{"report_id":"20ee2d40-d9fb-49c5-a9a1-f5cf6cb28ff6","version":0,"status":"done","tags":[],"date":"2026-08-22T10:23:38Z","url":{"schema":"http","addr":"edirl.click/","fqdn":"edirl.click","domain":"edirl.click","tld":"click"},"ip":{"addr":"194.36.191.196","port":0,"asn":60117,"as":"Host Sailor Ltd","country":"The Netherlands","country_code":"NL"},"final":{"url":{"schema":"https","addr":"edirl.click/","fqdn":"edirl.click","domain":"edirl.click","tld":"click"},"title":"site","dom":{"size":7452,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (318)","md5":"96d5a76aa1130154cd256231e36e9f03","sha1":"8d76b67fe00a47030c48930778e6430937a02ff2","sha256":"9dffccd281b658d905e0a4a06380783ce3a6c7eb916b2e9dc8a72d3d4f92bbee","sha512":"34164be5e74206d6ae8e6ce0b074c8f027de10343c2a48491bd1ecc5d2af94109ff6545d17c70d6b2672261939f518fce93a1f352b60ebd2acb2c69388988a8e","ssdeep":"96:PkXYB/lMvXFt8Q0kycCKlJlF5W+gPphfUlRY+myMXoSPS89ldHw2RTdYR/PT4I:PkIdlcXFCkJCKlJzMPphFhaudUPEI","tlshash":"dff173929ab705427013e4547be2d7486365e007e20ace3c3fcd7298cf8a6d9a8977cc","dom_hash":"domhash35007816800c2b562038af9abda22ecc","first_seen":"2026-08-22T10:18:32.564215Z","last_seen":"2026-08-22T10:23:42.492468Z","times_seen":2,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"edirl.click/","fqdn":"edirl.click","domain":"edirl.click","tld":"click"},"ip":{"addr":"194.36.191.196","port":0,"asn":60117,"as":"Host Sailor Ltd","country":"The Netherlands","country_code":"NL"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-09-26T10:23:38Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-22","alert":"Sinkholed","trigger":"orginalsite.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"edirl.click","ip":{"addr":"194.36.191.196","port":443,"asn":60117,"as":"Host Sailor Ltd","country":"The Netherlands","country_code":"NL"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-08-22T10:18:17.123974Z","last_seen":"2026-08-22T10:18:17.123974Z","alert_count":0,"request_count":4,"received_data":21868,"sent_data":1905,"comment":"","tags":null,"fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"jQuery:3.6.0","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]}]},{"fqdn":"orginalsite.site","ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-08-22T10:18:17.139681Z","last_seen":"2026-08-22T10:18:17.139681Z","alert_count":1,"request_count":1,"received_data":0,"sent_data":465,"comment":"","tags":null,"fingerprints":null},{"fqdn":"cdn.jsdelivr.net","ip":{"addr":"151.101.129.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2012-05-16","domain_rank":1678,"first_seen":"2012-09-30T00:15:09Z","last_seen":"2026-08-16T23:03:23.649094Z","alert_count":0,"request_count":1,"received_data":1385483,"sent_data":479,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"cdn.jsdelivr.net/gh/ethereum/web3.js/dist/web3.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.129.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"2ef095da06a14bf00d20e844cf96202f","sha1":"8e3dea60e686c94eeded2035c110cbf8b62d847f","sha256":"b2f2c092aadaadb3a720e4f7f114005eff3fa05c663ed84c0b9791b0b39c4aa7","sha512":"e6dc0322c2857cad096fbf29567947ef7e2619d6802f8738f06ea9e7f065ed6fbb5d4012f1a562ae790eb86e5d303b18074b7698facf13005dea7a0405f318c6","ssdeep":"6144:dGTpkXGg97WCcHlzHGIXBzBkLxDVmNiS9KQqDNX4Y6eW0BQXOJ4DXt/KL3zxK6C8:QZoQjxAzCamsviTeyXaKiX","tlshash":"5155d9c4b650b051c3a66a90441f900ee37ef96d3c4e0169fa57ecf37cb8a89552af39","size":1384704,"data":"","first_seen":"2024-10-04T10:53:17.054173Z","last_seen":"2026-08-22T10:23:42.501285Z","times_seen":46,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"edirl.click/","fqdn":"edirl.click","domain":"edirl.click","tld":"click"},"ip":{"addr":"194.36.191.196","port":443,"asn":60117,"as":"Host Sailor Ltd","country":"The Netherlands","country_code":"NL"},"introduction_type":"Function","is_inline":false,"md5":"29d0c84b9d1d8da446a6062c6a840ad9","sha1":"6d6b3a6065667c7c50d92f3889c85ed65a9ad784","sha256":"3c3cbdb71d0d2c22f504f4d63d8a6ffe8d250cde7e58300619be35b6bbab26a1","sha512":"52cfcbf2f7c3521c5a6c6120099ee6822d16e04ffbc04720da925a11242c8c2050f9cfc8d864a6d39a0036ac599f701080195a29a7c5e8d3e9308b91f9f0390f","ssdeep":"","tlshash":"428004d533c350004753117c04571cc4d034447014444d405040d4531c570315115c7c","size":37,"data":"","first_seen":"2023-04-11T21:31:25Z","last_seen":"2026-08-22T13:11:56.927098Z","times_seen":747033,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"edirl.click/public/script5.js","fqdn":"edirl.click","domain":"edirl.click","tld":"click"},"ip":{"addr":"194.36.191.196","port":443,"asn":60117,"as":"Host Sailor Ltd","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"7242d43a4bc06c78f2979363ea341252","sha1":"90529a8f0f0f71650e9e0e87626c3fb2b682b8ee","sha256":"7ce48f372f4e69b365703b691b11dae36fbf791da76968a57d8dc3e4c59f9049","sha512":"81ea7805efceb3082d511420ab798b656b88d9dd18701b508894001f9159cbe7f0844c02bb6b77beff271e5f1f430328c7fe0a659bef4429c62044abbfac22a3","ssdeep":"96:7e/darnhlb/M8pUW8+Z44U3GyABNpR5R783SpHCN/zRCZdOWQBeL0hX:7eS/KrDt3Gy6R/HCVRCZv2","tlshash":"0ed10017ada11f98133b2366732b5060fa225b4f1681145b717ca58cff3552acefaeb0","size":6382,"data":"","first_seen":"2026-08-22T10:18:32.572746Z","last_seen":"2026-08-22T10:23:42.498188Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"edirl.click/","fqdn":"edirl.click","domain":"edirl.click","tld":"click"},"ip":{"addr":"194.36.191.196","port":443,"asn":60117,"as":"Host Sailor Ltd","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":true,"md5":"aef44e250b97ea4fabdaadc1296ef59a","sha1":"7e3c79bfa4bdaec0e737b5847f0976ecc31d789d","sha256":"0dc82f104f2d8eeb0470a7af470b43f512c629bf81f42011debc1a195518d5e0","sha512":"b251c66f40d3399df3c3602c84bb024dca3321008dcf69f41a16be69e63d163b16b9ac22e77d961d9333e5ea6b1d801713372998e9c0438395ea798f6282c571","ssdeep":"","tlshash":"eea0222f3ee8a83000bf3a3eca23a30c3832000b3c00008c002ca800cc32e23000aacc","size":75,"data":"","first_seen":"2026-08-22T10:18:32.577803Z","last_seen":"2026-08-22T10:23:42.502401Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"edirl.click/","fqdn":"edirl.click","domain":"edirl.click","tld":"click"},"ip":{"addr":"194.36.191.196","port":443,"asn":60117,"as":"Host Sailor Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-08-22T10:23:08.203Z","timestamp":1787394188203,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"edirl.click","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 14 Aug 2026 07:04:18 GMT","end":"Thu, 12 Nov 2026 07:04:17 GMT"},"fingerprint":{"sha1":"48:FC:A9:B3:6C:16:9C:FC:C7:37:D6:85:C7:E4:74:4E:C9:1D:3F:70","sha256":"78:4D:61:25:63:80:08:AD:19:82:B8:4A:6E:C3:F4:C3:02:1B:B6:A6:6F:94:91:05:6A:12:F4:F1:5E:42:B2:CE"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: edirl.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 2108\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Sat, 22 Aug 2026 10:23:08 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"jQuery:3.6.0","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]}],"data":{"size":7434,"size_decoded":2484,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (315)","md5":"a7ad43231ccc4adf42a0f767d3e247d1","sha1":"1d3c2d86fc3b32cfb151796641926dd45094d309","sha256":"2f5ad1e45cdc5ed736a329479ea28db51a31129f56ab681e3d9a84e38580fa62","sha512":"e0d1dd3784d8e66d538d57ffda53e89fa431867e12752ebb7372e9d554e2950417527ce68e6a70cb947ac292e13320f512affe4bd2f0744d3b3fd3ad15adb78d","ssdeep":"96:XkXYB/lMvXFt8Q0kycCKlJlF5W+gPphfSlRKmN5XoSPS8ildmw20TdYRvPT4E:XkIdlcXFCkJCKlJzMPphEhaNdMPEE","tlshash":"9be161929ab705427113e4543be2d7486365e107e20ace3c3fcd7294cf8a699a9977cc","first_seen":"2026-08-22T10:18:32.566499Z","last_seen":"2026-08-22T10:23:42.494573Z","times_seen":2,"resource_available":false,"data":null}},"time_used":78,"timings":{"blocked":0,"dns":4,"connect":19,"send":0,"wait":27,"receive":0,"ssl":27},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"orginalsite.site/js/jquery-3.6.0.min.js","fqdn":"orginalsite.site","domain":"orginalsite.site","tld":"site"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://edirl.click/","date":"2026-08-22T10:23:08.641Z","timestamp":1787394188641,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /js/jquery-3.6.0.min.js HTTP/1.1\r\nHost: orginalsite.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://edirl.click/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-22T13:26:50.748526Z","times_seen":18035641,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-22","alert":"Sinkholed","trigger":"orginalsite.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/gh/ethereum/web3.js/dist/web3.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.129.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://edirl.click/","date":"2026-08-22T10:23:08.644Z","timestamp":1787394188644,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2026 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 20 May 2026 15:48:47 GMT","end":"Sat, 05 Dec 2026 14:48:47 GMT"},"fingerprint":{"sha1":"D4:05:C2:EC:C7:EE:2B:D0:08:68:0D:3D:33:77:48:78:43:E7:D1:E1","sha256":"ED:84:90:EE:71:BC:6B:5E:B3:D2:50:B0:23:3A:06:0D:E0:50:C6:B6:A9:09:36:E6:CE:FE:E8:66:89:EB:4E:C5"}}},"request":{"raw":"GET /gh/ethereum/web3.js/dist/web3.min.js HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://edirl.click/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=604800, s-maxage=43200\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: application/javascript; charset=utf-8\r\nx-jsd-version: 3.0.0\r\nx-jsd-version-type: version\r\netag: W/\"152100-jj3qYOaGyU7t7SA1wRDL+LYthH8\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\nage: 17245\r\ndate: Sat, 22 Aug 2026 10:23:08 GMT\r\nx-served-by: cache-fra-etou8220101-FRA, cache-bma-essb1270046-BMA\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 280519\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1384704,"size_decoded":281298,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (43607)","md5":"c971c4c0ce2ccc45f7193f1025fcf021","sha1":"6566dcdea21acc7aaba00023af866059765bc115","sha256":"e6f062caa51faae4276e4e1263a1d6836cc42298e9af6b391cf99eaee617a5a8","sha512":"c8dd83b929bdf0d360ffb28718c6c088256a61de1b35e07d394d2f13e81ae38b729971011fbd9d36cc04d6f96d6767eb6969576ea122f059b231bba0d849dff3","ssdeep":"6144:dGTpkXGg97WCcHlzHGIXBzBkLxDVmNiS9KQqDNX4Y6eW0BQXOJ4DXt/KLY:QZoQjxAY","tlshash":"c025a6c4b6507051c3a56e91402f900ae33efd693c4e0169fb57ecf76cb8a89552af3a","first_seen":"2026-08-22T10:23:42.496039Z","last_seen":"2026-08-22T10:23:42.496039Z","times_seen":1,"resource_available":false,"data":null}},"time_used":69,"timings":{"blocked":-1,"dns":3,"connect":9,"send":0,"wait":10,"receive":26,"ssl":21},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"edirl.click/public/script5.js","fqdn":"edirl.click","domain":"edirl.click","tld":"click"},"ip":{"addr":"194.36.191.196","port":443,"asn":60117,"as":"Host Sailor Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://edirl.click/","date":"2026-08-22T10:23:08.645Z","timestamp":1787394188645,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"edirl.click","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 14 Aug 2026 07:04:18 GMT","end":"Thu, 12 Nov 2026 07:04:17 GMT"},"fingerprint":{"sha1":"48:FC:A9:B3:6C:16:9C:FC:C7:37:D6:85:C7:E4:74:4E:C9:1D:3F:70","sha256":"78:4D:61:25:63:80:08:AD:19:82:B8:4A:6E:C3:F4:C3:02:1B:B6:A6:6F:94:91:05:6A:12:F4:F1:5E:42:B2:CE"}}},"request":{"raw":"GET /public/script5.js HTTP/1.1\r\nHost: edirl.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://edirl.click/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sat, 29 Aug 2026 10:23:08 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 22 Oct 2024 09:18:10 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1900\r\ndate: Sat, 22 Aug 2026 10:23:08 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":6382,"size_decoded":2401,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with CRLF line terminators","md5":"7242d43a4bc06c78f2979363ea341252","sha1":"90529a8f0f0f71650e9e0e87626c3fb2b682b8ee","sha256":"7ce48f372f4e69b365703b691b11dae36fbf791da76968a57d8dc3e4c59f9049","sha512":"81ea7805efceb3082d511420ab798b656b88d9dd18701b508894001f9159cbe7f0844c02bb6b77beff271e5f1f430328c7fe0a659bef4429c62044abbfac22a3","ssdeep":"96:7e/darnhlb/M8pUW8+Z44U3GyABNpR5R783SpHCN/zRCZdOWQBeL0hX:7eS/KrDt3Gy6R/HCVRCZv2","tlshash":"0ed10017ada11f98133b2366732b5060fa225b4f1681145b717ca58cff3552acefaeb0","first_seen":"2026-08-22T10:18:32.572746Z","last_seen":"2026-08-22T10:23:42.498188Z","times_seen":2,"resource_available":true,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"edirl.click/public/ss.jpg","fqdn":"edirl.click","domain":"edirl.click","tld":"click"},"ip":{"addr":"194.36.191.196","port":443,"asn":60117,"as":"Host Sailor Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://edirl.click/","date":"2026-08-22T10:23:08.650Z","timestamp":1787394188650,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"edirl.click","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 14 Aug 2026 07:04:18 GMT","end":"Thu, 12 Nov 2026 07:04:17 GMT"},"fingerprint":{"sha1":"48:FC:A9:B3:6C:16:9C:FC:C7:37:D6:85:C7:E4:74:4E:C9:1D:3F:70","sha256":"78:4D:61:25:63:80:08:AD:19:82:B8:4A:6E:C3:F4:C3:02:1B:B6:A6:6F:94:91:05:6A:12:F4:F1:5E:42:B2:CE"}}},"request":{"raw":"GET /public/ss.jpg HTTP/1.1\r\nHost: edirl.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://edirl.click/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sat, 29 Aug 2026 10:23:08 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Tue, 22 Oct 2024 09:18:10 GMT\r\naccept-ranges: bytes\r\ncontent-length: 6719\r\ndate: Sat, 22 Aug 2026 10:23:08 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":6719,"size_decoded":6985,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 737x1280, components 3","md5":"9db3c7fbd1c99eae48c777ecdfb48362","sha1":"c4eb975e6d91edd396b9be57c84ffd186ee26a76","sha256":"a72b141b35072a13db5061d577be0f04569632702380ea14a21a545aa2d1db5f","sha512":"bc671e0a2607b329a98e863c83307f1d51888a12f10d301af598e9dc1841bfdb4af39d079b2a34e0ccd612630162c11870653bd817dabab7eddc96b0eaf21c1c","ssdeep":"12:tkquzzWlxTsgGXlxDP1m11C1+/MR/+nlxD3EZAGSejr1tBnawR//om/MiUoZUh2j:R5lx6j18PUR/MEZAI1ThX/MPzhcIE","tlshash":"e4d176d937644359e8371b3440e8abc6f3287e22a781276a52c236101facac01888293","first_seen":"2026-08-22T10:18:32.574444Z","last_seen":"2026-08-22T10:23:42.498975Z","times_seen":2,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"edirl.click/favicon.ico","fqdn":"edirl.click","domain":"edirl.click","tld":"click"},"ip":{"addr":"194.36.191.196","port":443,"asn":60117,"as":"Host Sailor Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://edirl.click/","date":"2026-08-22T10:23:08.952Z","timestamp":1787394188952,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"edirl.click","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 14 Aug 2026 07:04:18 GMT","end":"Thu, 12 Nov 2026 07:04:17 GMT"},"fingerprint":{"sha1":"48:FC:A9:B3:6C:16:9C:FC:C7:37:D6:85:C7:E4:74:4E:C9:1D:3F:70","sha256":"78:4D:61:25:63:80:08:AD:19:82:B8:4A:6E:C3:F4:C3:02:1B:B6:A6:6F:94:91:05:6A:12:F4:F1:5E:42:B2:CE"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: edirl.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://edirl.click/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 18\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Sat, 22 Aug 2026 10:23:08 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":14,"size_decoded":194,"mime_type":"text/html; charset=UTF-8","magic":"ASCII text, with no line terminators","md5":"070c71b70fc76b9da0d01213b78051d2","sha1":"3cf843ccca1a0f4a896e4eb0d77d533a795c7f3d","sha256":"80445c76061351ab356cb17501735b79dc6149fcec6cb13ce6b543e14476d510","sha512":"09e2981f10b88ac96e2ebf0cf4275391b310b619f6fc901d25777bbc7e7be8b2b644708e856b3ee807811ca1ef0533e2d46555b98bb2368ae1d60b58f719f43a","ssdeep":"","tlshash":"df60000f0f303f000c300300c00003030000f00c0c00f000c03c030000c00f000000cf","first_seen":"2026-05-27T04:24:36.489195Z","last_seen":"2026-08-22T10:23:42.500321Z","times_seen":3,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}