{"report_id":"2c6affec-e670-49f1-8a5e-e4f3940f60f0","version":0,"status":"done","tags":[],"date":"2026-09-11T19:22:49Z","url":{"schema":"https","addr":"newmultixs.com/","fqdn":"newmultixs.com","domain":"newmultixs.com","tld":"com"},"ip":{"addr":"148.251.53.209","port":0,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"final":{"url":{"schema":"https","addr":"newmultixs.com/","fqdn":"newmultixs.com","domain":"newmultixs.com","tld":"com"},"title":"Newmultix | USDT → Наличные | Белый обменник","dom":{"size":7353,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (926)","md5":"1ede86d1a229dff0a004a0dca83d1c1f","sha1":"7dc50401420d66958f9e8fc30c99d969c4b95160","sha256":"87a40be5757cad6e6dcec8f8f2325b40e2bda89eb2cbfad573677bc248c6bbd3","sha512":"85042d3b169c155d9da3a42672e2f5e92a50bf6af94921427ffcee5b3f791f6a78785e9c198b8ee52d6fa327e1b80d1871a63128fbe75214f8f9873a61857dd7","ssdeep":"192:e8dQ+WdyZwbQXB9f/1xpHU+k3eSUWs7Wj:e6Q+YyZAaB9fNjr+eSz","tlshash":"79e173612af2146b0123c1c2ade2ba0e3de5856fda4b930071bd0fb92fd3c85c897529","dom_hash":"domhashff3765f912c57d90d00a5ccb5d019aa4","first_seen":"2026-09-11T19:21:52.530832Z","last_seen":"2026-09-11T19:22:50.892105Z","times_seen":2,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"newmultixs.com/","fqdn":"newmultixs.com","domain":"newmultixs.com","tld":"com"},"ip":{"addr":"148.251.53.209","port":0,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-10-16T19:22:49Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":null},"summary":[{"fqdn":"newmultixs.com","ip":{"addr":"148.251.53.209","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"domain_registered":"2026-09-09","domain_rank":0,"first_seen":"2026-09-11T19:21:47.785514Z","last_seen":"2026-09-11T19:21:47.785514Z","alert_count":0,"request_count":5,"received_data":67124,"sent_data":2448,"comment":"","tags":null,"fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]}]},{"fqdn":"www.googletagmanager.com","ip":{"addr":"142.250.178.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2011-11-11","domain_rank":283,"first_seen":"2012-10-04T01:07:32Z","last_seen":"2026-09-06T22:44:31.282543Z","alert_count":0,"request_count":1,"received_data":474944,"sent_data":479,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"newmultixs.com/","fqdn":"newmultixs.com","domain":"newmultixs.com","tld":"com"},"ip":{"addr":"148.251.53.209","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":true,"md5":"cd0f1ebe6efbb589ad0a3584070c4c2f","sha1":"d17d673608b754979a1b58daedba531b1bc406c1","sha256":"fcc9f4ac564297327cb83c84a45c9cb61766e1d4958607fafba078ba895108ce","sha512":"0cc9bab2715b7f605e9b69f030b007de0b1e3b5dffcc56c01932791678eb1bf5455773d2f20d974a91adcb8062e6e7ea2fcb1db091c4c5126c027790e1755de1","ssdeep":"","tlshash":"0bc02b89351a0c7151eb2700cf7fb708b005321898e09a31091f23048d10e43d744850","size":151,"data":"","first_seen":"2026-09-11T19:21:52.542261Z","last_seen":"2026-09-11T19:22:50.901355Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"newmultixs.com/","fqdn":"newmultixs.com","domain":"newmultixs.com","tld":"com"},"ip":{"addr":"148.251.53.209","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":true,"md5":"883b5f0383c34978ffc9ed0e9fea17b2","sha1":"0c888cedc08600198b0693bfa7c32104a7b17e07","sha256":"111915c7cec4b45f9d1e7ab5fa78c59cb85eb491370b145f55b799699369a73f","sha512":"46add9ec351029a2806488828553520c10f851adb6d347534d2603cdf6ca7e7718c82bcdc4b3c2bbc3650071526409737c5c642c92552d169801f361b43ed22b","ssdeep":"","tlshash":"22010c0f70e318f3682ff12e9f5f690836b2046b4444c600be1d0a255fe042c92a6fd8","size":695,"data":"","first_seen":"2026-09-11T19:21:52.543889Z","last_seen":"2026-09-11T19:22:50.902224Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=AW-18385618144","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"3bc1d78dfbf37cbc9637af4f42bcb8e6","sha1":"88cd47d9e8b1b4db08a097fd20471bf97551e069","sha256":"29203f3f215ed68c88fc8a11be2ca3d4fd892579f2fa6b7f6774a247947740b7","sha512":"d614f5aeddf93d255716e29b7c7ff2714fe779cb2f01fa49f67704cb6a2e092533ffd7fad1a65ba92cd5f677e3078b8aabb075bbdca46a9206a5fd38f840f143","ssdeep":"6144:Zpf1L6SbQjmgyyE3RdJl580ucTPbNELR3/j/xPS33ONsZ:Zrq+y6Pkxw3Oa","tlshash":"b2a42acd73d674229392f574903f018ba67a39a2b48cc899f18adce42d3459a9173f7c","size":474340,"data":"","first_seen":"2026-09-11T19:21:52.537007Z","last_seen":"2026-09-11T19:22:50.897168Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"newmultixs.com/","fqdn":"newmultixs.com","domain":"newmultixs.com","tld":"com"},"ip":{"addr":"148.251.53.209","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-11T19:22:19.413Z","timestamp":1789154539413,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.newmultixs.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 09 Sep 2026 17:02:00 GMT","end":"Tue, 08 Dec 2026 17:01:59 GMT"},"fingerprint":{"sha1":"FA:6D:13:74:22:81:BF:71:BF:83:36:01:3F:83:1F:24:D0:5D:D1:0B","sha256":"FA:62:46:B8:E7:89:52:CD:EE:32:65:AD:2C:FB:CE:1B:A7:14:35:AA:84:72:A1:9D:77:2A:31:50:9B:DA:9B:97"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: newmultixs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/html\r\nlast-modified: Thu, 10 Sep 2026 07:29:46 GMT\r\netag: \"1cc1-6aa25c6a-7388640c6b70b3f6;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 2359\r\ndate: Fri, 11 Sep 2026 19:22:19 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]}],"data":{"size":7361,"size_decoded":2842,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (920)","md5":"e8aa1b50251e5b5fd6f42aa5917fcdbd","sha1":"9e0db1941102c95653e69e43c926bb5f7b65c9d1","sha256":"4addcd90c9ee1605f62675918c7715013c890d977310151a129f956b0b10be0a","sha512":"61fbf29dc0af324af4f404db44ba8bbe29135b0c7bd7c09a263cddb411237e9473d36a6525e0d0862515d3d453d7be89a16d6c50d42e53985f2cae9db24c8ce2","ssdeep":"96:yue8dQNkWdTGVwlEfLbQd5Bgs+m/pUG1ugpHURIk++hzSURss75NpViyM:M8dQ+WdyawbQXB9f/1xpHU+k3zSUWs7i","tlshash":"bbe1856129f2146b0123c1c3ade1ba0d3de6856fda4b930071bd0fb92fd3c85c897529","first_seen":"2026-09-11T19:21:52.533926Z","last_seen":"2026-09-11T19:22:50.894676Z","times_seen":2,"resource_available":false,"data":null}},"time_used":114,"timings":{"blocked":-1,"dns":4,"connect":32,"send":0,"wait":34,"receive":0,"ssl":43},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"newmultixs.com/style.css","fqdn":"newmultixs.com","domain":"newmultixs.com","tld":"com"},"ip":{"addr":"148.251.53.209","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://newmultixs.com/","date":"2026-09-11T19:22:19.971Z","timestamp":1789154539971,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.newmultixs.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 09 Sep 2026 17:02:00 GMT","end":"Tue, 08 Dec 2026 17:01:59 GMT"},"fingerprint":{"sha1":"FA:6D:13:74:22:81:BF:71:BF:83:36:01:3F:83:1F:24:D0:5D:D1:0B","sha256":"FA:62:46:B8:E7:89:52:CD:EE:32:65:AD:2C:FB:CE:1B:A7:14:35:AA:84:72:A1:9D:77:2A:31:50:9B:DA:9B:97"}}},"request":{"raw":"GET /style.css HTTP/1.1\r\nHost: newmultixs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://newmultixs.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Fri, 18 Sep 2026 19:22:19 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 09 Sep 2026 17:57:49 GMT\r\netag: \"269b-6aa19e1d-83ff9dc0cab2b7e5;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 2502\r\ndate: Fri, 11 Sep 2026 19:22:19 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":9883,"size_decoded":3043,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with CRLF line terminators","md5":"c8cc8ee2a612ff20b0d4ec9b4b4a108f","sha1":"f9fd1695b2408f23bbcb8533720c05831d571441","sha256":"1781134b2b384ac089d379aff360e86eaede374ae7711599bae382aacaacb0df","sha512":"25e0674e9a31db925cd6731e0666d50cd6da7fc8518bce80244136a69df08afa8e9d198a7ff4c35c7dee039e89a5d26ad06d3980f95dd2e40e43c509531777ef","ssdeep":"192:OFxOKDVn9kqO2WxhJ+yG6OB0W+SqEINZkb0y5M3:gsG789","tlshash":"9e124225d60914427036d7acef624f4aeba580678306027f3bdc626a5fba15cc365fdc","first_seen":"2026-09-11T19:21:52.535384Z","last_seen":"2026-09-11T19:22:50.896069Z","times_seen":2,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=AW-18385618144","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://newmultixs.com/","date":"2026-09-11T19:22:19.973Z","timestamp":1789154539973,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:37:41 GMT","end":"Mon, 02 Nov 2026 08:37:40 GMT"},"fingerprint":{"sha1":"DC:E6:38:9B:82:DB:20:21:19:E7:95:FC:30:E0:F0:F4:BC:CA:9A:1C","sha256":"2C:0E:42:66:EE:BA:84:59:3C:53:EB:87:C0:84:DD:32:F4:42:73:26:47:8C:4E:56:F9:5B:47:6C:AF:BA:C2:F9"}}},"request":{"raw":"GET /gtag/js?id=AW-18385618144 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://newmultixs.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: zstd\r\nvary: Accept-Encoding\r\ndate: Fri, 11 Sep 2026 19:22:20 GMT\r\nexpires: Fri, 11 Sep 2026 19:22:20 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 162217\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":474340,"size_decoded":162821,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (6698)","md5":"3bc1d78dfbf37cbc9637af4f42bcb8e6","sha1":"88cd47d9e8b1b4db08a097fd20471bf97551e069","sha256":"29203f3f215ed68c88fc8a11be2ca3d4fd892579f2fa6b7f6774a247947740b7","sha512":"d614f5aeddf93d255716e29b7c7ff2714fe779cb2f01fa49f67704cb6a2e092533ffd7fad1a65ba92cd5f677e3078b8aabb075bbdca46a9206a5fd38f840f143","ssdeep":"6144:Zpf1L6SbQjmgyyE3RdJl580ucTPbNELR3/j/xPS33ONsZ:Zrq+y6Pkxw3Oa","tlshash":"b2a42acd73d674229392f574903f018ba67a39a2b48cc899f18adce42d3459a9173f7c","first_seen":"2026-09-11T19:21:52.537007Z","last_seen":"2026-09-11T19:22:50.897168Z","times_seen":2,"resource_available":true,"data":null}},"time_used":136,"timings":{"blocked":-1,"dns":2,"connect":17,"send":0,"wait":36,"receive":47,"ssl":34},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"newmultixs.com/img/1.jpg","fqdn":"newmultixs.com","domain":"newmultixs.com","tld":"com"},"ip":{"addr":"148.251.53.209","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://newmultixs.com/","date":"2026-09-11T19:22:19.982Z","timestamp":1789154539982,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.newmultixs.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 09 Sep 2026 17:02:00 GMT","end":"Tue, 08 Dec 2026 17:01:59 GMT"},"fingerprint":{"sha1":"FA:6D:13:74:22:81:BF:71:BF:83:36:01:3F:83:1F:24:D0:5D:D1:0B","sha256":"FA:62:46:B8:E7:89:52:CD:EE:32:65:AD:2C:FB:CE:1B:A7:14:35:AA:84:72:A1:9D:77:2A:31:50:9B:DA:9B:97"}}},"request":{"raw":"GET /img/1.jpg HTTP/1.1\r\nHost: newmultixs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://newmultixs.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Fri, 18 Sep 2026 19:22:19 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Wed, 09 Sep 2026 17:57:49 GMT\r\netag: \"9a15-6aa19e1d-e5a709a94fafcf83;;;\"\r\naccept-ranges: bytes\r\ncontent-length: 39445\r\ndate: Fri, 11 Sep 2026 19:22:19 GMT\r\nserver: LiteSpeed\r\nvary: User-Agent\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":39445,"size_decoded":39773,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 640x640, components 3","md5":"2b7dd4e8d1f2c81e3509c0dc1a525107","sha1":"396ffebc4565b9c747f7149794c00b9d3efd8e17","sha256":"52fdfd68bcdc89a50229d4c25434382b43f1bfc1fb6efb9611cabe4248d1f40b","sha512":"0b2fa86acad79fee4f920ae0265d8ef707482bd88822e9516769625b00cc735ac5f4bf7029d1c32be89e572d32acba4716339467156b53938cb72b39d906a73f","ssdeep":"768:xWtgw76ROrrELVRDPj6gXrnXM0ifM00IQC/dE+VPEPi8:UtWRWyRDxrXM7x1/dGa8","tlshash":"8c03f184eb052b5ee63783b40399fbebf7a53cca4a7c288b99c57301211b2fc1095b45","first_seen":"2026-06-11T14:23:34.528559Z","last_seen":"2026-09-11T19:22:50.898673Z","times_seen":6,"resource_available":false,"data":null}},"time_used":43,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"newmultixs.com/img/2.png","fqdn":"newmultixs.com","domain":"newmultixs.com","tld":"com"},"ip":{"addr":"148.251.53.209","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://newmultixs.com/","date":"2026-09-11T19:22:19.985Z","timestamp":1789154539985,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.newmultixs.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 09 Sep 2026 17:02:00 GMT","end":"Tue, 08 Dec 2026 17:01:59 GMT"},"fingerprint":{"sha1":"FA:6D:13:74:22:81:BF:71:BF:83:36:01:3F:83:1F:24:D0:5D:D1:0B","sha256":"FA:62:46:B8:E7:89:52:CD:EE:32:65:AD:2C:FB:CE:1B:A7:14:35:AA:84:72:A1:9D:77:2A:31:50:9B:DA:9B:97"}}},"request":{"raw":"GET /img/2.png HTTP/1.1\r\nHost: newmultixs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://newmultixs.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Fri, 18 Sep 2026 19:22:20 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 09 Sep 2026 17:57:49 GMT\r\netag: \"1c70-6aa19e1d-5f0f47874895f1f2;;;\"\r\naccept-ranges: bytes\r\ncontent-length: 7280\r\ndate: Fri, 11 Sep 2026 19:22:20 GMT\r\nserver: LiteSpeed\r\nvary: User-Agent\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":7280,"size_decoded":7606,"mime_type":"image/png","magic":"PNG image data, 250 x 250, 8-bit/color RGBA, non-interlaced","md5":"95858ad1fa60d403b0cc00865d72f975","sha1":"119fcc2d98980b3ee20b873d2add1de8b395f407","sha256":"079f2f53690b659c0dbcb25714ffaad7c33c6eb0789ad46ef7a753ddfcffc863","sha512":"d5c388b1cc9ec6bc7bed7beef7b62c4047a04a289211678a846b129c6825b251ee623edb31bb9a74cf1fbe8d6c8cbf2d366f53743d91fe45a4f6dc1101ad4c89","ssdeep":"96:eSxCfjb7GZMqPv3dQtWFM5xH5+eg4Jhn7TT4d4H6jL/7vQq1JANDeAYN8vu+eD:eS8f7GPtQtNzA4JhE1JgNDrUhD","tlshash":"c9e19e4dd09bf876bed0dda049baefd7a5932edaa9e04c2554c2b93a0e015f4329502c","first_seen":"2026-05-06T23:59:19.881474Z","last_seen":"2026-09-11T19:22:50.899684Z","times_seen":3,"resource_available":false,"data":null}},"time_used":56,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":40,"receive":16,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"newmultixs.com/favicon.ico","fqdn":"newmultixs.com","domain":"newmultixs.com","tld":"com"},"ip":{"addr":"148.251.53.209","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://newmultixs.com/","date":"2026-09-11T19:22:20.117Z","timestamp":1789154540117,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.newmultixs.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 09 Sep 2026 17:02:00 GMT","end":"Tue, 08 Dec 2026 17:01:59 GMT"},"fingerprint":{"sha1":"FA:6D:13:74:22:81:BF:71:BF:83:36:01:3F:83:1F:24:D0:5D:D1:0B","sha256":"FA:62:46:B8:E7:89:52:CD:EE:32:65:AD:2C:FB:CE:1B:A7:14:35:AA:84:72:A1:9D:77:2A:31:50:9B:DA:9B:97"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: newmultixs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://newmultixs.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\npragma: no-cache\r\ncontent-type: text/html\r\ncontent-length: 1251\r\ndate: Fri, 11 Sep 2026 19:22:20 GMT\r\nserver: LiteSpeed\r\nvary: User-Agent\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1251,"size_decoded":1477,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF, LF line terminators","md5":"8150f458ed6fb9b1db4e5cfa57a1a281","sha1":"6e5726854d28687b560d7fdcb5c782c425c7dfb9","sha256":"4c13d452dd5d49671bd93ca32f2b4f85c78e39b6ab0ad1f38d98ed267f8fd896","sha512":"4cc6a112673aef8bb8bb8a385c26791b805d43bb707b509880e894f1c83bab4e16f13de187036c5f660c3bec1d286258396b7bde65c5d7945c5019665196818c","ssdeep":"","tlshash":"c021353ec1c1560ae0271164fbc1f7a86669825291970f703b9eb176f6cd0bb56a36c8","first_seen":"2024-02-08T16:48:55Z","last_seen":"2026-09-11T20:53:04.500167Z","times_seen":154878,"resource_available":true,"data":null}},"time_used":33,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}
