{"report_id":"272d954a-d0b4-49fb-bb4b-27ba0b80f4de","version":6,"status":"done","tags":[],"date":"2026-03-06T13:47:02Z","url":{"schema":"https","addr":"app-pct.icu/","fqdn":"app-pct.icu","domain":"app-pct.icu","tld":"icu"},"ip":{"addr":"178.212.13.41","port":0,"asn":41098,"as":"NetFox Ltd.","country":"Russia","country_code":"RU"},"final":{"url":{"schema":"https","addr":"app-pct.icu/#/pst/login","fqdn":"app-pct.icu","domain":"app-pct.icu","tld":"icu"},"title":"PST.NET","dom":{"size":26046,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (23686)","md5":"17db5cfdd2dbadaf12bfc5196138fde5","sha1":"d5b776d942a27024ba75a253c8b0c38872bf1b0d","sha256":"717e329fbed313f684f6e354bd9e0ece88004955221e10d7452bc8b2e7feeba4","sha512":"3146493261754814d6b17c8220758e55766c4d6837a0ac6c7bcdee84c3245a336b05b3acc6ced1f36d62880df088e6d691b7e85c42bc522620b36a1e48c69a4f","ssdeep":"768:b21Vda50EdSW1Le21tE+AJkbrsHbq8CAgEjGi3FBCCU6gIv61:b21Vo5SW5xWb8yGp6d61","tlshash":"edc218de1ba182fcf042d3f9de26944975ca69ea7e01d468d3ac0d53aa518ec9c06cc7","dom_hash":"domhash990abfd8381d31ba93bd8d984eedea1f","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"app-pct.icu/","fqdn":"app-pct.icu","domain":"app-pct.icu","tld":"icu"},"ip":{"addr":"178.212.13.41","port":0,"asn":41098,"as":"NetFox Ltd.","country":"Russia","country_code":"RU"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-04-10T13:47:02Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":2,"urlquery":0,"analyzer":1}},"detection":{"ids":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-03-06T13:46:41Z","timestamp":1772804801,"ip_dst":{"addr":"178.212.13.41","port":443,"asn":41098,"as":"NetFox Ltd.","country":"Russia","country_code":"RU"},"ip_src":{"addr":"Client IP","port":47954,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"medium","alert":"ET INFO Suspicious Domain (*.icu) in TLS SNI","source":"{\"timestamp\":\"2026-03-06T13:46:41.660032+0000\",\"flow_id\":1706428536541645,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.37\",\"src_port\":47954,\"dest_ip\":\"178.212.13.41\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2026889,\"rev\":4,\"signature\":\"ET INFO Suspicious Domain (*.icu) in TLS SNI\",\"category\":\"Potentially Bad Traffic\",\"severity\":2,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2019_02_06\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2022_11_21\"]}},\"tls\":{\"sni\":\"app-pct.icu\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"15af977ce25de452b96affa2addb1036\",\"string\":\"771,4866,43-51\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":3,\"bytes_toserver\":789,\"bytes_toclient\":1594,\"start\":\"2026-03-06T13:46:41.414157+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-03-06T13:46:42Z","timestamp":1772804802,"ip_dst":{"addr":"104.26.13.205","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"Client IP","port":46648,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO External IP Address Lookup Domain (ipify .org) in TLS SNI","source":"{\"timestamp\":\"2026-03-06T13:46:42.830537+0000\",\"flow_id\":1745310875543038,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.37\",\"src_port\":46648,\"dest_ip\":\"104.26.13.205\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2047703,\"rev\":1,\"signature\":\"ET INFO External IP Address Lookup Domain (ipify .org) in TLS SNI\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"affected_product\":[\"Any\"],\"attack_target\":[\"Client_and_Server\"],\"confidence\":[\"High\"],\"created_at\":[\"2023_08_22\"],\"deployment\":[\"Perimeter\"],\"performance_impact\":[\"Low\"],\"reviewed_at\":[\"2023_08_22\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"External_IP_Lookup\"],\"updated_at\":[\"2023_08_22\"]}},\"tls\":{\"sni\":\"api.ipify.org\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"eb1d94daa7e0344597e756a1fb6e7054\",\"string\":\"771,4865,51-43\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":5,\"bytes_toserver\":789,\"bytes_toclient\":3436,\"start\":\"2026-03-06T13:46:42.812542+0000\"}}"}],"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"app-pct.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"api.ipify.org","ip":{"addr":"104.26.13.205","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2014-01-05","domain_rank":8166,"first_seen":"2014-10-06T12:38:43Z","last_seen":"2026-03-02T09:16:51.330597Z","alert_count":0,"request_count":1,"received_data":269,"sent_data":435,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"app-pct.icu","ip":{"addr":"178.212.13.41","port":443,"asn":41098,"as":"NetFox Ltd.","country":"Russia","country_code":"RU"},"domain_registered":"2026-03-02","domain_rank":0,"first_seen":"2026-03-06T13:47:03.542191Z","last_seen":"2026-03-06T13:47:03.542191Z","alert_count":10,"request_count":10,"received_data":985381,"sent_data":4569,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.28.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.74.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-03-01T22:18:12.522658Z","alert_count":0,"request_count":2,"received_data":90868,"sent_data":1003,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"app-pct.icu/assets/main-DcBPflPm.js","fqdn":"app-pct.icu","domain":"app-pct.icu","tld":"icu"},"ip":{"addr":"178.212.13.41","port":443,"asn":41098,"as":"NetFox Ltd.","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"55d7df0f18eda7ff17acda2ca0d62bf1","sha1":"bf6c378e2ae288fab8c362aa755da88f380b205e","sha256":"d936cf38bb99a9b349413032fea959b67923197e8d55b198e2bd8111e0ec7bcf","sha512":"86e2f4c4b6c05f08e269beaa7d2d36f32f4782577575ffe51a4c548aa236dd36628977b42b86fbfaaa863066fbbccc70d3fa57683b17393456166b5c5c0b1858","ssdeep":"3072:sm6KC+oqFQOmFTpwISvjdLXeBlnAyXUvNFCT:sm6zqyOmb/S+XUvC","tlshash":"52f34d8c52a210bc72634279a9013505b1591ffabf02d1a9637c0cb676f2d9ca617eff","size":165556,"data":"","first_seen":"2026-03-06T13:47:09.085985Z","last_seen":"2026-03-06T14:09:28.858146Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app-pct.icu/assets/utils.BLRFddlS.js","fqdn":"app-pct.icu","domain":"app-pct.icu","tld":"icu"},"ip":{"addr":"178.212.13.41","port":443,"asn":41098,"as":"NetFox Ltd.","country":"Russia","country_code":"RU"},"introduction_type":"importedModule","is_inline":false,"md5":"e27d2c08bb201b2d0cfd00c4712768aa","sha1":"28cde795568ed2aeebecf15fc7d8f3c28813c3c0","sha256":"a361e83ed2af99b3ec6ceca45ed08f05b5bf785a5e7a518b48fcc00680232804","sha512":"942e1371a2027381d76f76b0c67c58c48a57ca6d9bc0bf4f6e7f844095617fe0f8c5c7772809c015c561bad58a2d7302b3ed6f0f2dad659e87f42a73a7c1d9ae","ssdeep":"768:ywwBWmSTe50NmicY4Do5U/AJQnldatCRpie7gtPY8sz8pMgTtsjfdHCniVSjyeEr:JnAShc2w","tlshash":"c403f8c4b251506683e2a1a380b50203f32999547409859cbb2cdeffad7deca7277f76","size":41280,"data":"","first_seen":"2025-05-31T12:15:21.718161Z","last_seen":"2026-07-04T06:00:05.021405Z","times_seen":32,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app-pct.icu/assets/vendor.BFQOrj2c.js","fqdn":"app-pct.icu","domain":"app-pct.icu","tld":"icu"},"ip":{"addr":"178.212.13.41","port":443,"asn":41098,"as":"NetFox Ltd.","country":"Russia","country_code":"RU"},"introduction_type":"importedModule","is_inline":false,"md5":"141e32584f1cabbd1163f10be9cd43f9","sha1":"90894c65034a4d5f2fb8a57878477e424c06f83a","sha256":"e4045d1ee0a614ad27f70ca3e0e489bab71ad3f2c92995cb947c79812153ca87","sha512":"7de26799dc9f84a09f7b03723d2a8c2eae8baa1469d1ac02f3db9ded89c932ba04affd6e9ced3e90dd15b967c8beb5cd8fc6cf0c5275de7b8c630910ba7af27d","ssdeep":"3072:ei7JcseRG/en2oDDfNrRk26sBWVhf5/k9t9wAPsa0XPL9:j7GseRG/KdrO26DV2/Psa0XP5","tlshash":"221417e53182707653e909e540bb1506b3292828384d94e8b57ce9df3e2690a51fffbe","size":194501,"data":"","first_seen":"2026-03-06T13:47:09.047984Z","last_seen":"2026-03-06T14:09:28.85511Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"api.ipify.org/?format=json","fqdn":"api.ipify.org","domain":"ipify.org","tld":"org"},"ip":{"addr":"104.26.13.205","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://app-pct.icu/","date":"2026-03-06T13:46:42.767Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ipify.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 01 Mar 2026 16:45:18 GMT","end":"Sat, 30 May 2026 17:45:14 GMT"},"fingerprint":{"sha1":"EF:8D:ED:C7:B3:46:8A:91:47:71:92:F2:D9:B0:67:EA:C1:FC:5B:89","sha256":"01:CA:DB:EB:79:61:2D:B3:FE:2B:09:FE:44:84:EA:5B:6E:C1:3B:81:A1:0F:8C:9F:DE:2E:16:1E:59:45:06:D9"}}},"request":{"raw":"GET /?format=json HTTP/1.1\r\nHost: api.ipify.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://app-pct.icu/\r\nOrigin: https://app-pct.icu\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 06 Mar 2026 13:46:42 GMT\r\ncontent-type: application/json\r\ncontent-length: 21\r\nserver: cloudflare\r\naccess-control-allow-origin: *\r\nvary: Origin\r\ncf-cache-status: DYNAMIC\r\ncf-ray: 9d81cee1c86d11c5-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":21,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"7d69c71af0f191e9a72db6153f8018d1","sha1":"f67c5f2887bc05654b47f76e9621e53a4091aed1","sha256":"5bac6e06cf0e1ad38c55f9f9d12122272bf4b8157877629fe68cd33fe2133c65","sha512":"fdf43a8f3d843fe9008949d6709c8e2a5cd640f6101522319745f0a829f21dc8f4bd4d70ff3e2f6e1fd53ca0d2dd872bf3588c593a403071102ab28763cbdba5","ssdeep":"","tlshash":"b8700022000000208c80800eca0a032223a0000ac20a00088e800b2288a0b380282032","first_seen":"2023-04-05T02:54:03Z","last_seen":"2026-06-07T07:51:18.251001Z","times_seen":93313,"resource_available":false,"data":null}},"time_used":255,"timings":{"blocked":74,"dns":43,"connect":8,"send":0,"wait":110,"receive":0,"ssl":18},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"wss","addr":"app-pct.icu/socket.io/?EIO=4\u0026transport=websocket","fqdn":"app-pct.icu","domain":"app-pct.icu","tld":"icu"},"ip":{"addr":"178.212.13.41","port":443,"asn":41098,"as":"NetFox Ltd.","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://app-pct.icu/","date":"2026-03-06T13:46:42.782Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"app-pct.icu","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Mar 2026 12:39:15 GMT","end":"Sun, 31 May 2026 12:39:14 GMT"},"fingerprint":{"sha1":"C2:84:16:8C:08:DD:D3:8E:A5:D8:BE:CA:D4:A2:29:EB:8C:7F:07:8B","sha256":"65:79:E0:AF:57:CE:AA:F2:9C:75:F4:76:1F:AE:D6:2C:E6:FE:10:87:95:6A:16:F8:D1:DA:89:AA:3A:C8:AB:52"}}},"request":{"raw":"GET /socket.io/?EIO=4\u0026transport=websocket HTTP/1.1\r\nHost: app-pct.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nSec-WebSocket-Version: 13\r\nOrigin: https://app-pct.icu\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: G1joKvtblhm1dZ0HbmM7Gw==\r\nDNT: 1\r\nConnection: keep-alive, Upgrade\r\nSec-Fetch-Dest: websocket\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 101 Switching Protocols\r\nServer: nginx/1.28.1\r\nDate: Fri, 06 Mar 2026 13:46:43 GMT\r\nConnection: upgrade\r\nUpgrade: websocket\r\nSec-WebSocket-Accept: 24HQMYMDfLRQZSNuUaznGZQy99E=\r\nVary: Origin\r\nAccess-Control-Allow-Credentials: true\r\n\r\n","headers":null,"cookies":null,"status_code":"101","status_text":"Switching Protocols","fingerprints":[{"name":"Nginx:1.28.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-24T15:50:58.365581Z","times_seen":17506136,"resource_available":true,"data":null}},"time_used":716,"timings":{"blocked":-1,"dns":1,"connect":46,"send":0,"wait":460,"receive":0,"ssl":210},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"app-pct.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"app-pct.icu/assets/ALSGranate-Regular-BOCLyqAv.woff2","fqdn":"app-pct.icu","domain":"app-pct.icu","tld":"icu"},"ip":{"addr":"178.212.13.41","port":443,"asn":41098,"as":"NetFox Ltd.","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://app-pct.icu/","date":"2026-03-06T13:46:42.818Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"app-pct.icu","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Mar 2026 12:39:15 GMT","end":"Sun, 31 May 2026 12:39:14 GMT"},"fingerprint":{"sha1":"C2:84:16:8C:08:DD:D3:8E:A5:D8:BE:CA:D4:A2:29:EB:8C:7F:07:8B","sha256":"65:79:E0:AF:57:CE:AA:F2:9C:75:F4:76:1F:AE:D6:2C:E6:FE:10:87:95:6A:16:F8:D1:DA:89:AA:3A:C8:AB:52"}}},"request":{"raw":"GET /assets/ALSGranate-Regular-BOCLyqAv.woff2 HTTP/1.1\r\nHost: app-pct.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://app-pct.icu/assets/main-CiTT-Cnj.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.1\r\nDate: Fri, 06 Mar 2026 13:46:42 GMT\r\nContent-Type: font/woff2\r\nContent-Length: 25680\r\nLast-Modified: Mon, 02 Mar 2026 18:38:48 GMT\r\nConnection: keep-alive\r\nETag: \"69a5d938-6450\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":25680,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 25680, version 1.0","md5":"e06168cf075c61b92374dc991595b909","sha1":"935f4e80d99fe8fbc2aa7146ae1e45f223d3ae14","sha256":"7758310560ce88391145f280fe928f9ff5ff30b3ece2c32a08d52ffd662ae1fa","sha512":"a5b5e02e96dc2981c8f62cd63d145fe1bbf053c03ff5de3f98e1c9b29ba185253f38e530a1262ac5d737f53d694d4f0d213ca4f3a6f3e8fe909b54558c4c6fac","ssdeep":"768:OxShKPtiPfhfKpocsSr+hQxsYd5rIr7VuJDJ4lS1ALv:KSh0iHhfQoLSr+qvdZIr7VyF4lmALv","tlshash":"c2b2e137e715763de8efe03167446989508adc00204ceb1e46dac4f829f7baf4c09b9a","first_seen":"2025-11-12T07:28:11.853188Z","last_seen":"2026-05-03T06:51:40.577824Z","times_seen":10,"resource_available":false,"data":null}},"time_used":137,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":134,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"app-pct.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"app-pct.icu/assets/vendor.BFQOrj2c.js","fqdn":"app-pct.icu","domain":"app-pct.icu","tld":"icu"},"ip":{"addr":"178.212.13.41","port":443,"asn":41098,"as":"NetFox Ltd.","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://app-pct.icu/","date":"2026-03-06T13:46:42.280Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"app-pct.icu","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Mar 2026 12:39:15 GMT","end":"Sun, 31 May 2026 12:39:14 GMT"},"fingerprint":{"sha1":"C2:84:16:8C:08:DD:D3:8E:A5:D8:BE:CA:D4:A2:29:EB:8C:7F:07:8B","sha256":"65:79:E0:AF:57:CE:AA:F2:9C:75:F4:76:1F:AE:D6:2C:E6:FE:10:87:95:6A:16:F8:D1:DA:89:AA:3A:C8:AB:52"}}},"request":{"raw":"GET /assets/vendor.BFQOrj2c.js HTTP/1.1\r\nHost: app-pct.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://app-pct.icu/assets/main-DcBPflPm.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.1\r\nDate: Fri, 06 Mar 2026 13:46:42 GMT\r\nContent-Type: application/javascript; charset=utf-8\r\nLast-Modified: Mon, 02 Mar 2026 18:38:48 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"69a5d938-2f7c5\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":194501,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (28214)","md5":"141e32584f1cabbd1163f10be9cd43f9","sha1":"90894c65034a4d5f2fb8a57878477e424c06f83a","sha256":"e4045d1ee0a614ad27f70ca3e0e489bab71ad3f2c92995cb947c79812153ca87","sha512":"7de26799dc9f84a09f7b03723d2a8c2eae8baa1469d1ac02f3db9ded89c932ba04affd6e9ced3e90dd15b967c8beb5cd8fc6cf0c5275de7b8c630910ba7af27d","ssdeep":"3072:ei7JcseRG/en2oDDfNrRk26sBWVhf5/k9t9wAPsa0XPL9:j7GseRG/KdrO26DV2/Psa0XP5","tlshash":"221417e53182707653e909e540bb1506b3292828384d94e8b57ce9df3e2690a51fffbe","first_seen":"2026-03-06T13:47:09.047984Z","last_seen":"2026-03-06T14:09:28.85511Z","times_seen":2,"resource_available":true,"data":null}},"time_used":201,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":132,"receive":69,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"app-pct.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"app-pct.icu/assets/utils.BLRFddlS.js","fqdn":"app-pct.icu","domain":"app-pct.icu","tld":"icu"},"ip":{"addr":"178.212.13.41","port":443,"asn":41098,"as":"NetFox Ltd.","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://app-pct.icu/","date":"2026-03-06T13:46:42.282Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"app-pct.icu","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Mar 2026 12:39:15 GMT","end":"Sun, 31 May 2026 12:39:14 GMT"},"fingerprint":{"sha1":"C2:84:16:8C:08:DD:D3:8E:A5:D8:BE:CA:D4:A2:29:EB:8C:7F:07:8B","sha256":"65:79:E0:AF:57:CE:AA:F2:9C:75:F4:76:1F:AE:D6:2C:E6:FE:10:87:95:6A:16:F8:D1:DA:89:AA:3A:C8:AB:52"}}},"request":{"raw":"GET /assets/utils.BLRFddlS.js HTTP/1.1\r\nHost: app-pct.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://app-pct.icu/assets/main-DcBPflPm.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.1\r\nDate: Fri, 06 Mar 2026 13:46:42 GMT\r\nContent-Type: application/javascript; charset=utf-8\r\nLast-Modified: Mon, 02 Mar 2026 18:38:48 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"69a5d938-a140\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":41280,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"data","md5":"e27d2c08bb201b2d0cfd00c4712768aa","sha1":"28cde795568ed2aeebecf15fc7d8f3c28813c3c0","sha256":"a361e83ed2af99b3ec6ceca45ed08f05b5bf785a5e7a518b48fcc00680232804","sha512":"942e1371a2027381d76f76b0c67c58c48a57ca6d9bc0bf4f6e7f844095617fe0f8c5c7772809c015c561bad58a2d7302b3ed6f0f2dad659e87f42a73a7c1d9ae","ssdeep":"768:ywwBWmSTe50NmicY4Do5U/AJQnldatCRpie7gtPY8sz8pMgTtsjfdHCniVSjyeEr:JnAShc2w","tlshash":"c403f8c4b251506683e2a1a380b50203f32999547409859cbb2cdeffad7deca7277f76","first_seen":"2025-05-31T12:15:21.718161Z","last_seen":"2026-07-04T06:00:05.021405Z","times_seen":32,"resource_available":true,"data":null}},"time_used":703,"timings":{"blocked":250,"dns":1,"connect":46,"send":0,"wait":201,"receive":1,"ssl":202},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"app-pct.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"app-pct.icu/assets/vendor.BFQOrj2c.js","fqdn":"app-pct.icu","domain":"app-pct.icu","tld":"icu"},"ip":{"addr":"178.212.13.41","port":443,"asn":41098,"as":"NetFox Ltd.","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://app-pct.icu/","date":"2026-03-06T13:46:42.763Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"app-pct.icu","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Mar 2026 12:39:15 GMT","end":"Sun, 31 May 2026 12:39:14 GMT"},"fingerprint":{"sha1":"C2:84:16:8C:08:DD:D3:8E:A5:D8:BE:CA:D4:A2:29:EB:8C:7F:07:8B","sha256":"65:79:E0:AF:57:CE:AA:F2:9C:75:F4:76:1F:AE:D6:2C:E6:FE:10:87:95:6A:16:F8:D1:DA:89:AA:3A:C8:AB:52"}}},"request":{"raw":"GET /assets/vendor.BFQOrj2c.js HTTP/1.1\r\nHost: app-pct.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://app-pct.icu/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.1\r\nDate: Fri, 06 Mar 2026 13:46:43 GMT\r\nContent-Type: application/javascript; charset=utf-8\r\nLast-Modified: Mon, 02 Mar 2026 18:38:48 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"69a5d938-2f7c5\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":194501,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (28214)","md5":"141e32584f1cabbd1163f10be9cd43f9","sha1":"90894c65034a4d5f2fb8a57878477e424c06f83a","sha256":"e4045d1ee0a614ad27f70ca3e0e489bab71ad3f2c92995cb947c79812153ca87","sha512":"7de26799dc9f84a09f7b03723d2a8c2eae8baa1469d1ac02f3db9ded89c932ba04affd6e9ced3e90dd15b967c8beb5cd8fc6cf0c5275de7b8c630910ba7af27d","ssdeep":"3072:ei7JcseRG/en2oDDfNrRk26sBWVhf5/k9t9wAPsa0XPL9:j7GseRG/KdrO26DV2/Psa0XP5","tlshash":"221417e53182707653e909e540bb1506b3292828384d94e8b57ce9df3e2690a51fffbe","first_seen":"2026-03-06T13:47:09.047984Z","last_seen":"2026-03-06T14:09:28.85511Z","times_seen":2,"resource_available":true,"data":null}},"time_used":818,"timings":{"blocked":244,"dns":1,"connect":46,"send":0,"wait":196,"receive":128,"ssl":199},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"app-pct.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"app-pct.icu/assets/utils.BLRFddlS.js","fqdn":"app-pct.icu","domain":"app-pct.icu","tld":"icu"},"ip":{"addr":"178.212.13.41","port":443,"asn":41098,"as":"NetFox Ltd.","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://app-pct.icu/","date":"2026-03-06T13:46:42.766Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"app-pct.icu","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Mar 2026 12:39:15 GMT","end":"Sun, 31 May 2026 12:39:14 GMT"},"fingerprint":{"sha1":"C2:84:16:8C:08:DD:D3:8E:A5:D8:BE:CA:D4:A2:29:EB:8C:7F:07:8B","sha256":"65:79:E0:AF:57:CE:AA:F2:9C:75:F4:76:1F:AE:D6:2C:E6:FE:10:87:95:6A:16:F8:D1:DA:89:AA:3A:C8:AB:52"}}},"request":{"raw":"GET /assets/utils.BLRFddlS.js HTTP/1.1\r\nHost: app-pct.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://app-pct.icu/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.1\r\nDate: Fri, 06 Mar 2026 13:46:43 GMT\r\nContent-Type: application/javascript; charset=utf-8\r\nLast-Modified: Mon, 02 Mar 2026 18:38:48 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"69a5d938-a140\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":41280,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"data","md5":"e27d2c08bb201b2d0cfd00c4712768aa","sha1":"28cde795568ed2aeebecf15fc7d8f3c28813c3c0","sha256":"a361e83ed2af99b3ec6ceca45ed08f05b5bf785a5e7a518b48fcc00680232804","sha512":"942e1371a2027381d76f76b0c67c58c48a57ca6d9bc0bf4f6e7f844095617fe0f8c5c7772809c015c561bad58a2d7302b3ed6f0f2dad659e87f42a73a7c1d9ae","ssdeep":"768:ywwBWmSTe50NmicY4Do5U/AJQnldatCRpie7gtPY8sz8pMgTtsjfdHCniVSjyeEr:JnAShc2w","tlshash":"c403f8c4b251506683e2a1a380b50203f32999547409859cbb2cdeffad7deca7277f76","first_seen":"2025-05-31T12:15:21.718161Z","last_seen":"2026-07-04T06:00:05.021405Z","times_seen":32,"resource_available":true,"data":null}},"time_used":703,"timings":{"blocked":250,"dns":1,"connect":45,"send":0,"wait":199,"receive":1,"ssl":203},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"app-pct.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"app-pct.icu/favicon.ico","fqdn":"app-pct.icu","domain":"app-pct.icu","tld":"icu"},"ip":{"addr":"178.212.13.41","port":443,"asn":41098,"as":"NetFox Ltd.","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://app-pct.icu/","date":"2026-03-06T13:46:43.176Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"app-pct.icu","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Mar 2026 12:39:15 GMT","end":"Sun, 31 May 2026 12:39:14 GMT"},"fingerprint":{"sha1":"C2:84:16:8C:08:DD:D3:8E:A5:D8:BE:CA:D4:A2:29:EB:8C:7F:07:8B","sha256":"65:79:E0:AF:57:CE:AA:F2:9C:75:F4:76:1F:AE:D6:2C:E6:FE:10:87:95:6A:16:F8:D1:DA:89:AA:3A:C8:AB:52"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: app-pct.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://app-pct.icu/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 500 Internal Server Error\r\nServer: nginx/1.28.1\r\nDate: Fri, 06 Mar 2026 13:46:43 GMT\r\nContent-Type: text/html; charset=utf-8\r\nContent-Length: 177\r\nConnection: close\r\n\r\n","headers":null,"cookies":null,"status_code":"500","status_text":"Internal Server Error","fingerprints":[{"name":"Nginx:1.28.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":177,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"e9d01703afdf94825c28b98621ed630e","sha1":"d1a39669b91d4c961d2416dd2da6af6c4bdec4b5","sha256":"eaf7cf15433bf210a47b63563c587ceeb71446cc0941ec2a94cf17632e00057f","sha512":"4255b65acedb325be01d6595f67e578d604c5a32a911021df690cbf8581a4afbaccaf6961f9aa1fe1841dacbd7a39dda02d31d5b61b43007dac9e12cc83007aa","ssdeep":"","tlshash":"a1c0122b66262c59c8ab297901c36184eb84822218faa101c1408623b2cb186db83395","first_seen":"2026-01-11T17:52:55.99796Z","last_seen":"2026-07-13T23:39:13.741063Z","times_seen":79,"resource_available":false,"data":null}},"time_used":120,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":120,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"app-pct.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"app-pct.icu/","fqdn":"app-pct.icu","domain":"app-pct.icu","tld":"icu"},"ip":{"addr":"178.212.13.41","port":443,"asn":41098,"as":"NetFox Ltd.","country":"Russia","country_code":"RU"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-06T13:46:41.244Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"app-pct.icu","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Mar 2026 12:39:15 GMT","end":"Sun, 31 May 2026 12:39:14 GMT"},"fingerprint":{"sha1":"C2:84:16:8C:08:DD:D3:8E:A5:D8:BE:CA:D4:A2:29:EB:8C:7F:07:8B","sha256":"65:79:E0:AF:57:CE:AA:F2:9C:75:F4:76:1F:AE:D6:2C:E6:FE:10:87:95:6A:16:F8:D1:DA:89:AA:3A:C8:AB:52"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: app-pct.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.1\r\nDate: Fri, 06 Mar 2026 13:46:41 GMT\r\nContent-Type: text/html; charset=utf-8\r\nLast-Modified: Mon, 02 Mar 2026 18:38:48 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"69a5d938-990\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2448,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with CRLF, CR, LF line terminators","md5":"bdd468fa4ab2c34ad950fc57e9915721","sha1":"994a1b571a7c00ee298885f052414d6f7da4e868","sha256":"f919ea1786acc67a0692c5e97dc8b5910fee7a8e0ea63e05a272f5d6bd4191a2","sha512":"3ebdf38a67fba7be49010f53edece1e36dcd545ba978064a1cc827fe0e9a146b773132b938ff70f701514a12fb9a5c2a4d9a13d3311c70dd56340522f48985d3","ssdeep":"","tlshash":"7951409b2c84983983756228fbb1fa69f75b1b0b504a8944f9dd50673ff0f850c8791c","first_seen":"2026-03-06T13:47:09.06143Z","last_seen":"2026-03-06T14:09:28.850674Z","times_seen":2,"resource_available":false,"data":null}},"time_used":976,"timings":{"blocked":420,"dns":182,"connect":45,"send":0,"wait":124,"receive":0,"ssl":202},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"app-pct.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Roboto:ital,wght@0,100;0,300;0,400;0,500;0,700;0,900;1,100;1,300;1,400;1,500;1,700;1,900\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.74.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://app-pct.icu/","date":"2026-03-06T13:46:41.984Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:01 GMT","end":"Mon, 27 Apr 2026 08:38:00 GMT"},"fingerprint":{"sha1":"AD:23:3E:9B:CF:2B:A1:EC:31:14:63:D1:58:73:BB:E7:C5:32:16:8C","sha256":"B1:5F:45:BF:00:8C:68:35:D3:42:B2:67:66:47:9D:BB:42:41:07:56:3A:C4:1C:D6:10:7B:B7:53:C2:71:81:33"}}},"request":{"raw":"GET /css2?family=Roboto:ital,wght@0,100;0,300;0,400;0,500;0,700;0,900;1,100;1,300;1,400;1,500;1,700;1,900\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://app-pct.icu/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Fri, 06 Mar 2026 13:46:42 GMT\r\ndate: Fri, 06 Mar 2026 13:46:42 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":67176,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (1572)","md5":"ab850d710cb8d2c822eca52fcb39630d","sha1":"6b1016a61cb54834b42380de194088a39d0673b5","sha256":"acbf6e2b73bf91ea123df383211a180d57eb23c883a466afdec45a80fd03587d","sha512":"75908bb4facb97dbdbb3df2cdd51b28165d7d9c0dbd60997f507c7e79d44709c97566f25b5249bae201225d5fb83877c43734052ebfe858a19edfd9ba4ef471f","ssdeep":"768:yDdD9DADNDgBDUKD7DnDWHncXgLUahdPuOJ+gaULUIIV1ClghUULPy7bYLgXU+l5:GyDSegtxyllff","tlshash":"6b630e91041b5440ab834ce223cebf35fe1f92507151d0b9abfc9b6baddbca6526835c","first_seen":"2026-02-19T23:42:18.856088Z","last_seen":"2026-07-24T15:51:25.428418Z","times_seen":10044,"resource_available":false,"data":null}},"time_used":273,"timings":{"blocked":124,"dns":1,"connect":8,"send":0,"wait":20,"receive":0,"ssl":117},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app-pct.icu/assets/main-CiTT-Cnj.css","fqdn":"app-pct.icu","domain":"app-pct.icu","tld":"icu"},"ip":{"addr":"178.212.13.41","port":443,"asn":41098,"as":"NetFox Ltd.","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://app-pct.icu/","date":"2026-03-06T13:46:41.987Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"app-pct.icu","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Mar 2026 12:39:15 GMT","end":"Sun, 31 May 2026 12:39:14 GMT"},"fingerprint":{"sha1":"C2:84:16:8C:08:DD:D3:8E:A5:D8:BE:CA:D4:A2:29:EB:8C:7F:07:8B","sha256":"65:79:E0:AF:57:CE:AA:F2:9C:75:F4:76:1F:AE:D6:2C:E6:FE:10:87:95:6A:16:F8:D1:DA:89:AA:3A:C8:AB:52"}}},"request":{"raw":"GET /assets/main-CiTT-Cnj.css HTTP/1.1\r\nHost: app-pct.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://app-pct.icu/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.1\r\nDate: Fri, 06 Mar 2026 13:46:42 GMT\r\nContent-Type: text/css\r\nLast-Modified: Mon, 02 Mar 2026 18:38:48 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"69a5d938-4d7ce\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":317390,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"3deb04257ef1c1dfa146cd1733c6b701","sha1":"797074678aef0127d6fd701d6279645147b0ff34","sha256":"6ee01d44e90c17b816f20b20ca5edbb024daca62974f00cc4e9b97d2040db075","sha512":"ab8e02ba28f1913c5100eff5f2e7d323cdd9c3cbbd8a4570b5fff895f2f97a7889aec9b9aeaee68d02754b9865584833b89cba4e2f59096c7191d7483cd42d39","ssdeep":"6144:ZMaVPhe3LhKByc6iP4IABpscJrcc4fR2hlgRqOmNavvQZ+TKao/uhls5q12FrVOO:ZH6sXT2","tlshash":"936452f492a6dc3fbc27b0bc92a8f85d5119a2c5dd2a47e8fc11702163e66f26c63714","first_seen":"2026-03-06T13:47:09.06493Z","last_seen":"2026-03-06T14:09:28.853248Z","times_seen":2,"resource_available":false,"data":null}},"time_used":763,"timings":{"blocked":243,"dns":1,"connect":43,"send":0,"wait":194,"receive":79,"ssl":199},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"app-pct.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"app-pct.icu/assets/main-DcBPflPm.js","fqdn":"app-pct.icu","domain":"app-pct.icu","tld":"icu"},"ip":{"addr":"178.212.13.41","port":443,"asn":41098,"as":"NetFox Ltd.","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://app-pct.icu/","date":"2026-03-06T13:46:41.986Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"app-pct.icu","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Mar 2026 12:39:15 GMT","end":"Sun, 31 May 2026 12:39:14 GMT"},"fingerprint":{"sha1":"C2:84:16:8C:08:DD:D3:8E:A5:D8:BE:CA:D4:A2:29:EB:8C:7F:07:8B","sha256":"65:79:E0:AF:57:CE:AA:F2:9C:75:F4:76:1F:AE:D6:2C:E6:FE:10:87:95:6A:16:F8:D1:DA:89:AA:3A:C8:AB:52"}}},"request":{"raw":"GET /assets/main-DcBPflPm.js HTTP/1.1\r\nHost: app-pct.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://app-pct.icu/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.1\r\nDate: Fri, 06 Mar 2026 13:46:42 GMT\r\nContent-Type: application/javascript; charset=utf-8\r\nLast-Modified: Mon, 02 Mar 2026 18:38:48 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"69a5d938-286b4\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":165556,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (47105)","md5":"7cc52711b264046c1070a1fb46d46e48","sha1":"861b79fd3d5341a0e68f08e7fa66224481ac128f","sha256":"799544819ce0425962f1b35823dd23198c3f805aa6e22071fdee5294a282d186","sha512":"5121920df26e74fc162ffc580d808df138b16d689239baf3bc0802809ebd727d047047925f3122348cd81f87351d631fcb561a3b65b03fe44d2cd86006ae36f1","ssdeep":"1536:sm6KC+SmeqFQDdcma64QjTpwT07+2vBvd3V9ZemhhNi9jd4muAZA795SW5xWb8hW:sm6KC+oqFQOmFTpwISvjdjAyXUvNFCT","tlshash":"f7f34c8c52a110b87273427aa8013505b5195ffabf06d0a9637c0db676e2ddca217eff","first_seen":"2026-03-06T13:47:09.067316Z","last_seen":"2026-03-06T14:09:28.842784Z","times_seen":2,"resource_available":false,"data":null}},"time_used":277,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":200,"receive":77,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"app-pct.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Roboto:wght@300;400;500;700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.74.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://app-pct.icu/","date":"2026-03-06T13:46:42.509Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:01 GMT","end":"Mon, 27 Apr 2026 08:38:00 GMT"},"fingerprint":{"sha1":"AD:23:3E:9B:CF:2B:A1:EC:31:14:63:D1:58:73:BB:E7:C5:32:16:8C","sha256":"B1:5F:45:BF:00:8C:68:35:D3:42:B2:67:66:47:9D:BB:42:41:07:56:3A:C4:1C:D6:10:7B:B7:53:C2:71:81:33"}}},"request":{"raw":"GET /css2?family=Roboto:wght@300;400;500;700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://app-pct.icu/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Fri, 06 Mar 2026 13:46:42 GMT\r\ndate: Fri, 06 Mar 2026 13:46:42 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":22340,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (1572)","md5":"b9f037ad2bf34f0e66cb12a391456d5f","sha1":"9e5e9fa857e3ed7ef12535c8fac83846034bf4a5","sha256":"2d09d5a02335bea6714b8a21156de9506fdd34d43d597aea05792ff050a588a6","sha512":"a49ad933cd238b818c604b044fa200f2d6a40d24040be41584f0c535f948b2f7642b0d91cbb77b07f41f071d46e6738a0d9c3a2d9ea125f463329280fbfbd970","ssdeep":"384:p9f59g9P9r9yU9/qY4+949Y9p9fM919W969yh9/qY4X9N9t9i9fD9O9d9B9ya9/U:pDS99YURRuWDyjooYhREHPM5svvYaR78","tlshash":"86a210a1041744009b834ce223cebf35fe1f52117142d0b5abfd9b6b9ddbca6526939d","first_seen":"2026-02-19T22:28:50.873195Z","last_seen":"2026-07-24T16:19:42.159045Z","times_seen":5834,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}