{"report_id":"22f83f7e-09dc-4aea-9c6a-4e946fc50930","version":0,"status":"done","tags":["microsoft","phishing","outlook"],"date":"2026-09-16T08:23:26Z","url":{"schema":"https","addr":"www.wlp66.vercel.app/","fqdn":"www.wlp66.vercel.app","domain":"wlp66.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.131","port":0,"asn":16509,"as":"Amazon.com, Inc.","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"login.lhotsepension.com/p/wIPJNIbGcjRqRFrzfTQo8Hxf-yY5D8OM_6SH--bZ_VKgJdNWxx3Kr9t4B394j1I_kQ-OcJY4atGAn-mRQeDogPPdz39awr5MsLDnYPbgRnHRBo0moEF50-86wVZtV8ix4mxuBeuj1TZZALXSiDL0Yu7QyyGPtjcm90weiH8EujrdygIVR93Ym724FsaO5d6kr4dDM9qV8HZxmy7rAwYz84Zfa0FRXcQyafs7XaTKvZW6a2oETliI9l3Rl38hIjZ4DAFhXvh59uskRfa0GVv07AddmACaALqCtD9cN_2LCV31PoRXUU1Z50awjBdcDR3U0MREAwcguBpni717QUsUNPngwfjWtu64Rnuc1iKsXrc6L2yuEzxZDYmTx9OsX3ZLsztDtKNGZ6l6T_c_GiInu3g8swqaa8bz5z3JqQPElGWzG42D2N1YWo9A3x8fBF7kZRvDWtZypneulnKu_0ErVMJ0tyAwwgWGbDoCO1afNZRxVh-41vFtTlsUKHZYE5Qo6JCQzmv4OAak6Dq4uvKmjYslH3bZFsYyLGF1QJxI9aMjxEl3MF75ZvaOaGXR3zmDWgXINQDvBgZghTddN-8lvy04mMEeKUH_f_59s1R2onQvn_9QkvHp7SNS5dzlLoD5bd4mYRUUmpXbnJK3dv6fj8zFZ5MjV8i4xtbyCUfzFTDSPQqZf4R3Ou5CgUFpTRF4MoROA7Kc8SvmC4p_KKuOOKLiaxtuVtoO93ZKTUqOKsibs5bS4fW7es-xD1hENiEzHWLslIADqWFgIb_dT5N-gZMHbfjMIxe7WpTQwcnOpxqDPdd3_474atfkuKdPAioncXUduHiPIwotXcMLZSrDucGMfuh7CcHsDImkQAHSYvy9gUc2QQCd7MXtWGIq1QeoJ3SNkvLvaEipNF5A24FQY-INK3oSHG5DRIbVdnZFkU2hS0to157_70qfVpDQUeNoHSoa5LT44fXrcbA1Z8RMAZjjbONoIX2HJqER-DqvWs7_E8YW8zGqPjXNoVT83alv3D2kE6hS7a-V5-lXPIBT24fK_YpHmXSEkMzkgB2rHOnXSNcbXTWb7CM_qH3iMmqVqyxdSefwTNXWnERjQDBrupqyjaDYv7kq7xF7numdhoEO2DdLZAGhMnhiTshvKEHBaDMH07PsycqYWfb0CSofupVGQtZXURWChYj6m_-wUVDyMBAhtbNLyrZ1pAoR6o0xJr74CMkal-3vziG-IDKKIl8-0xOwwQfnz_1VkUjG4jv5cVNrjS10WkFCfP09mo0ZLPpDkUl88GUkwoI3KRTW6JMBwKDnvJXs2U1w_EDdlIhdhcwpe65-r3qTpStJWA","fqdn":"login.lhotsepension.com","domain":"lhotsepension.com","tld":"com"},"title":"Sign in to your account","dom":{"size":62740,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (45076)","md5":"b0ee238d6c9b9d5adb9e339ac12f2935","sha1":"5f9fa62d9c2ae18f972d9fa93c0258a36014bab3","sha256":"771976246aaaa9a46e03288fc4a6cc92460ef4f9d2ce073ededa0a49e6541a6a","sha512":"33967292b56273c85ca941dbdab902ce72c13a38bee6633dd8de2996590493c5ba220cd8ae2a6bed9f2339a3238e7cf594d3b397e83dff12ec1f25450c1cdbaf","ssdeep":"1536:zZ1Ecq181g1c8GLG2XBj1Ecz1DgNQ1TIu/24Wr3DSLgp9bL2QMuShpnPosb2JE:F1Tq181g1c8Q1Tz1DgNQ1TiS+qfAU","tlshash":"f2535cd12b98383b4e9620f2ccbe7f0bed3a05135889dc98f19d98085efaf564967407","dom_hash":"domhashfe6660594ffbae4ebe5aca83b78f6453","first_seen":"2026-09-16T08:23:36.221188Z","last_seen":"2026-09-16T08:23:36.221188Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"www.wlp66.vercel.app/","fqdn":"www.wlp66.vercel.app","domain":"wlp66.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.131","port":0,"asn":16509,"as":"Amazon.com, Inc.","country":"United States","country_code":"US"},"tags":["openphish"],"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-10-21T08:23:26Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":3,"analyzer":8}},"detection":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"wlp66.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-16","alert":"Phishing Block","trigger":"wlp66.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"wlp66.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"wlp66.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"www.wlp66.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-16","alert":"Phishing Block","trigger":"www.wlp66.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"www.wlp66.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"www.wlp66.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Microsoft","verdict":"phishing","severity":"medium","comment":"Resource associated with Microsoft phishing","tags":["microsoft","phishing"],"meta":null},{"sensor_name":"urlquery","alert":"Phishing - Microsoft","verdict":"phishing","severity":"medium","comment":"Resource associated with Microsoft phishing","tags":["microsoft","phishing"],"meta":null},{"sensor_name":"urlquery","alert":"Phishing - Microsoft Outlook","verdict":"phishing","severity":"medium","comment":"","tags":["phishing","microsoft","outlook"],"meta":{"engine":"luna_v2","pattern_id":"microsoft.phishing_ms_suspiciousjs.1"}}]},"summary":[{"fqdn":"aadcdn.lhotsepension.com","ip":{"addr":"85.11.167.134","port":443,"asn":6830,"as":"Liberty Global B.V.","country":"Bulgaria","country_code":"BG"},"domain_registered":"2005-11-25","domain_rank":0,"first_seen":"2026-09-14T14:09:56.09966Z","last_seen":"2026-09-14T14:09:56.09966Z","alert_count":0,"request_count":4,"received_data":178801,"sent_data":2378,"comment":"","tags":null,"fingerprints":[{"name":"Azure","description":"Azure is a cloud computing service for building, testing, deploying, and managing applications and services through Microsoft-managed data centers.","website":"https://azure.microsoft.com","common_platform_enumeration":"","icon":"Azure.svg","categories":["PaaS"]},{"name":"IIS:10.0","description":"Internet Information Services (IIS) is an extensible web server software created by Microsoft for use with the Windows NT family.","website":"https://www.iis.net","common_platform_enumeration":"cpe:2.3:a:microsoft:internet_information_server:*:*:*:*:*:*:*:*","icon":"Microsoft.svg","categories":["Web servers"]},{"name":"Windows Server","description":"Windows Server is a brand name for a group of server operating systems.","website":"https://microsoft.com/windowsserver","common_platform_enumeration":"","icon":"WindowsServer.png","categories":["Operating systems"]},{"name":"Azure Front Door","description":"Azure Front Door is a scalable and secure entry point for fast delivery of your global web applications.","website":"https://docs.microsoft.com/en-us/azure/frontdoor/","common_platform_enumeration":"","icon":"Azure.svg","categories":["Load balancers"]}]},{"fqdn":"wlp66.vercel.app","ip":{"addr":"64.29.17.3","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-09-15T14:13:39.8936Z","last_seen":"2026-09-15T14:13:39.8936Z","alert_count":76,"request_count":19,"received_data":659179,"sent_data":9289,"comment":"","tags":null,"fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"rpdfphaesngaedeyuahf.supabase.co","ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-05-28T14:52:29.986926Z","last_seen":"2026-09-14T14:10:00.943728Z","alert_count":0,"request_count":6,"received_data":0,"sent_data":3672,"comment":"","tags":null,"fingerprints":null},{"fqdn":"mada-ce342-default-rtdb.firebaseio.com","ip":{"addr":"35.190.39.113","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2012-10-15","domain_rank":0,"first_seen":"2025-07-03T11:57:38.728573Z","last_seen":"2026-09-14T14:09:58.330045Z","alert_count":0,"request_count":1,"received_data":254,"sent_data":655,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"WebSocket","description":"WebSocket is a communication protocol that provides full-duplex communication channels over a single, long-lived connection, enabling interactive communication between web browsers and servers.","website":"https://en.wikipedia.org/wiki/WebSocket","common_platform_enumeration":"","icon":"WebSocket.svg","categories":["Miscellaneous"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"login.lhotsepension.com","ip":{"addr":"85.11.167.134","port":443,"asn":6830,"as":"Liberty Global B.V.","country":"Bulgaria","country_code":"BG"},"domain_registered":"2005-11-25","domain_rank":0,"first_seen":"2026-09-14T14:09:56.095826Z","last_seen":"2026-09-14T14:09:56.095826Z","alert_count":8,"request_count":4,"received_data":77366,"sent_data":11436,"comment":"","tags":null,"fingerprints":[{"name":"Apache HTTP Server:2.4.48","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Windows Server","description":"Windows Server is a brand name for a group of server operating systems.","website":"https://microsoft.com/windowsserver","common_platform_enumeration":"","icon":"WindowsServer.png","categories":["Operating systems"]},{"name":"IIS:10.0","description":"Internet Information Services (IIS) is an extensible web server software created by Microsoft for use with the Windows NT family.","website":"https://www.iis.net","common_platform_enumeration":"cpe:2.3:a:microsoft:internet_information_server:*:*:*:*:*:*:*:*","icon":"Microsoft.svg","categories":["Web servers"]}]},{"fqdn":"kl4rdcnxwm.lhotsepension.com","ip":{"addr":"85.11.167.134","port":443,"asn":6830,"as":"Liberty Global B.V.","country":"Bulgaria","country_code":"BG"},"domain_registered":"2005-11-25","domain_rank":0,"first_seen":"2026-09-14T14:09:56.102813Z","last_seen":"2026-09-14T14:09:56.102813Z","alert_count":0,"request_count":3,"received_data":15134,"sent_data":1892,"comment":"","tags":null,"fingerprints":[{"name":"Apache HTTP Server:2.4.48","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}]},{"fqdn":"www.lhotsepension.com","ip":{"addr":"85.11.167.134","port":443,"asn":6830,"as":"Liberty Global B.V.","country":"Bulgaria","country_code":"BG"},"domain_registered":"2005-11-25","domain_rank":0,"first_seen":"2018-10-05T07:25:57Z","last_seen":"2026-09-14T14:09:57.041622Z","alert_count":0,"request_count":1,"received_data":2641,"sent_data":698,"comment":"","tags":null,"fingerprints":[{"name":"Apache HTTP Server:2.4.48","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}]},{"fqdn":"www.wlp66.vercel.app","ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":4,"request_count":1,"received_data":0,"sent_data":489,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Microsoft","verdict":"phishing","severity":"medium","comment":"Resource associated with Microsoft phishing","tags":["microsoft","phishing"],"meta":null},{"sensor_name":"urlquery","alert":"Phishing - Microsoft Outlook","verdict":"phishing","severity":"medium","comment":"","tags":["phishing","microsoft","outlook"],"meta":{"engine":"luna_v2","pattern_id":"microsoft.phishing_ms_suspiciousjs.1"}}]},"javascript":{"script":[{"url":{"schema":"https","addr":"login.lhotsepension.com/p/wIPJNIbGcjRqRFrzfTQo8Hxf-yY5D8OM_6SH--bZ_VKgJdNWxx3Kr9t4B394j1I_kQ-OcJY4atGAn-mRQeDogPPdz39awr5MsLDnYPbgRnHRBo0moEF50-86wVZtV8ix4mxuBeuj1TZZALXSiDL0Yu7QyyGPtjcm90weiH8EujrdygIVR93Ym724FsaO5d6kr4dDM9qV8HZxmy7rAwYz84Zfa0FRXcQyafs7XaTKvZW6a2oETliI9l3Rl38hIjZ4DAFhXvh59uskRfa0GVv07AddmACaALqCtD9cN_2LCV31PoRXUU1Z50awjBdcDR3U0MREAwcguBpni717QUsUNPngwfjWtu64Rnuc1iKsXrc6L2yuEzxZDYmTx9OsX3ZLsztDtKNGZ6l6T_c_GiInu3g8swqaa8bz5z3JqQPElGWzG42D2N1YWo9A3x8fBF7kZRvDWtZypneulnKu_0ErVMJ0tyAwwgWGbDoCO1afNZRxVh-41vFtTlsUKHZYE5Qo6JCQzmv4OAak6Dq4uvKmjYslH3bZFsYyLGF1QJxI9aMjxEl3MF75ZvaOaGXR3zmDWgXINQDvBgZghTddN-8lvy04mMEeKUH_f_59s1R2onQvn_9QkvHp7SNS5dzlLoD5bd4mYRUUmpXbnJK3dv6fj8zFZ5MjV8i4xtbyCUfzFTDSPQqZf4R3Ou5CgUFpTRF4MoROA7Kc8SvmC4p_KKuOOKLiaxtuVtoO93ZKTUqOKsibs5bS4fW7es-xD1hENiEzHWLslIADqWFgIb_dT5N-gZMHbfjMIxe7WpTQwcnOpxqDPdd3_474atfkuKdPAioncXUduHiPIwotXcMLZSrDucGMfuh7CcHsDImkQAHSYvy9gUc2QQCd7MXtWGIq1QeoJ3SNkvLvaEipNF5A24FQY-INK3oSHG5DRIbVdnZFkU2hS0to157_70qfVpDQUeNoHSoa5LT44fXrcbA1Z8RMAZjjbONoIX2HJqER-DqvWs7_E8YW8zGqPjXNoVT83alv3D2kE6hS7a-V5-lXPIBT24fK_YpHmXSEkMzkgB2rHOnXSNcbXTWb7CM_qH3iMmqVqyxdSefwTNXWnERjQDBrupqyjaDYv7kq7xF7numdhoEO2DdLZAGhMnhiTshvKEHBaDMH07PsycqYWfb0CSofupVGQtZXURWChYj6m_-wUVDyMBAhtbNLyrZ1pAoR6o0xJr74CMkal-3vziG-IDKKIl8-0xOwwQfnz_1VkUjG4jv5cVNrjS10WkFCfP09mo0ZLPpDkUl88GUkwoI3KRTW6JMBwKDnvJXs2U1w_EDdlIhdhcwpe65-r3qTpStJWA","fqdn":"login.lhotsepension.com","domain":"lhotsepension.com","tld":"com"},"ip":{"addr":"85.11.167.134","port":443,"asn":6830,"as":"Liberty Global B.V.","country":"Bulgaria","country_code":"BG"},"introduction_type":"scriptElement","is_inline":true,"md5":"87bf9c75cc99d7a01693e03433dc07bc","sha1":"a7fd83ee5e335a4063a6ea2398471787b77c6ce0","sha256":"c78b56c7434efeab31286c81c9999c8d7f155478b5c8fa794c61bbe8e69e6995","sha512":"7ab6bed3839570946881938ef26be46e06208769301840c99aed63fa982d8fa32deb7d509222dd46e835fdd15ab194ad2f6215c569974dae53e3acd11d247307","ssdeep":"768:C1Ecq1ro1rk1rY8J7QLG2RiYniYnj1Ecz1rHXgmSQ1eg3YndYn/rZYnHYnd3S+2a:C1Ecq181g1c8GLG2XBj1Ecz1DgNQ1TIy","tlshash":"a5135dd14b9c2c3b5da621e28c787f0bed3b0a1359c6dc9de29c69088efab165d57013","size":45104,"data":"","first_seen":"2026-09-16T08:23:36.25811Z","last_seen":"2026-09-16T08:23:36.25811Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"login.lhotsepension.com/p/wIPJNIbGcjRqRFrzfTQo8Hxf-yY5D8OM_6SH--bZ_VKgJdNWxx3Kr9t4B394j1I_kQ-OcJY4atGAn-mRQeDogPPdz39awr5MsLDnYPbgRnHRBo0moEF50-86wVZtV8ix4mxuBeuj1TZZALXSiDL0Yu7QyyGPtjcm90weiH8EujrdygIVR93Ym724FsaO5d6kr4dDM9qV8HZxmy7rAwYz84Zfa0FRXcQyafs7XaTKvZW6a2oETliI9l3Rl38hIjZ4DAFhXvh59uskRfa0GVv07AddmACaALqCtD9cN_2LCV31PoRXUU1Z50awjBdcDR3U0MREAwcguBpni717QUsUNPngwfjWtu64Rnuc1iKsXrc6L2yuEzxZDYmTx9OsX3ZLsztDtKNGZ6l6T_c_GiInu3g8swqaa8bz5z3JqQPElGWzG42D2N1YWo9A3x8fBF7kZRvDWtZypneulnKu_0ErVMJ0tyAwwgWGbDoCO1afNZRxVh-41vFtTlsUKHZYE5Qo6JCQzmv4OAak6Dq4uvKmjYslH3bZFsYyLGF1QJxI9aMjxEl3MF75ZvaOaGXR3zmDWgXINQDvBgZghTddN-8lvy04mMEeKUH_f_59s1R2onQvn_9QkvHp7SNS5dzlLoD5bd4mYRUUmpXbnJK3dv6fj8zFZ5MjV8i4xtbyCUfzFTDSPQqZf4R3Ou5CgUFpTRF4MoROA7Kc8SvmC4p_KKuOOKLiaxtuVtoO93ZKTUqOKsibs5bS4fW7es-xD1hENiEzHWLslIADqWFgIb_dT5N-gZMHbfjMIxe7WpTQwcnOpxqDPdd3_474atfkuKdPAioncXUduHiPIwotXcMLZSrDucGMfuh7CcHsDImkQAHSYvy9gUc2QQCd7MXtWGIq1QeoJ3SNkvLvaEipNF5A24FQY-INK3oSHG5DRIbVdnZFkU2hS0to157_70qfVpDQUeNoHSoa5LT44fXrcbA1Z8RMAZjjbONoIX2HJqER-DqvWs7_E8YW8zGqPjXNoVT83alv3D2kE6hS7a-V5-lXPIBT24fK_YpHmXSEkMzkgB2rHOnXSNcbXTWb7CM_qH3iMmqVqyxdSefwTNXWnERjQDBrupqyjaDYv7kq7xF7numdhoEO2DdLZAGhMnhiTshvKEHBaDMH07PsycqYWfb0CSofupVGQtZXURWChYj6m_-wUVDyMBAhtbNLyrZ1pAoR6o0xJr74CMkal-3vziG-IDKKIl8-0xOwwQfnz_1VkUjG4jv5cVNrjS10WkFCfP09mo0ZLPpDkUl88GUkwoI3KRTW6JMBwKDnvJXs2U1w_EDdlIhdhcwpe65-r3qTpStJWA","fqdn":"login.lhotsepension.com","domain":"lhotsepension.com","tld":"com"},"ip":{"addr":"85.11.167.134","port":443,"asn":6830,"as":"Liberty Global B.V.","country":"Bulgaria","country_code":"BG"},"introduction_type":"scriptElement","is_inline":true,"md5":"bc1b1351f147a2d9d2864dc27a2618be","sha1":"0ea5d8de04227512808e2c233ed151bc3317c063","sha256":"e5cbe582067c5c62c436872aa54fd3182380bd7736ece17743b2ffb86744e804","sha512":"297c1e694fb6f361d8b3ff89d0fba52a79ec2be2f55fd05730d2bc159f8b1afa829106c739828ab78bbc8a2015c6eadbddf32d4569235adcb48862026cb11285","ssdeep":"384:gIE6FzzRbig2RJBDSUxT9nPNNyVu7p4kbV/WwfPoA:gEp9bL2vpSMnuShbVnPoA","tlshash":"805219d93bc2706e87c72876d47f2207f1b569426c4cc890d44ad8d53cbdea9827bd8a","size":13881,"data":"","first_seen":"2026-09-14T14:10:05.023061Z","last_seen":"2026-09-16T08:23:36.261172Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"login.lhotsepension.com/p/wIPJNIbGcjRqRFrzfTQo8Hxf-yY5D8OM_6SH--bZ_VKgJdNWxx3Kr9t4B394j1I_kQ-OcJY4atGAn-mRQeDogPPdz39awr5MsLDnYPbgRnHRBo0moEF50-86wVZtV8ix4mxuBeuj1TZZALXSiDL0Yu7QyyGPtjcm90weiH8EujrdygIVR93Ym724FsaO5d6kr4dDM9qV8HZxmy7rAwYz84Zfa0FRXcQyafs7XaTKvZW6a2oETliI9l3Rl38hIjZ4DAFhXvh59uskRfa0GVv07AddmACaALqCtD9cN_2LCV31PoRXUU1Z50awjBdcDR3U0MREAwcguBpni717QUsUNPngwfjWtu64Rnuc1iKsXrc6L2yuEzxZDYmTx9OsX3ZLsztDtKNGZ6l6T_c_GiInu3g8swqaa8bz5z3JqQPElGWzG42D2N1YWo9A3x8fBF7kZRvDWtZypneulnKu_0ErVMJ0tyAwwgWGbDoCO1afNZRxVh-41vFtTlsUKHZYE5Qo6JCQzmv4OAak6Dq4uvKmjYslH3bZFsYyLGF1QJxI9aMjxEl3MF75ZvaOaGXR3zmDWgXINQDvBgZghTddN-8lvy04mMEeKUH_f_59s1R2onQvn_9QkvHp7SNS5dzlLoD5bd4mYRUUmpXbnJK3dv6fj8zFZ5MjV8i4xtbyCUfzFTDSPQqZf4R3Ou5CgUFpTRF4MoROA7Kc8SvmC4p_KKuOOKLiaxtuVtoO93ZKTUqOKsibs5bS4fW7es-xD1hENiEzHWLslIADqWFgIb_dT5N-gZMHbfjMIxe7WpTQwcnOpxqDPdd3_474atfkuKdPAioncXUduHiPIwotXcMLZSrDucGMfuh7CcHsDImkQAHSYvy9gUc2QQCd7MXtWGIq1QeoJ3SNkvLvaEipNF5A24FQY-INK3oSHG5DRIbVdnZFkU2hS0to157_70qfVpDQUeNoHSoa5LT44fXrcbA1Z8RMAZjjbONoIX2HJqER-DqvWs7_E8YW8zGqPjXNoVT83alv3D2kE6hS7a-V5-lXPIBT24fK_YpHmXSEkMzkgB2rHOnXSNcbXTWb7CM_qH3iMmqVqyxdSefwTNXWnERjQDBrupqyjaDYv7kq7xF7numdhoEO2DdLZAGhMnhiTshvKEHBaDMH07PsycqYWfb0CSofupVGQtZXURWChYj6m_-wUVDyMBAhtbNLyrZ1pAoR6o0xJr74CMkal-3vziG-IDKKIl8-0xOwwQfnz_1VkUjG4jv5cVNrjS10WkFCfP09mo0ZLPpDkUl88GUkwoI3KRTW6JMBwKDnvJXs2U1w_EDdlIhdhcwpe65-r3qTpStJWA","fqdn":"login.lhotsepension.com","domain":"lhotsepension.com","tld":"com"},"ip":{"addr":"85.11.167.134","port":443,"asn":6830,"as":"Liberty Global B.V.","country":"Bulgaria","country_code":"BG"},"introduction_type":"scriptElement","is_inline":true,"md5":"937c2760b579d5991ae1e105d49dbfc4","sha1":"6d553eac4386ae167467bb3b3259078b20f1a4f1","sha256":"aa3a5ee839199e6f1ed3b5ffc51a3bcc3955b63fb694d35ff35997b6e2e53bd0","sha512":"924c36166701bb28f19d2b537b0653d3f868e91176ff8deb3f8c9462fabc5bac39789e1c2122fcf6b8f035d4709c12cdfe314e41f289dcd4c770b161549910c1","ssdeep":"","tlshash":"162112697f0de97b28d3a131c76ff2060ab3115b6123cc211c17dca94abdec69453d58","size":1434,"data":"","first_seen":"2026-09-14T14:10:05.026098Z","last_seen":"2026-09-16T08:23:36.262107Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"login.lhotsepension.com/p/wIPJNIbGcjRqRFrzfTQo8Hxf-yY5D8OM_6SH--bZ_VKgJdNWxx3Kr9t4B394j1I_kQ-OcJY4atGAn-mRQeDogPPdz39awr5MsLDnYPbgRnHRBo0moEF50-86wVZtV8ix4mxuBeuj1TZZALXSiDL0Yu7QyyGPtjcm90weiH8EujrdygIVR93Ym724FsaO5d6kr4dDM9qV8HZxmy7rAwYz84Zfa0FRXcQyafs7XaTKvZW6a2oETliI9l3Rl38hIjZ4DAFhXvh59uskRfa0GVv07AddmACaALqCtD9cN_2LCV31PoRXUU1Z50awjBdcDR3U0MREAwcguBpni717QUsUNPngwfjWtu64Rnuc1iKsXrc6L2yuEzxZDYmTx9OsX3ZLsztDtKNGZ6l6T_c_GiInu3g8swqaa8bz5z3JqQPElGWzG42D2N1YWo9A3x8fBF7kZRvDWtZypneulnKu_0ErVMJ0tyAwwgWGbDoCO1afNZRxVh-41vFtTlsUKHZYE5Qo6JCQzmv4OAak6Dq4uvKmjYslH3bZFsYyLGF1QJxI9aMjxEl3MF75ZvaOaGXR3zmDWgXINQDvBgZghTddN-8lvy04mMEeKUH_f_59s1R2onQvn_9QkvHp7SNS5dzlLoD5bd4mYRUUmpXbnJK3dv6fj8zFZ5MjV8i4xtbyCUfzFTDSPQqZf4R3Ou5CgUFpTRF4MoROA7Kc8SvmC4p_KKuOOKLiaxtuVtoO93ZKTUqOKsibs5bS4fW7es-xD1hENiEzHWLslIADqWFgIb_dT5N-gZMHbfjMIxe7WpTQwcnOpxqDPdd3_474atfkuKdPAioncXUduHiPIwotXcMLZSrDucGMfuh7CcHsDImkQAHSYvy9gUc2QQCd7MXtWGIq1QeoJ3SNkvLvaEipNF5A24FQY-INK3oSHG5DRIbVdnZFkU2hS0to157_70qfVpDQUeNoHSoa5LT44fXrcbA1Z8RMAZjjbONoIX2HJqER-DqvWs7_E8YW8zGqPjXNoVT83alv3D2kE6hS7a-V5-lXPIBT24fK_YpHmXSEkMzkgB2rHOnXSNcbXTWb7CM_qH3iMmqVqyxdSefwTNXWnERjQDBrupqyjaDYv7kq7xF7numdhoEO2DdLZAGhMnhiTshvKEHBaDMH07PsycqYWfb0CSofupVGQtZXURWChYj6m_-wUVDyMBAhtbNLyrZ1pAoR6o0xJr74CMkal-3vziG-IDKKIl8-0xOwwQfnz_1VkUjG4jv5cVNrjS10WkFCfP09mo0ZLPpDkUl88GUkwoI3KRTW6JMBwKDnvJXs2U1w_EDdlIhdhcwpe65-r3qTpStJWA","fqdn":"login.lhotsepension.com","domain":"lhotsepension.com","tld":"com"},"ip":{"addr":"85.11.167.134","port":443,"asn":6830,"as":"Liberty Global B.V.","country":"Bulgaria","country_code":"BG"},"introduction_type":"scriptElement","is_inline":true,"md5":"55a8745e96e3406bb778bb024513ba74","sha1":"7115ed0fd572595d60c3624b8be9884b0c5c5304","sha256":"553e978d68f44c48e7c0edfd66d68c68168ba0175b1338dfd52b1f7cab7aaf2e","sha512":"7d2d3d1db539015630dee74d379ed8143704984fa6bb14b9dca7f5b07a9f990d011e8c0db1fafd9aebb4925681aa9caa7dcaa0038216f30971ccfd527b820ed1","ssdeep":"","tlshash":"60700002000a032200028000a0a288a00a00020002c000a220082002a0080083ea0a08","size":21,"data":"","first_seen":"2026-06-07T11:32:52.789042Z","last_seen":"2026-09-16T08:23:36.263152Z","times_seen":434,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"login.lhotsepension.com/p/wIPJNIbGcjRqRFrzfTQo8Hxf-yY5D8OM_6SH--bZ_VKgJdNWxx3Kr9t4B394j1I_kQ-OcJY4atGAn-mRQeDogPPdz39awr5MsLDnYPbgRnHRBo0moEF50-86wVZtV8ix4mxuBeuj1TZZALXSiDL0Yu7QyyGPtjcm90weiH8EujrdygIVR93Ym724FsaO5d6kr4dDM9qV8HZxmy7rAwYz84Zfa0FRXcQyafs7XaTKvZW6a2oETliI9l3Rl38hIjZ4DAFhXvh59uskRfa0GVv07AddmACaALqCtD9cN_2LCV31PoRXUU1Z50awjBdcDR3U0MREAwcguBpni717QUsUNPngwfjWtu64Rnuc1iKsXrc6L2yuEzxZDYmTx9OsX3ZLsztDtKNGZ6l6T_c_GiInu3g8swqaa8bz5z3JqQPElGWzG42D2N1YWo9A3x8fBF7kZRvDWtZypneulnKu_0ErVMJ0tyAwwgWGbDoCO1afNZRxVh-41vFtTlsUKHZYE5Qo6JCQzmv4OAak6Dq4uvKmjYslH3bZFsYyLGF1QJxI9aMjxEl3MF75ZvaOaGXR3zmDWgXINQDvBgZghTddN-8lvy04mMEeKUH_f_59s1R2onQvn_9QkvHp7SNS5dzlLoD5bd4mYRUUmpXbnJK3dv6fj8zFZ5MjV8i4xtbyCUfzFTDSPQqZf4R3Ou5CgUFpTRF4MoROA7Kc8SvmC4p_KKuOOKLiaxtuVtoO93ZKTUqOKsibs5bS4fW7es-xD1hENiEzHWLslIADqWFgIb_dT5N-gZMHbfjMIxe7WpTQwcnOpxqDPdd3_474atfkuKdPAioncXUduHiPIwotXcMLZSrDucGMfuh7CcHsDImkQAHSYvy9gUc2QQCd7MXtWGIq1QeoJ3SNkvLvaEipNF5A24FQY-INK3oSHG5DRIbVdnZFkU2hS0to157_70qfVpDQUeNoHSoa5LT44fXrcbA1Z8RMAZjjbONoIX2HJqER-DqvWs7_E8YW8zGqPjXNoVT83alv3D2kE6hS7a-V5-lXPIBT24fK_YpHmXSEkMzkgB2rHOnXSNcbXTWb7CM_qH3iMmqVqyxdSefwTNXWnERjQDBrupqyjaDYv7kq7xF7numdhoEO2DdLZAGhMnhiTshvKEHBaDMH07PsycqYWfb0CSofupVGQtZXURWChYj6m_-wUVDyMBAhtbNLyrZ1pAoR6o0xJr74CMkal-3vziG-IDKKIl8-0xOwwQfnz_1VkUjG4jv5cVNrjS10WkFCfP09mo0ZLPpDkUl88GUkwoI3KRTW6JMBwKDnvJXs2U1w_EDdlIhdhcwpe65-r3qTpStJWA","fqdn":"login.lhotsepension.com","domain":"lhotsepension.com","tld":"com"},"ip":{"addr":"85.11.167.134","port":443,"asn":6830,"as":"Liberty Global B.V.","country":"Bulgaria","country_code":"BG"},"introduction_type":"scriptElement","is_inline":true,"md5":"b6bcdecc3d0e8529580f4fc15a43eca6","sha1":"fbc11695a63e73213519f81cf149f8a2f9025bda","sha256":"11e351c356b3876d723636cbb1b498ec0768ca41c94eeb39109f3ffc1c5db7e5","sha512":"0a6cfb01cd362d2bcc6f57dfda45d60962a43595a6176eda8cf1bad21dd7d04ad71ec46771d4d7e1f63670c51495cb8543ab6b8161df161fa06d30df74b082ac","ssdeep":"","tlshash":"f941f0f61216543a01f22cb674370e0d63f34145be46daa127db622c5f6db63c3159bc","size":1883,"data":"","first_seen":"2026-08-26T09:21:56.873765Z","last_seen":"2026-09-16T08:23:36.264197Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"login.lhotsepension.com/p/wIPJNIbGcjRqRFrzfTQo8Hxf-yY5D8OM_6SH--bZ_VKgJdNWxx3Kr9t4B394j1I_kQ-OcJY4atGAn-mRQeDogPPdz39awr5MsLDnYPbgRnHRBo0moEF50-86wVZtV8ix4mxuBeuj1TZZALXSiDL0Yu7QyyGPtjcm90weiH8EujrdygIVR93Ym724FsaO5d6kr4dDM9qV8HZxmy7rAwYz84Zfa0FRXcQyafs7XaTKvZW6a2oETliI9l3Rl38hIjZ4DAFhXvh59uskRfa0GVv07AddmACaALqCtD9cN_2LCV31PoRXUU1Z50awjBdcDR3U0MREAwcguBpni717QUsUNPngwfjWtu64Rnuc1iKsXrc6L2yuEzxZDYmTx9OsX3ZLsztDtKNGZ6l6T_c_GiInu3g8swqaa8bz5z3JqQPElGWzG42D2N1YWo9A3x8fBF7kZRvDWtZypneulnKu_0ErVMJ0tyAwwgWGbDoCO1afNZRxVh-41vFtTlsUKHZYE5Qo6JCQzmv4OAak6Dq4uvKmjYslH3bZFsYyLGF1QJxI9aMjxEl3MF75ZvaOaGXR3zmDWgXINQDvBgZghTddN-8lvy04mMEeKUH_f_59s1R2onQvn_9QkvHp7SNS5dzlLoD5bd4mYRUUmpXbnJK3dv6fj8zFZ5MjV8i4xtbyCUfzFTDSPQqZf4R3Ou5CgUFpTRF4MoROA7Kc8SvmC4p_KKuOOKLiaxtuVtoO93ZKTUqOKsibs5bS4fW7es-xD1hENiEzHWLslIADqWFgIb_dT5N-gZMHbfjMIxe7WpTQwcnOpxqDPdd3_474atfkuKdPAioncXUduHiPIwotXcMLZSrDucGMfuh7CcHsDImkQAHSYvy9gUc2QQCd7MXtWGIq1QeoJ3SNkvLvaEipNF5A24FQY-INK3oSHG5DRIbVdnZFkU2hS0to157_70qfVpDQUeNoHSoa5LT44fXrcbA1Z8RMAZjjbONoIX2HJqER-DqvWs7_E8YW8zGqPjXNoVT83alv3D2kE6hS7a-V5-lXPIBT24fK_YpHmXSEkMzkgB2rHOnXSNcbXTWb7CM_qH3iMmqVqyxdSefwTNXWnERjQDBrupqyjaDYv7kq7xF7numdhoEO2DdLZAGhMnhiTshvKEHBaDMH07PsycqYWfb0CSofupVGQtZXURWChYj6m_-wUVDyMBAhtbNLyrZ1pAoR6o0xJr74CMkal-3vziG-IDKKIl8-0xOwwQfnz_1VkUjG4jv5cVNrjS10WkFCfP09mo0ZLPpDkUl88GUkwoI3KRTW6JMBwKDnvJXs2U1w_EDdlIhdhcwpe65-r3qTpStJWA","fqdn":"login.lhotsepension.com","domain":"lhotsepension.com","tld":"com"},"ip":{"addr":"85.11.167.134","port":443,"asn":6830,"as":"Liberty Global B.V.","country":"Bulgaria","country_code":"BG"},"introduction_type":"scriptElement","is_inline":true,"md5":"cbaa730d2f8128f25726951cbafbc139","sha1":"393f6fa5013cbc588598dab3c37aa4fc52d2030d","sha256":"50998c0a0366a8331c14bd4943ab68897ebbbd4df8223f936aefcb38f0e86f57","sha512":"3841b96c40c4cceabf1a1b21cff4bd3f7d03bc63ba2cf607a5e09b26826db035ad1e2f7e60397870219fecb23b795b946ddb8e36f167ee226a15f5c44100ba56","ssdeep":"","tlshash":"e36124ba34b1d5b057af62bd27976e0076b08b4e95886044f89f0f1cfba014b0665fe3","size":3183,"data":"","first_seen":"2026-08-26T09:21:56.874588Z","last_seen":"2026-09-16T08:23:36.26539Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"login.lhotsepension.com/p/wIPJNIbGcjRqRFrzfTQo8Hxf-yY5D8OM_6SH--bZ_VKgJdNWxx3Kr9t4B394j1I_kQ-OcJY4atGAn-mRQeDogPPdz39awr5MsLDnYPbgRnHRBo0moEF50-86wVZtV8ix4mxuBeuj1TZZALXSiDL0Yu7QyyGPtjcm90weiH8EujrdygIVR93Ym724FsaO5d6kr4dDM9qV8HZxmy7rAwYz84Zfa0FRXcQyafs7XaTKvZW6a2oETliI9l3Rl38hIjZ4DAFhXvh59uskRfa0GVv07AddmACaALqCtD9cN_2LCV31PoRXUU1Z50awjBdcDR3U0MREAwcguBpni717QUsUNPngwfjWtu64Rnuc1iKsXrc6L2yuEzxZDYmTx9OsX3ZLsztDtKNGZ6l6T_c_GiInu3g8swqaa8bz5z3JqQPElGWzG42D2N1YWo9A3x8fBF7kZRvDWtZypneulnKu_0ErVMJ0tyAwwgWGbDoCO1afNZRxVh-41vFtTlsUKHZYE5Qo6JCQzmv4OAak6Dq4uvKmjYslH3bZFsYyLGF1QJxI9aMjxEl3MF75ZvaOaGXR3zmDWgXINQDvBgZghTddN-8lvy04mMEeKUH_f_59s1R2onQvn_9QkvHp7SNS5dzlLoD5bd4mYRUUmpXbnJK3dv6fj8zFZ5MjV8i4xtbyCUfzFTDSPQqZf4R3Ou5CgUFpTRF4MoROA7Kc8SvmC4p_KKuOOKLiaxtuVtoO93ZKTUqOKsibs5bS4fW7es-xD1hENiEzHWLslIADqWFgIb_dT5N-gZMHbfjMIxe7WpTQwcnOpxqDPdd3_474atfkuKdPAioncXUduHiPIwotXcMLZSrDucGMfuh7CcHsDImkQAHSYvy9gUc2QQCd7MXtWGIq1QeoJ3SNkvLvaEipNF5A24FQY-INK3oSHG5DRIbVdnZFkU2hS0to157_70qfVpDQUeNoHSoa5LT44fXrcbA1Z8RMAZjjbONoIX2HJqER-DqvWs7_E8YW8zGqPjXNoVT83alv3D2kE6hS7a-V5-lXPIBT24fK_YpHmXSEkMzkgB2rHOnXSNcbXTWb7CM_qH3iMmqVqyxdSefwTNXWnERjQDBrupqyjaDYv7kq7xF7numdhoEO2DdLZAGhMnhiTshvKEHBaDMH07PsycqYWfb0CSofupVGQtZXURWChYj6m_-wUVDyMBAhtbNLyrZ1pAoR6o0xJr74CMkal-3vziG-IDKKIl8-0xOwwQfnz_1VkUjG4jv5cVNrjS10WkFCfP09mo0ZLPpDkUl88GUkwoI3KRTW6JMBwKDnvJXs2U1w_EDdlIhdhcwpe65-r3qTpStJWA","fqdn":"login.lhotsepension.com","domain":"lhotsepension.com","tld":"com"},"ip":{"addr":"85.11.167.134","port":443,"asn":6830,"as":"Liberty Global B.V.","country":"Bulgaria","country_code":"BG"},"introduction_type":"scriptElement","is_inline":true,"md5":"032fd65ba0b893340693fb19addc9409","sha1":"49133a30ef59a2bbe524eb9760629e7500a23544","sha256":"e19cd242d8ad767431f2da62b206ec6bd5f04dfda8b7df3f3272e6328338d566","sha512":"b9e1667596ae887a21ef02eaef0a71612d680312944b5daa3e22a29521d4d0ea1a2cd231c9ec5858636b3f94fce9f91ea5b1b36a372f45c39d0e1673fa86cbfd","ssdeep":"","tlshash":"cde06862542c316453ea05e50ddf220059335adcb85c80a1a9ed6997570afcb911bdd8","size":369,"data":"","first_seen":"2026-09-14T14:10:05.034214Z","last_seen":"2026-09-16T08:23:36.266352Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wlp66.vercel.app/_next/static/chunks/fd9d1056-62aaf4b921c84028.js","fqdn":"wlp66.vercel.app","domain":"wlp66.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.3","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"89ef5cbeacece4bcb75bbefbaec33dc9","sha1":"afd673d3e1289070f4e66e592a58223d764c573e","sha256":"71ed963804cbd4b773b16a2e290fb534288140999cca4833a8ff300a9d72a9b1","sha512":"587470cd2713ae2dd6e4ef44a3c9ad5442872f298b79b02a29ade777c9a879ff4c159116441d6297f13d3eec996762f0e36edf6933ae8b0a37502e1501c3065e","ssdeep":"1536:IVjExazug79h2U4kcNxakmBjt4oGZlibTR5ikxYhlUuRNka2wblHiN+wL8z9Gguk:Gzug758kkEiXjOAprX2wd5WjguGOo","tlshash":"5ff3f8e83995f6666eb30277009f1803737c262b280d4d60a211fd9eb5b845eb17bfd9","size":172831,"data":"","first_seen":"2024-05-03T14:53:15Z","last_seen":"2026-09-16T08:23:36.232021Z","times_seen":3611,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wlp66.vercel.app/_next/static/chunks/323-4816ed95bc84aafa.js","fqdn":"wlp66.vercel.app","domain":"wlp66.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.3","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"2a8e925bc9cc8da49ab44b429b6b3ce1","sha1":"f7365b46fc31391ab0134be12c69049163a6382f","sha256":"fe5e6263c52d3fffedfeddb76cbddfda6b6f99ed729660d62f0a6c97ca98e9aa","sha512":"543dc9902f3d6c920373ded48c2fbc1a97843a0bfc21a917acc18892de7adc2ae8d3d054ee0eb797ec7cf519b56cf1cd449ca8f67c28e5c2a7926f19a5f4e0d6","ssdeep":"768:ZmPGGVBkhcnnhanoYO0DfAnTTGgHl6ANBLJeczepXbgw5QoUhFhC:EPGMBkhcnn8oYO0DfAnTyg6czep/QZhy","tlshash":"4d13d87d7be2753307f482aa253f5487e3299698080e426cb474c5da6e3954a81fefb0","size":44911,"data":"","first_seen":"2025-07-03T11:57:40.908401Z","last_seen":"2026-09-16T08:23:36.238192Z","times_seen":16,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wlp66.vercel.app/_next/static/chunks/main-app-f73cdb3bce740b12.js","fqdn":"wlp66.vercel.app","domain":"wlp66.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.3","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"8eedc9e8ab2a40373eb62a03672a39d1","sha1":"7166b229fb4d45e4c29febef9dd84c25fdc9425d","sha256":"e70d963e7f59350b16dcba9796ad8aec2001738b6756509c4ea77e2bfb0921f0","sha512":"628e976f569bf76db31e604a43c51c426cb5ef80e32eff0bc7a820df01e2a88735a3712b794be77b1054eff3c5914d474d2689a16fcfdc4df1d2410dea247363","ssdeep":"","tlshash":"99f0829d274db12f2923aa20fdd35c2e285e417428675d501615def12c376a883f1c38","size":462,"data":"","first_seen":"2024-05-03T14:53:15Z","last_seen":"2026-09-16T08:23:36.246792Z","times_seen":1186,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wlp66.vercel.app/_next/static/chunks/457b8330-0db14d6fcdb25a3f.js","fqdn":"wlp66.vercel.app","domain":"wlp66.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.3","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"3c6ee1e0cdfbf61e844c643e9c24e0d3","sha1":"271ea3417991e8685c5edfd9449ef415f5e3e75f","sha256":"6a047f74b23acd61642d37b9883a61d95344dccf6f30f1bb8b065df5b552cf39","sha512":"3f62442b315e2bf8a534523784f92fa5e4161386dec0f812af0b473d29f4cf658136ab64bb788fe83a8d2c55633b80e7eee4a3c0cdf452f5a7752d8d38e09981","ssdeep":"3072:ZeiWTlQW61hPkFrbNkhWyOZe6oJzJcapJIJTJXJgJBJBJrJVJ4JCJNJSDUMDq8FE:Zei6QW61hPkNNkrOZe6o9hKdhGz/x7a+","tlshash":"fbe3eb693741762313f982da9927c087f32995a4290e053cb9bcc9d6393568a61ffff0","size":153633,"data":"","first_seen":"2025-07-03T11:57:40.906782Z","last_seen":"2026-09-16T08:23:36.24199Z","times_seen":21,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wlp66.vercel.app/_next/static/chunks/795-cb94f972b68d1640.js","fqdn":"wlp66.vercel.app","domain":"wlp66.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.3","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"a64ff9dac89864ab46b8ca5f73ce5709","sha1":"7a9a28350d6df1eeec931bb374064524a3c57830","sha256":"7bc736dacd1d8a9a84cc4e0eec1a0ff626a1fc0e6293ee724a6339cfc03d7270","sha512":"1e7133d151ec1b0bedceca52b012e099832d25cf408ff46a93fdcef8143cf1a1af9f8055b04a5caecc75ff319c8033896d66b64edf5e1c3bd9df38d5537d3f68","ssdeep":"192:ZL9jVdS2G7l+cXJ0OEN2BjCwKEQxN7nD4avUrYfcu2njPpRFVY0C4BjVGKpWHvCq:ZL9Bw1MqhuVfD20fGnjr64FVb+xpYkEI","tlshash":"e67219b236d0fce6138b90d5843f000ef2652d766539b14463e6c8d4e5f0599a1b2fbb","size":16505,"data":"","first_seen":"2025-07-03T11:57:40.90988Z","last_seen":"2026-09-16T08:23:36.238952Z","times_seen":14,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wlp66.vercel.app/_next/static/chunks/webpack-0b0cf92d49d78d87.js","fqdn":"wlp66.vercel.app","domain":"wlp66.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.3","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"1169809b29111925091deac5b08b14e9","sha1":"ac230727bbb684743fbede4ad70b7bb4e05ab0bb","sha256":"4120e03a194d7fcc0cab714a1425eb7057df2b94c8f4eb4408a614bb18849b43","sha512":"6d5d4e9eb1857069f9aa11e97f51b37cbe44e95c1ee702f986fce5cee54bc1630d665e388b44c42abbd285172f199e72531e301e42ff838c8ca22773ae54be84","ssdeep":"","tlshash":"307143de32a1f87a1793a4a2443f515ef23b18b2181ed4a0db29d4f5fc744598523fb8","size":3780,"data":"","first_seen":"2024-08-29T18:15:14.637127Z","last_seen":"2026-09-16T08:23:36.23024Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wlp66.vercel.app/","fqdn":"wlp66.vercel.app","domain":"wlp66.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.3","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"b40cdc025a72d0b516bd11d9ef0a1776","sha1":"9cd34b30af473b8071638d82dcacef0373194aaf","sha256":"43ef2d3ec8d5b620ec8c5fc2bfc14c3a9836620f75a0a14a0c025ab753cf6f68","sha512":"ffad498a0fda3194476aee567df0b821e3c4886662a0dc72a53e8289c98fc3187b991df3da95f0bc2fe1b238d3478ccfac9d39a23fa2e7928ff3be8461110af9","ssdeep":"","tlshash":"3aa001f190d29c69e43741ab687511161bac490d0109014123a198e91162a098f48e8e","size":72,"data":"","first_seen":"2023-10-09T10:35:22Z","last_seen":"2026-09-16T09:58:05.319138Z","times_seen":105977,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wlp66.vercel.app/","fqdn":"wlp66.vercel.app","domain":"wlp66.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.3","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"1ccd9b789ac77f6d788a16330b672a72","sha1":"f51d5044ff069de74daa09bc3ad822d6db56a64e","sha256":"701b35dcbeac99e3bb3d660364ea4d6d0c0ad59c8284f35f0ed1ea30833bf4c4","sha512":"862edd8560df43e8b19c945353dbc7408c5644c3461ec3e6d4e2d7037f32c12bad63ea8158c39b6e4de38b3da9889c4557d1b8d3778ce1871c2d4df445bee1ef","ssdeep":"","tlshash":"f9a0121cd004dd554430004600681d11d0ccd80d0291018813f4c5894081c7c0648dc8","size":86,"data":"","first_seen":"2025-07-03T11:57:40.920526Z","last_seen":"2026-09-16T08:23:36.269368Z","times_seen":14,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wlp66.vercel.app/","fqdn":"wlp66.vercel.app","domain":"wlp66.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.3","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"e2aed57d12ca91d8aad1f0773b854eed","sha1":"4b053e9dce1bce915205df2e7403dec6dc776c9c","sha256":"fc57d432fb63b02e8d331f03d8285f759ba0d4cb3b0f2497e28d9944a2c56797","sha512":"084169ff920f485885e24800811f67a8db1b952b4fd421b5706b2cad551926433deecf69ee8816e5b3a4ed8d93c06438ebc3340669bfdb87ed9bc7a8fe930936","ssdeep":"","tlshash":"fd41207db044ed4becaa7e4a02bf6d3650cc887b07f5ca7c969cce05090247d2795d80","size":2351,"data":"","first_seen":"2026-09-15T14:13:45.975483Z","last_seen":"2026-09-16T08:23:36.270104Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wlp66.vercel.app/","fqdn":"wlp66.vercel.app","domain":"wlp66.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.3","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"5264941b87c95bd5da7cf0c0065c5e7e","sha1":"bc6e7e98d2ff4b2ced2ffbfc502299109468f44c","sha256":"0e8a9ee9a4ab5914f6fdaa443869370218b35b6e9b8f36d97741ed8e9f929b86","sha512":"0e52cfa8fa648d64a56a5a6d7d69d6edd386e35e8f16bc80a1487cfc7a0b32f9ef673be0cf79e70f8bbffc23ff85eece311d20a8da2c14df1c847c9ff80a9a6a","ssdeep":"","tlshash":"93f0e93e2109f98fd9547459117c7e3728cd101e17d59c6557d04a0603c21beb752a89","size":473,"data":"","first_seen":"2025-07-03T11:57:40.923348Z","last_seen":"2026-09-16T08:23:36.270786Z","times_seen":14,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wlp66.vercel.app/","fqdn":"wlp66.vercel.app","domain":"wlp66.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.3","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"61f4a7f91207d4503c3ade90eb9f1d01","sha1":"15757225b7b02a9b2ef9f1fe22eae06cd9189cff","sha256":"cd83166d9ee45bf4e21db14afa1d61fb9187413dfa6077ea31b3abff273a2b17","sha512":"3117f565bb1c27a01974c1fd9acf8c8cf693f06a1053f63c144ce29e1fda937994a2e61a8a42120810c0d3266cc6a70db8347f9429afed29d6d9a713ddf3245e","ssdeep":"","tlshash":"a5e026a2dc01cd19c79b2f221c7f5c7924ddc6694345c64a98e0c9294992a3a49e2e95","size":349,"data":"","first_seen":"2025-04-15T16:09:16.350127Z","last_seen":"2026-09-16T08:23:36.27282Z","times_seen":20,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wlp66.vercel.app/_next/static/chunks/8e1d74a4-162a15093ecd1e13.js","fqdn":"wlp66.vercel.app","domain":"wlp66.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.3","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"6744fac6cc99adee72a477779f6c4206","sha1":"5dd37a1deb16d9209c13203d67df75079198fb84","sha256":"4148cd2bb8c5d005c007412a4057d66dd22586c6069e1eacd502f0046b215934","sha512":"34e50bccaf2f6eb0f0d9881519010e8a593f42e5364d7f3c7286d6f3f4dc8daa9937c4a9f742d35b99ee5b16ef7c8e4936c0c700b3233433f5d294aa80ac8b4e","ssdeep":"","tlshash":"9201b84a33c232742b451f70c72278a82d97108f64ea956c9ef180a0b2321d8425adcd","size":731,"data":"","first_seen":"2025-07-03T11:57:40.889727Z","last_seen":"2026-09-16T08:23:36.237456Z","times_seen":14,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wlp66.vercel.app/_next/static/chunks/app/page-6b3f1209495d3463.js","fqdn":"wlp66.vercel.app","domain":"wlp66.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.3","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"9f03e3ab174e3cd0abf9b53116d4d8b5","sha1":"f5059bee1e09cdc5426181affe2e80c7f179b235","sha256":"7d53cd0010eee81d97f0e9698f614a3a8f852dc50a7445aebb04926fe1b2fc83","sha512":"d56f9d1ccbcf15d866e23921cbe7190017c29ea0a933bb96e44fe1b43e5a76483b1420bba8615e0f16fa2942147a93f64734d71f396c87f5ddc1c6492af3fb37","ssdeep":"48:fbgtlkktGZqPBn0RBnKBv7VKBoy66gK0ATyeADNHaifa5PCmAvMzLfp/erSf3rP/:QoBnMLJQ2aif06kzLf57PH6ipfNvqv6","tlshash":"cec13015b092baedbd3608fc64bf902c712e6b88994c48b1f5b8b86518944957b23bdc","size":5764,"data":"","first_seen":"2026-09-15T14:13:45.927554Z","last_seen":"2026-09-16T08:23:36.251851Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wlp66.vercel.app/_next/static/chunks/53c13509-51a37691af359660.js","fqdn":"wlp66.vercel.app","domain":"wlp66.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.3","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"b32073f4695d9100e6dacb56131edf06","sha1":"6f9624f18de4ca9771cea0fd96abbb8cbf7bcaac","sha256":"1c4b363c1cdb976c1bda3cc05e01a3e5fdba2d91dc651162704d2d5543de9d50","sha512":"d84668cf759e434841cb1dd5ec9884a25498ef93aa728fb5830607e2b99d9cc687f1a3cf8efda3c0c3406652476f9f758d14496d9fa2246c86f04612d7e69670","ssdeep":"","tlshash":"7441224ca1b5b2bc5eabc6b1953334322a4d35ce309848bee6f8c4a07253158a576c8f","size":2002,"data":"","first_seen":"2025-04-15T16:09:16.328501Z","last_seen":"2026-09-16T08:23:36.250015Z","times_seen":19,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wlp66.vercel.app/_next/static/chunks/23-f2c2ec5da154e115.js","fqdn":"wlp66.vercel.app","domain":"wlp66.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.3","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"4a2d7c3d59d9298d8e3dfdd6134a4eca","sha1":"e77d21b82dd7f24fe0e7bcfef2e0b9818b2fed65","sha256":"839d821426383cc0f978a6a20074e6f5524d23ad66f19bdb883f6874bca1cfce","sha512":"dd050b2fd17b99fbfb3575a3740e877ae4db5869a3744a84e4858b2c0f8876116cc554aec7a7669d3001e9a18b18a5a479b0d167070b5a96fe316486fd21d6eb","ssdeep":"1536:+3w31mN1OhIUEfYsdlaTy8mmN1zq5EfRv7:pcJ941G50z","tlshash":"7fc3d8b671d0f8e207a744e5843b400af3791c3b146f70a0a7a5cdd9b5a44eea1a3f5e","size":123350,"data":"","first_seen":"2024-07-25T23:19:55Z","last_seen":"2026-09-16T08:23:36.233486Z","times_seen":576,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"login.lhotsepension.com/p/2SXU7ELjhO1F-9min_5cvvX4PfYR68Aj12xvMw","fqdn":"login.lhotsepension.com","domain":"lhotsepension.com","tld":"com"},"ip":{"addr":"85.11.167.134","port":443,"asn":6830,"as":"Liberty Global B.V.","country":"Bulgaria","country_code":"BG"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-16T08:23:10.518Z","timestamp":1789546990518,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lhotsepension.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 31 Aug 2026 16:24:25 GMT","end":"Sun, 29 Nov 2026 16:24:24 GMT"},"fingerprint":{"sha1":"79:96:3C:88:56:8A:C3:21:55:1D:9F:6A:54:5B:04:AA:A1:A7:4A:CE","sha256":"EB:65:72:C0:DD:6B:69:32:AB:3E:65:8B:28:EF:81:49:00:44:E7:75:B4:D3:73:D6:F2:CA:B0:39:BB:DB:6B:C1"}}},"request":{"raw":"GET /p/2SXU7ELjhO1F-9min_5cvvX4PfYR68Aj12xvMw HTTP/1.1\r\nHost: login.lhotsepension.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://kl4rdcnxwm.lhotsepension.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: _vfy=000f7082ce8b47bf; dca2-c058=9f9bb9178892b9189a7a1459021ad5d6288b3f8d85d2ba758685f148991a6e27\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-site\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 302 Found\r\nCache-Control: no-store, no-cache\r\nConnection: close\r\nContent-Type: text/html; charset=utf-8\r\nDate: Wed, 16 Sep 2026 08:23:10 GMT\r\nExpires: -1\r\nLocation: https://www.lhotsepension.com/p/K5m9gyggs964kyu4YA6CkU2HqodvklqXaC-waK9zdwRy_w\r\nP3p: CP=\"DSP CUR OTPi IND OTRi ONL FIN\"\r\nPragma: no-cache\r\nReferrer-Policy: strict-origin-when-cross-origin\r\nServer: Apache/2.4.48\r\nSet-Cookie: fpc=AvF-TwfZythHhgLMKfuuBOo; Path=/; Expires=Fri, 16 Oct 2026 08:23:10 GMT; HttpOnly; Secure; SameSite=None\nesctx=PBgABBwEAAAA9VeaV3ywaSLp1O3c4_Et5RXZvU3RzQXJ0aWZhY3RzDQAAAAAAmWxY6VSGUKjbENZK8dxwOOebkSW0K1JChkWw1NXByoh8ADiX2cU4i3Yl4Uvt3rFzBPIyyuEuMMo-c6I34L4x4Faf9b9bR_2P4duGvsC9vyvWUVBmVaBJaA3LnB6rCNAO477e1AdCkzjinq9yfDUmU1nL8FrUX5R9u_cS_jexb_txgCqMWJhxRAw2tGajPSN7GqR5Xt_XuzSrJ-UssN95X07Hh3gyeBoe2YnOI2KkM3mWMdfWWLV4Thf44hgUe5jNzFDYtyvYaVxJeq4rhV4awp_9AwSZyvod2NKH16ry14c99zh47hzAxpzV4yHMYETfqqomwsOBsj_vGvylPbrQG7z1pnmcioIiS-No8iYAvbhY8dGmNhoTWMk90jyO9V3hhPbw8Tl2iHpDPDuph_7GO4cb5ox9I48AMXHO6pxz4zYU4eYCsEqDFLbsYtiqOfNpb1SGMWZ9wVNNIY1s8iSaklApFg4U8Bd4bHXktMXwc95EF9JD7r5sMjCyd6B5UcEXheBKaQHKEWBtpqnN9TymLASL7eA7ln_cP85ZxdxPMxwiEU0YeLZp5mVkZGIrlX9leIRbG_d1NDMhGpkOc-ra6WhWmEj8qvW_fXlLuRbPI016c3z10rdv2ZiB4YL2Iv2HeosU5TxYrNavHBii6ccfuVV6MDQPTHvs28nXG2nH-DfQ-RC_z9luG-yXDmEjhhJ-Se5PTU8N2-JwV5yZLuQwpqKcdILS0heZkk0JHQ0QYdUgAA; Path=/; Domain=login.lhotsepension.com; HttpOnly; Secure; SameSite=None\nx-ms-gateway-slice=estsfd; Path=/; HttpOnly; Secure; SameSite=None\nstsservicecookie=estsfd; Path=/; HttpOnly; Secure; SameSite=None\r\nTransfer-Encoding: chunked\r\nVary: Accept-Encoding\r\nX-Ms-Ests-Server: 2.1.25236.3 - SEC ProdSlices\r\nX-Ms-Request-Id: 7307518e-9ecf-49a4-8b49-35cb956f2800\r\nX-Ms-Srs: 1.P\r\n\r\n","headers":null,"cookies":[{"name":"fpc","value":"AvF-TwfZythHhgLMKfuuBOo","quoted":false,"path":"/","expires":"2026-10-16T08:23:10Z","raw_expires":"Fri, 16 Oct 2026 08:23:10 GMT","secure":true,"http_only":true,"same_site":"None","partitioned":false,"raw":"fpc=AvF-TwfZythHhgLMKfuuBOo; Path=/; Expires=Fri, 16 Oct 2026 08:23:10 GMT; HttpOnly; Secure; SameSite=None"},{"name":"esctx","value":"PBgABBwEAAAA9VeaV3ywaSLp1O3c4_Et5RXZvU3RzQXJ0aWZhY3RzDQAAAAAAmWxY6VSGUKjbENZK8dxwOOebkSW0K1JChkWw1NXByoh8ADiX2cU4i3Yl4Uvt3rFzBPIyyuEuMMo-c6I34L4x4Faf9b9bR_2P4duGvsC9vyvWUVBmVaBJaA3LnB6rCNAO477e1AdCkzjinq9yfDUmU1nL8FrUX5R9u_cS_jexb_txgCqMWJhxRAw2tGajPSN7GqR5Xt_XuzSrJ-UssN95X07Hh3gyeBoe2YnOI2KkM3mWMdfWWLV4Thf44hgUe5jNzFDYtyvYaVxJeq4rhV4awp_9AwSZyvod2NKH16ry14c99zh47hzAxpzV4yHMYETfqqomwsOBsj_vGvylPbrQG7z1pnmcioIiS-No8iYAvbhY8dGmNhoTWMk90jyO9V3hhPbw8Tl2iHpDPDuph_7GO4cb5ox9I48AMXHO6pxz4zYU4eYCsEqDFLbsYtiqOfNpb1SGMWZ9wVNNIY1s8iSaklApFg4U8Bd4bHXktMXwc95EF9JD7r5sMjCyd6B5UcEXheBKaQHKEWBtpqnN9TymLASL7eA7ln_cP85ZxdxPMxwiEU0YeLZp5mVkZGIrlX9leIRbG_d1NDMhGpkOc-ra6WhWmEj8qvW_fXlLuRbPI016c3z10rdv2ZiB4YL2Iv2HeosU5TxYrNavHBii6ccfuVV6MDQPTHvs28nXG2nH-DfQ-RC_z9luG-yXDmEjhhJ-Se5PTU8N2-JwV5yZLuQwpqKcdILS0heZkk0JHQ0QYdUgAA","quoted":false,"path":"/","domain":"login.lhotsepension.com","secure":true,"http_only":true,"same_site":"None","partitioned":false,"raw":"esctx=PBgABBwEAAAA9VeaV3ywaSLp1O3c4_Et5RXZvU3RzQXJ0aWZhY3RzDQAAAAAAmWxY6VSGUKjbENZK8dxwOOebkSW0K1JChkWw1NXByoh8ADiX2cU4i3Yl4Uvt3rFzBPIyyuEuMMo-c6I34L4x4Faf9b9bR_2P4duGvsC9vyvWUVBmVaBJaA3LnB6rCNAO477e1AdCkzjinq9yfDUmU1nL8FrUX5R9u_cS_jexb_txgCqMWJhxRAw2tGajPSN7GqR5Xt_XuzSrJ-UssN95X07Hh3gyeBoe2YnOI2KkM3mWMdfWWLV4Thf44hgUe5jNzFDYtyvYaVxJeq4rhV4awp_9AwSZyvod2NKH16ry14c99zh47hzAxpzV4yHMYETfqqomwsOBsj_vGvylPbrQG7z1pnmcioIiS-No8iYAvbhY8dGmNhoTWMk90jyO9V3hhPbw8Tl2iHpDPDuph_7GO4cb5ox9I48AMXHO6pxz4zYU4eYCsEqDFLbsYtiqOfNpb1SGMWZ9wVNNIY1s8iSaklApFg4U8Bd4bHXktMXwc95EF9JD7r5sMjCyd6B5UcEXheBKaQHKEWBtpqnN9TymLASL7eA7ln_cP85ZxdxPMxwiEU0YeLZp5mVkZGIrlX9leIRbG_d1NDMhGpkOc-ra6WhWmEj8qvW_fXlLuRbPI016c3z10rdv2ZiB4YL2Iv2HeosU5TxYrNavHBii6ccfuVV6MDQPTHvs28nXG2nH-DfQ-RC_z9luG-yXDmEjhhJ-Se5PTU8N2-JwV5yZLuQwpqKcdILS0heZkk0JHQ0QYdUgAA; Path=/; Domain=login.lhotsepension.com; HttpOnly; Secure; SameSite=None"},{"name":"x-ms-gateway-slice","value":"estsfd","quoted":false,"path":"/","secure":true,"http_only":true,"same_site":"None","partitioned":false,"raw":"x-ms-gateway-slice=estsfd; Path=/; HttpOnly; Secure; SameSite=None"},{"name":"stsservicecookie","value":"estsfd","quoted":false,"path":"/","secure":true,"http_only":true,"same_site":"None","partitioned":false,"raw":"stsservicecookie=estsfd; Path=/; HttpOnly; Secure; SameSite=None"}],"status_code":"302","status_text":"Found","fingerprints":[{"name":"Apache HTTP Server:2.4.48","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-16T09:51:46.278028Z","times_seen":18492779,"resource_available":true,"data":null}},"time_used":347,"timings":{"blocked":0,"dns":40,"connect":52,"send":0,"wait":148,"receive":52,"ssl":55},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Microsoft","verdict":"phishing","severity":"medium","comment":"Resource associated with Microsoft phishing","tags":["microsoft","phishing"],"meta":null},{"sensor_name":"urlquery","alert":"Phishing - Microsoft Outlook","verdict":"phishing","severity":"medium","comment":"","tags":["phishing","microsoft","outlook"],"meta":{"engine":"luna_v2","pattern_id":"microsoft.phishing_ms_suspiciousjs.1"}}]}},{"url":{"schema":"https","addr":"aadcdn.lhotsepension.com/shared/1.0/content/js/ConvergedLogin_PCore_gVhYQwpSW-2B6af-e8QqcQ2.js","fqdn":"aadcdn.lhotsepension.com","domain":"lhotsepension.com","tld":"com"},"ip":{"addr":"85.11.167.134","port":443,"asn":6830,"as":"Liberty Global B.V.","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://login.lhotsepension.com/p/wIPJNIbGcjRqRFrzfTQo8Hxf-yY5D8OM_6SH--bZ_VKgJdNWxx3Kr9t4B394j1I_kQ-OcJY4atGAn-mRQeDogPPdz39awr5MsLDnYPbgRnHRBo0moEF50-86wVZtV8ix4mxuBeuj1TZZALXSiDL0Yu7QyyGPtjcm90weiH8EujrdygIVR93Ym724FsaO5d6kr4dDM9qV8HZxmy7rAwYz84Zfa0FRXcQyafs7XaTKvZW6a2oETliI9l3Rl38hIjZ4DAFhXvh59uskRfa0GVv07AddmACaALqCtD9cN_2LCV31PoRXUU1Z50awjBdcDR3U0MREAwcguBpni717QUsUNPngwfjWtu64Rnuc1iKsXrc6L2yuEzxZDYmTx9OsX3ZLsztDtKNGZ6l6T_c_GiInu3g8swqaa8bz5z3JqQPElGWzG42D2N1YWo9A3x8fBF7kZRvDWtZypneulnKu_0ErVMJ0tyAwwgWGbDoCO1afNZRxVh-41vFtTlsUKHZYE5Qo6JCQzmv4OAak6Dq4uvKmjYslH3bZFsYyLGF1QJxI9aMjxEl3MF75ZvaOaGXR3zmDWgXINQDvBgZghTddN-8lvy04mMEeKUH_f_59s1R2onQvn_9QkvHp7SNS5dzlLoD5bd4mYRUUmpXbnJK3dv6fj8zFZ5MjV8i4xtbyCUfzFTDSPQqZf4R3Ou5CgUFpTRF4MoROA7Kc8SvmC4p_KKuOOKLiaxtuVtoO93ZKTUqOKsibs5bS4fW7es-xD1hENiEzHWLslIADqWFgIb_dT5N-gZMHbfjMIxe7WpTQwcnOpxqDPdd3_474atfkuKdPAioncXUduHiPIwotXcMLZSrDucGMfuh7CcHsDImkQAHSYvy9gUc2QQCd7MXtWGIq1QeoJ3SNkvLvaEipNF5A24FQY-INK3oSHG5DRIbVdnZFkU2hS0to157_70qfVpDQUeNoHSoa5LT44fXrcbA1Z8RMAZjjbONoIX2HJqER-DqvWs7_E8YW8zGqPjXNoVT83alv3D2kE6hS7a-V5-lXPIBT24fK_YpHmXSEkMzkgB2rHOnXSNcbXTWb7CM_qH3iMmqVqyxdSefwTNXWnERjQDBrupqyjaDYv7kq7xF7numdhoEO2DdLZAGhMnhiTshvKEHBaDMH07PsycqYWfb0CSofupVGQtZXURWChYj6m_-wUVDyMBAhtbNLyrZ1pAoR6o0xJr74CMkal-3vziG-IDKKIl8-0xOwwQfnz_1VkUjG4jv5cVNrjS10WkFCfP09mo0ZLPpDkUl88GUkwoI3KRTW6JMBwKDnvJXs2U1w_EDdlIhdhcwpe65-r3qTpStJWA","date":"2026-09-16T08:23:13.929Z","timestamp":1789546993929,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lhotsepension.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 31 Aug 2026 16:24:25 GMT","end":"Sun, 29 Nov 2026 16:24:24 GMT"},"fingerprint":{"sha1":"79:96:3C:88:56:8A:C3:21:55:1D:9F:6A:54:5B:04:AA:A1:A7:4A:CE","sha256":"EB:65:72:C0:DD:6B:69:32:AB:3E:65:8B:28:EF:81:49:00:44:E7:75:B4:D3:73:D6:F2:CA:B0:39:BB:DB:6B:C1"}}},"request":{"raw":"GET /shared/1.0/content/js/ConvergedLogin_PCore_gVhYQwpSW-2B6af-e8QqcQ2.js HTTP/1.1\r\nHost: aadcdn.lhotsepension.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://login.lhotsepension.com/\r\nOrigin: https://login.lhotsepension.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nAccept-Ranges: bytes\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,ETag,Last-Modified,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding\r\nCache-Control: public, max-age=31536000\r\nConnection: close\r\nContent-Type: application/x-javascript\r\nDate: Wed, 16 Sep 2026 08:23:14 GMT\r\nEtag: 0x8DF079F54AAA839\r\nLast-Modified: Mon, 31 Aug 2026 20:35:01 GMT\r\nServer: Microsoft-IIS/10.0\r\nTransfer-Encoding: chunked\r\nX-Azure-Ref: 20260916T082314Z-155987d98d8mwt4khC1AMSxzz00000000hug000000002pge\r\nX-Fd-Int-Roxy-Purgeid: 0\r\nX-Ms-Blob-Type: BlockBlob\r\nX-Ms-Lease-Status: unlocked\r\nX-Ms-Request-Id: e84b735a-701e-0000-1a53-45fcfb000000\r\nX-Ms-Version: 2009-09-19\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Azure","description":"Azure is a cloud computing service for building, testing, deploying, and managing applications and services through Microsoft-managed data centers.","website":"https://azure.microsoft.com","common_platform_enumeration":"","icon":"Azure.svg","categories":["PaaS"]},{"name":"IIS:10.0","description":"Internet Information Services (IIS) is an extensible web server software created by Microsoft for use with the Windows NT family.","website":"https://www.iis.net","common_platform_enumeration":"cpe:2.3:a:microsoft:internet_information_server:*:*:*:*:*:*:*:*","icon":"Microsoft.svg","categories":["Web servers"]},{"name":"Windows Server","description":"Windows Server is a brand name for a group of server operating systems.","website":"https://microsoft.com/windowsserver","common_platform_enumeration":"","icon":"WindowsServer.png","categories":["Operating systems"]},{"name":"Azure Front Door","description":"Azure Front Door is a scalable and secure entry point for fast delivery of your global web applications.","website":"https://docs.microsoft.com/en-us/azure/frontdoor/","common_platform_enumeration":"","icon":"Azure.svg","categories":["Load balancers"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/x-javascript","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-16T09:51:46.278028Z","times_seen":18492779,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kl4rdcnxwm.lhotsepension.com/.detect","fqdn":"kl4rdcnxwm.lhotsepension.com","domain":"lhotsepension.com","tld":"com"},"ip":{"addr":"85.11.167.134","port":443,"asn":6830,"as":"Liberty Global B.V.","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://kl4rdcnxwm.lhotsepension.com/cncjtd1x-irzqri5er1-coapo8gah34d8-julfqhncbnxvx","date":"2026-09-16T08:23:09.936Z","timestamp":1789546989936,"http_version":"HTTP/1.1","security_state":"secure","security_info":null,"request":{"raw":"POST /.detect HTTP/1.1\r\nHost: kl4rdcnxwm.lhotsepension.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://kl4rdcnxwm.lhotsepension.com/cncjtd1x-irzqri5er1-coapo8gah34d8-julfqhncbnxvx\r\nContent-Type: application/json\r\nContent-Length: 170\r\nOrigin: https://kl4rdcnxwm.lhotsepension.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-16T09:51:46.278028Z","times_seen":18492779,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aadcdn.lhotsepension.com/ests/2.1/content/cdnbundles/converged.v2.login.min_pzfy2abhlubh6bv_dyvwha2.css","fqdn":"aadcdn.lhotsepension.com","domain":"lhotsepension.com","tld":"com"},"ip":{"addr":"85.11.167.134","port":443,"asn":6830,"as":"Liberty Global B.V.","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://login.lhotsepension.com/p/wIPJNIbGcjRqRFrzfTQo8Hxf-yY5D8OM_6SH--bZ_VKgJdNWxx3Kr9t4B394j1I_kQ-OcJY4atGAn-mRQeDogPPdz39awr5MsLDnYPbgRnHRBo0moEF50-86wVZtV8ix4mxuBeuj1TZZALXSiDL0Yu7QyyGPtjcm90weiH8EujrdygIVR93Ym724FsaO5d6kr4dDM9qV8HZxmy7rAwYz84Zfa0FRXcQyafs7XaTKvZW6a2oETliI9l3Rl38hIjZ4DAFhXvh59uskRfa0GVv07AddmACaALqCtD9cN_2LCV31PoRXUU1Z50awjBdcDR3U0MREAwcguBpni717QUsUNPngwfjWtu64Rnuc1iKsXrc6L2yuEzxZDYmTx9OsX3ZLsztDtKNGZ6l6T_c_GiInu3g8swqaa8bz5z3JqQPElGWzG42D2N1YWo9A3x8fBF7kZRvDWtZypneulnKu_0ErVMJ0tyAwwgWGbDoCO1afNZRxVh-41vFtTlsUKHZYE5Qo6JCQzmv4OAak6Dq4uvKmjYslH3bZFsYyLGF1QJxI9aMjxEl3MF75ZvaOaGXR3zmDWgXINQDvBgZghTddN-8lvy04mMEeKUH_f_59s1R2onQvn_9QkvHp7SNS5dzlLoD5bd4mYRUUmpXbnJK3dv6fj8zFZ5MjV8i4xtbyCUfzFTDSPQqZf4R3Ou5CgUFpTRF4MoROA7Kc8SvmC4p_KKuOOKLiaxtuVtoO93ZKTUqOKsibs5bS4fW7es-xD1hENiEzHWLslIADqWFgIb_dT5N-gZMHbfjMIxe7WpTQwcnOpxqDPdd3_474atfkuKdPAioncXUduHiPIwotXcMLZSrDucGMfuh7CcHsDImkQAHSYvy9gUc2QQCd7MXtWGIq1QeoJ3SNkvLvaEipNF5A24FQY-INK3oSHG5DRIbVdnZFkU2hS0to157_70qfVpDQUeNoHSoa5LT44fXrcbA1Z8RMAZjjbONoIX2HJqER-DqvWs7_E8YW8zGqPjXNoVT83alv3D2kE6hS7a-V5-lXPIBT24fK_YpHmXSEkMzkgB2rHOnXSNcbXTWb7CM_qH3iMmqVqyxdSefwTNXWnERjQDBrupqyjaDYv7kq7xF7numdhoEO2DdLZAGhMnhiTshvKEHBaDMH07PsycqYWfb0CSofupVGQtZXURWChYj6m_-wUVDyMBAhtbNLyrZ1pAoR6o0xJr74CMkal-3vziG-IDKKIl8-0xOwwQfnz_1VkUjG4jv5cVNrjS10WkFCfP09mo0ZLPpDkUl88GUkwoI3KRTW6JMBwKDnvJXs2U1w_EDdlIhdhcwpe65-r3qTpStJWA","date":"2026-09-16T08:23:13.928Z","timestamp":1789546993928,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lhotsepension.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 31 Aug 2026 16:24:25 GMT","end":"Sun, 29 Nov 2026 16:24:24 GMT"},"fingerprint":{"sha1":"79:96:3C:88:56:8A:C3:21:55:1D:9F:6A:54:5B:04:AA:A1:A7:4A:CE","sha256":"EB:65:72:C0:DD:6B:69:32:AB:3E:65:8B:28:EF:81:49:00:44:E7:75:B4:D3:73:D6:F2:CA:B0:39:BB:DB:6B:C1"}}},"request":{"raw":"GET /ests/2.1/content/cdnbundles/converged.v2.login.min_pzfy2abhlubh6bv_dyvwha2.css HTTP/1.1\r\nHost: aadcdn.lhotsepension.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://login.lhotsepension.com/\r\nOrigin: https://login.lhotsepension.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nAccept-Ranges: bytes\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,ETag,Last-Modified,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding\r\nCache-Control: public, max-age=31536000\r\nConnection: close\r\nContent-Type: text/css\r\nDate: Wed, 16 Sep 2026 08:23:14 GMT\r\nEtag: 0x8DE5AE89A5EC192\r\nLast-Modified: Sat, 24 Jan 2026 01:33:40 GMT\r\nServer: Microsoft-IIS/10.0\r\nTransfer-Encoding: chunked\r\nX-Azure-Ref: 20260916T082314Z-155987d98d8mwt4khC1AMSxzz00000000hug000000002pfw\r\nX-Fd-Int-Roxy-Purgeid: 0\r\nX-Ms-Blob-Type: BlockBlob\r\nX-Ms-Lease-Status: unlocked\r\nX-Ms-Request-Id: 2cc6773e-b01e-0023-06ca-415995000000\r\nX-Ms-Version: 2009-09-19\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Windows Server","description":"Windows Server is a brand name for a group of server operating systems.","website":"https://microsoft.com/windowsserver","common_platform_enumeration":"","icon":"WindowsServer.png","categories":["Operating systems"]},{"name":"Azure Front Door","description":"Azure Front Door is a scalable and secure entry point for fast delivery of your global web applications.","website":"https://docs.microsoft.com/en-us/azure/frontdoor/","common_platform_enumeration":"","icon":"Azure.svg","categories":["Load balancers"]},{"name":"Azure","description":"Azure is a cloud computing service for building, testing, deploying, and managing applications and services through Microsoft-managed data centers.","website":"https://azure.microsoft.com","common_platform_enumeration":"","icon":"Azure.svg","categories":["PaaS"]},{"name":"IIS:10.0","description":"Internet Information Services (IIS) is an extensible web server software created by Microsoft for use with the Windows NT family.","website":"https://www.iis.net","common_platform_enumeration":"cpe:2.3:a:microsoft:internet_information_server:*:*:*:*:*:*:*:*","icon":"Microsoft.svg","categories":["Web servers"]}],"data":{"size":114193,"size_decoded":114959,"mime_type":"text/css","magic":"ASCII text, with very long lines (61177)","md5":"a737f2d9a0612ee6c7e8157f0f25561c","sha1":"6a3ebbbe76750cbafb5c75e2386f66fe09775120","sha256":"2614197647b9e4c6ee27983866ea7e9423de6e9f9b76cb880653324f329fc6a7","sha512":"e02619e74b76bd72bdab59ab6dbf4352f3e848151393ba6fc19ff9b8609af54f5e1be0efb843913b55e4eeded617161b900d92d85d79676dc1f11cc2d72da8c0","ssdeep":"1536:QpHDgBv3uhw+EViazA/PWrF7qvEAFiQcpmQhnlC1bzc6VU23:x7XhF6VUU","tlshash":"72b3c7906d243d26a037c73571d1bd87a2111503f637aebbf6263db9cf8968b0b32a45","first_seen":"2026-01-31T07:14:15.069591Z","last_seen":"2026-09-16T09:28:47.438239Z","times_seen":25369,"resource_available":false,"data":null}},"time_used":3946,"timings":{"blocked":-1,"dns":0,"connect":51,"send":0,"wait":100,"receive":3739,"ssl":56},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aadcdn.lhotsepension.com/shared/1.0/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico","fqdn":"aadcdn.lhotsepension.com","domain":"lhotsepension.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://login.lhotsepension.com/p/wIPJNIbGcjRqRFrzfTQo8Hxf-yY5D8OM_6SH--bZ_VKgJdNWxx3Kr9t4B394j1I_kQ-OcJY4atGAn-mRQeDogPPdz39awr5MsLDnYPbgRnHRBo0moEF50-86wVZtV8ix4mxuBeuj1TZZALXSiDL0Yu7QyyGPtjcm90weiH8EujrdygIVR93Ym724FsaO5d6kr4dDM9qV8HZxmy7rAwYz84Zfa0FRXcQyafs7XaTKvZW6a2oETliI9l3Rl38hIjZ4DAFhXvh59uskRfa0GVv07AddmACaALqCtD9cN_2LCV31PoRXUU1Z50awjBdcDR3U0MREAwcguBpni717QUsUNPngwfjWtu64Rnuc1iKsXrc6L2yuEzxZDYmTx9OsX3ZLsztDtKNGZ6l6T_c_GiInu3g8swqaa8bz5z3JqQPElGWzG42D2N1YWo9A3x8fBF7kZRvDWtZypneulnKu_0ErVMJ0tyAwwgWGbDoCO1afNZRxVh-41vFtTlsUKHZYE5Qo6JCQzmv4OAak6Dq4uvKmjYslH3bZFsYyLGF1QJxI9aMjxEl3MF75ZvaOaGXR3zmDWgXINQDvBgZghTddN-8lvy04mMEeKUH_f_59s1R2onQvn_9QkvHp7SNS5dzlLoD5bd4mYRUUmpXbnJK3dv6fj8zFZ5MjV8i4xtbyCUfzFTDSPQqZf4R3Ou5CgUFpTRF4MoROA7Kc8SvmC4p_KKuOOKLiaxtuVtoO93ZKTUqOKsibs5bS4fW7es-xD1hENiEzHWLslIADqWFgIb_dT5N-gZMHbfjMIxe7WpTQwcnOpxqDPdd3_474atfkuKdPAioncXUduHiPIwotXcMLZSrDucGMfuh7CcHsDImkQAHSYvy9gUc2QQCd7MXtWGIq1QeoJ3SNkvLvaEipNF5A24FQY-INK3oSHG5DRIbVdnZFkU2hS0to157_70qfVpDQUeNoHSoa5LT44fXrcbA1Z8RMAZjjbONoIX2HJqER-DqvWs7_E8YW8zGqPjXNoVT83alv3D2kE6hS7a-V5-lXPIBT24fK_YpHmXSEkMzkgB2rHOnXSNcbXTWb7CM_qH3iMmqVqyxdSefwTNXWnERjQDBrupqyjaDYv7kq7xF7numdhoEO2DdLZAGhMnhiTshvKEHBaDMH07PsycqYWfb0CSofupVGQtZXURWChYj6m_-wUVDyMBAhtbNLyrZ1pAoR6o0xJr74CMkal-3vziG-IDKKIl8-0xOwwQfnz_1VkUjG4jv5cVNrjS10WkFCfP09mo0ZLPpDkUl88GUkwoI3KRTW6JMBwKDnvJXs2U1w_EDdlIhdhcwpe65-r3qTpStJWA","date":"2026-09-16T08:23:17.579Z","timestamp":1789546997579,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /shared/1.0/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico HTTP/1.1\r\nHost: aadcdn.lhotsepension.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://login.lhotsepension.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: _vfy=000f7082ce8b47bf; dca2-c058=9f9bb9178892b9189a7a1459021ad5d6288b3f8d85d2ba758685f148991a6e27\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-16T09:51:46.278028Z","times_seen":18492779,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wlp66.vercel.app/_next/static/chunks/webpack-0b0cf92d49d78d87.js","fqdn":"wlp66.vercel.app","domain":"wlp66.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.3","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://wlp66.vercel.app/","date":"2026-09-16T08:22:58.965Z","timestamp":1789546978965,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Sat, 29 Aug 2026 19:48:09 GMT","end":"Fri, 27 Nov 2026 19:48:08 GMT"},"fingerprint":{"sha1":"E9:FE:9E:58:E9:B3:95:78:1F:9A:AE:FE:41:C4:01:64:C9:FB:2A:BC","sha256":"8F:46:C4:A0:A2:89:BF:DE:40:60:D0:69:86:F2:AF:76:1E:E6:2D:66:8D:DE:97:2E:6B:EF:46:87:EE:4F:60:93"}}},"request":{"raw":"GET /_next/static/chunks/webpack-0b0cf92d49d78d87.js HTTP/1.1\r\nHost: wlp66.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://wlp66.vercel.app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\nage: 29214\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"webpack-0b0cf92d49d78d87.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Wed, 16 Sep 2026 08:22:59 GMT\r\netag: W/\"1169809b29111925091deac5b08b14e9\"\r\nlast-modified: Wed, 16 Sep 2026 00:16:05 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-matched-path: /_next/static/chunks/webpack-0b0cf92d49d78d87.js\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::bcwbk-1789546979000-5a51a4aeefb8\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3780,"size_decoded":2475,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (3780), with no line terminators","md5":"1169809b29111925091deac5b08b14e9","sha1":"ac230727bbb684743fbede4ad70b7bb4e05ab0bb","sha256":"4120e03a194d7fcc0cab714a1425eb7057df2b94c8f4eb4408a614bb18849b43","sha512":"6d5d4e9eb1857069f9aa11e97f51b37cbe44e95c1ee702f986fce5cee54bc1630d665e388b44c42abbd285172f199e72531e301e42ff838c8ca22773ae54be84","ssdeep":"","tlshash":"307143de32a1f87a1793a4a2443f515ef23b18b2181ed4a0db29d4f5fc744598523fb8","first_seen":"2024-08-29T18:15:14.637127Z","last_seen":"2026-09-16T08:23:36.23024Z","times_seen":7,"resource_available":true,"data":null}},"time_used":1830,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1830,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"wlp66.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-16","alert":"Phishing Block","trigger":"wlp66.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"wlp66.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"wlp66.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wlp66.vercel.app/_next/static/chunks/fd9d1056-62aaf4b921c84028.js","fqdn":"wlp66.vercel.app","domain":"wlp66.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.3","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://wlp66.vercel.app/","date":"2026-09-16T08:22:58.967Z","timestamp":1789546978967,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Sat, 29 Aug 2026 19:48:09 GMT","end":"Fri, 27 Nov 2026 19:48:08 GMT"},"fingerprint":{"sha1":"E9:FE:9E:58:E9:B3:95:78:1F:9A:AE:FE:41:C4:01:64:C9:FB:2A:BC","sha256":"8F:46:C4:A0:A2:89:BF:DE:40:60:D0:69:86:F2:AF:76:1E:E6:2D:66:8D:DE:97:2E:6B:EF:46:87:EE:4F:60:93"}}},"request":{"raw":"GET /_next/static/chunks/fd9d1056-62aaf4b921c84028.js HTTP/1.1\r\nHost: wlp66.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://wlp66.vercel.app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\nage: 29214\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"fd9d1056-62aaf4b921c84028.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Wed, 16 Sep 2026 08:22:59 GMT\r\netag: W/\"89ef5cbeacece4bcb75bbefbaec33dc9\"\r\nlast-modified: Wed, 16 Sep 2026 00:16:05 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-matched-path: /_next/static/chunks/fd9d1056-62aaf4b921c84028.js\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::k6j42-1789546979002-5c7d6d7b6fa1\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":172831,"size_decoded":55685,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"89ef5cbeacece4bcb75bbefbaec33dc9","sha1":"afd673d3e1289070f4e66e592a58223d764c573e","sha256":"71ed963804cbd4b773b16a2e290fb534288140999cca4833a8ff300a9d72a9b1","sha512":"587470cd2713ae2dd6e4ef44a3c9ad5442872f298b79b02a29ade777c9a879ff4c159116441d6297f13d3eec996762f0e36edf6933ae8b0a37502e1501c3065e","ssdeep":"1536:IVjExazug79h2U4kcNxakmBjt4oGZlibTR5ikxYhlUuRNka2wblHiN+wL8z9Gguk:Gzug758kkEiXjOAprX2wd5WjguGOo","tlshash":"5ff3f8e83995f6666eb30277009f1803737c262b280d4d60a211fd9eb5b845eb17bfd9","first_seen":"2024-05-03T14:53:15Z","last_seen":"2026-09-16T08:23:36.232021Z","times_seen":3611,"resource_available":true,"data":null}},"time_used":1970,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1970,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"wlp66.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-16","alert":"Phishing Block","trigger":"wlp66.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"wlp66.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"wlp66.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wlp66.vercel.app/_next/static/chunks/23-f2c2ec5da154e115.js","fqdn":"wlp66.vercel.app","domain":"wlp66.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.3","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://wlp66.vercel.app/","date":"2026-09-16T08:22:58.969Z","timestamp":1789546978969,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Sat, 29 Aug 2026 19:48:09 GMT","end":"Fri, 27 Nov 2026 19:48:08 GMT"},"fingerprint":{"sha1":"E9:FE:9E:58:E9:B3:95:78:1F:9A:AE:FE:41:C4:01:64:C9:FB:2A:BC","sha256":"8F:46:C4:A0:A2:89:BF:DE:40:60:D0:69:86:F2:AF:76:1E:E6:2D:66:8D:DE:97:2E:6B:EF:46:87:EE:4F:60:93"}}},"request":{"raw":"GET /_next/static/chunks/23-f2c2ec5da154e115.js HTTP/1.1\r\nHost: wlp66.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://wlp66.vercel.app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\nage: 82610\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"23-f2c2ec5da154e115.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Wed, 16 Sep 2026 08:22:59 GMT\r\netag: W/\"4a2d7c3d59d9298d8e3dfdd6134a4eca\"\r\nlast-modified: Tue, 15 Sep 2026 09:26:08 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-matched-path: /_next/static/chunks/23-f2c2ec5da154e115.js\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::dp4ls-1789546979004-db2413fdb716\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":123350,"size_decoded":33388,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"4a2d7c3d59d9298d8e3dfdd6134a4eca","sha1":"e77d21b82dd7f24fe0e7bcfef2e0b9818b2fed65","sha256":"839d821426383cc0f978a6a20074e6f5524d23ad66f19bdb883f6874bca1cfce","sha512":"dd050b2fd17b99fbfb3575a3740e877ae4db5869a3744a84e4858b2c0f8876116cc554aec7a7669d3001e9a18b18a5a479b0d167070b5a96fe316486fd21d6eb","ssdeep":"1536:+3w31mN1OhIUEfYsdlaTy8mmN1zq5EfRv7:pcJ941G50z","tlshash":"7fc3d8b671d0f8e207a744e5843b400af3791c3b146f70a0a7a5cdd9b5a44eea1a3f5e","first_seen":"2024-07-25T23:19:55Z","last_seen":"2026-09-16T08:23:36.233486Z","times_seen":576,"resource_available":true,"data":null}},"time_used":327,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":327,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"wlp66.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"wlp66.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-16","alert":"Phishing Block","trigger":"wlp66.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"wlp66.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wlp66.vercel.app/favicon.ico","fqdn":"wlp66.vercel.app","domain":"wlp66.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.3","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wlp66.vercel.app/","date":"2026-09-16T08:23:01.741Z","timestamp":1789546981741,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Sat, 29 Aug 2026 19:48:09 GMT","end":"Fri, 27 Nov 2026 19:48:08 GMT"},"fingerprint":{"sha1":"E9:FE:9E:58:E9:B3:95:78:1F:9A:AE:FE:41:C4:01:64:C9:FB:2A:BC","sha256":"8F:46:C4:A0:A2:89:BF:DE:40:60:D0:69:86:F2:AF:76:1E:E6:2D:66:8D:DE:97:2E:6B:EF:46:87:EE:4F:60:93"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: wlp66.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://wlp66.vercel.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\nage: 82612\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"favicon.ico\"\r\ncontent-encoding: br\r\ncontent-type: image/vnd.microsoft.icon\r\ndate: Wed, 16 Sep 2026 08:23:01 GMT\r\netag: W/\"ae569d5cc7b007a54cfa3d1105f46671\"\r\nlast-modified: Tue, 15 Sep 2026 09:26:08 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-matched-path: /favicon.ico\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::k6j42-1789546981776-b05e3249d73c\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4286,"size_decoded":1525,"mime_type":"image/vnd.microsoft.icon","magic":"MS Windows icon resource - 1 icon, 32x32, 32 bits/pixel","md5":"ae569d5cc7b007a54cfa3d1105f46671","sha1":"a589a2728229f3ee0f1fef413c85bda9f7644b3e","sha256":"1728570af8ad8d1736b10dd2e43e51296db492eed302b8144957932292764688","sha512":"a1b6a170d774dbb6881356b2a41f6fe88381c11d762038d98825537ac8a0c998ea0e261f6a65319a768d801e748b65968e306af72c0b6e423246747312df3d52","ssdeep":"24:suxsvAChuBJ4JpgDuDHuyio1m1X86RH0e2WTdGSv5bdK:3IuBigaiIIRB2WTtrK","tlshash":"649145faa5b52114dc97bafcc88b85c80605cf1ae2690c1d7eee9c573bb8412f231136","first_seen":"2025-04-15T16:09:16.343762Z","last_seen":"2026-09-16T08:23:36.234858Z","times_seen":39,"resource_available":false,"data":null}},"time_used":1588,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":1588,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-16","alert":"Phishing Block","trigger":"wlp66.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"wlp66.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"wlp66.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"wlp66.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rpdfphaesngaedeyuahf.supabase.co/storage/v1/object/public/images/images/image_1789356147466_2.jpg","fqdn":"rpdfphaesngaedeyuahf.supabase.co","domain":"rpdfphaesngaedeyuahf.supabase.co","tld":"supabase.co"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wlp66.vercel.app/","date":"2026-09-16T08:23:03.667Z","timestamp":1789546983667,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /storage/v1/object/public/images/images/image_1789356147466_2.jpg HTTP/1.1\r\nHost: rpdfphaesngaedeyuahf.supabase.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://wlp66.vercel.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-16T09:51:46.278028Z","times_seen":18492779,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rpdfphaesngaedeyuahf.supabase.co/storage/v1/object/public/images/images/image_1787528391151_2.jpg","fqdn":"rpdfphaesngaedeyuahf.supabase.co","domain":"rpdfphaesngaedeyuahf.supabase.co","tld":"supabase.co"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wlp66.vercel.app/","date":"2026-09-16T08:23:03.668Z","timestamp":1789546983668,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /storage/v1/object/public/images/images/image_1787528391151_2.jpg HTTP/1.1\r\nHost: rpdfphaesngaedeyuahf.supabase.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://wlp66.vercel.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-16T09:51:46.278028Z","times_seen":18492779,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.lhotsepension.com/p/K5m9gyggs964kyu4YA6CkU2HqodvklqXaC-waK9zdwRy_w","fqdn":"www.lhotsepension.com","domain":"lhotsepension.com","tld":"com"},"ip":{"addr":"85.11.167.134","port":443,"asn":6830,"as":"Liberty Global B.V.","country":"Bulgaria","country_code":"BG"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-16T08:23:10.870Z","timestamp":1789546990870,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lhotsepension.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 31 Aug 2026 16:24:25 GMT","end":"Sun, 29 Nov 2026 16:24:24 GMT"},"fingerprint":{"sha1":"79:96:3C:88:56:8A:C3:21:55:1D:9F:6A:54:5B:04:AA:A1:A7:4A:CE","sha256":"EB:65:72:C0:DD:6B:69:32:AB:3E:65:8B:28:EF:81:49:00:44:E7:75:B4:D3:73:D6:F2:CA:B0:39:BB:DB:6B:C1"}}},"request":{"raw":"GET /p/K5m9gyggs964kyu4YA6CkU2HqodvklqXaC-waK9zdwRy_w HTTP/1.1\r\nHost: www.lhotsepension.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://kl4rdcnxwm.lhotsepension.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: _vfy=000f7082ce8b47bf; dca2-c058=9f9bb9178892b9189a7a1459021ad5d6288b3f8d85d2ba758685f148991a6e27\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-site\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 302 Found\r\nConnection: close\r\nContent-Encoding: gzip\r\nContent-Type: text/html; charset=utf-8\r\nDate: Wed, 16 Sep 2026 08:23:10 GMT\r\nLocation: https://login.lhotsepension.com/p/wIPJNIbGcjRqRFrzfTQo8Hxf-yY5D8OM_6SH--bZ_VKgJdNWxx3Kr9t4B394j1I_kQ-OcJY4atGAn-mRQeDogPPdz39awr5MsLDnYPbgRnHRBo0moEF50-86wVZtV8ix4mxuBeuj1TZZALXSiDL0Yu7QyyGPtjcm90weiH8EujrdygIVR93Ym724FsaO5d6kr4dDM9qV8HZxmy7rAwYz84Zfa0FRXcQyafs7XaTKvZW6a2oETliI9l3Rl38hIjZ4DAFhXvh59uskRfa0GVv07AddmACaALqCtD9cN_2LCV31PoRXUU1Z50awjBdcDR3U0MREAwcguBpni717QUsUNPngwfjWtu64Rnuc1iKsXrc6L2yuEzxZDYmTx9OsX3ZLsztDtKNGZ6l6T_c_GiInu3g8swqaa8bz5z3JqQPElGWzG42D2N1YWo9A3x8fBF7kZRvDWtZypneulnKu_0ErVMJ0tyAwwgWGbDoCO1afNZRxVh-41vFtTlsUKHZYE5Qo6JCQzmv4OAak6Dq4uvKmjYslH3bZFsYyLGF1QJxI9aMjxEl3MF75ZvaOaGXR3zmDWgXINQDvBgZghTddN-8lvy04mMEeKUH_f_59s1R2onQvn_9QkvHp7SNS5dzlLoD5bd4mYRUUmpXbnJK3dv6fj8zFZ5MjV8i4xtbyCUfzFTDSPQqZf4R3Ou5CgUFpTRF4MoROA7Kc8SvmC4p_KKuOOKLiaxtuVtoO93ZKTUqOKsibs5bS4fW7es-xD1hENiEzHWLslIADqWFgIb_dT5N-gZMHbfjMIxe7WpTQwcnOpxqDPdd3_474atfkuKdPAioncXUduHiPIwotXcMLZSrDucGMfuh7CcHsDImkQAHSYvy9gUc2QQCd7MXtWGIq1QeoJ3SNkvLvaEipNF5A24FQY-INK3oSHG5DRIbVdnZFkU2hS0to157_70qfVpDQUeNoHSoa5LT44fXrcbA1Z8RMAZjjbONoIX2HJqER-DqvWs7_E8YW8zGqPjXNoVT83alv3D2kE6hS7a-V5-lXPIBT24fK_YpHmXSEkMzkgB2rHOnXSNcbXTWb7CM_qH3iMmqVqyxdSefwTNXWnERjQDBrupqyjaDYv7kq7xF7numdhoEO2DdLZAGhMnhiTshvKEHBaDMH07PsycqYWfb0CSofupVGQtZXURWChYj6m_-wUVDyMBAhtbNLyrZ1pAoR6o0xJr74CMkal-3vziG-IDKKIl8-0xOwwQfnz_1VkUjG4jv5cVNrjS10WkFCfP09mo0ZLPpDkUl88GUkwoI3KRTW6JMBwKDnvJXs2U1w_EDdlIhdhcwpe65-r3qTpStJWA\r\nReferrer-Policy: strict-origin-when-cross-origin\r\nRequest-Context: appId=\r\nRequest-Id: 47e78800-6149-430d-b016-94414d36adb6\r\nServer: Apache/2.4.48\r\nSet-Cookie: OH.SID=28b4eca4-6c84-4771-a89d-0477fb24a6ad; Path=/; HttpOnly; Secure; SameSite=None\nOH.FLID=ddc8ca85-b3b9-4ffa-a86f-e703a29a9f98; Path=/; Expires=Thu, 16 Sep 2027 08:23:11 GMT; HttpOnly; Secure; SameSite=None\n.AspNetCore.OpenIdConnect.Nonce.kOUZajeH-0gurjuqUZ_S9WsyAeYx7MLJJE2mJRsj3mrcmOTq8o_QKtO0bZ98EszY8hfVoDG4ggZbnDY5Qi0FwyA1iwVHEZ6jQlhtNAtqo3YMmGAWsJU_dvpHf9EHHH0290gxntBnvaVw2XRzhjQogQd6Vu3-7DPP6MAC3PC1xLACO3ea7VM78Li2V63mEygbLseusOA0EzCJFPiLaWa-JO_f5brk7IDmJ5PxDMw7kfGGlpvfVJwD-CODbPgWaLK7=N; Path=/; Expires=Wed, 16 Sep 2026 08:38:11 GMT; HttpOnly; Secure; SameSite=None\n.AspNetCore.Correlation.4QHGjtdStOLdxS8oQfc-s0QW-Rb0y2zZicgOaSS8RPU=N; Path=/; Expires=Wed, 16 Sep 2026 08:38:11 GMT; HttpOnly; Secure; SameSite=None\r\nTransfer-Encoding: chunked\r\nVary: Accept-Encoding\r\nX-Environment-Name: weuprod\r\nX-Msedge-Ref: Ref A: 996A9B5837B54331B19469F4A6EDC09F Ref B: AMS04EDGE2910 Ref C: 2026-09-16T08:23:11Z\r\nX-Ua-Compatible: IE=edge,chrome=1\r\n\r\n","headers":null,"cookies":[{"name":"OH.SID","value":"28b4eca4-6c84-4771-a89d-0477fb24a6ad","quoted":false,"path":"/","secure":true,"http_only":true,"same_site":"None","partitioned":false,"raw":"OH.SID=28b4eca4-6c84-4771-a89d-0477fb24a6ad; Path=/; HttpOnly; Secure; SameSite=None"},{"name":"OH.FLID","value":"ddc8ca85-b3b9-4ffa-a86f-e703a29a9f98","quoted":false,"path":"/","expires":"2027-09-16T08:23:11Z","raw_expires":"Thu, 16 Sep 2027 08:23:11 GMT","secure":true,"http_only":true,"same_site":"None","partitioned":false,"raw":"OH.FLID=ddc8ca85-b3b9-4ffa-a86f-e703a29a9f98; Path=/; Expires=Thu, 16 Sep 2027 08:23:11 GMT; HttpOnly; Secure; SameSite=None"},{"name":".AspNetCore.OpenIdConnect.Nonce.kOUZajeH-0gurjuqUZ_S9WsyAeYx7MLJJE2mJRsj3mrcmOTq8o_QKtO0bZ98EszY8hfVoDG4ggZbnDY5Qi0FwyA1iwVHEZ6jQlhtNAtqo3YMmGAWsJU_dvpHf9EHHH0290gxntBnvaVw2XRzhjQogQd6Vu3-7DPP6MAC3PC1xLACO3ea7VM78Li2V63mEygbLseusOA0EzCJFPiLaWa-JO_f5brk7IDmJ5PxDMw7kfGGlpvfVJwD-CODbPgWaLK7","value":"N","quoted":false,"path":"/","expires":"2026-09-16T08:38:11Z","raw_expires":"Wed, 16 Sep 2026 08:38:11 GMT","secure":true,"http_only":true,"same_site":"None","partitioned":false,"raw":".AspNetCore.OpenIdConnect.Nonce.kOUZajeH-0gurjuqUZ_S9WsyAeYx7MLJJE2mJRsj3mrcmOTq8o_QKtO0bZ98EszY8hfVoDG4ggZbnDY5Qi0FwyA1iwVHEZ6jQlhtNAtqo3YMmGAWsJU_dvpHf9EHHH0290gxntBnvaVw2XRzhjQogQd6Vu3-7DPP6MAC3PC1xLACO3ea7VM78Li2V63mEygbLseusOA0EzCJFPiLaWa-JO_f5brk7IDmJ5PxDMw7kfGGlpvfVJwD-CODbPgWaLK7=N; Path=/; Expires=Wed, 16 Sep 2026 08:38:11 GMT; HttpOnly; Secure; SameSite=None"},{"name":".AspNetCore.Correlation.4QHGjtdStOLdxS8oQfc-s0QW-Rb0y2zZicgOaSS8RPU","value":"N","quoted":false,"path":"/","expires":"2026-09-16T08:38:11Z","raw_expires":"Wed, 16 Sep 2026 08:38:11 GMT","secure":true,"http_only":true,"same_site":"None","partitioned":false,"raw":".AspNetCore.Correlation.4QHGjtdStOLdxS8oQfc-s0QW-Rb0y2zZicgOaSS8RPU=N; Path=/; Expires=Wed, 16 Sep 2026 08:38:11 GMT; HttpOnly; Secure; SameSite=None"}],"status_code":"302","status_text":"Found","fingerprints":[{"name":"Apache HTTP Server:2.4.48","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-16T09:51:46.278028Z","times_seen":18492779,"resource_available":true,"data":null}},"time_used":398,"timings":{"blocked":0,"dns":0,"connect":52,"send":0,"wait":74,"receive":209,"ssl":62},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wlp66.vercel.app/","fqdn":"wlp66.vercel.app","domain":"wlp66.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.3","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-16T08:22:57.971Z","timestamp":1789546977971,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Sat, 29 Aug 2026 19:48:09 GMT","end":"Fri, 27 Nov 2026 19:48:08 GMT"},"fingerprint":{"sha1":"E9:FE:9E:58:E9:B3:95:78:1F:9A:AE:FE:41:C4:01:64:C9:FB:2A:BC","sha256":"8F:46:C4:A0:A2:89:BF:DE:40:60:D0:69:86:F2:AF:76:1E:E6:2D:66:8D:DE:97:2E:6B:EF:46:87:EE:4F:60:93"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: wlp66.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\nage: 104578\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline\r\ncontent-encoding: br\r\ncontent-type: text/html; charset=utf-8\r\ndate: Wed, 16 Sep 2026 08:22:58 GMT\r\netag: W/\"797628489b293c1e57388e86215ae8c4\"\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nvary: RSC, Next-Router-State-Tree, Next-Router-Prefetch\r\nx-matched-path: /\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::np884-1789546978528-595357893211\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":11346,"size_decoded":4456,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (11346), with no line terminators","md5":"1a80679c27edf12187dd1ffebcd6a0ee","sha1":"fe5c45ad0f994135bef9f0d03225f73b8d76a1b9","sha256":"825ab827b1e0c33f915f2989a1370648a1b87baa81dab7cf9112553abe0ad672","sha512":"f8becae3cd1a474a20e339bf2079e29b87cfb22a5f5919f30edda2e63621429476eff7201332c396af304dfc9d8e8e66d01139a61cb6c13490b42b251b0c9636","ssdeep":"192:sVvUO+EndxaxIQxWSOXOYQOolLU6+roSMLtR/CgAHcg5FuKcgnqzbJmuk:sGOzfqIwieYrolLUH4LvCgAHc0jqXk","tlshash":"0132da39e405e96fc8239d95a4367f3b54cfc19ec6a5891cb7fcc61403928ba8da6cc4","first_seen":"2026-09-15T14:13:45.966601Z","last_seen":"2026-09-16T08:23:36.236515Z","times_seen":3,"resource_available":false,"data":null}},"time_used":556,"timings":{"blocked":-1,"dns":48,"connect":306,"send":0,"wait":44,"receive":0,"ssl":158},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-16","alert":"Phishing Block","trigger":"wlp66.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"wlp66.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"wlp66.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"wlp66.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wlp66.vercel.app/_next/static/chunks/8e1d74a4-162a15093ecd1e13.js","fqdn":"wlp66.vercel.app","domain":"wlp66.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.3","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://wlp66.vercel.app/","date":"2026-09-16T08:22:58.976Z","timestamp":1789546978976,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Sat, 29 Aug 2026 19:48:09 GMT","end":"Fri, 27 Nov 2026 19:48:08 GMT"},"fingerprint":{"sha1":"E9:FE:9E:58:E9:B3:95:78:1F:9A:AE:FE:41:C4:01:64:C9:FB:2A:BC","sha256":"8F:46:C4:A0:A2:89:BF:DE:40:60:D0:69:86:F2:AF:76:1E:E6:2D:66:8D:DE:97:2E:6B:EF:46:87:EE:4F:60:93"}}},"request":{"raw":"GET /_next/static/chunks/8e1d74a4-162a15093ecd1e13.js HTTP/1.1\r\nHost: wlp66.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://wlp66.vercel.app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 29213\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"8e1d74a4-162a15093ecd1e13.js\"\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Wed, 16 Sep 2026 08:22:59 GMT\r\netag: \"6744fac6cc99adee72a477779f6c4206\"\r\nlast-modified: Wed, 16 Sep 2026 00:16:05 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-matched-path: /_next/static/chunks/8e1d74a4-162a15093ecd1e13.js\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::l6qwm-1789546979013-b71f41b4bd4d\r\ncontent-length: 731\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":731,"size_decoded":1381,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (731), with no line terminators","md5":"6744fac6cc99adee72a477779f6c4206","sha1":"5dd37a1deb16d9209c13203d67df75079198fb84","sha256":"4148cd2bb8c5d005c007412a4057d66dd22586c6069e1eacd502f0046b215934","sha512":"34e50bccaf2f6eb0f0d9881519010e8a593f42e5364d7f3c7286d6f3f4dc8daa9937c4a9f742d35b99ee5b16ef7c8e4936c0c700b3233433f5d294aa80ac8b4e","ssdeep":"","tlshash":"9201b84a33c232742b451f70c72278a82d97108f64ea956c9ef180a0b2321d8425adcd","first_seen":"2025-07-03T11:57:40.889727Z","last_seen":"2026-09-16T08:23:36.237456Z","times_seen":14,"resource_available":true,"data":null}},"time_used":539,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":539,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-16","alert":"Phishing Block","trigger":"wlp66.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"wlp66.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"wlp66.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"wlp66.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wlp66.vercel.app/_next/static/chunks/323-4816ed95bc84aafa.js","fqdn":"wlp66.vercel.app","domain":"wlp66.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.3","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://wlp66.vercel.app/","date":"2026-09-16T08:22:58.978Z","timestamp":1789546978978,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Sat, 29 Aug 2026 19:48:09 GMT","end":"Fri, 27 Nov 2026 19:48:08 GMT"},"fingerprint":{"sha1":"E9:FE:9E:58:E9:B3:95:78:1F:9A:AE:FE:41:C4:01:64:C9:FB:2A:BC","sha256":"8F:46:C4:A0:A2:89:BF:DE:40:60:D0:69:86:F2:AF:76:1E:E6:2D:66:8D:DE:97:2E:6B:EF:46:87:EE:4F:60:93"}}},"request":{"raw":"GET /_next/static/chunks/323-4816ed95bc84aafa.js HTTP/1.1\r\nHost: wlp66.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://wlp66.vercel.app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\nage: 82610\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"323-4816ed95bc84aafa.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Wed, 16 Sep 2026 08:22:59 GMT\r\netag: W/\"2a8e925bc9cc8da49ab44b429b6b3ce1\"\r\nlast-modified: Tue, 15 Sep 2026 09:26:08 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-matched-path: /_next/static/chunks/323-4816ed95bc84aafa.js\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::rsvh8-1789546979015-cf76b2cf9967\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":44911,"size_decoded":12258,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (5848), with CRLF line terminators","md5":"2a8e925bc9cc8da49ab44b429b6b3ce1","sha1":"f7365b46fc31391ab0134be12c69049163a6382f","sha256":"fe5e6263c52d3fffedfeddb76cbddfda6b6f99ed729660d62f0a6c97ca98e9aa","sha512":"543dc9902f3d6c920373ded48c2fbc1a97843a0bfc21a917acc18892de7adc2ae8d3d054ee0eb797ec7cf519b56cf1cd449ca8f67c28e5c2a7926f19a5f4e0d6","ssdeep":"768:ZmPGGVBkhcnnhanoYO0DfAnTTGgHl6ANBLJeczepXbgw5QoUhFhC:EPGMBkhcnn8oYO0DfAnTyg6czep/QZhy","tlshash":"4d13d87d7be2753307f482aa253f5487e3299698080e426cb474c5da6e3954a81fefb0","first_seen":"2025-07-03T11:57:40.908401Z","last_seen":"2026-09-16T08:23:36.238192Z","times_seen":16,"resource_available":true,"data":null}},"time_used":2771,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2771,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"wlp66.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"wlp66.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-16","alert":"Phishing Block","trigger":"wlp66.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"wlp66.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wlp66.vercel.app/_next/static/chunks/795-cb94f972b68d1640.js","fqdn":"wlp66.vercel.app","domain":"wlp66.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.3","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://wlp66.vercel.app/","date":"2026-09-16T08:22:58.980Z","timestamp":1789546978980,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Sat, 29 Aug 2026 19:48:09 GMT","end":"Fri, 27 Nov 2026 19:48:08 GMT"},"fingerprint":{"sha1":"E9:FE:9E:58:E9:B3:95:78:1F:9A:AE:FE:41:C4:01:64:C9:FB:2A:BC","sha256":"8F:46:C4:A0:A2:89:BF:DE:40:60:D0:69:86:F2:AF:76:1E:E6:2D:66:8D:DE:97:2E:6B:EF:46:87:EE:4F:60:93"}}},"request":{"raw":"GET /_next/static/chunks/795-cb94f972b68d1640.js HTTP/1.1\r\nHost: wlp66.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://wlp66.vercel.app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\nage: 82610\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"795-cb94f972b68d1640.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Wed, 16 Sep 2026 08:22:59 GMT\r\netag: W/\"a64ff9dac89864ab46b8ca5f73ce5709\"\r\nlast-modified: Tue, 15 Sep 2026 09:26:08 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-matched-path: /_next/static/chunks/795-cb94f972b68d1640.js\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::n9gj7-1789546979015-2797a98c687c\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":16505,"size_decoded":6980,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (16505), with no line terminators","md5":"a64ff9dac89864ab46b8ca5f73ce5709","sha1":"7a9a28350d6df1eeec931bb374064524a3c57830","sha256":"7bc736dacd1d8a9a84cc4e0eec1a0ff626a1fc0e6293ee724a6339cfc03d7270","sha512":"1e7133d151ec1b0bedceca52b012e099832d25cf408ff46a93fdcef8143cf1a1af9f8055b04a5caecc75ff319c8033896d66b64edf5e1c3bd9df38d5537d3f68","ssdeep":"192:ZL9jVdS2G7l+cXJ0OEN2BjCwKEQxN7nD4avUrYfcu2njPpRFVY0C4BjVGKpWHvCq:ZL9Bw1MqhuVfD20fGnjr64FVb+xpYkEI","tlshash":"e67219b236d0fce6138b90d5843f000ef2652d766539b14463e6c8d4e5f0599a1b2fbb","first_seen":"2025-07-03T11:57:40.90988Z","last_seen":"2026-09-16T08:23:36.238952Z","times_seen":14,"resource_available":true,"data":null}},"time_used":536,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":536,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"wlp66.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"wlp66.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"wlp66.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-16","alert":"Phishing Block","trigger":"wlp66.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wlp66.vercel.app/images/img10.jpeg","fqdn":"wlp66.vercel.app","domain":"wlp66.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.3","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wlp66.vercel.app/","date":"2026-09-16T08:22:58.986Z","timestamp":1789546978986,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Sat, 29 Aug 2026 19:48:09 GMT","end":"Fri, 27 Nov 2026 19:48:08 GMT"},"fingerprint":{"sha1":"E9:FE:9E:58:E9:B3:95:78:1F:9A:AE:FE:41:C4:01:64:C9:FB:2A:BC","sha256":"8F:46:C4:A0:A2:89:BF:DE:40:60:D0:69:86:F2:AF:76:1E:E6:2D:66:8D:DE:97:2E:6B:EF:46:87:EE:4F:60:93"}}},"request":{"raw":"GET /images/img10.jpeg HTTP/1.1\r\nHost: wlp66.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://wlp66.vercel.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 29213\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"img10.jpeg\"\r\ncontent-type: image/jpeg\r\ndate: Wed, 16 Sep 2026 08:22:59 GMT\r\netag: \"6c59c4f2298d10bad65ff9074e2d165c\"\r\nlast-modified: Wed, 16 Sep 2026 00:16:05 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-matched-path: /images/img10.jpeg\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::np884-1789546979033-6962f59d367b\r\ncontent-length: 21494\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":21494,"size_decoded":22071,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 721x800, components 3","md5":"6c59c4f2298d10bad65ff9074e2d165c","sha1":"1e4f2634869ab90db26b6bfc742d0628af1da4e5","sha256":"a69e62b80f439ea29585dfea7655c73731ee9eca635abefacd77f1dbc2459ce4","sha512":"360ee9c703ea087f33124325523a3d2313d7bada1b444d7f7fa1da1d0a76a0bc47e1dc85c7f9eb006f9a821d2654530dd66a26f97de1c3ea0e38873735738f3f","ssdeep":"384:HbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbhZZZZZfQUs11111/Yr8KnNF6yQbKw9:Hbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbs","tlshash":"96a25ce95532380defd930f0d146a2f59f51f7c5ae3a3931f225c4b268523215ea8cae","first_seen":"2025-04-15T16:09:16.329386Z","last_seen":"2026-09-16T08:23:36.239684Z","times_seen":32,"resource_available":false,"data":null}},"time_used":1809,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":713,"receive":1096,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"wlp66.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-16","alert":"Phishing Block","trigger":"wlp66.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"wlp66.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"wlp66.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aadcdn.lhotsepension.com/ests/2.1/content/cdnbundles/ux.converged.login.strings-en.min_uhq9m5ofgcbvjcqhlkybyw2.js","fqdn":"aadcdn.lhotsepension.com","domain":"lhotsepension.com","tld":"com"},"ip":{"addr":"85.11.167.134","port":443,"asn":6830,"as":"Liberty Global B.V.","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://login.lhotsepension.com/p/wIPJNIbGcjRqRFrzfTQo8Hxf-yY5D8OM_6SH--bZ_VKgJdNWxx3Kr9t4B394j1I_kQ-OcJY4atGAn-mRQeDogPPdz39awr5MsLDnYPbgRnHRBo0moEF50-86wVZtV8ix4mxuBeuj1TZZALXSiDL0Yu7QyyGPtjcm90weiH8EujrdygIVR93Ym724FsaO5d6kr4dDM9qV8HZxmy7rAwYz84Zfa0FRXcQyafs7XaTKvZW6a2oETliI9l3Rl38hIjZ4DAFhXvh59uskRfa0GVv07AddmACaALqCtD9cN_2LCV31PoRXUU1Z50awjBdcDR3U0MREAwcguBpni717QUsUNPngwfjWtu64Rnuc1iKsXrc6L2yuEzxZDYmTx9OsX3ZLsztDtKNGZ6l6T_c_GiInu3g8swqaa8bz5z3JqQPElGWzG42D2N1YWo9A3x8fBF7kZRvDWtZypneulnKu_0ErVMJ0tyAwwgWGbDoCO1afNZRxVh-41vFtTlsUKHZYE5Qo6JCQzmv4OAak6Dq4uvKmjYslH3bZFsYyLGF1QJxI9aMjxEl3MF75ZvaOaGXR3zmDWgXINQDvBgZghTddN-8lvy04mMEeKUH_f_59s1R2onQvn_9QkvHp7SNS5dzlLoD5bd4mYRUUmpXbnJK3dv6fj8zFZ5MjV8i4xtbyCUfzFTDSPQqZf4R3Ou5CgUFpTRF4MoROA7Kc8SvmC4p_KKuOOKLiaxtuVtoO93ZKTUqOKsibs5bS4fW7es-xD1hENiEzHWLslIADqWFgIb_dT5N-gZMHbfjMIxe7WpTQwcnOpxqDPdd3_474atfkuKdPAioncXUduHiPIwotXcMLZSrDucGMfuh7CcHsDImkQAHSYvy9gUc2QQCd7MXtWGIq1QeoJ3SNkvLvaEipNF5A24FQY-INK3oSHG5DRIbVdnZFkU2hS0to157_70qfVpDQUeNoHSoa5LT44fXrcbA1Z8RMAZjjbONoIX2HJqER-DqvWs7_E8YW8zGqPjXNoVT83alv3D2kE6hS7a-V5-lXPIBT24fK_YpHmXSEkMzkgB2rHOnXSNcbXTWb7CM_qH3iMmqVqyxdSefwTNXWnERjQDBrupqyjaDYv7kq7xF7numdhoEO2DdLZAGhMnhiTshvKEHBaDMH07PsycqYWfb0CSofupVGQtZXURWChYj6m_-wUVDyMBAhtbNLyrZ1pAoR6o0xJr74CMkal-3vziG-IDKKIl8-0xOwwQfnz_1VkUjG4jv5cVNrjS10WkFCfP09mo0ZLPpDkUl88GUkwoI3KRTW6JMBwKDnvJXs2U1w_EDdlIhdhcwpe65-r3qTpStJWA","date":"2026-09-16T08:23:13.931Z","timestamp":1789546993931,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lhotsepension.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 31 Aug 2026 16:24:25 GMT","end":"Sun, 29 Nov 2026 16:24:24 GMT"},"fingerprint":{"sha1":"79:96:3C:88:56:8A:C3:21:55:1D:9F:6A:54:5B:04:AA:A1:A7:4A:CE","sha256":"EB:65:72:C0:DD:6B:69:32:AB:3E:65:8B:28:EF:81:49:00:44:E7:75:B4:D3:73:D6:F2:CA:B0:39:BB:DB:6B:C1"}}},"request":{"raw":"GET /ests/2.1/content/cdnbundles/ux.converged.login.strings-en.min_uhq9m5ofgcbvjcqhlkybyw2.js HTTP/1.1\r\nHost: aadcdn.lhotsepension.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://login.lhotsepension.com/\r\nOrigin: https://login.lhotsepension.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nAccept-Ranges: bytes\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,ETag,Last-Modified,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding\r\nCache-Control: public, max-age=31536000\r\nConnection: close\r\nContent-Type: application/x-javascript\r\nDate: Wed, 16 Sep 2026 08:23:14 GMT\r\nEtag: 0x8DF0521F49B4D70\r\nLast-Modified: Fri, 28 Aug 2026 16:32:30 GMT\r\nServer: Microsoft-IIS/10.0\r\nTransfer-Encoding: chunked\r\nX-Azure-Ref: 20260916T082314Z-155987d98d8mwt4khC1AMSxzz00000000hug000000002pgn\r\nX-Fd-Int-Roxy-Purgeid: 0\r\nX-Ms-Blob-Type: BlockBlob\r\nX-Ms-Lease-Status: unlocked\r\nX-Ms-Request-Id: 98762ba4-e01e-002d-573e-434f88000000\r\nX-Ms-Version: 2009-09-19\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Azure Front Door","description":"Azure Front Door is a scalable and secure entry point for fast delivery of your global web applications.","website":"https://docs.microsoft.com/en-us/azure/frontdoor/","common_platform_enumeration":"","icon":"Azure.svg","categories":["Load balancers"]},{"name":"Azure","description":"Azure is a cloud computing service for building, testing, deploying, and managing applications and services through Microsoft-managed data centers.","website":"https://azure.microsoft.com","common_platform_enumeration":"","icon":"Azure.svg","categories":["PaaS"]},{"name":"IIS:10.0","description":"Internet Information Services (IIS) is an extensible web server software created by Microsoft for use with the Windows NT family.","website":"https://www.iis.net","common_platform_enumeration":"cpe:2.3:a:microsoft:internet_information_server:*:*:*:*:*:*:*:*","icon":"Microsoft.svg","categories":["Web servers"]},{"name":"Windows Server","description":"Windows Server is a brand name for a group of server operating systems.","website":"https://microsoft.com/windowsserver","common_platform_enumeration":"","icon":"WindowsServer.png","categories":["Operating systems"]}],"data":{"size":62278,"size_decoded":63060,"mime_type":"application/x-javascript","magic":"Unicode text, UTF-8 text, with very long lines (32014)","md5":"23bf2caf0351f33337d61c582b9df91d","sha1":"dc3199dbeb92510783bf1ac028880fb48ad526e5","sha256":"790dde178d95f81361da2fa902f4a3c11e754ce907fc81e79b485dec3ed09bbe","sha512":"a851b172d0e0be2168a2cfffd2cf85003aa23c29d141c9349d2694efe9a1d5b996b8541262f1c7c316e233731e7c54bc78987947d9636822d9b318043de1e50f","ssdeep":"1536:ElZF1tlfretkRKbVa+DRxGt8ym+d/Pn2gT1U3pc40MTPRUbx3dZg/tdA5hB:ElwkRyR88ym+d/P2gT1U3pcbAog/tO5D","tlshash":"6d53f81bf3c4870307d7059d3c2e587676d2c2a801c9986c2ee5461fa2fab67ef23695","first_seen":"2026-09-09T01:15:20.862292Z","last_seen":"2026-09-16T10:17:26.514268Z","times_seen":209,"resource_available":true,"data":null}},"time_used":1846,"timings":{"blocked":-1,"dns":0,"connect":51,"send":0,"wait":132,"receive":1349,"ssl":314},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"login.lhotsepension.com/s/9f9bb9178892b9189a7a1459021ad5d6288b3f8d85d2ba758685f148991a6e27/7abca5539bc72525e94947d04b5d8089754a019467a21a6a1f0413bf3dea7094.js","fqdn":"login.lhotsepension.com","domain":"lhotsepension.com","tld":"com"},"ip":{"addr":"85.11.167.134","port":443,"asn":6830,"as":"Liberty Global B.V.","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://login.lhotsepension.com/p/wIPJNIbGcjRqRFrzfTQo8Hxf-yY5D8OM_6SH--bZ_VKgJdNWxx3Kr9t4B394j1I_kQ-OcJY4atGAn-mRQeDogPPdz39awr5MsLDnYPbgRnHRBo0moEF50-86wVZtV8ix4mxuBeuj1TZZALXSiDL0Yu7QyyGPtjcm90weiH8EujrdygIVR93Ym724FsaO5d6kr4dDM9qV8HZxmy7rAwYz84Zfa0FRXcQyafs7XaTKvZW6a2oETliI9l3Rl38hIjZ4DAFhXvh59uskRfa0GVv07AddmACaALqCtD9cN_2LCV31PoRXUU1Z50awjBdcDR3U0MREAwcguBpni717QUsUNPngwfjWtu64Rnuc1iKsXrc6L2yuEzxZDYmTx9OsX3ZLsztDtKNGZ6l6T_c_GiInu3g8swqaa8bz5z3JqQPElGWzG42D2N1YWo9A3x8fBF7kZRvDWtZypneulnKu_0ErVMJ0tyAwwgWGbDoCO1afNZRxVh-41vFtTlsUKHZYE5Qo6JCQzmv4OAak6Dq4uvKmjYslH3bZFsYyLGF1QJxI9aMjxEl3MF75ZvaOaGXR3zmDWgXINQDvBgZghTddN-8lvy04mMEeKUH_f_59s1R2onQvn_9QkvHp7SNS5dzlLoD5bd4mYRUUmpXbnJK3dv6fj8zFZ5MjV8i4xtbyCUfzFTDSPQqZf4R3Ou5CgUFpTRF4MoROA7Kc8SvmC4p_KKuOOKLiaxtuVtoO93ZKTUqOKsibs5bS4fW7es-xD1hENiEzHWLslIADqWFgIb_dT5N-gZMHbfjMIxe7WpTQwcnOpxqDPdd3_474atfkuKdPAioncXUduHiPIwotXcMLZSrDucGMfuh7CcHsDImkQAHSYvy9gUc2QQCd7MXtWGIq1QeoJ3SNkvLvaEipNF5A24FQY-INK3oSHG5DRIbVdnZFkU2hS0to157_70qfVpDQUeNoHSoa5LT44fXrcbA1Z8RMAZjjbONoIX2HJqER-DqvWs7_E8YW8zGqPjXNoVT83alv3D2kE6hS7a-V5-lXPIBT24fK_YpHmXSEkMzkgB2rHOnXSNcbXTWb7CM_qH3iMmqVqyxdSefwTNXWnERjQDBrupqyjaDYv7kq7xF7numdhoEO2DdLZAGhMnhiTshvKEHBaDMH07PsycqYWfb0CSofupVGQtZXURWChYj6m_-wUVDyMBAhtbNLyrZ1pAoR6o0xJr74CMkal-3vziG-IDKKIl8-0xOwwQfnz_1VkUjG4jv5cVNrjS10WkFCfP09mo0ZLPpDkUl88GUkwoI3KRTW6JMBwKDnvJXs2U1w_EDdlIhdhcwpe65-r3qTpStJWA","date":"2026-09-16T08:23:14.034Z","timestamp":1789546994034,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lhotsepension.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 31 Aug 2026 16:24:25 GMT","end":"Sun, 29 Nov 2026 16:24:24 GMT"},"fingerprint":{"sha1":"79:96:3C:88:56:8A:C3:21:55:1D:9F:6A:54:5B:04:AA:A1:A7:4A:CE","sha256":"EB:65:72:C0:DD:6B:69:32:AB:3E:65:8B:28:EF:81:49:00:44:E7:75:B4:D3:73:D6:F2:CA:B0:39:BB:DB:6B:C1"}}},"request":{"raw":"GET /s/9f9bb9178892b9189a7a1459021ad5d6288b3f8d85d2ba758685f148991a6e27/7abca5539bc72525e94947d04b5d8089754a019467a21a6a1f0413bf3dea7094.js HTTP/1.1\r\nHost: login.lhotsepension.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://login.lhotsepension.com/p/wIPJNIbGcjRqRFrzfTQo8Hxf-yY5D8OM_6SH--bZ_VKgJdNWxx3Kr9t4B394j1I_kQ-OcJY4atGAn-mRQeDogPPdz39awr5MsLDnYPbgRnHRBo0moEF50-86wVZtV8ix4mxuBeuj1TZZALXSiDL0Yu7QyyGPtjcm90weiH8EujrdygIVR93Ym724FsaO5d6kr4dDM9qV8HZxmy7rAwYz84Zfa0FRXcQyafs7XaTKvZW6a2oETliI9l3Rl38hIjZ4DAFhXvh59uskRfa0GVv07AddmACaALqCtD9cN_2LCV31PoRXUU1Z50awjBdcDR3U0MREAwcguBpni717QUsUNPngwfjWtu64Rnuc1iKsXrc6L2yuEzxZDYmTx9OsX3ZLsztDtKNGZ6l6T_c_GiInu3g8swqaa8bz5z3JqQPElGWzG42D2N1YWo9A3x8fBF7kZRvDWtZypneulnKu_0ErVMJ0tyAwwgWGbDoCO1afNZRxVh-41vFtTlsUKHZYE5Qo6JCQzmv4OAak6Dq4uvKmjYslH3bZFsYyLGF1QJxI9aMjxEl3MF75ZvaOaGXR3zmDWgXINQDvBgZghTddN-8lvy04mMEeKUH_f_59s1R2onQvn_9QkvHp7SNS5dzlLoD5bd4mYRUUmpXbnJK3dv6fj8zFZ5MjV8i4xtbyCUfzFTDSPQqZf4R3Ou5CgUFpTRF4MoROA7Kc8SvmC4p_KKuOOKLiaxtuVtoO93ZKTUqOKsibs5bS4fW7es-xD1hENiEzHWLslIADqWFgIb_dT5N-gZMHbfjMIxe7WpTQwcnOpxqDPdd3_474atfkuKdPAioncXUduHiPIwotXcMLZSrDucGMfuh7CcHsDImkQAHSYvy9gUc2QQCd7MXtWGIq1QeoJ3SNkvLvaEipNF5A24FQY-INK3oSHG5DRIbVdnZFkU2hS0to157_70qfVpDQUeNoHSoa5LT44fXrcbA1Z8RMAZjjbONoIX2HJqER-DqvWs7_E8YW8zGqPjXNoVT83alv3D2kE6hS7a-V5-lXPIBT24fK_YpHmXSEkMzkgB2rHOnXSNcbXTWb7CM_qH3iMmqVqyxdSefwTNXWnERjQDBrupqyjaDYv7kq7xF7numdhoEO2DdLZAGhMnhiTshvKEHBaDMH07PsycqYWfb0CSofupVGQtZXURWChYj6m_-wUVDyMBAhtbNLyrZ1pAoR6o0xJr74CMkal-3vziG-IDKKIl8-0xOwwQfnz_1VkUjG4jv5cVNrjS10WkFCfP09mo0ZLPpDkUl88GUkwoI3KRTW6JMBwKDnvJXs2U1w_EDdlIhdhcwpe65-r3qTpStJWA\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: _vfy=000f7082ce8b47bf; dca2-c058=9f9bb9178892b9189a7a1459021ad5d6288b3f8d85d2ba758685f148991a6e27; fpc=AvF-TwfZythHhgLMKfuuBOq8Ae7AAQAAAO5IPOIOAAAA; esctx=PBgABBwEAAAA9VeaV3ywaSLp1O3c4_Et5RXZvU3RzQXJ0aWZhY3RzDQAAAAAA_bGt8w89VQcEd8EC95i61S_J_VWSNSGB_L-ejN2yRXE63Lh_91ZgpEc2jPHBeFuJ-Oa4k5vGVA7v6cRISksUmgiJZ2IqML6cjOPskcPbpv1ZL9t1kyy3BdELnWco8S1d5i5HYGweEttMSiG2A3NuZJYY2v3nvnL0vjH_LYeU-ZkniQg66wvCVZ0HxSCwsEuv0UrNNiSG_XJLzKtT_DDmCAbKnrw6DFkkk63uVd2Jrs-eX5-An4Yz-7vf1yHc5LCxOUuw2vGL8zHgNiGBaZ3pF-wbm1QmvFCRD4j216jYKwve61ejLTJ4dT_qmqbRXAh5qkhh5LNfHneNwenyFfHs77Xx_TlGzk9iXoEso1xWG1HsvrdZqpbyotXQAjxtBS22mTHvfulLO6C9weL388hWgDzLIkfDisOqvf4dK1MCWyEFAGboAjoqbVj01ilRb2_a0NdFMKVhY8mxBfSWCqMdr6ifYvqRDfNLhdj5gBdXvAgi-m0Tq2i-bWIEt9yz0ow7kiIGujKOFUtORqe4IjNUNI3_iOgH1GavdyN8PILB_5b04o7v5BJCL4U_vNUxq2XqNSJL1uHgGzIjQFva8Gw7O_McOS3Q03gO6_7bjP4S4IkXc_B6UowZ_cIM_1blW-eP1_p1B2Azz2TcPcTrGZT1eLHzMgQ7IZOwQ67rG23CF-ttqigV_Z-dyw7fAj5XXw2LOUjlLWTc8qkrbxtgFAm9rpfHuq4XYJCdyUgtInVnRaogAA; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; buid=1.AUgAMe_N-B6jSkuT5F9XHpElWltEZUfGMrBJg-Ydk3ZSdsoAAABIAA.BgABGgEAAAA9VeaV3ywaSLp1O3c4_Et5RXZvU3RzQXJ0aWZhY3RzAwAAAAAAlqlK_G08O8YzDC0S1tloCHnvBYBlpBdvh6PRaPw3cDIvNgZO5VEm8u3UKlszbPhlmjIlG5zd9kYjjun1LIZ9Yen7mSMNpWIjZwkZ9E_2RLlRnJMPhb2DiuX1sJJJQjB9XE9nZTQCfMeQ1CdXPI5Y04lVmLaT9mqYpGPZTL7G7mt_RrugxhK7_ZlbMNXYTsox7VK26aPQfUXj3fm3LI3fquwcmN3bHpBFewA1v1vEel4-Kozvf0ae60omK3BG7UfjwqU1FbLke9QygfHLFeZTEK6J1AmjLFjP2jpoGlUhgxMUUAbMpvpME7LjOnISDA-zpnLLvS9C-SHbBbOCV4ErFZ4UDuvNKzzktXUdUvknPyqCW7YR4WlJpFcqE7-qdpZpCyLZdpC5aOxqPiFCoOH7o6-g2nwXNGGAM3pqgzvjpiblZCzgEhdsWsN4fAj1thWUrQE5P8f8h19nFhDO15M7ChIAvdEqCd3WeiHasizz_jNjdPl12egezryrnEJmmvXyz3ko85zRkCj15FmAUzWu1-PvU5YQzC4eLw64dopOmZWkBb484uGElMBLlWR3MfZsD5Z7yYggp9V4EoLHDviPi00SPI0dMRFOgokdAH0Gty02q3UiDeQ_Xy3mmikXfEyzf33u5WvlDoaL12d6l_trxaC954Evi2AmxvKIZzpSPL4gAA; esctx-bJNDGVLMrWM=AQABCQEAAAA9VeaV3ywaSLp1O3c4_Et5RXZvU3RzQXJ0aWZhY3RzDQAAAAAAZpuGIME2pqAiVzfUtngWXFae4XvAn6u2XP3tO2MdCBBEpO2_aWtHm9x-DpawKyrskWYmi7rRIKjhs9TUfl4RDvWpsDxACfO_CkPVSB7HjZdi5OZ_N42zbIu80W9mFs5GQ6y2U5U3x_BVNztqM_tn1yAA\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nCache-Control: public, max-age=3600\r\nConnection: close\r\nContent-Type: application/javascript; charset=utf-8\r\nServer: Microsoft-IIS/10.0\r\nTransfer-Encoding: chunked\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Windows Server","description":"Windows Server is a brand name for a group of server operating systems.","website":"https://microsoft.com/windowsserver","common_platform_enumeration":"","icon":"WindowsServer.png","categories":["Operating systems"]},{"name":"IIS:10.0","description":"Internet Information Services (IIS) is an extensible web server software created by Microsoft for use with the Windows NT family.","website":"https://www.iis.net","common_platform_enumeration":"cpe:2.3:a:microsoft:internet_information_server:*:*:*:*:*:*:*:*","icon":"Microsoft.svg","categories":["Web servers"]}],"data":{"size":1615,"size_decoded":1799,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (690)","md5":"4bb8355e028c0d6980743ca8990f62c1","sha1":"ad8b8506e85d6098aed75dcf5a93ed64066e17db","sha256":"217f1cf05043808da1763b6e816c7353507e1ccbb724e31e4211caba58a472c5","sha512":"fa19f86d412edb96bd5025558a8ad04f403fb3298bf3d9c9cf3cad8bf888ce527c20be3ce8a0c1837bd952efb5b8a4bf50c1a135f33a3254cbdc51ae89ca34f9","ssdeep":"","tlshash":"943122b136c72cb207a6a47a13ff724975bba7971c01d8824d21dcc42eb0c2bb495d99","first_seen":"2026-09-09T19:31:59.288568Z","last_seen":"2026-09-16T08:23:36.241248Z","times_seen":6,"resource_available":true,"data":null}},"time_used":1044,"timings":{"blocked":0,"dns":0,"connect":52,"send":0,"wait":55,"receive":412,"ssl":525},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Microsoft","verdict":"phishing","severity":"medium","comment":"Resource associated with Microsoft phishing","tags":["microsoft","phishing"],"meta":null},{"sensor_name":"urlquery","alert":"Phishing - Microsoft Outlook","verdict":"phishing","severity":"medium","comment":"","tags":["phishing","microsoft","outlook"],"meta":{"engine":"luna_v2","pattern_id":"microsoft.phishing_ms_suspiciousjs.1"}}]}},{"url":{"schema":"https","addr":"wlp66.vercel.app/_next/static/chunks/457b8330-0db14d6fcdb25a3f.js","fqdn":"wlp66.vercel.app","domain":"wlp66.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.3","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://wlp66.vercel.app/","date":"2026-09-16T08:22:58.973Z","timestamp":1789546978973,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Sat, 29 Aug 2026 19:48:09 GMT","end":"Fri, 27 Nov 2026 19:48:08 GMT"},"fingerprint":{"sha1":"E9:FE:9E:58:E9:B3:95:78:1F:9A:AE:FE:41:C4:01:64:C9:FB:2A:BC","sha256":"8F:46:C4:A0:A2:89:BF:DE:40:60:D0:69:86:F2:AF:76:1E:E6:2D:66:8D:DE:97:2E:6B:EF:46:87:EE:4F:60:93"}}},"request":{"raw":"GET /_next/static/chunks/457b8330-0db14d6fcdb25a3f.js HTTP/1.1\r\nHost: wlp66.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://wlp66.vercel.app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\nage: 82610\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"457b8330-0db14d6fcdb25a3f.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Wed, 16 Sep 2026 08:22:59 GMT\r\netag: W/\"3c6ee1e0cdfbf61e844c643e9c24e0d3\"\r\nlast-modified: Tue, 15 Sep 2026 09:26:08 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-matched-path: /_next/static/chunks/457b8330-0db14d6fcdb25a3f.js\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::s4jvj-1789546979008-3475c075e2df\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":153633,"size_decoded":39400,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (13618), with CRLF line terminators","md5":"3c6ee1e0cdfbf61e844c643e9c24e0d3","sha1":"271ea3417991e8685c5edfd9449ef415f5e3e75f","sha256":"6a047f74b23acd61642d37b9883a61d95344dccf6f30f1bb8b065df5b552cf39","sha512":"3f62442b315e2bf8a534523784f92fa5e4161386dec0f812af0b473d29f4cf658136ab64bb788fe83a8d2c55633b80e7eee4a3c0cdf452f5a7752d8d38e09981","ssdeep":"3072:ZeiWTlQW61hPkFrbNkhWyOZe6oJzJcapJIJTJXJgJBJBJrJVJ4JCJNJSDUMDq8FE:Zei6QW61hPkNNkrOZe6o9hKdhGz/x7a+","tlshash":"fbe3eb693741762313f982da9927c087f32995a4290e053cb9bcc9d6393568a61ffff0","first_seen":"2025-07-03T11:57:40.906782Z","last_seen":"2026-09-16T08:23:36.24199Z","times_seen":21,"resource_available":true,"data":null}},"time_used":121,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":121,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"wlp66.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-16","alert":"Phishing Block","trigger":"wlp66.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"wlp66.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"wlp66.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wlp66.vercel.app/images/img11.jpeg","fqdn":"wlp66.vercel.app","domain":"wlp66.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.3","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wlp66.vercel.app/","date":"2026-09-16T08:22:58.989Z","timestamp":1789546978989,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Sat, 29 Aug 2026 19:48:09 GMT","end":"Fri, 27 Nov 2026 19:48:08 GMT"},"fingerprint":{"sha1":"E9:FE:9E:58:E9:B3:95:78:1F:9A:AE:FE:41:C4:01:64:C9:FB:2A:BC","sha256":"8F:46:C4:A0:A2:89:BF:DE:40:60:D0:69:86:F2:AF:76:1E:E6:2D:66:8D:DE:97:2E:6B:EF:46:87:EE:4F:60:93"}}},"request":{"raw":"GET /images/img11.jpeg HTTP/1.1\r\nHost: wlp66.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://wlp66.vercel.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 82611\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"img11.jpeg\"\r\ncontent-type: image/jpeg\r\ndate: Wed, 16 Sep 2026 08:22:59 GMT\r\netag: \"ddfa2c0286873ee105d420251b96b01c\"\r\nlast-modified: Tue, 15 Sep 2026 09:26:08 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-matched-path: /images/img11.jpeg\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::wxp26-1789546979034-b87616acaa22\r\ncontent-length: 21610\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":21610,"size_decoded":22187,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 234x229, components 3","md5":"ddfa2c0286873ee105d420251b96b01c","sha1":"752da44d3fb63fb9576a89b70f196d7ace841a2e","sha256":"550a6ae5017897feb6d06d04a72a3e75d5c01292c34b2ffe02849348e6719a1f","sha512":"0d056e52d5dbbf1c8e59a7459d3cad590d2b5788b0ac590a787f3e8b773ab37b51574280c471e61b4e344a16df145d656585aedb458a450691bbcf163b40a181","ssdeep":"384:3mYyuQxi5n/lQ3n0j0DhlZWaAhWN/dri41SUftZ0jV5/VU/zJloIjFs:WYfQ2/GX0julWaAoN/RjtZ0R59OzPoJ","tlshash":"b8a2e14e06498f22e2e1c2f993aff194133aa6df375744c20956ff17387c3d46256985","first_seen":"2025-04-15T16:09:16.332279Z","last_seen":"2026-09-16T08:23:36.242724Z","times_seen":32,"resource_available":false,"data":null}},"time_used":3354,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2930,"receive":424,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"wlp66.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-16","alert":"Phishing Block","trigger":"wlp66.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"wlp66.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"wlp66.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"wss","addr":"wss://mada-ce342-default-rtdb.firebaseio.com/.ws?v=5\u0026p=1:632616812557:web:b3896c51452f6f14a75544","fqdn":"mada-ce342-default-rtdb.firebaseio.com","domain":"firebaseio.com","tld":"com"},"ip":{"addr":"35.190.39.113","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://wlp66.vercel.app/","date":"2026-09-16T08:23:02.818Z","timestamp":1789546982818,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.us-central1.firebasedatabase.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Sep 2026 14:02:57 GMT","end":"Thu, 03 Dec 2026 14:02:56 GMT"},"fingerprint":{"sha1":"5B:22:52:4C:40:D1:DD:84:BE:67:1A:77:D5:BF:91:17:16:F4:D2:2A","sha256":"17:0B:2D:EF:1E:9C:89:C5:99:70:F2:5C:62:FF:E6:4C:0F:BA:73:98:9C:D2:9A:09:8D:C0:A2:D4:05:D8:7E:D7"}}},"request":{"raw":"GET /.ws?v=5\u0026p=1:632616812557:web:b3896c51452f6f14a75544 HTTP/1.1\r\nHost: mada-ce342-default-rtdb.firebaseio.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-WebSocket-Version: 13\r\nOrigin: https://wlp66.vercel.app\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: ek3QDRDGLBCOxFnZs1UWoQ==\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: Upgrade\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 101 Switching Protocols\r\nServer: nginx\r\nDate: Wed, 16 Sep 2026 08:23:03 GMT\r\nConnection: upgrade\r\nUpgrade: websocket\r\nSec-WebSocket-Accept: HCsdnuC5pmaJysxGGCrfHHOvkyE=\r\nStrict-Transport-Security: max-age=31556926; includeSubDomains; preload\r\n\r\n","headers":null,"cookies":null,"status_code":"101","status_text":"Switching Protocols","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"WebSocket","description":"WebSocket is a communication protocol that provides full-duplex communication channels over a single, long-lived connection, enabling interactive communication between web browsers and servers.","website":"https://en.wikipedia.org/wiki/WebSocket","common_platform_enumeration":"","icon":"WebSocket.svg","categories":["Miscellaneous"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":254,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-16T09:51:46.278028Z","times_seen":18492779,"resource_available":true,"data":null}},"time_used":629,"timings":{"blocked":0,"dns":54,"connect":45,"send":0,"wait":180,"receive":0,"ssl":350},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rpdfphaesngaedeyuahf.supabase.co/storage/v1/object/public/images/images/image_1789356293949_Capture.PNG","fqdn":"rpdfphaesngaedeyuahf.supabase.co","domain":"rpdfphaesngaedeyuahf.supabase.co","tld":"supabase.co"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wlp66.vercel.app/","date":"2026-09-16T08:23:03.671Z","timestamp":1789546983671,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /storage/v1/object/public/images/images/image_1789356293949_Capture.PNG HTTP/1.1\r\nHost: rpdfphaesngaedeyuahf.supabase.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://wlp66.vercel.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-16T09:51:46.278028Z","times_seen":18492779,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kl4rdcnxwm.lhotsepension.com/cncjtd1x-irzqri5er1-coapo8gah34d8-julfqhncbnxvx","fqdn":"kl4rdcnxwm.lhotsepension.com","domain":"lhotsepension.com","tld":"com"},"ip":{"addr":"85.11.167.134","port":443,"asn":6830,"as":"Liberty Global B.V.","country":"Bulgaria","country_code":"BG"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-16T08:23:08.929Z","timestamp":1789546988929,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lhotsepension.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 31 Aug 2026 16:24:25 GMT","end":"Sun, 29 Nov 2026 16:24:24 GMT"},"fingerprint":{"sha1":"79:96:3C:88:56:8A:C3:21:55:1D:9F:6A:54:5B:04:AA:A1:A7:4A:CE","sha256":"EB:65:72:C0:DD:6B:69:32:AB:3E:65:8B:28:EF:81:49:00:44:E7:75:B4:D3:73:D6:F2:CA:B0:39:BB:DB:6B:C1"}}},"request":{"raw":"GET /cncjtd1x-irzqri5er1-coapo8gah34d8-julfqhncbnxvx HTTP/1.1\r\nHost: kl4rdcnxwm.lhotsepension.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://wlp66.vercel.app/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nConnection: close\r\nContent-Type: text/html\r\nServer: Apache/2.4.48\r\nTransfer-Encoding: chunked\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server:2.4.48","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":14625,"size_decoded":14739,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text","md5":"6cef3fbcf750af4b678658d989740b51","sha1":"8fa635981c7b643858ae4661610a9504deaaa9f5","sha256":"73a6d06a12ffc4ee3441ad8cbc7a34bbd89740604f5497fdddd4c6c98b829a4d","sha512":"f384074f2303a13256e7724d140bb567378c091fb311d8a3b55652123950e13e2afa721c6da628349f79a2656fbd078140e5a6d2ed0d4460369b7887dd9cab34","ssdeep":"192:fLr4agqvrymmxvKHrL/nZomANJhDs5ijkUrQ6rncFU/PJ1QEH1RQ8Vekcf1I/V6:fLrBgmyRSGmArkJGF/THXLs+V6","tlshash":"11622cb5296204b5137324783a7f1f0832f1c24baa89e544f4de2a147facb53825abf4","first_seen":"2026-09-16T08:23:36.243511Z","last_seen":"2026-09-16T08:23:36.243511Z","times_seen":1,"resource_available":false,"data":null}},"time_used":809,"timings":{"blocked":-1,"dns":46,"connect":52,"send":0,"wait":53,"receive":261,"ssl":397},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"login.lhotsepension.com/static/chunk-c679e15d.js","fqdn":"login.lhotsepension.com","domain":"lhotsepension.com","tld":"com"},"ip":{"addr":"85.11.167.134","port":443,"asn":6830,"as":"Liberty Global B.V.","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://login.lhotsepension.com/p/wIPJNIbGcjRqRFrzfTQo8Hxf-yY5D8OM_6SH--bZ_VKgJdNWxx3Kr9t4B394j1I_kQ-OcJY4atGAn-mRQeDogPPdz39awr5MsLDnYPbgRnHRBo0moEF50-86wVZtV8ix4mxuBeuj1TZZALXSiDL0Yu7QyyGPtjcm90weiH8EujrdygIVR93Ym724FsaO5d6kr4dDM9qV8HZxmy7rAwYz84Zfa0FRXcQyafs7XaTKvZW6a2oETliI9l3Rl38hIjZ4DAFhXvh59uskRfa0GVv07AddmACaALqCtD9cN_2LCV31PoRXUU1Z50awjBdcDR3U0MREAwcguBpni717QUsUNPngwfjWtu64Rnuc1iKsXrc6L2yuEzxZDYmTx9OsX3ZLsztDtKNGZ6l6T_c_GiInu3g8swqaa8bz5z3JqQPElGWzG42D2N1YWo9A3x8fBF7kZRvDWtZypneulnKu_0ErVMJ0tyAwwgWGbDoCO1afNZRxVh-41vFtTlsUKHZYE5Qo6JCQzmv4OAak6Dq4uvKmjYslH3bZFsYyLGF1QJxI9aMjxEl3MF75ZvaOaGXR3zmDWgXINQDvBgZghTddN-8lvy04mMEeKUH_f_59s1R2onQvn_9QkvHp7SNS5dzlLoD5bd4mYRUUmpXbnJK3dv6fj8zFZ5MjV8i4xtbyCUfzFTDSPQqZf4R3Ou5CgUFpTRF4MoROA7Kc8SvmC4p_KKuOOKLiaxtuVtoO93ZKTUqOKsibs5bS4fW7es-xD1hENiEzHWLslIADqWFgIb_dT5N-gZMHbfjMIxe7WpTQwcnOpxqDPdd3_474atfkuKdPAioncXUduHiPIwotXcMLZSrDucGMfuh7CcHsDImkQAHSYvy9gUc2QQCd7MXtWGIq1QeoJ3SNkvLvaEipNF5A24FQY-INK3oSHG5DRIbVdnZFkU2hS0to157_70qfVpDQUeNoHSoa5LT44fXrcbA1Z8RMAZjjbONoIX2HJqER-DqvWs7_E8YW8zGqPjXNoVT83alv3D2kE6hS7a-V5-lXPIBT24fK_YpHmXSEkMzkgB2rHOnXSNcbXTWb7CM_qH3iMmqVqyxdSefwTNXWnERjQDBrupqyjaDYv7kq7xF7numdhoEO2DdLZAGhMnhiTshvKEHBaDMH07PsycqYWfb0CSofupVGQtZXURWChYj6m_-wUVDyMBAhtbNLyrZ1pAoR6o0xJr74CMkal-3vziG-IDKKIl8-0xOwwQfnz_1VkUjG4jv5cVNrjS10WkFCfP09mo0ZLPpDkUl88GUkwoI3KRTW6JMBwKDnvJXs2U1w_EDdlIhdhcwpe65-r3qTpStJWA","date":"2026-09-16T08:23:14.032Z","timestamp":1789546994032,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lhotsepension.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 31 Aug 2026 16:24:25 GMT","end":"Sun, 29 Nov 2026 16:24:24 GMT"},"fingerprint":{"sha1":"79:96:3C:88:56:8A:C3:21:55:1D:9F:6A:54:5B:04:AA:A1:A7:4A:CE","sha256":"EB:65:72:C0:DD:6B:69:32:AB:3E:65:8B:28:EF:81:49:00:44:E7:75:B4:D3:73:D6:F2:CA:B0:39:BB:DB:6B:C1"}}},"request":{"raw":"GET /static/chunk-c679e15d.js HTTP/1.1\r\nHost: login.lhotsepension.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://login.lhotsepension.com/p/wIPJNIbGcjRqRFrzfTQo8Hxf-yY5D8OM_6SH--bZ_VKgJdNWxx3Kr9t4B394j1I_kQ-OcJY4atGAn-mRQeDogPPdz39awr5MsLDnYPbgRnHRBo0moEF50-86wVZtV8ix4mxuBeuj1TZZALXSiDL0Yu7QyyGPtjcm90weiH8EujrdygIVR93Ym724FsaO5d6kr4dDM9qV8HZxmy7rAwYz84Zfa0FRXcQyafs7XaTKvZW6a2oETliI9l3Rl38hIjZ4DAFhXvh59uskRfa0GVv07AddmACaALqCtD9cN_2LCV31PoRXUU1Z50awjBdcDR3U0MREAwcguBpni717QUsUNPngwfjWtu64Rnuc1iKsXrc6L2yuEzxZDYmTx9OsX3ZLsztDtKNGZ6l6T_c_GiInu3g8swqaa8bz5z3JqQPElGWzG42D2N1YWo9A3x8fBF7kZRvDWtZypneulnKu_0ErVMJ0tyAwwgWGbDoCO1afNZRxVh-41vFtTlsUKHZYE5Qo6JCQzmv4OAak6Dq4uvKmjYslH3bZFsYyLGF1QJxI9aMjxEl3MF75ZvaOaGXR3zmDWgXINQDvBgZghTddN-8lvy04mMEeKUH_f_59s1R2onQvn_9QkvHp7SNS5dzlLoD5bd4mYRUUmpXbnJK3dv6fj8zFZ5MjV8i4xtbyCUfzFTDSPQqZf4R3Ou5CgUFpTRF4MoROA7Kc8SvmC4p_KKuOOKLiaxtuVtoO93ZKTUqOKsibs5bS4fW7es-xD1hENiEzHWLslIADqWFgIb_dT5N-gZMHbfjMIxe7WpTQwcnOpxqDPdd3_474atfkuKdPAioncXUduHiPIwotXcMLZSrDucGMfuh7CcHsDImkQAHSYvy9gUc2QQCd7MXtWGIq1QeoJ3SNkvLvaEipNF5A24FQY-INK3oSHG5DRIbVdnZFkU2hS0to157_70qfVpDQUeNoHSoa5LT44fXrcbA1Z8RMAZjjbONoIX2HJqER-DqvWs7_E8YW8zGqPjXNoVT83alv3D2kE6hS7a-V5-lXPIBT24fK_YpHmXSEkMzkgB2rHOnXSNcbXTWb7CM_qH3iMmqVqyxdSefwTNXWnERjQDBrupqyjaDYv7kq7xF7numdhoEO2DdLZAGhMnhiTshvKEHBaDMH07PsycqYWfb0CSofupVGQtZXURWChYj6m_-wUVDyMBAhtbNLyrZ1pAoR6o0xJr74CMkal-3vziG-IDKKIl8-0xOwwQfnz_1VkUjG4jv5cVNrjS10WkFCfP09mo0ZLPpDkUl88GUkwoI3KRTW6JMBwKDnvJXs2U1w_EDdlIhdhcwpe65-r3qTpStJWA\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: _vfy=000f7082ce8b47bf; dca2-c058=9f9bb9178892b9189a7a1459021ad5d6288b3f8d85d2ba758685f148991a6e27; fpc=AvF-TwfZythHhgLMKfuuBOq8Ae7AAQAAAO5IPOIOAAAA; esctx=PBgABBwEAAAA9VeaV3ywaSLp1O3c4_Et5RXZvU3RzQXJ0aWZhY3RzDQAAAAAA_bGt8w89VQcEd8EC95i61S_J_VWSNSGB_L-ejN2yRXE63Lh_91ZgpEc2jPHBeFuJ-Oa4k5vGVA7v6cRISksUmgiJZ2IqML6cjOPskcPbpv1ZL9t1kyy3BdELnWco8S1d5i5HYGweEttMSiG2A3NuZJYY2v3nvnL0vjH_LYeU-ZkniQg66wvCVZ0HxSCwsEuv0UrNNiSG_XJLzKtT_DDmCAbKnrw6DFkkk63uVd2Jrs-eX5-An4Yz-7vf1yHc5LCxOUuw2vGL8zHgNiGBaZ3pF-wbm1QmvFCRD4j216jYKwve61ejLTJ4dT_qmqbRXAh5qkhh5LNfHneNwenyFfHs77Xx_TlGzk9iXoEso1xWG1HsvrdZqpbyotXQAjxtBS22mTHvfulLO6C9weL388hWgDzLIkfDisOqvf4dK1MCWyEFAGboAjoqbVj01ilRb2_a0NdFMKVhY8mxBfSWCqMdr6ifYvqRDfNLhdj5gBdXvAgi-m0Tq2i-bWIEt9yz0ow7kiIGujKOFUtORqe4IjNUNI3_iOgH1GavdyN8PILB_5b04o7v5BJCL4U_vNUxq2XqNSJL1uHgGzIjQFva8Gw7O_McOS3Q03gO6_7bjP4S4IkXc_B6UowZ_cIM_1blW-eP1_p1B2Azz2TcPcTrGZT1eLHzMgQ7IZOwQ67rG23CF-ttqigV_Z-dyw7fAj5XXw2LOUjlLWTc8qkrbxtgFAm9rpfHuq4XYJCdyUgtInVnRaogAA; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; buid=1.AUgAMe_N-B6jSkuT5F9XHpElWltEZUfGMrBJg-Ydk3ZSdsoAAABIAA.BgABGgEAAAA9VeaV3ywaSLp1O3c4_Et5RXZvU3RzQXJ0aWZhY3RzAwAAAAAAlqlK_G08O8YzDC0S1tloCHnvBYBlpBdvh6PRaPw3cDIvNgZO5VEm8u3UKlszbPhlmjIlG5zd9kYjjun1LIZ9Yen7mSMNpWIjZwkZ9E_2RLlRnJMPhb2DiuX1sJJJQjB9XE9nZTQCfMeQ1CdXPI5Y04lVmLaT9mqYpGPZTL7G7mt_RrugxhK7_ZlbMNXYTsox7VK26aPQfUXj3fm3LI3fquwcmN3bHpBFewA1v1vEel4-Kozvf0ae60omK3BG7UfjwqU1FbLke9QygfHLFeZTEK6J1AmjLFjP2jpoGlUhgxMUUAbMpvpME7LjOnISDA-zpnLLvS9C-SHbBbOCV4ErFZ4UDuvNKzzktXUdUvknPyqCW7YR4WlJpFcqE7-qdpZpCyLZdpC5aOxqPiFCoOH7o6-g2nwXNGGAM3pqgzvjpiblZCzgEhdsWsN4fAj1thWUrQE5P8f8h19nFhDO15M7ChIAvdEqCd3WeiHasizz_jNjdPl12egezryrnEJmmvXyz3ko85zRkCj15FmAUzWu1-PvU5YQzC4eLw64dopOmZWkBb484uGElMBLlWR3MfZsD5Z7yYggp9V4EoLHDviPi00SPI0dMRFOgokdAH0Gty02q3UiDeQ_Xy3mmikXfEyzf33u5WvlDoaL12d6l_trxaC954Evi2AmxvKIZzpSPL4gAA; esctx-bJNDGVLMrWM=AQABCQEAAAA9VeaV3ywaSLp1O3c4_Et5RXZvU3RzQXJ0aWZhY3RzDQAAAAAAZpuGIME2pqAiVzfUtngWXFae4XvAn6u2XP3tO2MdCBBEpO2_aWtHm9x-DpawKyrskWYmi7rRIKjhs9TUfl4RDvWpsDxACfO_CkPVSB7HjZdi5OZ_N42zbIu80W9mFs5GQ6y2U5U3x_BVNztqM_tn1yAA\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nConnection: close\r\nContent-Type: application/javascript\r\nServer: Microsoft-IIS/10.0\r\nTransfer-Encoding: chunked\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"IIS:10.0","description":"Internet Information Services (IIS) is an extensible web server software created by Microsoft for use with the Windows NT family.","website":"https://www.iis.net","common_platform_enumeration":"cpe:2.3:a:microsoft:internet_information_server:*:*:*:*:*:*:*:*","icon":"Microsoft.svg","categories":["Web servers"]},{"name":"Windows Server","description":"Windows Server is a brand name for a group of server operating systems.","website":"https://microsoft.com/windowsserver","common_platform_enumeration":"","icon":"WindowsServer.png","categories":["Operating systems"]}],"data":{"size":0,"size_decoded":132,"mime_type":"application/javascript","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-16T09:51:46.278028Z","times_seen":18492779,"resource_available":true,"data":null}},"time_used":635,"timings":{"blocked":0,"dns":0,"connect":52,"send":0,"wait":52,"receive":54,"ssl":476},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Microsoft","verdict":"phishing","severity":"medium","comment":"Resource associated with Microsoft phishing","tags":["microsoft","phishing"],"meta":null},{"sensor_name":"urlquery","alert":"Phishing - Microsoft Outlook","verdict":"phishing","severity":"medium","comment":"","tags":["phishing","microsoft","outlook"],"meta":{"engine":"luna_v2","pattern_id":"microsoft.phishing_ms_suspiciousjs.1"}}]}},{"url":{"schema":"https","addr":"wlp66.vercel.app/images/img9.jpeg","fqdn":"wlp66.vercel.app","domain":"wlp66.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.3","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wlp66.vercel.app/","date":"2026-09-16T08:22:58.985Z","timestamp":1789546978985,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Sat, 29 Aug 2026 19:48:09 GMT","end":"Fri, 27 Nov 2026 19:48:08 GMT"},"fingerprint":{"sha1":"E9:FE:9E:58:E9:B3:95:78:1F:9A:AE:FE:41:C4:01:64:C9:FB:2A:BC","sha256":"8F:46:C4:A0:A2:89:BF:DE:40:60:D0:69:86:F2:AF:76:1E:E6:2D:66:8D:DE:97:2E:6B:EF:46:87:EE:4F:60:93"}}},"request":{"raw":"GET /images/img9.jpeg HTTP/1.1\r\nHost: wlp66.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://wlp66.vercel.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 0\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"img9.jpeg\"\r\ncontent-type: image/jpeg\r\ndate: Wed, 16 Sep 2026 08:22:59 GMT\r\netag: \"241c580acb48db7268e0537e40b4dcac\"\r\nlast-modified: Wed, 16 Sep 2026 08:22:59 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-matched-path: /images/img9.jpeg\r\nx-vercel-cache: MISS\r\nx-vercel-id: arn1::l6qwm-1789546979033-2f02539bd7b1\r\ncontent-length: 41049\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":41049,"size_decoded":41621,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 1200x1553, components 3","md5":"241c580acb48db7268e0537e40b4dcac","sha1":"5bc78668c9ecda448c7c686669f58209eea53486","sha256":"b2b4fe7fb49bcacf3cf65b15cee04cadffdab898e34fc50f6e3c7b91736defe8","sha512":"fe2289194d10fc02e0a98e53886fe1d4249a540dd38f05c388d40c2b7455cefb2cbaf1831d5228fb5ba43f06c1d83de6717b2b730e3e5785df1073944c14ddc2","ssdeep":"768:bPvDvFTa2ai6i8145DUIjFgYWIr2xBl+kWP95ChbM3xmGqmer:bP7pei6i814JUkH9abl+P95Cb6qZr","tlshash":"d703e0067e3b29b0facb5db47701c43147c93d3132e1fbd651994e8279be79d248a288","first_seen":"2025-04-15T16:09:16.32752Z","last_seen":"2026-09-16T08:23:36.245236Z","times_seen":33,"resource_available":false,"data":null}},"time_used":4345,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3460,"receive":885,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-16","alert":"Phishing Block","trigger":"wlp66.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"wlp66.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"wlp66.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"wlp66.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rpdfphaesngaedeyuahf.supabase.co/storage/v1/object/public/images/images/image_1787528404740_1.jpg","fqdn":"rpdfphaesngaedeyuahf.supabase.co","domain":"rpdfphaesngaedeyuahf.supabase.co","tld":"supabase.co"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wlp66.vercel.app/","date":"2026-09-16T08:23:03.665Z","timestamp":1789546983665,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /storage/v1/object/public/images/images/image_1787528404740_1.jpg HTTP/1.1\r\nHost: rpdfphaesngaedeyuahf.supabase.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://wlp66.vercel.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-16T09:51:46.278028Z","times_seen":18492779,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kl4rdcnxwm.lhotsepension.com/cncjtd1x-irzqri5er1-coapo8gah34d8-julfqhncbnxvx","fqdn":"kl4rdcnxwm.lhotsepension.com","domain":"lhotsepension.com","tld":"com"},"ip":{"addr":"85.11.167.134","port":443,"asn":6830,"as":"Liberty Global B.V.","country":"Bulgaria","country_code":"BG"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-16T08:23:10.249Z","timestamp":1789546990249,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lhotsepension.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 31 Aug 2026 16:24:25 GMT","end":"Sun, 29 Nov 2026 16:24:24 GMT"},"fingerprint":{"sha1":"79:96:3C:88:56:8A:C3:21:55:1D:9F:6A:54:5B:04:AA:A1:A7:4A:CE","sha256":"EB:65:72:C0:DD:6B:69:32:AB:3E:65:8B:28:EF:81:49:00:44:E7:75:B4:D3:73:D6:F2:CA:B0:39:BB:DB:6B:C1"}}},"request":{"raw":"GET /cncjtd1x-irzqri5er1-coapo8gah34d8-julfqhncbnxvx HTTP/1.1\r\nHost: kl4rdcnxwm.lhotsepension.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kl4rdcnxwm.lhotsepension.com/cncjtd1x-irzqri5er1-coapo8gah34d8-julfqhncbnxvx\r\nCookie: _vfy=000f7082ce8b47bf; _vfy=000f7082ce8b47bf\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 302 Found\r\nConnection: close\r\nContent-Type: text/html\r\nLocation: https://login.lhotsepension.com/p/2SXU7ELjhO1F-9min_5cvvX4PfYR68Aj12xvMw\r\nServer: Apache/2.4.48\r\nSet-Cookie: dca2-c058=9f9bb9178892b9189a7a1459021ad5d6288b3f8d85d2ba758685f148991a6e27; Path=/; Domain=lhotsepension.com; Expires=Thu, 16 Sep 2027 08:23:10 GMT; HttpOnly; Secure; SameSite=None\r\nTransfer-Encoding: chunked\r\n\r\n","headers":null,"cookies":[{"name":"dca2-c058","value":"9f9bb9178892b9189a7a1459021ad5d6288b3f8d85d2ba758685f148991a6e27","quoted":false,"path":"/","domain":"lhotsepension.com","expires":"2027-09-16T08:23:10Z","raw_expires":"Thu, 16 Sep 2027 08:23:10 GMT","secure":true,"http_only":true,"same_site":"None","partitioned":false,"raw":"dca2-c058=9f9bb9178892b9189a7a1459021ad5d6288b3f8d85d2ba758685f148991a6e27; Path=/; Domain=lhotsepension.com; Expires=Thu, 16 Sep 2027 08:23:10 GMT; HttpOnly; Secure; SameSite=None"}],"status_code":"302","status_text":"Found","fingerprints":[{"name":"Apache HTTP Server:2.4.48","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-16T09:51:46.278028Z","times_seen":18492779,"resource_available":true,"data":null}},"time_used":264,"timings":{"blocked":0,"dns":0,"connect":53,"send":0,"wait":52,"receive":104,"ssl":55},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.wlp66.vercel.app/","fqdn":"www.wlp66.vercel.app","domain":"wlp66.vercel.app","tld":"vercel.app"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-16T08:22:53.475Z","timestamp":1789546973475,"http_version":"","security_state":"broken","security_info":null,"request":{"raw":"GET / HTTP/1.1\r\nHost: www.wlp66.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-16T09:51:46.278028Z","times_seen":18492779,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"www.wlp66.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-16","alert":"Phishing Block","trigger":"www.wlp66.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"www.wlp66.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"www.wlp66.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wlp66.vercel.app/_next/static/css/850324953c5adf71.css","fqdn":"wlp66.vercel.app","domain":"wlp66.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.3","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://wlp66.vercel.app/","date":"2026-09-16T08:22:58.958Z","timestamp":1789546978958,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Sat, 29 Aug 2026 19:48:09 GMT","end":"Fri, 27 Nov 2026 19:48:08 GMT"},"fingerprint":{"sha1":"E9:FE:9E:58:E9:B3:95:78:1F:9A:AE:FE:41:C4:01:64:C9:FB:2A:BC","sha256":"8F:46:C4:A0:A2:89:BF:DE:40:60:D0:69:86:F2:AF:76:1E:E6:2D:66:8D:DE:97:2E:6B:EF:46:87:EE:4F:60:93"}}},"request":{"raw":"GET /_next/static/css/850324953c5adf71.css HTTP/1.1\r\nHost: wlp66.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://wlp66.vercel.app/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\nage: 82610\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"850324953c5adf71.css\"\r\ncontent-encoding: br\r\ncontent-type: text/css; charset=utf-8\r\ndate: Wed, 16 Sep 2026 08:22:59 GMT\r\netag: W/\"661ab4e7449c550d4bfcc4044f71b2c4\"\r\nlast-modified: Tue, 15 Sep 2026 09:26:08 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-matched-path: /_next/static/css/850324953c5adf71.css\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::bcrkv-1789546978993-ed1e2bbe73cb\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":14088,"size_decoded":4633,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (11795)","md5":"661ab4e7449c550d4bfcc4044f71b2c4","sha1":"0acc28923a24167edfd61092ccd1564db0517e21","sha256":"453913112d8d764fab39a46b5db6c5fd6964397756ad7b903dbbb3861f61a6d3","sha512":"d19d2726af8be5de465ade1d039e5de2ea98c31a890d9fa31e83f81bfd89465ea70db335f7d2a889e308009ff73c03e7f85415ec85c933d758486a7204fb9ed4","ssdeep":"192:Y7JXYS7JXYdFwgaHsfdLE//6rSQoI6GUmiR70tTvy101a87vtvHh:GHWw9L/6rZL6GU5Avy101a871p","tlshash":"6152a8156200113dfe13c4e9e9e4b79d7029b1c2ef3ea7f9ba85611697c72f609e3244","first_seen":"2025-07-03T11:57:40.88346Z","last_seen":"2026-09-16T08:23:36.246Z","times_seen":14,"resource_available":false,"data":null}},"time_used":101,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":101,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"wlp66.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"wlp66.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-16","alert":"Phishing Block","trigger":"wlp66.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"wlp66.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wlp66.vercel.app/_next/static/chunks/main-app-f73cdb3bce740b12.js","fqdn":"wlp66.vercel.app","domain":"wlp66.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.3","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://wlp66.vercel.app/","date":"2026-09-16T08:22:58.971Z","timestamp":1789546978971,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Sat, 29 Aug 2026 19:48:09 GMT","end":"Fri, 27 Nov 2026 19:48:08 GMT"},"fingerprint":{"sha1":"E9:FE:9E:58:E9:B3:95:78:1F:9A:AE:FE:41:C4:01:64:C9:FB:2A:BC","sha256":"8F:46:C4:A0:A2:89:BF:DE:40:60:D0:69:86:F2:AF:76:1E:E6:2D:66:8D:DE:97:2E:6B:EF:46:87:EE:4F:60:93"}}},"request":{"raw":"GET /_next/static/chunks/main-app-f73cdb3bce740b12.js HTTP/1.1\r\nHost: wlp66.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://wlp66.vercel.app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 0\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"main-app-f73cdb3bce740b12.js\"\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Wed, 16 Sep 2026 08:22:59 GMT\r\netag: \"8eedc9e8ab2a40373eb62a03672a39d1\"\r\nlast-modified: Wed, 16 Sep 2026 08:22:59 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-matched-path: /_next/static/chunks/main-app-f73cdb3bce740b12.js\r\nx-vercel-cache: MISS\r\nx-vercel-id: arn1::bcrkv-1789546979006-356310026a7f\r\ncontent-length: 462\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":462,"size_decoded":1109,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (462), with no line terminators","md5":"8eedc9e8ab2a40373eb62a03672a39d1","sha1":"7166b229fb4d45e4c29febef9dd84c25fdc9425d","sha256":"e70d963e7f59350b16dcba9796ad8aec2001738b6756509c4ea77e2bfb0921f0","sha512":"628e976f569bf76db31e604a43c51c426cb5ef80e32eff0bc7a820df01e2a88735a3712b794be77b1054eff3c5914d474d2689a16fcfdc4df1d2410dea247363","ssdeep":"","tlshash":"99f0829d274db12f2923aa20fdd35c2e285e417428675d501615def12c376a883f1c38","first_seen":"2024-05-03T14:53:15Z","last_seen":"2026-09-16T08:23:36.246792Z","times_seen":1186,"resource_available":true,"data":null}},"time_used":3473,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3473,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"wlp66.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"wlp66.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-16","alert":"Phishing Block","trigger":"wlp66.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"wlp66.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wlp66.vercel.app/_next/static/chunks/53c13509-51a37691af359660.js","fqdn":"wlp66.vercel.app","domain":"wlp66.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.3","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://wlp66.vercel.app/","date":"2026-09-16T08:22:58.974Z","timestamp":1789546978974,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Sat, 29 Aug 2026 19:48:09 GMT","end":"Fri, 27 Nov 2026 19:48:08 GMT"},"fingerprint":{"sha1":"E9:FE:9E:58:E9:B3:95:78:1F:9A:AE:FE:41:C4:01:64:C9:FB:2A:BC","sha256":"8F:46:C4:A0:A2:89:BF:DE:40:60:D0:69:86:F2:AF:76:1E:E6:2D:66:8D:DE:97:2E:6B:EF:46:87:EE:4F:60:93"}}},"request":{"raw":"GET /_next/static/chunks/53c13509-51a37691af359660.js HTTP/1.1\r\nHost: wlp66.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://wlp66.vercel.app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\nage: 82610\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"53c13509-51a37691af359660.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Wed, 16 Sep 2026 08:22:59 GMT\r\netag: W/\"b32073f4695d9100e6dacb56131edf06\"\r\nlast-modified: Tue, 15 Sep 2026 09:26:08 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-matched-path: /_next/static/chunks/53c13509-51a37691af359660.js\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::n9gj7-1789546979009-cce1dc0568e9\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":2002,"size_decoded":1545,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (2002), with no line terminators","md5":"b32073f4695d9100e6dacb56131edf06","sha1":"6f9624f18de4ca9771cea0fd96abbb8cbf7bcaac","sha256":"1c4b363c1cdb976c1bda3cc05e01a3e5fdba2d91dc651162704d2d5543de9d50","sha512":"d84668cf759e434841cb1dd5ec9884a25498ef93aa728fb5830607e2b99d9cc687f1a3cf8efda3c0c3406652476f9f758d14496d9fa2246c86f04612d7e69670","ssdeep":"","tlshash":"7441224ca1b5b2bc5eabc6b1953334322a4d35ce309848bee6f8c4a07253158a576c8f","first_seen":"2025-04-15T16:09:16.328501Z","last_seen":"2026-09-16T08:23:36.250015Z","times_seen":19,"resource_available":true,"data":null}},"time_used":3369,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3369,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-16","alert":"Phishing Block","trigger":"wlp66.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"wlp66.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"wlp66.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"wlp66.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wlp66.vercel.app/images/mada.jpg","fqdn":"wlp66.vercel.app","domain":"wlp66.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.3","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wlp66.vercel.app/","date":"2026-09-16T08:22:58.987Z","timestamp":1789546978987,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Sat, 29 Aug 2026 19:48:09 GMT","end":"Fri, 27 Nov 2026 19:48:08 GMT"},"fingerprint":{"sha1":"E9:FE:9E:58:E9:B3:95:78:1F:9A:AE:FE:41:C4:01:64:C9:FB:2A:BC","sha256":"8F:46:C4:A0:A2:89:BF:DE:40:60:D0:69:86:F2:AF:76:1E:E6:2D:66:8D:DE:97:2E:6B:EF:46:87:EE:4F:60:93"}}},"request":{"raw":"GET /images/mada.jpg HTTP/1.1\r\nHost: wlp66.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://wlp66.vercel.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 \r\naccess-control-allow-origin: *\r\nage: 82611\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"404\"\r\ncontent-encoding: br\r\ncontent-type: text/html; charset=utf-8\r\ndate: Wed, 16 Sep 2026 08:22:59 GMT\r\netag: W/\"416df1ca902babcd1a317773f9484ba9\"\r\nlast-modified: Tue, 15 Sep 2026 09:26:08 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-matched-path: /404\r\nx-next-error-status: 404\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::xxqzd-1789546979033-2770aa6067b9\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6520,"size_decoded":2463,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (6520), with no line terminators","md5":"416df1ca902babcd1a317773f9484ba9","sha1":"3db59708afe777bf4bbb6acc705de942db95f47e","sha256":"94efc9320f4ab4c91322b32cfb250d9bfe2cf3d2bda606fc424a25a7e5608922","sha512":"13ffe8a969759938433c01c4429b18dd057ab70ff61622b59a8ddd9818ef46f60f967b595093c487ac68649b092b50369d30ccc193f015c6c5348a5e4c16442e","ssdeep":"96:TmyVvMPO7MMnBWn4BzHko0ggG4BcfcOcA4d7cg1xqzcfxmDZd5yZ1txqzqOcf6t9:LVvUOTnBWSzHkME61gnqzcJmVSVqzq67","tlshash":"d5d1427da804de4fec697d2901be6d3a60cd896f47e58a7c97d8cf05098207e5b92dc0","first_seen":"2026-09-15T14:13:45.959663Z","last_seen":"2026-09-16T08:23:36.251049Z","times_seen":3,"resource_available":false,"data":null}},"time_used":1808,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1808,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"wlp66.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"wlp66.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-16","alert":"Phishing Block","trigger":"wlp66.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"wlp66.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wlp66.vercel.app/_next/static/chunks/app/page-6b3f1209495d3463.js","fqdn":"wlp66.vercel.app","domain":"wlp66.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.3","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://wlp66.vercel.app/","date":"2026-09-16T08:22:58.981Z","timestamp":1789546978981,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Sat, 29 Aug 2026 19:48:09 GMT","end":"Fri, 27 Nov 2026 19:48:08 GMT"},"fingerprint":{"sha1":"E9:FE:9E:58:E9:B3:95:78:1F:9A:AE:FE:41:C4:01:64:C9:FB:2A:BC","sha256":"8F:46:C4:A0:A2:89:BF:DE:40:60:D0:69:86:F2:AF:76:1E:E6:2D:66:8D:DE:97:2E:6B:EF:46:87:EE:4F:60:93"}}},"request":{"raw":"GET /_next/static/chunks/app/page-6b3f1209495d3463.js HTTP/1.1\r\nHost: wlp66.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://wlp66.vercel.app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\nage: 82610\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"page-6b3f1209495d3463.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Wed, 16 Sep 2026 08:22:59 GMT\r\netag: W/\"9f03e3ab174e3cd0abf9b53116d4d8b5\"\r\nlast-modified: Tue, 15 Sep 2026 09:26:08 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-matched-path: /_next/static/chunks/app/page-6b3f1209495d3463.js\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::n9gj7-1789546979033-fc67354c3c52\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5764,"size_decoded":2930,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (5764), with no line terminators","md5":"9f03e3ab174e3cd0abf9b53116d4d8b5","sha1":"f5059bee1e09cdc5426181affe2e80c7f179b235","sha256":"7d53cd0010eee81d97f0e9698f614a3a8f852dc50a7445aebb04926fe1b2fc83","sha512":"d56f9d1ccbcf15d866e23921cbe7190017c29ea0a933bb96e44fe1b43e5a76483b1420bba8615e0f16fa2942147a93f64734d71f396c87f5ddc1c6492af3fb37","ssdeep":"48:fbgtlkktGZqPBn0RBnKBv7VKBoy66gK0ATyeADNHaifa5PCmAvMzLfp/erSf3rP/:QoBnMLJQ2aif06kzLf57PH6ipfNvqv6","tlshash":"cec13015b092baedbd3608fc64bf902c712e6b88994c48b1f5b8b86518944957b23bdc","first_seen":"2026-09-15T14:13:45.927554Z","last_seen":"2026-09-16T08:23:36.251851Z","times_seen":3,"resource_available":true,"data":null}},"time_used":718,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":718,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-16","alert":"Phishing Block","trigger":"wlp66.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"wlp66.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"wlp66.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"wlp66.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wlp66.vercel.app/_next/image?url=%2Fimages%2Fbtoour.webp\u0026w=96\u0026q=75","fqdn":"wlp66.vercel.app","domain":"wlp66.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.3","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://wlp66.vercel.app/","date":"2026-09-16T08:22:59.129Z","timestamp":1789546979129,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Sat, 29 Aug 2026 19:48:09 GMT","end":"Fri, 27 Nov 2026 19:48:08 GMT"},"fingerprint":{"sha1":"E9:FE:9E:58:E9:B3:95:78:1F:9A:AE:FE:41:C4:01:64:C9:FB:2A:BC","sha256":"8F:46:C4:A0:A2:89:BF:DE:40:60:D0:69:86:F2:AF:76:1E:E6:2D:66:8D:DE:97:2E:6B:EF:46:87:EE:4F:60:93"}}},"request":{"raw":"GET /_next/image?url=%2Fimages%2Fbtoour.webp\u0026w=96\u0026q=75 HTTP/1.1\r\nHost: wlp66.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://wlp66.vercel.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\nage: 104687\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"btoour.webp\"\r\ncontent-security-policy: script-src 'none'; frame-src 'none'; sandbox;\r\ncontent-type: image/webp\r\ndate: Wed, 16 Sep 2026 08:22:59 GMT\r\nlast-modified: Tue, 15 Sep 2026 03:18:11 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nvary: Accept\r\nx-matched-path: /images/btoour.webp\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::wxp26-1789546979164-adb8b21666c5\r\ncontent-length: 1608\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":1608,"size_decoded":2209,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 96x122, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"41136b5ce59683ce170e031133836999","sha1":"5ded7968097086e1e65044b9397e97c96649f9a2","sha256":"ab2ff392aa7bbd71212c9f6b441906b597c8a7eead533e4c7b4c21757735793b","sha512":"ae63748179fcd738171bdf87cd7262b83acc64b244519e26aeef540dcf710101ee6e7a02d375929246ba0c3334c9523891e7e955f1a1b63b11b282265fd72217","ssdeep":"","tlshash":"94310a0a486fba35d3d069be03373a2f424c14598ad8134eaa5a47241df41204d118c7","first_seen":"2025-04-15T16:09:16.32387Z","last_seen":"2026-09-16T08:23:36.25268Z","times_seen":31,"resource_available":false,"data":null}},"time_used":3316,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":3282,"receive":34,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"wlp66.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"wlp66.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-16","alert":"Phishing Block","trigger":"wlp66.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"wlp66.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rpdfphaesngaedeyuahf.supabase.co/storage/v1/object/public/images/images/image_1787528374868_3.jpg","fqdn":"rpdfphaesngaedeyuahf.supabase.co","domain":"rpdfphaesngaedeyuahf.supabase.co","tld":"supabase.co"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wlp66.vercel.app/","date":"2026-09-16T08:23:03.673Z","timestamp":1789546983673,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /storage/v1/object/public/images/images/image_1787528374868_3.jpg HTTP/1.1\r\nHost: rpdfphaesngaedeyuahf.supabase.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://wlp66.vercel.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-16T09:51:46.278028Z","times_seen":18492779,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"login.lhotsepension.com/p/wIPJNIbGcjRqRFrzfTQo8Hxf-yY5D8OM_6SH--bZ_VKgJdNWxx3Kr9t4B394j1I_kQ-OcJY4atGAn-mRQeDogPPdz39awr5MsLDnYPbgRnHRBo0moEF50-86wVZtV8ix4mxuBeuj1TZZALXSiDL0Yu7QyyGPtjcm90weiH8EujrdygIVR93Ym724FsaO5d6kr4dDM9qV8HZxmy7rAwYz84Zfa0FRXcQyafs7XaTKvZW6a2oETliI9l3Rl38hIjZ4DAFhXvh59uskRfa0GVv07AddmACaALqCtD9cN_2LCV31PoRXUU1Z50awjBdcDR3U0MREAwcguBpni717QUsUNPngwfjWtu64Rnuc1iKsXrc6L2yuEzxZDYmTx9OsX3ZLsztDtKNGZ6l6T_c_GiInu3g8swqaa8bz5z3JqQPElGWzG42D2N1YWo9A3x8fBF7kZRvDWtZypneulnKu_0ErVMJ0tyAwwgWGbDoCO1afNZRxVh-41vFtTlsUKHZYE5Qo6JCQzmv4OAak6Dq4uvKmjYslH3bZFsYyLGF1QJxI9aMjxEl3MF75ZvaOaGXR3zmDWgXINQDvBgZghTddN-8lvy04mMEeKUH_f_59s1R2onQvn_9QkvHp7SNS5dzlLoD5bd4mYRUUmpXbnJK3dv6fj8zFZ5MjV8i4xtbyCUfzFTDSPQqZf4R3Ou5CgUFpTRF4MoROA7Kc8SvmC4p_KKuOOKLiaxtuVtoO93ZKTUqOKsibs5bS4fW7es-xD1hENiEzHWLslIADqWFgIb_dT5N-gZMHbfjMIxe7WpTQwcnOpxqDPdd3_474atfkuKdPAioncXUduHiPIwotXcMLZSrDucGMfuh7CcHsDImkQAHSYvy9gUc2QQCd7MXtWGIq1QeoJ3SNkvLvaEipNF5A24FQY-INK3oSHG5DRIbVdnZFkU2hS0to157_70qfVpDQUeNoHSoa5LT44fXrcbA1Z8RMAZjjbONoIX2HJqER-DqvWs7_E8YW8zGqPjXNoVT83alv3D2kE6hS7a-V5-lXPIBT24fK_YpHmXSEkMzkgB2rHOnXSNcbXTWb7CM_qH3iMmqVqyxdSefwTNXWnERjQDBrupqyjaDYv7kq7xF7numdhoEO2DdLZAGhMnhiTshvKEHBaDMH07PsycqYWfb0CSofupVGQtZXURWChYj6m_-wUVDyMBAhtbNLyrZ1pAoR6o0xJr74CMkal-3vziG-IDKKIl8-0xOwwQfnz_1VkUjG4jv5cVNrjS10WkFCfP09mo0ZLPpDkUl88GUkwoI3KRTW6JMBwKDnvJXs2U1w_EDdlIhdhcwpe65-r3qTpStJWA","fqdn":"login.lhotsepension.com","domain":"lhotsepension.com","tld":"com"},"ip":{"addr":"85.11.167.134","port":443,"asn":6830,"as":"Liberty Global B.V.","country":"Bulgaria","country_code":"BG"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-16T08:23:11.273Z","timestamp":1789546991273,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lhotsepension.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 31 Aug 2026 16:24:25 GMT","end":"Sun, 29 Nov 2026 16:24:24 GMT"},"fingerprint":{"sha1":"79:96:3C:88:56:8A:C3:21:55:1D:9F:6A:54:5B:04:AA:A1:A7:4A:CE","sha256":"EB:65:72:C0:DD:6B:69:32:AB:3E:65:8B:28:EF:81:49:00:44:E7:75:B4:D3:73:D6:F2:CA:B0:39:BB:DB:6B:C1"}}},"request":{"raw":"GET /p/wIPJNIbGcjRqRFrzfTQo8Hxf-yY5D8OM_6SH--bZ_VKgJdNWxx3Kr9t4B394j1I_kQ-OcJY4atGAn-mRQeDogPPdz39awr5MsLDnYPbgRnHRBo0moEF50-86wVZtV8ix4mxuBeuj1TZZALXSiDL0Yu7QyyGPtjcm90weiH8EujrdygIVR93Ym724FsaO5d6kr4dDM9qV8HZxmy7rAwYz84Zfa0FRXcQyafs7XaTKvZW6a2oETliI9l3Rl38hIjZ4DAFhXvh59uskRfa0GVv07AddmACaALqCtD9cN_2LCV31PoRXUU1Z50awjBdcDR3U0MREAwcguBpni717QUsUNPngwfjWtu64Rnuc1iKsXrc6L2yuEzxZDYmTx9OsX3ZLsztDtKNGZ6l6T_c_GiInu3g8swqaa8bz5z3JqQPElGWzG42D2N1YWo9A3x8fBF7kZRvDWtZypneulnKu_0ErVMJ0tyAwwgWGbDoCO1afNZRxVh-41vFtTlsUKHZYE5Qo6JCQzmv4OAak6Dq4uvKmjYslH3bZFsYyLGF1QJxI9aMjxEl3MF75ZvaOaGXR3zmDWgXINQDvBgZghTddN-8lvy04mMEeKUH_f_59s1R2onQvn_9QkvHp7SNS5dzlLoD5bd4mYRUUmpXbnJK3dv6fj8zFZ5MjV8i4xtbyCUfzFTDSPQqZf4R3Ou5CgUFpTRF4MoROA7Kc8SvmC4p_KKuOOKLiaxtuVtoO93ZKTUqOKsibs5bS4fW7es-xD1hENiEzHWLslIADqWFgIb_dT5N-gZMHbfjMIxe7WpTQwcnOpxqDPdd3_474atfkuKdPAioncXUduHiPIwotXcMLZSrDucGMfuh7CcHsDImkQAHSYvy9gUc2QQCd7MXtWGIq1QeoJ3SNkvLvaEipNF5A24FQY-INK3oSHG5DRIbVdnZFkU2hS0to157_70qfVpDQUeNoHSoa5LT44fXrcbA1Z8RMAZjjbONoIX2HJqER-DqvWs7_E8YW8zGqPjXNoVT83alv3D2kE6hS7a-V5-lXPIBT24fK_YpHmXSEkMzkgB2rHOnXSNcbXTWb7CM_qH3iMmqVqyxdSefwTNXWnERjQDBrupqyjaDYv7kq7xF7numdhoEO2DdLZAGhMnhiTshvKEHBaDMH07PsycqYWfb0CSofupVGQtZXURWChYj6m_-wUVDyMBAhtbNLyrZ1pAoR6o0xJr74CMkal-3vziG-IDKKIl8-0xOwwQfnz_1VkUjG4jv5cVNrjS10WkFCfP09mo0ZLPpDkUl88GUkwoI3KRTW6JMBwKDnvJXs2U1w_EDdlIhdhcwpe65-r3qTpStJWA HTTP/1.1\r\nHost: login.lhotsepension.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://kl4rdcnxwm.lhotsepension.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: _vfy=000f7082ce8b47bf; dca2-c058=9f9bb9178892b9189a7a1459021ad5d6288b3f8d85d2ba758685f148991a6e27; fpc=AvF-TwfZythHhgLMKfuuBOo; esctx=PBgABBwEAAAA9VeaV3ywaSLp1O3c4_Et5RXZvU3RzQXJ0aWZhY3RzDQAAAAAAmWxY6VSGUKjbENZK8dxwOOebkSW0K1JChkWw1NXByoh8ADiX2cU4i3Yl4Uvt3rFzBPIyyuEuMMo-c6I34L4x4Faf9b9bR_2P4duGvsC9vyvWUVBmVaBJaA3LnB6rCNAO477e1AdCkzjinq9yfDUmU1nL8FrUX5R9u_cS_jexb_txgCqMWJhxRAw2tGajPSN7GqR5Xt_XuzSrJ-UssN95X07Hh3gyeBoe2YnOI2KkM3mWMdfWWLV4Thf44hgUe5jNzFDYtyvYaVxJeq4rhV4awp_9AwSZyvod2NKH16ry14c99zh47hzAxpzV4yHMYETfqqomwsOBsj_vGvylPbrQG7z1pnmcioIiS-No8iYAvbhY8dGmNhoTWMk90jyO9V3hhPbw8Tl2iHpDPDuph_7GO4cb5ox9I48AMXHO6pxz4zYU4eYCsEqDFLbsYtiqOfNpb1SGMWZ9wVNNIY1s8iSaklApFg4U8Bd4bHXktMXwc95EF9JD7r5sMjCyd6B5UcEXheBKaQHKEWBtpqnN9TymLASL7eA7ln_cP85ZxdxPMxwiEU0YeLZp5mVkZGIrlX9leIRbG_d1NDMhGpkOc-ra6WhWmEj8qvW_fXlLuRbPI016c3z10rdv2ZiB4YL2Iv2HeosU5TxYrNavHBii6ccfuVV6MDQPTHvs28nXG2nH-DfQ-RC_z9luG-yXDmEjhhJ-Se5PTU8N2-JwV5yZLuQwpqKcdILS0heZkk0JHQ0QYdUgAA; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-site\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nCache-Control: no-store, no-cache\r\nConnection: close\r\nContent-Type: text/html; charset=utf-8\r\nCross-Origin-Opener-Policy-Report-Only: same-origin; report-to=\"coop-endpoint\"\r\nDate: Wed, 16 Sep 2026 08:23:11 GMT\r\nExpires: -1\r\nLink: \u003chttps://aadcdn.msauth.net\u003e; rel=preconnect; crossorigin, \u003chttps://aadcdn.msauth.net\u003e; rel=preconnect; crossorigin,\u003chttps://aadcdn.msauth.net\u003e; rel=dns-prefetch, \u003chttps://aadcdn.msauth.net\u003e; rel=preconnect; crossorigin,\u003chttps://aadcdn.msauth.net\u003e; rel=dns-prefetch,\u003chttps://aadcdn.msftauth.net\u003e; rel=dns-prefetch\r\nP3p: CP=\"DSP CUR OTPi IND OTRi ONL FIN\"\r\nPragma: no-cache\r\nReferrer-Policy: strict-origin-when-cross-origin\r\nReporting-Endpoints: coop-endpoint=\"https://coop.msauth.net:443/api/coopReport?client_type=web-msal\u0026client_id=4765445b-32c6-49b0-83e6-1d93765276ca\u0026correlation_id=2ac44724-79a2-42c0-8f09-7a888029601f\u0026sku=IdNet\u0026version=8.16.0\u0026is1p=1\"\r\nServer: Apache/2.4.48\r\nSet-Cookie: buid=1.AUgAMe_N-B6jSkuT5F9XHpElWltEZUfGMrBJg-Ydk3ZSdsoAAABIAA.BgABGgEAAAA9VeaV3ywaSLp1O3c4_Et5RXZvU3RzQXJ0aWZhY3RzAwAAAAAAlqlK_G08O8YzDC0S1tloCHnvBYBlpBdvh6PRaPw3cDIvNgZO5VEm8u3UKlszbPhlmjIlG5zd9kYjjun1LIZ9Yen7mSMNpWIjZwkZ9E_2RLlRnJMPhb2DiuX1sJJJQjB9XE9nZTQCfMeQ1CdXPI5Y04lVmLaT9mqYpGPZTL7G7mt_RrugxhK7_ZlbMNXYTsox7VK26aPQfUXj3fm3LI3fquwcmN3bHpBFewA1v1vEel4-Kozvf0ae60omK3BG7UfjwqU1FbLke9QygfHLFeZTEK6J1AmjLFjP2jpoGlUhgxMUUAbMpvpME7LjOnISDA-zpnLLvS9C-SHbBbOCV4ErFZ4UDuvNKzzktXUdUvknPyqCW7YR4WlJpFcqE7-qdpZpCyLZdpC5aOxqPiFCoOH7o6-g2nwXNGGAM3pqgzvjpiblZCzgEhdsWsN4fAj1thWUrQE5P8f8h19nFhDO15M7ChIAvdEqCd3WeiHasizz_jNjdPl12egezryrnEJmmvXyz3ko85zRkCj15FmAUzWu1-PvU5YQzC4eLw64dopOmZWkBb484uGElMBLlWR3MfZsD5Z7yYggp9V4EoLHDviPi00SPI0dMRFOgokdAH0Gty02q3UiDeQ_Xy3mmikXfEyzf33u5WvlDoaL12d6l_trxaC954Evi2AmxvKIZzpSPL4gAA; Path=/; Expires=Fri, 16 Oct 2026 08:23:11 GMT; HttpOnly; Secure; SameSite=None\nesctx=PBgABBwEAAAA9VeaV3ywaSLp1O3c4_Et5RXZvU3RzQXJ0aWZhY3RzDQAAAAAA_bGt8w89VQcEd8EC95i61S_J_VWSNSGB_L-ejN2yRXE63Lh_91ZgpEc2jPHBeFuJ-Oa4k5vGVA7v6cRISksUmgiJZ2IqML6cjOPskcPbpv1ZL9t1kyy3BdELnWco8S1d5i5HYGweEttMSiG2A3NuZJYY2v3nvnL0vjH_LYeU-ZkniQg66wvCVZ0HxSCwsEuv0UrNNiSG_XJLzKtT_DDmCAbKnrw6DFkkk63uVd2Jrs-eX5-An4Yz-7vf1yHc5LCxOUuw2vGL8zHgNiGBaZ3pF-wbm1QmvFCRD4j216jYKwve61ejLTJ4dT_qmqbRXAh5qkhh5LNfHneNwenyFfHs77Xx_TlGzk9iXoEso1xWG1HsvrdZqpbyotXQAjxtBS22mTHvfulLO6C9weL388hWgDzLIkfDisOqvf4dK1MCWyEFAGboAjoqbVj01ilRb2_a0NdFMKVhY8mxBfSWCqMdr6ifYvqRDfNLhdj5gBdXvAgi-m0Tq2i-bWIEt9yz0ow7kiIGujKOFUtORqe4IjNUNI3_iOgH1GavdyN8PILB_5b04o7v5BJCL4U_vNUxq2XqNSJL1uHgGzIjQFva8Gw7O_McOS3Q03gO6_7bjP4S4IkXc_B6UowZ_cIM_1blW-eP1_p1B2Azz2TcPcTrGZT1eLHzMgQ7IZOwQ67rG23CF-ttqigV_Z-dyw7fAj5XXw2LOUjlLWTc8qkrbxtgFAm9rpfHuq4XYJCdyUgtInVnRaogAA; Path=/; Domain=login.lhotsepension.com; HttpOnly; Secure; SameSite=None\nesctx-bJNDGVLMrWM=AQABCQEAAAA9VeaV3ywaSLp1O3c4_Et5RXZvU3RzQXJ0aWZhY3RzDQAAAAAAZpuGIME2pqAiVzfUtngWXFae4XvAn6u2XP3tO2MdCBBEpO2_aWtHm9x-DpawKyrskWYmi7rRIKjhs9TUfl4RDvWpsDxACfO_CkPVSB7HjZdi5OZ_N42zbIu80W9mFs5GQ6y2U5U3x_BVNztqM_tn1yAA; Path=/; Domain=login.lhotsepension.com; HttpOnly; Secure; SameSite=None\nfpc=AvF-TwfZythHhgLMKfuuBOq8Ae7AAQAAAO5IPOIOAAAA; Path=/; Expires=Fri, 16 Oct 2026 08:23:11 GMT; HttpOnly; Secure; SameSite=None\nx-ms-gateway-slice=estsfd; Path=/; HttpOnly; Secure; SameSite=None\r\nTransfer-Encoding: chunked\r\nVary: Accept-Encoding\r\nX-Dns-Prefetch-Control: on\r\nX-Ms-Clitelem: 1,50058,0,,\r\nX-Ms-Ests-Server: 2.1.25264.4 - WEULR1 ProdSlices\r\nX-Ms-Request-Id: 69747a02-bd04-4e82-8763-076140181600\r\nX-Ms-Srs: 1.P\r\n\r\n","headers":null,"cookies":[{"name":"buid","value":"1.AUgAMe_N-B6jSkuT5F9XHpElWltEZUfGMrBJg-Ydk3ZSdsoAAABIAA.BgABGgEAAAA9VeaV3ywaSLp1O3c4_Et5RXZvU3RzQXJ0aWZhY3RzAwAAAAAAlqlK_G08O8YzDC0S1tloCHnvBYBlpBdvh6PRaPw3cDIvNgZO5VEm8u3UKlszbPhlmjIlG5zd9kYjjun1LIZ9Yen7mSMNpWIjZwkZ9E_2RLlRnJMPhb2DiuX1sJJJQjB9XE9nZTQCfMeQ1CdXPI5Y04lVmLaT9mqYpGPZTL7G7mt_RrugxhK7_ZlbMNXYTsox7VK26aPQfUXj3fm3LI3fquwcmN3bHpBFewA1v1vEel4-Kozvf0ae60omK3BG7UfjwqU1FbLke9QygfHLFeZTEK6J1AmjLFjP2jpoGlUhgxMUUAbMpvpME7LjOnISDA-zpnLLvS9C-SHbBbOCV4ErFZ4UDuvNKzzktXUdUvknPyqCW7YR4WlJpFcqE7-qdpZpCyLZdpC5aOxqPiFCoOH7o6-g2nwXNGGAM3pqgzvjpiblZCzgEhdsWsN4fAj1thWUrQE5P8f8h19nFhDO15M7ChIAvdEqCd3WeiHasizz_jNjdPl12egezryrnEJmmvXyz3ko85zRkCj15FmAUzWu1-PvU5YQzC4eLw64dopOmZWkBb484uGElMBLlWR3MfZsD5Z7yYggp9V4EoLHDviPi00SPI0dMRFOgokdAH0Gty02q3UiDeQ_Xy3mmikXfEyzf33u5WvlDoaL12d6l_trxaC954Evi2AmxvKIZzpSPL4gAA","quoted":false,"path":"/","expires":"2026-10-16T08:23:11Z","raw_expires":"Fri, 16 Oct 2026 08:23:11 GMT","secure":true,"http_only":true,"same_site":"None","partitioned":false,"raw":"buid=1.AUgAMe_N-B6jSkuT5F9XHpElWltEZUfGMrBJg-Ydk3ZSdsoAAABIAA.BgABGgEAAAA9VeaV3ywaSLp1O3c4_Et5RXZvU3RzQXJ0aWZhY3RzAwAAAAAAlqlK_G08O8YzDC0S1tloCHnvBYBlpBdvh6PRaPw3cDIvNgZO5VEm8u3UKlszbPhlmjIlG5zd9kYjjun1LIZ9Yen7mSMNpWIjZwkZ9E_2RLlRnJMPhb2DiuX1sJJJQjB9XE9nZTQCfMeQ1CdXPI5Y04lVmLaT9mqYpGPZTL7G7mt_RrugxhK7_ZlbMNXYTsox7VK26aPQfUXj3fm3LI3fquwcmN3bHpBFewA1v1vEel4-Kozvf0ae60omK3BG7UfjwqU1FbLke9QygfHLFeZTEK6J1AmjLFjP2jpoGlUhgxMUUAbMpvpME7LjOnISDA-zpnLLvS9C-SHbBbOCV4ErFZ4UDuvNKzzktXUdUvknPyqCW7YR4WlJpFcqE7-qdpZpCyLZdpC5aOxqPiFCoOH7o6-g2nwXNGGAM3pqgzvjpiblZCzgEhdsWsN4fAj1thWUrQE5P8f8h19nFhDO15M7ChIAvdEqCd3WeiHasizz_jNjdPl12egezryrnEJmmvXyz3ko85zRkCj15FmAUzWu1-PvU5YQzC4eLw64dopOmZWkBb484uGElMBLlWR3MfZsD5Z7yYggp9V4EoLHDviPi00SPI0dMRFOgokdAH0Gty02q3UiDeQ_Xy3mmikXfEyzf33u5WvlDoaL12d6l_trxaC954Evi2AmxvKIZzpSPL4gAA; Path=/; Expires=Fri, 16 Oct 2026 08:23:11 GMT; HttpOnly; Secure; SameSite=None"},{"name":"esctx","value":"PBgABBwEAAAA9VeaV3ywaSLp1O3c4_Et5RXZvU3RzQXJ0aWZhY3RzDQAAAAAA_bGt8w89VQcEd8EC95i61S_J_VWSNSGB_L-ejN2yRXE63Lh_91ZgpEc2jPHBeFuJ-Oa4k5vGVA7v6cRISksUmgiJZ2IqML6cjOPskcPbpv1ZL9t1kyy3BdELnWco8S1d5i5HYGweEttMSiG2A3NuZJYY2v3nvnL0vjH_LYeU-ZkniQg66wvCVZ0HxSCwsEuv0UrNNiSG_XJLzKtT_DDmCAbKnrw6DFkkk63uVd2Jrs-eX5-An4Yz-7vf1yHc5LCxOUuw2vGL8zHgNiGBaZ3pF-wbm1QmvFCRD4j216jYKwve61ejLTJ4dT_qmqbRXAh5qkhh5LNfHneNwenyFfHs77Xx_TlGzk9iXoEso1xWG1HsvrdZqpbyotXQAjxtBS22mTHvfulLO6C9weL388hWgDzLIkfDisOqvf4dK1MCWyEFAGboAjoqbVj01ilRb2_a0NdFMKVhY8mxBfSWCqMdr6ifYvqRDfNLhdj5gBdXvAgi-m0Tq2i-bWIEt9yz0ow7kiIGujKOFUtORqe4IjNUNI3_iOgH1GavdyN8PILB_5b04o7v5BJCL4U_vNUxq2XqNSJL1uHgGzIjQFva8Gw7O_McOS3Q03gO6_7bjP4S4IkXc_B6UowZ_cIM_1blW-eP1_p1B2Azz2TcPcTrGZT1eLHzMgQ7IZOwQ67rG23CF-ttqigV_Z-dyw7fAj5XXw2LOUjlLWTc8qkrbxtgFAm9rpfHuq4XYJCdyUgtInVnRaogAA","quoted":false,"path":"/","domain":"login.lhotsepension.com","secure":true,"http_only":true,"same_site":"None","partitioned":false,"raw":"esctx=PBgABBwEAAAA9VeaV3ywaSLp1O3c4_Et5RXZvU3RzQXJ0aWZhY3RzDQAAAAAA_bGt8w89VQcEd8EC95i61S_J_VWSNSGB_L-ejN2yRXE63Lh_91ZgpEc2jPHBeFuJ-Oa4k5vGVA7v6cRISksUmgiJZ2IqML6cjOPskcPbpv1ZL9t1kyy3BdELnWco8S1d5i5HYGweEttMSiG2A3NuZJYY2v3nvnL0vjH_LYeU-ZkniQg66wvCVZ0HxSCwsEuv0UrNNiSG_XJLzKtT_DDmCAbKnrw6DFkkk63uVd2Jrs-eX5-An4Yz-7vf1yHc5LCxOUuw2vGL8zHgNiGBaZ3pF-wbm1QmvFCRD4j216jYKwve61ejLTJ4dT_qmqbRXAh5qkhh5LNfHneNwenyFfHs77Xx_TlGzk9iXoEso1xWG1HsvrdZqpbyotXQAjxtBS22mTHvfulLO6C9weL388hWgDzLIkfDisOqvf4dK1MCWyEFAGboAjoqbVj01ilRb2_a0NdFMKVhY8mxBfSWCqMdr6ifYvqRDfNLhdj5gBdXvAgi-m0Tq2i-bWIEt9yz0ow7kiIGujKOFUtORqe4IjNUNI3_iOgH1GavdyN8PILB_5b04o7v5BJCL4U_vNUxq2XqNSJL1uHgGzIjQFva8Gw7O_McOS3Q03gO6_7bjP4S4IkXc_B6UowZ_cIM_1blW-eP1_p1B2Azz2TcPcTrGZT1eLHzMgQ7IZOwQ67rG23CF-ttqigV_Z-dyw7fAj5XXw2LOUjlLWTc8qkrbxtgFAm9rpfHuq4XYJCdyUgtInVnRaogAA; Path=/; Domain=login.lhotsepension.com; HttpOnly; Secure; SameSite=None"},{"name":"esctx-bJNDGVLMrWM","value":"AQABCQEAAAA9VeaV3ywaSLp1O3c4_Et5RXZvU3RzQXJ0aWZhY3RzDQAAAAAAZpuGIME2pqAiVzfUtngWXFae4XvAn6u2XP3tO2MdCBBEpO2_aWtHm9x-DpawKyrskWYmi7rRIKjhs9TUfl4RDvWpsDxACfO_CkPVSB7HjZdi5OZ_N42zbIu80W9mFs5GQ6y2U5U3x_BVNztqM_tn1yAA","quoted":false,"path":"/","domain":"login.lhotsepension.com","secure":true,"http_only":true,"same_site":"None","partitioned":false,"raw":"esctx-bJNDGVLMrWM=AQABCQEAAAA9VeaV3ywaSLp1O3c4_Et5RXZvU3RzQXJ0aWZhY3RzDQAAAAAAZpuGIME2pqAiVzfUtngWXFae4XvAn6u2XP3tO2MdCBBEpO2_aWtHm9x-DpawKyrskWYmi7rRIKjhs9TUfl4RDvWpsDxACfO_CkPVSB7HjZdi5OZ_N42zbIu80W9mFs5GQ6y2U5U3x_BVNztqM_tn1yAA; Path=/; Domain=login.lhotsepension.com; HttpOnly; Secure; SameSite=None"},{"name":"fpc","value":"AvF-TwfZythHhgLMKfuuBOq8Ae7AAQAAAO5IPOIOAAAA","quoted":false,"path":"/","expires":"2026-10-16T08:23:11Z","raw_expires":"Fri, 16 Oct 2026 08:23:11 GMT","secure":true,"http_only":true,"same_site":"None","partitioned":false,"raw":"fpc=AvF-TwfZythHhgLMKfuuBOq8Ae7AAQAAAO5IPOIOAAAA; Path=/; Expires=Fri, 16 Oct 2026 08:23:11 GMT; HttpOnly; Secure; SameSite=None"},{"name":"x-ms-gateway-slice","value":"estsfd","quoted":false,"path":"/","secure":true,"http_only":true,"same_site":"None","partitioned":false,"raw":"x-ms-gateway-slice=estsfd; Path=/; HttpOnly; Secure; SameSite=None"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server:2.4.48","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":70285,"size_decoded":73734,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (45076), with CRLF, LF line terminators","md5":"6dcce19cb33ebb6c90a8660e0ff92f63","sha1":"dbf3e04a0dc3ceece4e1defe87fac44c26e49aad","sha256":"fa75bbdd4321a08a87794350ec8d2abda54e95fa3fa5adfaef990c199ac7c82e","sha512":"49eec28625d78efb45b7530af0b103b03651a95c51cf0efef7c4db3a080a02b7395f718b4077af1bca03eaf405bee21c755dd07f54d31ed1d712139d22552513","ssdeep":"1536:P/1Ecq181g1c8GLG2XBj1Ecz1DgNQ1TIu/24Wr3DS2Wp9bL2QMuShpnPo7J272CR:X1Tq181g1c8Q1Tz1DgNQ1TiSFqfAlC","tlshash":"f0637cd12f98683a4ea720f2ccbe7f0af97605035889cc88f19d98085ffaf564927557","first_seen":"2026-09-16T08:23:36.253823Z","last_seen":"2026-09-16T08:23:36.253823Z","times_seen":1,"resource_available":false,"data":null}},"time_used":2753,"timings":{"blocked":0,"dns":0,"connect":52,"send":0,"wait":192,"receive":2146,"ssl":363},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Microsoft","verdict":"phishing","severity":"medium","comment":"Resource associated with Microsoft phishing","tags":["microsoft","phishing"],"meta":null},{"sensor_name":"urlquery","alert":"Phishing - Microsoft Outlook","verdict":"phishing","severity":"medium","comment":"","tags":["phishing","microsoft","outlook"],"meta":{"engine":"luna_v2","pattern_id":"microsoft.phishing_ms_suspiciousjs.1"}}]}},{"url":{"schema":"https","addr":"wlp66.vercel.app/_next/image?url=%2Fimages%2Fartiojre.webp\u0026w=64\u0026q=75","fqdn":"wlp66.vercel.app","domain":"wlp66.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.3","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://wlp66.vercel.app/","date":"2026-09-16T08:22:59.127Z","timestamp":1789546979127,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Sat, 29 Aug 2026 19:48:09 GMT","end":"Fri, 27 Nov 2026 19:48:08 GMT"},"fingerprint":{"sha1":"E9:FE:9E:58:E9:B3:95:78:1F:9A:AE:FE:41:C4:01:64:C9:FB:2A:BC","sha256":"8F:46:C4:A0:A2:89:BF:DE:40:60:D0:69:86:F2:AF:76:1E:E6:2D:66:8D:DE:97:2E:6B:EF:46:87:EE:4F:60:93"}}},"request":{"raw":"GET /_next/image?url=%2Fimages%2Fartiojre.webp\u0026w=64\u0026q=75 HTTP/1.1\r\nHost: wlp66.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://wlp66.vercel.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\nage: 104687\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"artiojre.webp\"\r\ncontent-security-policy: script-src 'none'; frame-src 'none'; sandbox;\r\ncontent-type: image/webp\r\ndate: Wed, 16 Sep 2026 08:22:59 GMT\r\nlast-modified: Tue, 15 Sep 2026 03:18:11 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nvary: Accept\r\nx-matched-path: /images/artiojre.webp\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::n9gj7-1789546979162-fe46e62ddd72\r\ncontent-length: 1690\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1690,"size_decoded":2295,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"aa4f0957869c7e3301be0c7edc2ae45d","sha1":"d98a9f17634506ae814d285c6914785d154d913f","sha256":"75b068dddd57b4ab2145921322f04f1b9c7dc2812e3aa3f04d56ad4f1d38f187","sha512":"f0f0078d258c452225bd324952fdd956b72a378cf2e502d1f172153c9ab16ba53324640ceae9431c36001272eb4a9bb8f90eeb388d2e52fd8939137c546f2008","ssdeep":"","tlshash":"9631fa0a42e3f2284e8d993619b316b1440745b5d88d7a760e056bb237ed31eec319fc","first_seen":"2025-09-25T01:45:10.770746Z","last_seen":"2026-09-16T08:23:36.25701Z","times_seen":25,"resource_available":false,"data":null}},"time_used":3282,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3249,"receive":33,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"wlp66.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"wlp66.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"wlp66.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-16","alert":"Phishing Block","trigger":"wlp66.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rpdfphaesngaedeyuahf.supabase.co/storage/v1/object/public/images/images/image_1789356156621_3.jpg","fqdn":"rpdfphaesngaedeyuahf.supabase.co","domain":"rpdfphaesngaedeyuahf.supabase.co","tld":"supabase.co"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wlp66.vercel.app/","date":"2026-09-16T08:23:03.675Z","timestamp":1789546983675,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /storage/v1/object/public/images/images/image_1789356156621_3.jpg HTTP/1.1\r\nHost: rpdfphaesngaedeyuahf.supabase.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://wlp66.vercel.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-16T09:51:46.278028Z","times_seen":18492779,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}