fqdn":"embed.wizja.cc","domain":"wizja.cc","tld":"cc"},"ip":{"addr":"104.21.79.248","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://wizja.cc/","date":"2025-10-15T06:26:45.566Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wizja.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 09 Oct 2025 11:29:55 GMT","end":"Wed, 07 Jan 2026 12:27:40 GMT"},"fingerprint":{"sha1":"43:A7:B5:0A:62:F0:C6:46:F4:5F:47:CF:3C:7C:14:81:C9:CE:08:25","sha256":"9D:A8:61:C5:9C:A6:96:6D:82:D8:7E:62:A8:35:7A:80:63:11:11:C6:7B:3D:08:13:7A:59:57:C4:D3:BB:DD:A7"}}},"request":{"raw":"GET /cdn/eve/15.jpg HTTP/1.1\r\nHost: embed.wizja.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://wizja.cc/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 15 Oct 2025 06:26:45 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 76829\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 22 Oct 2025 03:28:18 GMT\r\nlast-modified: Mon, 13 Oct 2025 14:49:27 GMT\r\naccept-ranges: bytes\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: same-origin\r\nalt-svc: h3=\":443\"; ma=86400\r\nage: 10707\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=eq3qnMEEaaT8XvP5h7s1uFho8RIOjSnKCfQXoUcLQ%2B6jCHLy6NMKg8oVSJZf%2BZYxuYHhucuUaZnYM6HerO0bCp%2B6N8iAntA1GbW1mA%3D%3D\"}]}\r\nserver: cloudflare\r\ncf-ray: 98ed3f2afa2d56c5-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":76829,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1000x563, components 3","md5":"6c0f49e6101ca11964b14ac49c68a83e","sha1":"cdfd0efa1dd73a8121b15bd0a85193e8b8c2c83e","sha256":"40c039a8849c14c2d1461c4dfd688a789aa8fa8dbe1f426c8b518b98b9f862f9","sha512":"30727cb51652f646d8106eb97b1342f407098d208f23116d2d0610f740e6e4e885d16b8d682c75cb918367443094ae6c9ac2ee264c4b1e27df5f9f41fc86bb24","ssdeep":"1536:KNfba1/NkUHvOYgXDPy4wofUWNGNaOK1PeONttmY:If2JSevgXDPyHfVK9eO1mY","tlshash":"81730231773ad0b86bc440cd10f671e16fe6ba00535e903b5e9aca68cf93ca2741bb56","first_seen":"2025-10-15T06:27:15.974541Z","last_seen":"2025-10-15T06:27:15.974541Z","times_seen":1,"resource_available":false,"data":null}},"time_used":65,"timings":{"blocked":26,"dns":1,"connect":1,"send":0,"wait":11,"receive":2,"ssl":22},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-15","alert":"Sinkholed","trigger":"embed.wizja.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wizja.cc/logo/tvp2.png","fqdn":"wizja.cc","domain":"wizja.cc","tld":"cc"},"ip":{"addr":"172.67.150.84","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://wizja.cc/","date":"2025-10-15T06:26:45.759Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wizja.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 09 Oct 2025 11:33:37 GMT","end":"Wed, 07 Jan 2026 12:33:30 GMT"},"fingerprint":{"sha1":"35:3B:EA:6D:70:E9:0E:CB:22:2F:6D:31:26:8A:47:4C:58:95:53:70","sha256":"B1:BA:DE:AA:2D:A5:9D:45:19:50:7D:17:E0:C1:B8:41:E3:A5:10:FD:D2:DE:62:F0:8A:1E:70:7C:22:F8:D0:1B"}}},"request":{"raw":"GET /logo/tvp2.png HTTP/1.1\r\nHost: wizja.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://wizja.cc/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 14651\r\npriority: u=4,i=?0\r\ncontent-type: image/png\r\ncf-cache-status: REVALIDATED\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"7c5e1fe195c21df3d7e3dc6c90f19183\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ViOdftYbtyQ%2BzvumS9q8xNirg%2FxA%2FEhcAwJMznFrtZ2%2FJF2MR901TtZQyM%2FrQvo1qps6p4VtgqTxDtuwqJkHEBF1XpFgF8QnuMuCIB1Y%2FuyntQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ndate: Wed, 15 Oct 2025 06:26:45 GMT\r\ncf-ray: 98ed3f2be8e20b3d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14651,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 330 x 198, 8-bit/color RGBA, non-interlaced","md5":"c5c89a959fa20a30d721b594cd38f167","sha1":"4594b2eace688690a3b412d63dd5ee368c186b5a","sha256":"b56c1a8c463c51d68f23b79f89bd981d90c5690359766ecff757e1796c9a5c33","sha512":"a5a65aa800c86bfcbd057fa54aee92c8112d97391dad50209c24d6a3b620b71177db8e05168dba1ad2cf0a2383b684ea18aa2b21ce1e026f05e3ba8ae794ee0a","ssdeep":"384:PJR/qlegXEMkyt1Sy/D0aZUBkJ5Xsyw9c:PJFm3Xpzc0mBkvXIc","tlshash":"e4628ea5b420718ee9cfa571cec99fcd792b4223de049501789e85870fa5ff47a443b2","first_seen":"2025-10-15T06:27:15.977995Z","last_seen":"2025-10-15T06:27:15.977995Z","times_seen":1,"resource_available":false,"data":null}},"time_used":45,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":44,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-15","alert":"Sinkholed","trigger":"wizja.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wizja.cc/logo/tvn.png","fqdn":"wizja.cc","domain":"wizja.cc","tld":"cc"},"ip":{"addr":"172.67.150.84","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://wizja.cc/","date":"2025-10-15T06:26:45.765Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wizja.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 09 Oct 2025 11:33:37 GMT","end":"Wed, 07 Jan 2026 12:33:30 GMT"},"fingerprint":{"sha1":"35:3B:EA:6D:70:E9:0E:CB:22:2F:6D:31:26:8A:47:4C:58:95:53:70","sha256":"B1:BA:DE:AA:2D:A5:9D:45:19:50:7D:17:E0:C1:B8:41:E3:A5:10:FD:D2:DE:62:F0:8A:1E:70:7C:22:F8:D0:1B"}}},"request":{"raw":"GET /logo/tvn.png HTTP/1.1\r\nHost: wizja.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://wizja.cc/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 27492\r\npriority: u=4,i=?0\r\ncontent-type: image/png\r\ncf-cache-status: REVALIDATED\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"7fe4e15136a0a5206434bb0f1100dcc0\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UquBI%2FN%2BwXyET5bdniwfp4DTR6mdIMEQ3kvuvc8Ewh1jzYdk2Pu9UAJnxCIV8fwmv28TI2ij2LCPOEl38JLxODnPARCHIROgBNse7UdoBK3tet1c\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ndate: Wed, 15 Oct 2025 06:26:45 GMT\r\ncf-ray: 98ed3f2bf8e50b3d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":27492,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 330 x 198, 8-bit/color RGBA, non-interlaced","md5":"4adf19623b6533ada58f8a695ff83530","sha1":"9f89e52a8c35ebf1b23776322d53ec8e49a9b570","sha256":"af57c2789e7ce610fc4b3fd8bd7331ac156072d944efd3a38a52e0dfdf0462f8","sha512":"a94174e71c055ae601beb9b38e27e20ed52f384a3736d29fd4e5512389705a72dbe74b964d8bc7d83a1959b2e10b6bcace63ac5fabf358b583c605672722d276","ssdeep":"768:oD/4L7Ic0oTapS9LJBVhRDKsjYpPSsnh2rjCa:oD/qTCS9dBxKsspnho","tlshash":"95c2e055521215d9f582b9ae5ca670989c6307ef9ed0b90932fd88809f2c3d01f4dad3","first_seen":"2025-09-11T10:47:57.244231Z","last_seen":"2026-02-16T15:25:54.08126Z","times_seen":6,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-15","alert":"Sinkholed","trigger":"wizja.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wizja.cc/logo/tvpuls.png","fqdn":"wizja.cc","domain":"wizja.cc","tld":"cc"},"ip":{"addr":"172.67.150.84","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://wizja.cc/","date":"2025-10-15T06:26:45.776Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wizja.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 09 Oct 2025 11:33:37 GMT","end":"Wed, 07 Jan 2026 12:33:30 GMT"},"fingerprint":{"sha1":"35:3B:EA:6D:70:E9:0E:CB:22:2F:6D:31:26:8A:47:4C:58:95:53:70","sha256":"B1:BA:DE:AA:2D:A5:9D:45:19:50:7D:17:E0:C1:B8:41:E3:A5:10:FD:D2:DE:62:F0:8A:1E:70:7C:22:F8:D0:1B"}}},"request":{"raw":"GET /logo/tvpuls.png HTTP/1.1\r\nHost: wizja.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://wizja.cc/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 21204\r\npriority: u=4,i=?0\r\ncontent-type: image/png\r\ncf-cache-status: REVALIDATED\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"867534f14caea8911722518e18f4d73d\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XnTbZ5K%2BpCWqbaTf2xS36nayhRs7tTXlzoIN%2FvGTRUhCS4gtfugF0j5vLUNZoCalJtmE8USzz8B4MSKrIA8imSbwHHba4ssrT%2F0robVjIuKmCA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ndate: Wed, 15 Oct 2025 06:26:45 GMT\r\ncf-ray: 98ed3f2bf8ea0b3d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":21204,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 330 x 198, 8-bit/color RGBA, non-interlaced","md5":"d998dffa893e3d95f2ddab97c8287b2b","sha1":"4ac14a0fbd695988296aabf931212e0f33032ef6","sha256":"8627a91acbbe46c8bb22bccf1a2f5b92fe338557dcc580d33819ee79cf63f87c","sha512":"d37b0d805707bd853152d9b1a39c695be4444d8e457443d692c9627c5e68082cd0fdcd095a68d738027adaeba76ed33d9dcf3b33722a2c984c1f867a8829c915","ssdeep":"384:OlFB6RjcNFFlMBHhyh47+p7VnWRLxgL7I2VLDPnR6fTycJub:mFBgjcNxMBBU427VOX2VfPRd6k","tlshash":"4392c08ce02454c3baeacd7893e106382ba24a479580d95b7bcd90372f5cad75f6b217","first_seen":"2025-09-11T10:47:57.327433Z","last_seen":"2025-10-15T06:27:15.985189Z","times_seen":4,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-15","alert":"Sinkholed","trigger":"wizja.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wizja.cc/cdn-cgi/rum?","fqdn":"wizja.cc","domain":"wizja.cc","tld":"cc"},"ip":{"addr":"172.67.150.84","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://wizja.cc/","date":"2025-10-15T06:26:45.883Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wizja.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 09 Oct 2025 11:33:37 GMT","end":"Wed, 07 Jan 2026 12:33:30 GMT"},"fingerprint":{"sha1":"35:3B:EA:6D:70:E9:0E:CB:22:2F:6D:31:26:8A:47:4C:58:95:53:70","sha256":"B1:BA:DE:AA:2D:A5:9D:45:19:50:7D:17:E0:C1:B8:41:E3:A5:10:FD:D2:DE:62:F0:8A:1E:70:7C:22:F8:D0:1B"}}},"request":{"raw":"POST /cdn-cgi/rum? HTTP/1.1\r\nHost: wizja.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://wizja.cc/\r\ncontent-type: application/json\r\nContent-Length: 1005\r\nOrigin: https://wizja.cc\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 204 No Content\r\naccess-control-allow-origin: https://wizja.cc\r\naccess-control-allow-methods: POST,OPTIONS\r\naccess-control-max-age: 86400\r\nvary: Origin, accept-encoding\r\naccess-control-allow-credentials: true\r\ncontent-type: text/plain\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LyGtV1%2FsfDgkGJOuuWuk6oMN36bydasnsehDgLuSJ3OoVeEGUZvadlFlrfM7ygM388VuKZKMFKe9W%2FPUYx9vXaxK2b4xdA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Wed, 15 Oct 2025 06:26:45 GMT\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\ncf-ray: 98ed3f2cc8fc0b3d-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T04:46:10.842589Z","times_seen":13317089,"resource_available":true,"data":null}},"time_used":4,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-15","alert":"Sinkholed","trigger":"wizja.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wizja.cc/logo/tvpkultura2.png","fqdn":"wizja.cc","domain":"wizja.cc","tld":"cc"},"ip":{"addr":"172.67.150.84","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://wizja.cc/","date":"2025-10-15T06:26:50.436Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wizja.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 09 Oct 2025 11:33:37 GMT","end":"Wed, 07 Jan 2026 12:33:30 GMT"},"fingerprint":{"sha1":"35:3B:EA:6D:70:E9:0E:CB:22:2F:6D:31:26:8A:47:4C:58:95:53:70","sha256":"B1:BA:DE:AA:2D:A5:9D:45:19:50:7D:17:E0:C1:B8:41:E3:A5:10:FD:D2:DE:62:F0:8A:1E:70:7C:22:F8:D0:1B"}}},"request":{"raw":"GET /logo/tvpkultura2.png HTTP/1.1\r\nHost: wizja.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://wizja.cc/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 16403\r\npriority: u=4,i=?0\r\ncontent-type: image/png\r\ncf-cache-status: REVALIDATED\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"451fdfd0509f51eb6d762b95b6360dea\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tj%2B4PSt%2BxwnRPXXdBpr1dLcL0DQswP5KC81UkokDuacYgs%2Fa9VSVYxJvPxxORNMEiCt2I90%2BWbT%2FJ5yaFHrqHlZdv%2BV6gM6u5tZ0ZWIfufjj1g%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ndate: Wed, 15 Oct 2025 06:26:50 GMT\r\ncf-ray: 98ed3f49399b0b3d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16403,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 330 x 198, 8-bit/color RGBA, non-interlaced","md5":"201a4cb3de47b15e7cd30159bb537d3d","sha1":"c7015641c275f855af84609c941e17c4fb4d4807","sha256":"ffa34d22d619d335b81f3a7599a432564d1827fd39e02a277e66b3e911bdea9a","sha512":"7653e1b87a9da99d118ac2a9c52679bd380677aa4a928f3e5ca3ad3d953237de3f3107eed4b8caf8a2cdc532eb73e973f05749d9183aa4315eed50e9768ba57b","ssdeep":"384:XOWOLv5qbBn/apoduBamnrxsG1fTIRewqD9JPxhKadO:X/O9wHduB5nrqG1kPqv7KcO","tlshash":"3872cfb5ba39dc46050c360f68d56a5123378393c6a222e99defd713d9904f2ac5de8c","first_seen":"2025-09-26T12:56:24.972766Z","last_seen":"2025-10-15T06:27:15.988521Z","times_seen":2,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-15","alert":"Sinkholed","trigger":"wizja.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa25L7W0I5nvwUgHU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://wizja.cc/","date":"2025-10-15T06:26:45.458Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Sep 2025 08:41:58 GMT","end":"Mon, 15 Dec 2025 08:41:57 GMT"},"fingerprint":{"sha1":"01:8A:1A:53:EB:C1:22:A3:A0:69:16:42:30:E0:DF:75:70:19:84:BA","sha256":"A0:39:D8:8F:4E:08:6C:CC:FB:5E:20:98:FA:7C:2B:9F:6F:D6:F3:10:BF:EF:02:93:42:E4:94:E6:FD:A4:8D:35"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa25L7W0I5nvwUgHU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://wizja.cc\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 84924\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 08 Oct 2025 17:35:21 GMT\r\nexpires: Thu, 08 Oct 2026 17:35:21 GMT\r\ncache-control: public, max-age=31536000\r\nage: 564684\r\nlast-modified: Tue, 09 Sep 2025 18:33:55 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":84924,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 84924, version 1.0","md5":"f5b588b5cfef2173838149769c8a0269","sha1":"5312086a01f8e8299094ddee5819b9727a19cae2","sha256":"b8811a6cd6f7e0707dfc9e9e6f1daf5f6f450b51e887e163945a9ade91c2720f","sha512":"05d5271c633bbe102775c0b6df9c5e110dae3a2517061714bb5c26ec66a00f8e1b62961135ec96962e7ccaf3942d8e32bd86f42558cbac8ee16ff6c333117886","ssdeep":"1536:PABWz4rSN/GzH27xN5UR1OnX+uyRsd1osLZBi/JGyQI01xDj+C:PAG4rCGa7L5UR1OnX+fGd/VB03QI+xP","tlshash":"378302b4ae71b3968f1c7fe46396273c2a7bdf41053950aeae44e16787f00dba148784","first_seen":"2025-05-29T19:39:57.235915Z","last_seen":"2026-04-04T04:42:23.934359Z","times_seen":7267,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":16,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.wizja.cc/epg/","fqdn":"embed.wizja.cc","domain":"wizja.cc","tld":"cc"},"ip":{"addr":"104.21.79.248","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://wizja.cc/","date":"2025-10-15T06:26:45.495Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wizja.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 09 Oct 2025 11:29:55 GMT","end":"Wed, 07 Jan 2026 12:27:40 GMT"},"fingerprint":{"sha1":"43:A7:B5:0A:62:F0:C6:46:F4:5F:47:CF:3C:7C:14:81:C9:CE:08:25","sha256":"9D:A8:61:C5:9C:A6:96:6D:82:D8:7E:62:A8:35:7A:80:63:11:11:C6:7B:3D:08:13:7A:59:57:C4:D3:BB:DD:A7"}}},"request":{"raw":"GET /epg/ HTTP/1.1\r\nHost: embed.wizja.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://wizja.cc/\r\nOrigin: https://wizja.cc\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 15 Oct 2025 06:26:52 GMT\r\ncontent-type: application/json\r\naccess-control-allow-origin: *\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: same-origin\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6JmmI00yXI7RfwYJjn3nmgcxzBZJmzLifqJ1hEEHiZqicm2J14oYwZcpjXZ9g5JwXr9Stgqk4xeEyRavD3QOIJB8uI3mPcv5%2BXmhVA%3D%3D\"}]}\r\nserver: cloudflare\r\ncf-ray: 98ed3f2a9bfd0b59-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":22714,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"e9332c2f927000784fad6d7f284c6ee5","sha1":"c6eb231a67363c36cd79668e001e89e797e5a77c","sha256":"bac1305c6e837073c5abcbf03f04ed469255a3d54e54914b100d78a60763d8c7","sha512":"11c1cfba23453e12ce1e983af6e2762bd30193265a26bcd78d11790533a37edc1321c442c00b03730e8f4ad2edbc3cc1a6b4bfe729d2ed8c2bbd073bb13a4310","ssdeep":"384:aXKUGT1ZdtxScXprWt+Ysssssssssssss0sssssssWV:aWZrWl","tlshash":"aca2aabadca10ed6058e30b455774a8b21188ea76d9d3c013f8c850d9f9ce6fb97a34d","first_seen":"2025-10-15T06:27:15.994323Z","last_seen":"2025-10-15T06:27:15.994323Z","times_seen":1,"resource_available":false,"data":null}},"time_used":6906,"timings":{"blocked":45,"dns":28,"connect":1,"send":0,"wait":6815,"receive":0,"ssl":15},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-15","alert":"Sinkholed","trigger":"embed.wizja.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"acscdn.com/script/inpagepushB.js","fqdn":"acscdn.com","domain":"acscdn.com","tld":"com"},"ip":{"addr":"104.18.17.201","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://wizja.cc/","date":"2025-10-15T06:26:45.721Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"acscdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Sep 2025 21:39:20 GMT","end":"Sun, 07 Dec 2025 22:39:07 GMT"},"fingerprint":{"sha1":"97:5E:85:70:5C:6F:7D:F5:DB:22:A2:2D:88:C5:E3:69:E8:15:5A:F4","sha256":"AE:9E:71:84:C0:24:A8:E6:55:FE:84:6C:3B:AA:4F:74:9F:76:47:83:B6:3D:D6:4D:0A:0A:74:54:1D:14:B3:EE"}}},"request":{"raw":"GET /script/inpagepushB.js HTTP/1.1\r\nHost: acscdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://wizja.cc/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 15 Oct 2025 06:26:45 GMT\r\ncontent-type: text/javascript\r\nx-guploader-uploadid: AAwnv3JPHKPlC2uwJqvMAokM-tfkwkSPT28NCdEZErdlYf5JkRbpPpwL1gfuUcMDhR4nASOfqhPxMyc\r\nx-goog-generation: 1759995086948380\r\nx-goog-metageneration: 2\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 16307\r\nx-goog-hash: crc32c=VTvXTA==, md5=txVh7opg7Qwzm0X/OPDeKQ==\r\nx-goog-storage-class: MULTI_REGIONAL\r\naccess-control-allow-origin: *\r\nserver: cloudflare\r\nexpires: Wed, 15 Oct 2025 07:26:45 GMT\r\ncache-control: public, max-age=3600\r\nlast-modified: Thu, 09 Oct 2025 07:31:26 GMT\r\nvary: accept-encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nage: 981\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\netag: W/\"b71561ee8a60ed0c339b45ff38f0de29\"\r\ncontent-encoding: gzip\r\ncf-ray: 98ed3f2bbb455ebd-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]}],"data":{"size":16307,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (16307), with no line terminators","md5":"b71561ee8a60ed0c339b45ff38f0de29","sha1":"77f35b6821b01a24715e8d9522ab5b6ab4305663","sha256":"d1a8ec482043c2ab955dd3c116481312c5f9db640951f39563c3fb1e06b54073","sha512":"47d98d83f25ef01df5ccdfafe90717bb4192cf909b4daf552de0b53e8e2540456826cd98cf5beac79d60dbe6636fa2925ef43bbff18cdec07dd406f7c20fe578","ssdeep":"384:oeu5onyOOAdeWgZ9VKN3RC9mSyXn3ja7LogdnVZywJKyTsykxkVQM8onwkevYdQJ:obbOOAdeWgZfKN3UESi3GnndVZywJKyi","tlshash":"1072d8752223033539d485dafc74ab81a5216168ba56c42cf1ec8cfaa25fcd93d74f78","first_seen":"2025-10-09T17:11:38.525971Z","last_seen":"2025-10-15T23:28:38.74179Z","times_seen":18,"resource_available":true,"data":null}},"time_used":5,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"acscdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wizja.cc/logo/main.png","fqdn":"wizja.cc","domain":"wizja.cc","tld":"cc"},"ip":{"addr":"172.67.150.84","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wizja.cc/","date":"2025-10-15T06:26:44.805Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wizja.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 09 Oct 2025 11:33:37 GMT","end":"Wed, 07 Jan 2026 12:33:30 GMT"},"fingerprint":{"sha1":"35:3B:EA:6D:70:E9:0E:CB:22:2F:6D:31:26:8A:47:4C:58:95:53:70","sha256":"B1:BA:DE:AA:2D:A5:9D:45:19:50:7D:17:E0:C1:B8:41:E3:A5:10:FD:D2:DE:62:F0:8A:1E:70:7C:22:F8:D0:1B"}}},"request":{"raw":"GET /logo/main.png HTTP/1.1\r\nHost: wizja.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://wizja.cc/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ncontent-encoding: br\r\ncontent-type: text/html; charset=utf-8\r\ndate: Wed, 15 Oct 2025 06:26:44 GMT\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlink: \u003chttps://fonts.googleapis.com\u003e; rel=\"preconnect\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ySF%2B50SOeg1J1aJA9AEtlI2D2KDcC5ppa7hOkuQnHjSN2CQfzFLx3EY6GJTWn%2BXJE6dJb7b9tXWhZT58q%2FLW%2BGX0mYj72GlEyppBYVdyOy0XRhEZ\"}]}\r\ncf-cache-status: REVALIDATED\r\npriority: u=4,i=?0\r\ncf-ray: 98ed3f26087b0b3d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":21713,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1101)","md5":"cd65ad110efccce34c2ae938760d3e0d","sha1":"fdd767dc53931ad4b7d35f68b355d7616c1cafe4","sha256":"0c8aef30bdc095864e787096331a4bfa8d8da407ec591cf9541f439521e7f143","sha512":"2f54e6fc711eb71d0fc3291b7588b3a49c494cf2ef02af72b9d88ee81662ea1e50ea46126faff556824ca81fca7b9bea9c82912cdd07425026e481db3fb7681b","ssdeep":"384:4ad+a9tT1gemodyptL5mK8M11/6M0j5ywpmHZ1e3W:4ad+uhgefdy35mKV11yM0RpmHZ1e3W","tlshash":"42a2776011f0442f6197d2a1f7e0bb2e9e99d243ca1f4858b2bd05e63fc7c99cd5b268","first_seen":"2025-10-15T06:27:16.000718Z","last_seen":"2025-10-15T06:27:16.000718Z","times_seen":1,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-15","alert":"Sinkholed","trigger":"wizja.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"acscdn.com/script/aclib.js","fqdn":"acscdn.com","domain":"acscdn.com","tld":"com"},"ip":{"addr":"104.18.17.201","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://wizja.cc/","date":"2025-10-15T06:26:44.403Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"acscdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Sep 2025 21:39:20 GMT","end":"Sun, 07 Dec 2025 22:39:07 GMT"},"fingerprint":{"sha1":"97:5E:85:70:5C:6F:7D:F5:DB:22:A2:2D:88:C5:E3:69:E8:15:5A:F4","sha256":"AE:9E:71:84:C0:24:A8:E6:55:FE:84:6C:3B:AA:4F:74:9F:76:47:83:B6:3D:D6:4D:0A:0A:74:54:1D:14:B3:EE"}}},"request":{"raw":"GET /script/aclib.js HTTP/1.1\r\nHost: acscdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://wizja.cc/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 15 Oct 2025 06:26:44 GMT\r\ncontent-type: text/javascript\r\nvary: accept-encoding\r\nx-guploader-uploadid: AAwnv3IxZXU-vOixssbZ6mtCxpAoakSB7810Lk34WnHvC8INk2bTmuTLiL45I0WNuY2J4WWiMHB7nGY\r\nx-goog-generation: 1759994915220441\r\nx-goog-metageneration: 2\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 147006\r\nx-goog-hash: crc32c=fPkUWg==, md5=2zqvT+UN8f9BnMZHirBdhA==\r\nx-goog-storage-class: MULTI_REGIONAL\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Content-Length, Date, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace\r\nexpires: Wed, 15 Oct 2025 07:26:44 GMT\r\ncache-control: public, max-age=3600\r\nlast-modified: Thu, 09 Oct 2025 07:28:35 GMT\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver: cloudflare\r\nage: 1226\r\ncf-cache-status: HIT\r\netag: W/\"db3aaf4fe50df1ff419cc6478ab05d84\"\r\ncontent-encoding: gzip\r\ncf-ray: 98ed3f244a41b500-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":147006,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65499), with no line terminators","md5":"db3aaf4fe50df1ff419cc6478ab05d84","sha1":"0e3ee834059c65753de30bff41b40413c5123c88","sha256":"ff138668a76453af9faca5cb4df0335ba5612db0b603d7c4a10d4c9938a52644","sha512":"7ad14ae820cc21fc5a70f23a56007a2e5ea8a5d5b1556b9a058dfa37259351d1ef8a664607799f91c426eda83d9096dadc2f53ac963f55beccca64d0d9fc0cf5","ssdeep":"3072:G068+RhI8FvQeXO0AFQM4MmMnTQXvS1kKeq/1:B6phN1DF/SW41","tlshash":"a2e3e849bad2b0f867e261e4942f9646e1371624740e98d5f6fac5d1a879ecf0033e3c","first_seen":"2025-10-09T08:30:23.700944Z","last_seen":"2025-10-16T08:56:32.776525Z","times_seen":154,"resource_available":true,"data":null}},"time_used":258,"timings":{"blocked":122,"dns":22,"connect":1,"send":0,"wait":9,"receive":0,"ssl":102},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"acscdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wizja.cc/logo/main.png","fqdn":"wizja.cc","domain":"wizja.cc","tld":"cc"},"ip":{"addr":"172.67.150.84","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wizja.cc/","date":"2025-10-15T06:26:44.408Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wizja.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 09 Oct 2025 11:33:37 GMT","end":"Wed, 07 Jan 2026 12:33:30 GMT"},"fingerprint":{"sha1":"35:3B:EA:6D:70:E9:0E:CB:22:2F:6D:31:26:8A:47:4C:58:95:53:70","sha256":"B1:BA:DE:AA:2D:A5:9D:45:19:50:7D:17:E0:C1:B8:41:E3:A5:10:FD:D2:DE:62:F0:8A:1E:70:7C:22:F8:D0:1B"}}},"request":{"raw":"GET /logo/main.png HTTP/1.1\r\nHost: wizja.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://wizja.cc/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ncontent-encoding: br\r\ncontent-type: text/html; charset=utf-8\r\ndate: Wed, 15 Oct 2025 06:26:44 GMT\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlink: \u003chttps://fonts.googleapis.com\u003e; rel=\"preconnect\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ySF%2B50SOeg1J1aJA9AEtlI2D2KDcC5ppa7hOkuQnHjSN2CQfzFLx3EY6GJTWn%2BXJE6dJb7b9tXWhZT58q%2FLW%2BGX0mYj72GlEyppBYVdyOy0XRhEZ\"}]}\r\ncf-cache-status: REVALIDATED\r\npriority: u=4,i=?0\r\ncf-ray: 98ed3f2388260b3d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":21713,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1101)","md5":"cd65ad110efccce34c2ae938760d3e0d","sha1":"fdd767dc53931ad4b7d35f68b355d7616c1cafe4","sha256":"0c8aef30bdc095864e787096331a4bfa8d8da407ec591cf9541f439521e7f143","sha512":"2f54e6fc711eb71d0fc3291b7588b3a49c494cf2ef02af72b9d88ee81662ea1e50ea46126faff556824ca81fca7b9bea9c82912cdd07425026e481db3fb7681b","ssdeep":"384:4ad+a9tT1gemodyptL5mK8M11/6M0j5ywpmHZ1e3W:4ad+uhgefdy35mKV11yM0RpmHZ1e3W","tlshash":"42a2776011f0442f6197d2a1f7e0bb2e9e99d243ca1f4858b2bd05e63fc7c99cd5b268","first_seen":"2025-10-15T06:27:16.000718Z","last_seen":"2025-10-15T06:27:16.000718Z","times_seen":1,"resource_available":false,"data":null}},"time_used":59,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":59,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-15","alert":"Sinkholed","trigger":"wizja.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wizja.cc/logo/ttv.png","fqdn":"wizja.cc","domain":"wizja.cc","tld":"cc"},"ip":{"addr":"172.67.150.84","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://wizja.cc/","date":"2025-10-15T06:26:45.778Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wizja.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 09 Oct 2025 11:33:37 GMT","end":"Wed, 07 Jan 2026 12:33:30 GMT"},"fingerprint":{"sha1":"35:3B:EA:6D:70:E9:0E:CB:22:2F:6D:31:26:8A:47:4C:58:95:53:70","sha256":"B1:BA:DE:AA:2D:A5:9D:45:19:50:7D:17:E0:C1:B8:41:E3:A5:10:FD:D2:DE:62:F0:8A:1E:70:7C:22:F8:D0:1B"}}},"request":{"raw":"GET /logo/ttv.png HTTP/1.1\r\nHost: wizja.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://wizja.cc/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 18450\r\npriority: u=4,i=?0\r\ncontent-type: image/png\r\ncf-cache-status: REVALIDATED\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"534e9a126732dc5cb92b1b62a8b17959\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qnuu6MjTXJcJxv3my7f838rlNH6E%2F%2BpD4pGSwWaOBzKL8gmbySm%2B6GmHxFY1N%2BIK6W5pHuFO7cZ%2FY1at%2B5FHdsw0Qx3RSjEHDiPkCXemexYISEhi\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ndate: Wed, 15 Oct 2025 06:26:45 GMT\r\ncf-ray: 98ed3f2c08ec0b3d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":18450,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 330 x 198, 8-bit/color RGBA, non-interlaced","md5":"ce4bb6902c437dc34de8582ebd13e762","sha1":"f4f92363d4fedf6c93071e34bc2722ef4dcd5c38","sha256":"f14378ab49c4d5ac30af445efe7fa849572696aba1010de0cdc450fb4032be74","sha512":"76187b0e0bbfea1f0ece5636a4a8e45326bebb91ebd1c02eaa45abd9a99401cce0db0d21cef200c2a5800808647302a8201347ad39c011af6e020321f7045d25","ssdeep":"384:vcDkGeu3ew73EPATiIxJz3gwaqdTk9AUQkdp0/oz:EDJeu3eWTiIvrbFk+UQApmA","tlshash":"7982bf72a55319e2527dbe3215a921414e7081f7e8c48f07bf8f549a1f0e2d5bd0db49","first_seen":"2025-09-11T10:47:57.267757Z","last_seen":"2025-10-15T06:27:16.006752Z","times_seen":4,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-15","alert":"Sinkholed","trigger":"wizja.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wizja.cc/logo/wp.png","fqdn":"wizja.cc","domain":"wizja.cc","tld":"cc"},"ip":{"addr":"172.67.150.84","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://wizja.cc/","date":"2025-10-15T06:26:45.790Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wizja.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 09 Oct 2025 11:33:37 GMT","end":"Wed, 07 Jan 2026 12:33:30 GMT"},"fingerprint":{"sha1":"35:3B:EA:6D:70:E9:0E:CB:22:2F:6D:31:26:8A:47:4C:58:95:53:70","sha256":"B1:BA:DE:AA:2D:A5:9D:45:19:50:7D:17:E0:C1:B8:41:E3:A5:10:FD:D2:DE:62:F0:8A:1E:70:7C:22:F8:D0:1B"}}},"request":{"raw":"GET /logo/wp.png HTTP/1.1\r\nHost: wizja.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://wizja.cc/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 59367\r\npriority: u=4,i=?0\r\ncontent-type: image/png\r\ncf-cache-status: REVALIDATED\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"c86ddae90b490c14aff9b1ba26ed856b\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7tpwNQ4wtL6aHLsYYxS3hyt0ckvPsivHYZDBSQ1tYDbjhw1uWzi8DgEc4wGxgs0uTkoyi3C6zXT%2Bt7kxk8647vFULbPi63a5%2Bj2lO5b5mv3JMhWY\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ndate: Wed, 15 Oct 2025 06:26:45 GMT\r\ncf-ray: 98ed3f2c08f30b3d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":59367,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 330 x 198, 8-bit/color RGBA, non-interlaced","md5":"5de8ae60aee4ce61c63b5a6bf44f4366","sha1":"4ee6b53c833346b39d7a07f0b3404ab0a84cf291","sha256":"d2aeb00261938e870c24b737317113ddf18666c70982790e8b97ddb7f6f76ab7","sha512":"38396bf3488b8ff3bfa2d11c00492712a654fafc1adfc1eb7c5412e921147002fbf046c94694b235b4a4c6b2270e4a52aa4d5203c919b283fd6a38caf0e655dc","ssdeep":"1536:u3qyOs7Bx4elLBPYTPkMD8DT6cIsd3YK/Ty7P:u3qyp74elLijkw8CcRdI","tlshash":"d24302f64dbb44a8c4b7a18218535e7ec3bb4e31bdc8327b92add4de490475206a7ce4","first_seen":"2025-09-11T10:47:57.299234Z","last_seen":"2025-10-15T06:27:16.010349Z","times_seen":4,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-15","alert":"Sinkholed","trigger":"wizja.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wizja.cc/","fqdn":"wizja.cc","domain":"wizja.cc","tld":"cc"},"ip":{"addr":"172.67.150.84","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-10-15T06:26:44.031Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wizja.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 09 Oct 2025 11:33:37 GMT","end":"Wed, 07 Jan 2026 12:33:30 GMT"},"fingerprint":{"sha1":"35:3B:EA:6D:70:E9:0E:CB:22:2F:6D:31:26:8A:47:4C:58:95:53:70","sha256":"B1:BA:DE:AA:2D:A5:9D:45:19:50:7D:17:E0:C1:B8:41:E3:A5:10:FD:D2:DE:62:F0:8A:1E:70:7C:22:F8:D0:1B"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: wizja.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 15 Oct 2025 06:26:44 GMT\r\ncontent-type: text/html; charset=utf-8\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlink: \u003chttps://fonts.googleapis.com\u003e; rel=\"preconnect\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=saD2FfgDO%2BNxcB2LAWKgRLuTjCtps%2Fn7YTgBG4guueO6cS%2FnKJhHNinIBG69suClgJYFEs3OkMmqCnfRGM%2FTYMX48BQL%2BQ%3D%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\nserver-timing: cfCacheStatus;desc=\"DYNAMIC\", cfEdge;dur=8,cfOrigin;dur=50\r\ncontent-encoding: br\r\ncf-ray: 98ed3f21af3156b1-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Tailwind CSS","description":"Tailwind is a utility-first CSS framework.","website":"https://tailwindcss.com/","common_platform_enumeration":"","icon":"tailwindcss.svg","categories":["UI frameworks"]},{"name":"Cloudflare Browser Insights","description":"Cloudflare Browser Insights is a tool that measures the performance of websites from the perspective of users.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Analytics","RUM"]}],"data":{"size":22217,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1101)","md5":"1ce8adad7bc5c4b042ce45f5e9b6983f","sha1":"834b47b839677b1574fc9b2ece4c8187a08069cc","sha256":"d5b07d11640ce4c4b27ac23aabfb218692f823e8dcfdce844dfa44c58d755a84","sha512":"6930e35a7f0e9d3ab9358a479bb612f85bd31c76fdd13ac287c0959b32a94e28394a4c0cf940ba220cf728e7ffb8619dca3155b747f3f270904d7c0009fd5973","ssdeep":"384:4ad+a9tT1gemodyptL5mK8M11/6M0j5ywpmHZ1eTAW:4ad+uhgefdy35mKV11yM0RpmHZ1eTAW","tlshash":"e4a2997111f0442fa193d2a1f7e0bb2e9e99d243ca1f5858b2bd05e22fc7c99cd57268","first_seen":"2025-10-15T06:27:16.013867Z","last_seen":"2025-10-15T06:27:16.013867Z","times_seen":1,"resource_available":false,"data":null}},"time_used":223,"timings":{"blocked":79,"dns":56,"connect":1,"send":0,"wait":64,"receive":0,"ssl":19},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-15","alert":"Sinkholed","trigger":"wizja.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.tailwindcss.com/","fqdn":"cdn.tailwindcss.com","domain":"tailwindcss.com","tld":"com"},"ip":{"addr":"172.66.155.116","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://wizja.cc/","date":"2025-10-15T06:26:44.406Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tailwindcss.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 25 Sep 2025 05:49:32 GMT","end":"Wed, 24 Dec 2025 06:49:31 GMT"},"fingerprint":{"sha1":"37:B8:AE:00:DB:7A:73:F7:AF:A6:35:4D:DA:CC:E2:3F:A9:F6:2D:08","sha256":"8A:02:37:DD:0E:05:31:6F:04:7F:E2:CF:14:B9:C1:2D:68:75:CC:A6:F5:E5:82:4D:53:69:13:D3:A5:8B:B9:A4"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: cdn.tailwindcss.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://wizja.cc/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\ndate: Wed, 15 Oct 2025 06:26:44 GMT\r\ncache-control: max-age=14400\r\nlocation: /3.4.17\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: MISS\r\nx-vercel-id: fra1::iad1::jfq46-1760508861694-86477a3b6722\r\nvary: accept-encoding\r\nage: 123\r\ncf-cache-status: HIT\r\ncf-ray: 98ed3f241d505a0f-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":407279,"size_decoded":0,"mime_type":"text/javascript","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T04:46:10.842589Z","times_seen":13317089,"resource_available":true,"data":null}},"time_used":183,"timings":{"blocked":86,"dns":20,"connect":3,"send":0,"wait":4,"receive":0,"ssl":68},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wizja.cc/channels.json?t=1760509605238","fqdn":"wizja.cc","domain":"wizja.cc","tld":"cc"},"ip":{"addr":"172.67.150.84","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://wizja.cc/","date":"2025-10-15T06:26:45.242Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wizja.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 09 Oct 2025 11:33:37 GMT","end":"Wed, 07 Jan 2026 12:33:30 GMT"},"fingerprint":{"sha1":"35:3B:EA:6D:70:E9:0E:CB:22:2F:6D:31:26:8A:47:4C:58:95:53:70","sha256":"B1:BA:DE:AA:2D:A5:9D:45:19:50:7D:17:E0:C1:B8:41:E3:A5:10:FD:D2:DE:62:F0:8A:1E:70:7C:22:F8:D0:1B"}}},"request":{"raw":"GET /channels.json?t=1760509605238 HTTP/1.1\r\nHost: wizja.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://wizja.cc/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 15 Oct 2025 06:26:45 GMT\r\npriority: u=4,i=?0\r\ncontent-type: application/json\r\ncf-cache-status: DYNAMIC\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8e4NJ8uurd37cAPRYrH3dzveqOQQzBPzzVyruZ4%2BomlysrpCJqWtvnIffXEQDG4qTlUzHx9Ci1Tvp44Wr83SAzK3ExAYbw%3D%3D\"}]}\r\netag: W/\"eb0e2b8b90399e2785213394ebf54302\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 98ed3f28c8aa0b3d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":22341,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"c74429c422695b84b2558773740a4dd2","sha1":"6176a21358f9d54c5df28ace1dcbdaa5489dd14a","sha256":"386b37af242d38f2ec2215dbf01122aba9db700fda788116b60d55241ae74c0b","sha512":"beb7aa481125533787c8cc3d007118c3ebcdd606b27eb06ee2e4a06ba00e5f3487db48a92692b7c444ce17d6c2f361fde4ab726672c075c154a156570bb70819","ssdeep":"96:jKhLnMVuHCxsHdBixKhy7B7a7Px767L7e7C7OS7c7X9WZIx+7/fzE73qqTm6Kokr:oj3hKTiD+S7cSWOx9GA3936W4CjI13","tlshash":"d0a2906dde7c1c97048c519808ab4d0e31140793ce8a3e66bb94db9cff9c85f6ab924d","first_seen":"2025-10-15T06:27:16.018344Z","last_seen":"2025-10-15T06:27:16.018344Z","times_seen":1,"resource_available":false,"data":null}},"time_used":39,"timings":{"blocked":5,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-15","alert":"Sinkholed","trigger":"wizja.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tvdarmowa.cc/favicon.ico","fqdn":"tvdarmowa.cc","domain":"tvdarmowa.cc","tld":"cc"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wizja.cc/","date":"2025-10-15T06:26:45.485Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: tvdarmowa.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://wizja.cc/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T04:46:10.842589Z","times_seen":13317089,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-15","alert":"Sinkholed","trigger":"tvdarmowa.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-10-15","alert":"Sinkholed","trigger":"tvdarmowa.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-15","alert":"Sinkholed","trigger":"tvdarmowa.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-15","alert":"Phishing Block","trigger":"tvdarmowa.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-15","alert":"Sinkholed","trigger":"tvdarmowa.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"adexchangeclear.com/script/push.php?r=10133074\u0026ipp=1\u0026mads=2\u0026position=top\u0026czid=v8wllkse2i\u0026atag=1\u0026aggr=3\u0026ppv=1\u0026ab_test=AdOpt_B_nocapping-2021-12-08v1\u0026srs=c3dce1166794414d4d8887ced4bde9e0\u0026ufp=Win32%2FMozilla%2FNetscape%2Ftrue%2Ffalse%2F1280x10240en-USunknown4824%20bits\u0026cbpage=https%3A%2F%2Fwizja.cc%2F\u0026atv=69.0-bp\u0026cbref=","fqdn":"adexchangeclear.com","domain":"adexchangeclear.com","tld":"com"},"ip":{"addr":"172.67.223.87","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://wizja.cc/","date":"2025-10-15T06:26:45.882Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"adexchangeclear.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Oct 2025 20:14:35 GMT","end":"Tue, 06 Jan 2026 21:12:18 GMT"},"fingerprint":{"sha1":"7C:B6:62:0F:43:12:2D:86:DD:92:D1:44:95:36:24:C7:2F:BA:B0:B6","sha256":"06:21:18:21:3A:A8:90:A4:4D:D0:A6:7B:7B:C8:4A:3B:31:47:C3:5D:48:A5:94:AC:08:75:A0:A1:DF:D6:B9:3C"}}},"request":{"raw":"GET /script/push.php?r=10133074\u0026ipp=1\u0026mads=2\u0026position=top\u0026czid=v8wllkse2i\u0026atag=1\u0026aggr=3\u0026ppv=1\u0026ab_test=AdOpt_B_nocapping-2021-12-08v1\u0026srs=c3dce1166794414d4d8887ced4bde9e0\u0026ufp=Win32%2FMozilla%2FNetscape%2Ftrue%2Ffalse%2F1280x10240en-USunknown4824%20bits\u0026cbpage=https%3A%2F%2Fwizja.cc%2F\u0026atv=69.0-bp\u0026cbref= HTTP/1.1\r\nHost: adexchangeclear.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://wizja.cc/\r\nOrigin: https://wizja.cc\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 204 No Content\r\nserver: cloudflare\r\ndate: Wed, 15 Oct 2025 06:26:46 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Content-Type\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\nvia: 1.1 google\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=29YsstP2uSpocjUVzRFBCciPJneT5zRcfYfSLiBsskc7moHkTMNd3%2FSUZwAx9a5eikCIkbTzRVbDYdQerj211KnGjHu%2BTQP2TfcM%2BxKjVS956Ys%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 98ed3f2ccd9b35a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T04:46:10.842589Z","times_seen":13317089,"resource_available":true,"data":null}},"time_used":153,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":153,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"adexchangeclear.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"embed.wizja.cc/cdn/eve/17.jpg","fqdn":"embed.wizja.cc","domain":"wizja.cc","tld":"cc"},"ip":{"addr":"104.21.79.248","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://wizja.cc/","date":"2025-10-15T06:26:53.929Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wizja.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 09 Oct 2025 11:29:55 GMT","end":"Wed, 07 Jan 2026 12:27:40 GMT"},"fingerprint":{"sha1":"43:A7:B5:0A:62:F0:C6:46:F4:5F:47:CF:3C:7C:14:81:C9:CE:08:25","sha256":"9D:A8:61:C5:9C:A6:96:6D:82:D8:7E:62:A8:35:7A:80:63:11:11:C6:7B:3D:08:13:7A:59:57:C4:D3:BB:DD:A7"}}},"request":{"raw":"GET /cdn/eve/17.jpg HTTP/1.1\r\nHost: embed.wizja.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://wizja.cc/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 22 Oct 2025 06:26:54 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Mon, 13 Oct 2025 14:49:27 GMT\r\naccept-ranges: bytes\r\ncontent-length: 98613\r\ndate: Wed, 15 Oct 2025 06:26:54 GMT\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: same-origin\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=l%2BzX0lSVfpemxnaeM7Wbh8ceOwN0xmg67oRgs7o6LQ3TXOBhWJAFunNDvvmHJAAmuGkqOI5YoCbBVSs8FqrZ1sfVgP819ZrIokKxBg%3D%3D\"}]}\r\ncf-ray: 98ed3f5f0ecd5697-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":98613,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 80\", baseline, precision 8, 1280x720, components 3","md5":"688ad28f678be792418a852ce91032e5","sha1":"9027c3e567278fd08372f30cf82a5586ac4f3af7","sha256":"ad288a23bc1af74307477533543acd9197a572b14f8df27779665e66d2fb9b23","sha512":"303daf9b6ec7e7b7e3ed9961f701c2cffa2aa7ff55e07413ab934f15e56b6badde30b50bcc3c4432a15714526facd5a700c0dd3b957734230c2feca27ead6cb4","ssdeep":"1536:ID1Iy1vtTwrRVB8iym11pbzY6mPkK8ReoxmHN3vPgHIPJzVz:Uiy1v8RMmzFGk9ReMmt3nnxzVz","tlshash":"17a31214794b812482ffe7f51e53b6a7308419d829ccac6c922ed8cce72d99988cc4df","first_seen":"2025-10-15T06:27:16.021635Z","last_seen":"2025-10-15T06:27:16.021635Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1068,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":663,"receive":405,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-15","alert":"Sinkholed","trigger":"embed.wizja.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"adexchangeclear.com/ad/czcf.php?cz=v8wllkse2i\u0026atv=69.0","fqdn":"adexchangeclear.com","domain":"adexchangeclear.com","tld":"com"},"ip":{"addr":"172.67.223.87","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://wizja.cc/","date":"2025-10-15T06:26:44.739Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"adexchangeclear.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Oct 2025 20:14:35 GMT","end":"Tue, 06 Jan 2026 21:12:18 GMT"},"fingerprint":{"sha1":"7C:B6:62:0F:43:12:2D:86:DD:92:D1:44:95:36:24:C7:2F:BA:B0:B6","sha256":"06:21:18:21:3A:A8:90:A4:4D:D0:A6:7B:7B:C8:4A:3B:31:47:C3:5D:48:A5:94:AC:08:75:A0:A1:DF:D6:B9:3C"}}},"request":{"raw":"GET /ad/czcf.php?cz=v8wllkse2i\u0026atv=69.0 HTTP/1.1\r\nHost: adexchangeclear.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://wizja.cc/\r\nOrigin: https://wizja.cc\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 15 Oct 2025 06:26:44 GMT\r\ncontent-type: text/html; charset=utf-8\r\nserver: cloudflare\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Content-Type\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RAzNzT26kRm4pAOz6eoAPrnKObXhs05dqTkkQNreYl57XNcuKbAFKFohG1qbyj2X2V4u6qGATWKWLUErF7itjdXP1iYaBcNE5b1YV1NLq2Od\"}]}\r\nvia: 1.1 google\r\ncf-cache-status: DYNAMIC\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 98ed3f25dab756b1-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1164,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"JSON text data","md5":"e84021a3707167969eff9ddc936bd59a","sha1":"b92a986131c4cd7c5ff6552c4aa7dfc1cfb5a37c","sha256":"2e9f23ca09d7b1d3bc587128622a296654e6d5b4520bc728d4f975e6d1978221","sha512":"8b2fca4431ff8976b6eb28d06fc38cc44673edecb1e373ae6f76c71ef8d0a6d80d404368bf85e3d1baf600fda7f724f1810a50ae03e44d7d831ccfaaf55d5476","ssdeep":"","tlshash":"fd2114f61366c6ecea7f38051cd59d87d216a8f70cb055a391e88455b5a1c43b00653c","first_seen":"2025-10-15T06:27:16.026309Z","last_seen":"2026-01-15T20:47:15.506678Z","times_seen":4,"resource_available":false,"data":null}},"time_used":233,"timings":{"blocked":39,"dns":20,"connect":1,"send":0,"wait":154,"receive":0,"ssl":16},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"adexchangeclear.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wizja.cc/styles.css","fqdn":"wizja.cc","domain":"wizja.cc","tld":"cc"},"ip":{"addr":"172.67.150.84","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://wizja.cc/","date":"2025-10-15T06:26:44.740Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wizja.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 09 Oct 2025 11:33:37 GMT","end":"Wed, 07 Jan 2026 12:33:30 GMT"},"fingerprint":{"sha1":"35:3B:EA:6D:70:E9:0E:CB:22:2F:6D:31:26:8A:47:4C:58:95:53:70","sha256":"B1:BA:DE:AA:2D:A5:9D:45:19:50:7D:17:E0:C1:B8:41:E3:A5:10:FD:D2:DE:62:F0:8A:1E:70:7C:22:F8:D0:1B"}}},"request":{"raw":"GET /styles.css HTTP/1.1\r\nHost: wizja.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://wizja.cc/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ncontent-encoding: br\r\ncontent-type: text/html; charset=utf-8\r\ndate: Wed, 15 Oct 2025 06:26:44 GMT\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlink: \u003chttps://fonts.googleapis.com\u003e; rel=\"preconnect\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dUMMwCuRabQqDjeWKWjpdf5CD9mIefopB%2FmUK70fVRz6hNrZOx0%2B%2FdfynWuUl4J5JHLaoC8dzrMczRg6XxgS6vYl6ZyOBPk%2BcQPmDg67l9UP6g%3D%3D\"}]}\r\ncf-cache-status: REVALIDATED\r\npriority: u=2,i=?0\r\ncf-ray: 98ed3f2598780b3d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T04:46:10.842589Z","times_seen":13317089,"resource_available":true,"data":null}},"time_used":21,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-15","alert":"Sinkholed","trigger":"wizja.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}}]}