{"report_id":"2dd4dd13-6e3a-48ee-8b32-2d7e7afdb7ba","version":6,"status":"done","tags":[],"date":"2026-04-27T04:57:57Z","url":{"schema":"https","addr":"username7853.invoice-ads-agency.com/","fqdn":"username7853.invoice-ads-agency.com","domain":"invoice-ads-agency.com","tld":"com"},"ip":{"addr":"172.67.165.69","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"username7853.invoice-ads-agency.com/","fqdn":"username7853.invoice-ads-agency.com","domain":"invoice-ads-agency.com","tld":"com"},"title":"Accounts Centre","dom":{"size":29003,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (29003), with no line terminators","md5":"47fba6bf5e45f1649042304be32fb259","sha1":"9de287e6f33e84b5c95e208eee8e1cda08158fbc","sha256":"7b479557c8f57d4690895b6f4fbd3bf675ea37539cec16a6cb45db789b7e9ddf","sha512":"65984fc8e71c46d5214aa6d9e5a9262deccbec38a2b225d47d0c363e9dffb5df81566d4ab689758439420da2ffcd25ae131d24f4192c4d325dc3a75668eacac9","ssdeep":"768:v859+YU7pon3NT43lTjmZ9vU/525nImfDWE7:0HSpondU1mZ+xcnZ/","tlshash":"5dd2933a8794d9bfa433479cd6306f3f21ed839fde55c51c80b897d4c28aea5a9124c2","dom_hash":"domhash47db6ec02c840cd7ed1d34158b8f5229","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"username7853.invoice-ads-agency.com/","fqdn":"username7853.invoice-ads-agency.com","domain":"invoice-ads-agency.com","tld":"com"},"ip":{"addr":"172.67.165.69","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":["openphish"],"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-06-01T04:57:57Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":4}},"detection":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-27","alert":"Phishing Block","trigger":"username7853.invoice-ads-agency.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-27","alert":"Sinkholed","trigger":"username7853.invoice-ads-agency.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-27","alert":"Sinkholed","trigger":"username7853.invoice-ads-agency.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-27","alert":"Sinkholed","trigger":"username7853.invoice-ads-agency.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null},"summary":[{"fqdn":"username7853.invoice-ads-agency.com","ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-04-22","domain_rank":0,"first_seen":"2026-04-27T04:57:58.402855Z","last_seen":"2026-04-27T04:57:58.402855Z","alert_count":84,"request_count":21,"received_data":2037351,"sent_data":14682,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Next.js","description":"Next.js is a React framework for developing single page Javascript applications.","website":"https://nextjs.org","common_platform_enumeration":"cpe:2.3:a:zeit:next.js:*:*:*:*:*:*:*:*","icon":"Next.js.svg","categories":["JavaScript frameworks","Web frameworks"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"React","description":"React is an open-source JavaScript library for building user interfaces or UI components.","website":"https://reactjs.org","common_platform_enumeration":"cpe:2.3:a:facebook:react:*:*:*:*:*:*:*:*","icon":"React.svg","categories":["JavaScript frameworks"]},{"name":"Webpack","description":"Webpack is an open-source JavaScript module bundler.","website":"https://webpack.js.org/","common_platform_enumeration":"","icon":"Webpack.svg","categories":["Miscellaneous"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"username7853.invoice-ads-agency.com/_next/static/chunks/3568-9615f39838ef8f44.js","fqdn":"username7853.invoice-ads-agency.com","domain":"invoice-ads-agency.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"05a19e746455ee4787e71d2271000ad3","sha1":"f09cadf29c087e08f351fdcb7ed6212b5230f46e","sha256":"600221d75d4eaada3d62313c14ca45dfa4a0c023e1e3e3f19c78fbeff70b5b5e","sha512":"57a75661902837e3a8c7886a366077d0e6ebbee418e02f11b1cf4e796d0f2418a16b3972ee1088fd00a37decfd5212ea11408709b657597cd2e34a68a2edbf5a","ssdeep":"384:RnvRUJ22u+Z1MM89OuWSSXcu44JenLwClG5BIqgH+:RnWFnMM8guWSccu4gpgH+","tlshash":"bd42b6c8764371144b9bcf9692ff0715f27c1a98282e4829f3a5285f3254a4867f3f39","size":13067,"data":"","first_seen":"2025-06-19T03:12:38.852497Z","last_seen":"2026-04-27T04:58:00.169959Z","times_seen":262,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"username7853.invoice-ads-agency.com/_next/static/chunks/9303-042415d7fe3fdc66.js","fqdn":"username7853.invoice-ads-agency.com","domain":"invoice-ads-agency.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"6509dbce0556b89b1ece696f9f7b963a","sha1":"a63a4c34077320b97f06ca6a686f79d596a10cf5","sha256":"227547e916158d8174ac257799e642fc4a26935d0b31acda5719b2d3bd0ef002","sha512":"3d16b5794692801ebb8dff7c1d8248873a74f0174d492b2e747960cf2aebddf6f1a6d1d8c95c8f803ffd065ec728dee065a3f5e6998ca88b327ef2cc2f0928d2","ssdeep":"1536:kZkRavHHx1XNnEAj2hTn4dJF/OX36+7+25UlXnxraZeXELiZXEoFUNn6g/e0cZ3N:2kIHCRn4dJ1OHzerLUNn/e3Zd","tlshash":"8b04b8b676d0f8d107a780d5843b400af3295c3b146f74a0a3e6cce975645dea1b3faa","size":175462,"data":"","first_seen":"2026-03-22T00:15:42.204518Z","last_seen":"2026-04-27T04:58:00.167666Z","times_seen":255,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"username7853.invoice-ads-agency.com/_next/static/chunks/webpack-e51daf8838ae20e8.js","fqdn":"username7853.invoice-ads-agency.com","domain":"invoice-ads-agency.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"873c9729b9c2a571feef1a50a8223205","sha1":"a8cae0833e32b8cf910e494f0ef6baae9567462c","sha256":"d3a2529480d1318d0d92410a1864d9256fe97116bb73d46114ca3bbed3312043","sha512":"ab5e5596f6502f8f9e820f52df1e2718cf88f2c4d35ae55587a371d12111a6b1745b876ad4d98f6f3d168505df7b6629cd634f58c35e908326d61ad768ad3cf4","ssdeep":"","tlshash":"e061b5a93625fab556f108c5887fc142f619243b051afca0e717dcb9b474aa10562ff3","size":3434,"data":"","first_seen":"2026-04-20T12:08:33.559927Z","last_seen":"2026-04-27T04:58:00.18085Z","times_seen":239,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"username7853.invoice-ads-agency.com/","fqdn":"username7853.invoice-ads-agency.com","domain":"invoice-ads-agency.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"d4f58df8ef556437633bb90cc31469c4","sha1":"c1c713bb5046a54cb79a8e7537b6d7fca624fd45","sha256":"2dcb2e50c883929aebb7a64a7a22cfe2260d856a3c36a6926c082da19c552b7b","sha512":"54c8a79f5897cd198db689700c24f950ad7fe19eed815f8bfa0e47428701d8c84a1fd8f677a6f1b2a4f1443f35f2dbd19e6f456ceeebfb1c59275bb356e1a5e9","ssdeep":"","tlshash":"bfc02b041427c47b421c6f4dc02243d4e4b020bcdc492480801d181800d0c313b40cd6","size":130,"data":"","first_seen":"2025-03-25T18:26:20.414558Z","last_seen":"2026-04-27T14:19:44.37447Z","times_seen":27118,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"username7853.invoice-ads-agency.com/","fqdn":"username7853.invoice-ads-agency.com","domain":"invoice-ads-agency.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"1a6e1178e4bbf5730bd664a49dd3bc24","sha1":"17c3ae3273f9de6afbbdedf2e413dbb3a6722792","sha256":"3814cddd18b2095e01abb745a99e5ada90178e709c09879324c3b623f2d829ea","sha512":"cfb1aab0bf589e33fd12906f448ddbbf7163420a088de513b174304c9ba3a7abcd9b41c98bc4dd51edd0206c1fe4660db9857e3c6163d1bf50c670cefddee509","ssdeep":"","tlshash":"de9002b090c39c5890264186687100160b6c040c01080141132184d810115048e40d8e","size":43,"data":"","first_seen":"2023-03-13T01:07:12Z","last_seen":"2026-04-27T14:20:37.791424Z","times_seen":102605,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"username7853.invoice-ads-agency.com/","fqdn":"username7853.invoice-ads-agency.com","domain":"invoice-ads-agency.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"89cef7e64ba0864be6b0916ef3b246b4","sha1":"6bab37f8080f39071ab51ec887436a3c76202f83","sha256":"7f9fc9e7f2890f808e417fcebabf5b6fc098549980eb63d381094773b58abbf0","sha512":"2da5c5fc78a324b4887549dd1437364bb9d2d1210be606a31beda409d3fa32864b6595b44ba836152058d38a329d0573be3dfee084ddf756b1bdb9a4406174b6","ssdeep":"","tlshash":"7741ac1fb504d856bcbbee2e463f2d3a44dcdd7f47a499b8855ece2a020187a2399841","size":2357,"data":"","first_seen":"2026-04-23T07:30:08.622863Z","last_seen":"2026-04-27T04:58:00.183654Z","times_seen":64,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"username7853.invoice-ads-agency.com/","fqdn":"username7853.invoice-ads-agency.com","domain":"invoice-ads-agency.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"16c87873e49df2423823f5a96e1e3a88","sha1":"931c7325d6abb3325c8fe8b68d83368d921af199","sha256":"dd8b1271cd54b418ac862905f527bc0eba89ed3c09c8562f98ec67a873d88151","sha512":"34b09f203ace64cb466b0f68c16bcb32aa6c685335bee4a102d8b71abfaca903a31cd6503358c237d5d34f33f3707fc44f314b0b5c60f7e6f4f5b995bae90a9b","ssdeep":"","tlshash":"0a11e7699441dc8bfcbd79a9057e9d3b10cd405b42c5cff8829add291f438386692dc1","size":943,"data":"","first_seen":"2026-04-23T07:30:08.625331Z","last_seen":"2026-04-27T04:58:00.184643Z","times_seen":64,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"username7853.invoice-ads-agency.com/","fqdn":"username7853.invoice-ads-agency.com","domain":"invoice-ads-agency.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"3a842905f6e72f41eb8a121b25385ec4","sha1":"0257c7ab224f65f385de866d79d691fb41223f4f","sha256":"40118e3674409d6610d147e342296b8259b05fa99141580cc34299743540a2c7","sha512":"7e33a7f92b12657d87908ee97cb3ae5aab23de36e7316fbff753e564ec27f1aaeacbc7b327c7add896b371975d83c885b53f9f14d92642a52ccb2915c37a80f8","ssdeep":"","tlshash":"7cd05b79a108ed6abc197946193dbd3b105d44df0054dd6516c4ce044982a7a3711dd6","size":251,"data":"","first_seen":"2025-07-09T07:00:28.472734Z","last_seen":"2026-04-27T04:58:00.185501Z","times_seen":270,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"username7853.invoice-ads-agency.com/_next/static/chunks/4bd1b696-fd2c81fbe58d203b.js","fqdn":"username7853.invoice-ads-agency.com","domain":"invoice-ads-agency.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"dbd47ecbf6b9f8e404216d5186b53aad","sha1":"a8d8327692bba31c02aeeb2d3de65dc0130979a0","sha256":"da446533ae10a92abc594d4daa52e0ec33ef6b9b6f576d1433c6a48ea8273bba","sha512":"2e676d9df2a12ef0340b2ce221611e4d4acafc2a9086984815e1638805d17dec365fdc8cf63edbdf1b7ed46cdc519d17ce4b4ec0af7c05f6e755340a0e78ef71","ssdeep":"3072:NtfjLiM+NFCC4YQbCCAaI/02UHCgwLRE4:Ntfj2ld4Y40fUHQRE4","tlshash":"61f3f7e83d99e2116eb342a7109f2803737c262b240d4c60a615fd9db5b845bb17bfde","size":168414,"data":"","first_seen":"2025-05-02T11:19:56.694073Z","last_seen":"2026-04-27T13:42:09.061554Z","times_seen":1734,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"username7853.invoice-ads-agency.com/_next/static/chunks/main-app-364e5d1c9e0fc9e6.js","fqdn":"username7853.invoice-ads-agency.com","domain":"invoice-ads-agency.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"61976bef492c32b77473383a84a97bd6","sha1":"a5c5d7f5ae46f46b191c20f50b985ec9a399a176","sha256":"7649aa23a1b773b5cc5af454b74b9764940210f66a67af34594baf286f133a35","sha512":"ecf8e9f5240302ff305f222c0ca4d20ddc52be5bba65812eb6a0db782cc86067c123474f1ac11e349f19fb437e34b7495a6f22e0dad7dad1ea4a91908fba1975","ssdeep":"","tlshash":"07f0199a5f0cf42f1d266e74fd97ace31c1f5275302b4e607900dda12c67bacd664504","size":519,"data":"","first_seen":"2026-04-20T12:08:33.561762Z","last_seen":"2026-04-27T04:58:00.175432Z","times_seen":239,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"username7853.invoice-ads-agency.com/","fqdn":"username7853.invoice-ads-agency.com","domain":"invoice-ads-agency.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"bbd2f39962833ea69075c288660994a2","sha1":"3dcfb8a77d155f9a8068ad765a4ca0c4d4e536e1","sha256":"d1ba6fa6fc083c7326ea17bdd87c931a2504ba0cebe593e543fe90bb9ce37e15","sha512":"645bb7c27906889613c1f4b210156e1eb16d568f4a9d0e45d8c655b8ff37a63625828ca4eba5fed699b4904a12e5bd7759d87d7dd6d5ec506ba8cf0c9ca65d1c","ssdeep":"","tlshash":"86800474c4400c55c031405314341105017d440f00001700d351574470511055505dcf","size":34,"data":"","first_seen":"2023-08-27T16:27:01Z","last_seen":"2026-04-27T11:13:41.350424Z","times_seen":1533,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"username7853.invoice-ads-agency.com/","fqdn":"username7853.invoice-ads-agency.com","domain":"invoice-ads-agency.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"7e57b95bdc8d5e7e5751bed4753b9759","sha1":"9d4b106ca624a46e24180990c90a526e7d280958","sha256":"5becb6787cdcf62e5e97575bf50328f71aa42abcb24cded2e7576e464ceae518","sha512":"b305cd81c045116c856ac03f8cf57d0960af9840ca2d89d546302c51fe1193cea677c8f9135e17f1bc1e248368bfc50a9a644e7fa95759b6cc505e72d17f0730","ssdeep":"","tlshash":"b9c022a0dc02cc2cc2aa0f36183a0c2a21ccc1a503054146e888cd280981a3005b0dc9","size":186,"data":"","first_seen":"2025-03-17T23:44:41.647331Z","last_seen":"2026-04-27T04:58:00.187023Z","times_seen":562,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"username7853.invoice-ads-agency.com/_next/static/chunks/4385-790de5cddcc2d7d5.js","fqdn":"username7853.invoice-ads-agency.com","domain":"invoice-ads-agency.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"e8f267b8bddcf517d4fde85e1f63ee8c","sha1":"4debf667d77af3dc0594cf084038414625c5cdff","sha256":"a701f7fb598a74e6340c23973c373058bf0f2b830586c079412eef354520e99a","sha512":"69f74382b627a7e1f8eb86672a52c49cf1f060fc63a9dc5758e4e7d74d59d2bccc29f0a6fc4a2c919e78eb8ec39c000312b6a98c4ce739e61dcb4564861114f8","ssdeep":"192:JOzKAJ+d8VBI7jRFVYMQuvyk+C4BeODsaWAD2B99wrddd82Y+jD8avn/C:JOdAWHk3jyc4AaWx925/D5/C","tlshash":"f16208723594fce6539bc0d5c83f000ef3756d76622ab18863ea8cd9a5a4584f0a2f77","size":15229,"data":"","first_seen":"2026-04-23T07:30:08.610024Z","last_seen":"2026-04-27T04:58:00.168896Z","times_seen":230,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"username7853.invoice-ads-agency.com/_next/static/chunks/app/page-e7285c6ec016a6d8.js","fqdn":"username7853.invoice-ads-agency.com","domain":"invoice-ads-agency.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"60b10a447cb9198ef4e2458a571877c5","sha1":"b6d7129f287c4f33323b7fbf27baf6ab28061ad0","sha256":"72d3b58ed0d23923af38cca30a7a4428fab6dbfafd01e7777909b2bf013d3d9c","sha512":"54f16e8269b1a4208631f3de7fcc6be85efd31cf19cf538b173bd2c040191cc02f6232dd3f740d332566ee36dc3439868cb01396a7f551fec52695e7e0763d90","ssdeep":"768:JqYKjP6TJYurnbD9V91k1PTjiHA7HA5Zll9VL1K1PTNaGym868A49g5KSpO:YYKjP6TNrnb0KICZlORaOijSpO","tlshash":"98c2435ae7e19aee7436079c494d910e32ee678fce5acd686474bad2c84d1c53b023c3","size":27155,"data":"","first_seen":"2026-04-23T07:30:08.592883Z","last_seen":"2026-04-27T04:58:00.172797Z","times_seen":230,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"username7853.invoice-ads-agency.com/_next/static/chunks/2000-80660d8f368f73d8.js","fqdn":"username7853.invoice-ads-agency.com","domain":"invoice-ads-agency.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"e7e8615bcd1ecc55cfe2b00c098177bc","sha1":"fd14bdd81c8c8cd4dca2b88a6446fea516dd5d29","sha256":"d5130b80ac56b620257c773ebdbfe3f2ba777f8e09beaaf41251b727b45a09b4","sha512":"9095bac008f4f050e5994d3a1b0d1d24d4c3c58674f319912b3758d8242cbe5de927994e0f6a79a9d705f8724404d7572280011da2c7e0e6d3043551baf8b39b","ssdeep":"192:64wqWW90AF3oOpJqJi0vzXFuIpRLKC91qHU54GKAKKGNWdkS5ZkJcqwEFW9z:64sNAFYkJ8vz1BGQhKA1kWdkS5ZkWqZU","tlshash":"c03287aabb99741d170381f8d43b5107ab2e10342a0c8178b15dd8fe2db9987913bf7b","size":11520,"data":"","first_seen":"2026-04-23T07:30:08.599703Z","last_seen":"2026-04-27T04:58:00.171372Z","times_seen":230,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"username7853.invoice-ads-agency.com/_next/static/chunks/app/layout-c8cf2ca6f3fe507b.js","fqdn":"username7853.invoice-ads-agency.com","domain":"invoice-ads-agency.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"2256e4981a6f4cfcbc5256b59926b1c6","sha1":"760462c8f7a24f361d50ee53711abebe29917634","sha256":"0f320343f8d3e245a239254fb412f32d3f93cef1f07324ee46f9c7c70b078873","sha512":"5f0fd66e86e9b0d06a0395680065d06a71150a99e3f23eb1898fb46e38683558d59293787cc6f066ab23eb6b9db4f562d2b21c7af27b3362838a2f15d4093c98","ssdeep":"","tlshash":"0c216348014c749efd57d954fb3e9c22304a5928652b4cb873a5ec3114d37e0b276bed","size":1147,"data":"","first_seen":"2026-04-23T07:30:08.588325Z","last_seen":"2026-04-27T04:58:00.162819Z","times_seen":230,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"username7853.invoice-ads-agency.com/_next/static/chunks/app/not-found-48f4866caa49aa1f.js","fqdn":"username7853.invoice-ads-agency.com","domain":"invoice-ads-agency.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"190d4b8d45dd0df6fe26dc286046af35","sha1":"2fb57bbf0469f8dd4ef5f171a56d284a3f4f3e33","sha256":"d43146c0869ce83772c046d54e7e8e5432bc5d2d3ea8e169c47ecba5f50b9f29","sha512":"faadd3635f1c543ee1d47573b648851fbda029cb290171661aa379512a38c0e8e83b53592f56a66ed57b6488010a442419d7e6e992d0d65303badaa7daa5d281","ssdeep":"96:kVkotA4uJOiLNLWLmbNO0EVBp13q1EYT5+QBkPASQDlu6:krhDNCUFbp1a1PToASQJu6","tlshash":"c2a1848cd7d0befcb42a4addaaaa540c316f366cd65bcc78a5bcf515240a4d837067c1","size":4639,"data":"","first_seen":"2026-04-20T12:08:33.570264Z","last_seen":"2026-04-27T04:58:00.176739Z","times_seen":239,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"username7853.invoice-ads-agency.com/_next/static/chunks/4493-345c064d69dc5b01.js","fqdn":"username7853.invoice-ads-agency.com","domain":"invoice-ads-agency.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"def83e7b4e518b54a038060c69718556","sha1":"473165f51c2b586a44ec271d2673a66478a9383f","sha256":"320004ff6ed7f86649043cb94dabf5e99e66d630bfe5800e5463f139bcc018d5","sha512":"f76cdb3543df1f30697b2ae9199823df2a42439d9da623af0a6542e933c36e47733c44d68a8f51bdd060fced0586a05a66e2d9ae63ea5540f9f6573dd57632fe","ssdeep":"192:oEbfLkEv9x8AiLMS5O7vZm2cyYO/C0dwMcGWx:oOxVQMz/jKmwMcGWx","tlshash":"e702a8ea71e1f8a2835b1050443b100bf37e1db5541e6098e7e99ce6f9b046ca1b3f6a","size":8484,"data":"","first_seen":"2025-10-24T00:39:28.71526Z","last_seen":"2026-04-27T04:58:00.176118Z","times_seen":266,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"username7853.invoice-ads-agency.com/","fqdn":"username7853.invoice-ads-agency.com","domain":"invoice-ads-agency.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"d23df3e7564a4fd57f55d47c9cca1b51","sha1":"6723114041984c69ec7a8213f82895cf8a58ca4f","sha256":"35d445aab1142d3e4316ccbb00bcb28c97e78f8b270d7888179a5e9e2a8a1fe2","sha512":"65d159594c27bbd4ec2dfa90909fe2e06edf841bff888c6ec78fa3f0d6572e875190dbeb83846df54b370e2a78d43a367e6b0377e11c6a8aadaa413795779ff2","ssdeep":"","tlshash":"0ce0f1005c01dc03c93abcb12dbcfc7420ccc62b8280096252c5ce3d0a562b9bfe1ea3","size":424,"data":"","first_seen":"2026-04-23T07:30:08.630647Z","last_seen":"2026-04-27T04:58:00.187772Z","times_seen":230,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"username7853.invoice-ads-agency.com/_next/static/chunks/4234-add05e1b93198758.js","fqdn":"username7853.invoice-ads-agency.com","domain":"invoice-ads-agency.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"f80ddb6a9cf2be1a8f90f9f2573f9aa1","sha1":"d20c2abe980686b38166a1fc01f831ce60118622","sha256":"5297ff2a2bfd391906d095d4d459cd3c141c3f8b31d53d7287a703b080b89ab0","sha512":"88720dd2a740876bf18a81b28b490167dee1ed0dc8cdd2b9cc6b091e2131137755f6e07764bb252552f44c9e3f59a04be690be3f27529e47c16a66303c999a82","ssdeep":"768:uO9P7WAmsvdHp4tCkhoaQr0yUEWAsuRWAeAUAD1Q9e01/1PTko9kAkV8YTwo9OTt:usT4tC8Xuyei4Xxov3nndd","tlshash":"9f43b859d9410efcf03b46945bdef61c346f6baede2a8974b1f86c2629025c43643f82","size":59063,"data":"","first_seen":"2026-04-23T07:30:08.616642Z","last_seen":"2026-04-27T04:58:00.164729Z","times_seen":201,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"username7853.invoice-ads-agency.com/_next/static/chunks/4bd1b696-fd2c81fbe58d203b.js","fqdn":"username7853.invoice-ads-agency.com","domain":"invoice-ads-agency.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://username7853.invoice-ads-agency.com/","date":"2026-04-27T04:57:34.532Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"username7853.invoice-ads-agency.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 26 Apr 2026 09:25:08 GMT","end":"Sat, 25 Jul 2026 10:24:56 GMT"},"fingerprint":{"sha1":"48:56:D0:29:97:26:14:90:70:9D:59:AD:5A:E0:1B:B2:64:EC:A0:34","sha256":"BB:2D:2D:D2:48:51:23:80:1A:A4:B6:6F:F1:02:BC:8B:25:AF:96:42:07:C0:53:97:56:34:62:CC:64:AA:C4:D0"}}},"request":{"raw":"GET /_next/static/chunks/4bd1b696-fd2c81fbe58d203b.js HTTP/1.1\r\nHost: username7853.invoice-ads-agency.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://username7853.invoice-ads-agency.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: __cf_bm=71JL0B6vhLQsFK6jLSdRUzzx2oKPeswpNm7HH32hxvY-1777265854.2844844-1.0.1.1-5g_3Ds0XMuYtu_m9LfMf2ZercpmV6tTU31AQtp_0phvfg_o41Uq9J_i4Vnt5T9QTf8N2n5wJTrzuZaoAXMMhm0HvmHOcGE1z0QLl8xmdlIgGzcwbck_dKeOpT18F2OL1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 27 Apr 2026 04:57:34 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Tue, 01 Jan 1980 00:00:01 GMT\r\netag: W/\"291de-49773873e8\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nx-do-app-origin: 3f0c10dd-037d-4fae-b207-2f4a5d454a33\r\nx-do-orig-status: 200\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BXQ%2BzQnjQsqDvbJO60%2FBTSVGMTREvHmEaqXfKXmvZB1GRDhPwMAlKqQ8GfLeqvzXiGT%2FEEmO7fr72VYhR6gIjB3em%2BswXqToppDdVaydBpLebmwzolq0WMcJWBJxFk%2BAeKh%2Fygx8Jl2hs4OHJV1jx0M6vb9LMg%3D%3D\"}]}\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f2b3f46bd0c4e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":168414,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"dbd47ecbf6b9f8e404216d5186b53aad","sha1":"a8d8327692bba31c02aeeb2d3de65dc0130979a0","sha256":"da446533ae10a92abc594d4daa52e0ec33ef6b9b6f576d1433c6a48ea8273bba","sha512":"2e676d9df2a12ef0340b2ce221611e4d4acafc2a9086984815e1638805d17dec365fdc8cf63edbdf1b7ed46cdc519d17ce4b4ec0af7c05f6e755340a0e78ef71","ssdeep":"3072:NtfjLiM+NFCC4YQbCCAaI/02UHCgwLRE4:Ntfj2ld4Y40fUHQRE4","tlshash":"61f3f7e83d99e2116eb342a7109f2803737c262b240d4c60a615fd9db5b845bb17bfde","first_seen":"2025-05-02T11:19:56.694073Z","last_seen":"2026-04-27T13:42:09.061554Z","times_seen":1734,"resource_available":true,"data":null}},"time_used":507,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":333,"receive":174,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-27","alert":"Phishing Block","trigger":"username7853.invoice-ads-agency.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-27","alert":"Sinkholed","trigger":"username7853.invoice-ads-agency.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-27","alert":"Sinkholed","trigger":"username7853.invoice-ads-agency.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-27","alert":"Sinkholed","trigger":"username7853.invoice-ads-agency.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"username7853.invoice-ads-agency.com/_next/static/chunks/app/layout-c8cf2ca6f3fe507b.js","fqdn":"username7853.invoice-ads-agency.com","domain":"invoice-ads-agency.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://username7853.invoice-ads-agency.com/","date":"2026-04-27T04:57:34.541Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"username7853.invoice-ads-agency.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 26 Apr 2026 09:25:08 GMT","end":"Sat, 25 Jul 2026 10:24:56 GMT"},"fingerprint":{"sha1":"48:56:D0:29:97:26:14:90:70:9D:59:AD:5A:E0:1B:B2:64:EC:A0:34","sha256":"BB:2D:2D:D2:48:51:23:80:1A:A4:B6:6F:F1:02:BC:8B:25:AF:96:42:07:C0:53:97:56:34:62:CC:64:AA:C4:D0"}}},"request":{"raw":"GET /_next/static/chunks/app/layout-c8cf2ca6f3fe507b.js HTTP/1.1\r\nHost: username7853.invoice-ads-agency.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://username7853.invoice-ads-agency.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: __cf_bm=71JL0B6vhLQsFK6jLSdRUzzx2oKPeswpNm7HH32hxvY-1777265854.2844844-1.0.1.1-5g_3Ds0XMuYtu_m9LfMf2ZercpmV6tTU31AQtp_0phvfg_o41Uq9J_i4Vnt5T9QTf8N2n5wJTrzuZaoAXMMhm0HvmHOcGE1z0QLl8xmdlIgGzcwbck_dKeOpT18F2OL1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 27 Apr 2026 04:57:34 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncache-control: public, max-age=31536000, immutable\r\nlast-modified: Tue, 01 Jan 1980 00:00:01 GMT\r\netag: W/\"47b-49773873e8\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nx-do-app-origin: 3f0c10dd-037d-4fae-b207-2f4a5d454a33\r\nx-do-orig-status: 200\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7%2FUDu95KJ2WDITn9IqYvXQptPudAZdr1eSc3Mk85YspNMOSdgobHS%2FWFuS3UHIEsJJyeik87mo2VFswQNK47zMMERz65dvVXz7GO7BBBNHU%2FeZhwJbuNAwS6KelK12elyrhwrrsHym%2B%2B06sdG4TxKa0Y92p66g%3D%3D\"}]}\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f2b3f46bd474e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1147,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (1147), with no line terminators","md5":"2256e4981a6f4cfcbc5256b59926b1c6","sha1":"760462c8f7a24f361d50ee53711abebe29917634","sha256":"0f320343f8d3e245a239254fb412f32d3f93cef1f07324ee46f9c7c70b078873","sha512":"5f0fd66e86e9b0d06a0395680065d06a71150a99e3f23eb1898fb46e38683558d59293787cc6f066ab23eb6b9db4f562d2b21c7af27b3362838a2f15d4093c98","ssdeep":"","tlshash":"0c216348014c749efd57d954fb3e9c22304a5928652b4cb873a5ec3114d37e0b276bed","first_seen":"2026-04-23T07:30:08.588325Z","last_seen":"2026-04-27T04:58:00.162819Z","times_seen":230,"resource_available":true,"data":null}},"time_used":376,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":376,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-27","alert":"Sinkholed","trigger":"username7853.invoice-ads-agency.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-27","alert":"Sinkholed","trigger":"username7853.invoice-ads-agency.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-27","alert":"Phishing Block","trigger":"username7853.invoice-ads-agency.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-27","alert":"Sinkholed","trigger":"username7853.invoice-ads-agency.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"username7853.invoice-ads-agency.com/_next/static/chunks/4234-add05e1b93198758.js","fqdn":"username7853.invoice-ads-agency.com","domain":"invoice-ads-agency.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://username7853.invoice-ads-agency.com/","date":"2026-04-27T04:57:34.546Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"username7853.invoice-ads-agency.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 26 Apr 2026 09:25:08 GMT","end":"Sat, 25 Jul 2026 10:24:56 GMT"},"fingerprint":{"sha1":"48:56:D0:29:97:26:14:90:70:9D:59:AD:5A:E0:1B:B2:64:EC:A0:34","sha256":"BB:2D:2D:D2:48:51:23:80:1A:A4:B6:6F:F1:02:BC:8B:25:AF:96:42:07:C0:53:97:56:34:62:CC:64:AA:C4:D0"}}},"request":{"raw":"GET /_next/static/chunks/4234-add05e1b93198758.js HTTP/1.1\r\nHost: username7853.invoice-ads-agency.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://username7853.invoice-ads-agency.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: __cf_bm=71JL0B6vhLQsFK6jLSdRUzzx2oKPeswpNm7HH32hxvY-1777265854.2844844-1.0.1.1-5g_3Ds0XMuYtu_m9LfMf2ZercpmV6tTU31AQtp_0phvfg_o41Uq9J_i4Vnt5T9QTf8N2n5wJTrzuZaoAXMMhm0HvmHOcGE1z0QLl8xmdlIgGzcwbck_dKeOpT18F2OL1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 27 Apr 2026 04:57:34 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Tue, 01 Jan 1980 00:00:01 GMT\r\netag: W/\"e6b7-49773873e8\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nx-do-app-origin: 3f0c10dd-037d-4fae-b207-2f4a5d454a33\r\nx-do-orig-status: 200\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=y1se5GMehMcO6kFeth6P6BlLc0uFa83xr024tKucLmpEd7H5XvaAYY22fOUOohvlPJ7cMWAiBAj3qZz5TzTIlp0mdq4NJN1kymelkoLSyq8kjY9%2FSxgl4KdpKMt%2FzY32PPJ3Uzhbv97F7rgvRY4MzuHJGnU9Mg%3D%3D\"}]}\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f2b3f46dd914e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":59063,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (59048), with no line terminators","md5":"f80ddb6a9cf2be1a8f90f9f2573f9aa1","sha1":"d20c2abe980686b38166a1fc01f831ce60118622","sha256":"5297ff2a2bfd391906d095d4d459cd3c141c3f8b31d53d7287a703b080b89ab0","sha512":"88720dd2a740876bf18a81b28b490167dee1ed0dc8cdd2b9cc6b091e2131137755f6e07764bb252552f44c9e3f59a04be690be3f27529e47c16a66303c999a82","ssdeep":"768:uO9P7WAmsvdHp4tCkhoaQr0yUEWAsuRWAeAUAD1Q9e01/1PTko9kAkV8YTwo9OTt:usT4tC8Xuyei4Xxov3nndd","tlshash":"9f43b859d9410efcf03b46945bdef61c346f6baede2a8974b1f86c2629025c43643f82","first_seen":"2026-04-23T07:30:08.616642Z","last_seen":"2026-04-27T04:58:00.164729Z","times_seen":201,"resource_available":true,"data":null}},"time_used":357,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":351,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-27","alert":"Sinkholed","trigger":"username7853.invoice-ads-agency.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-27","alert":"Sinkholed","trigger":"username7853.invoice-ads-agency.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-27","alert":"Sinkholed","trigger":"username7853.invoice-ads-agency.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-27","alert":"Phishing Block","trigger":"username7853.invoice-ads-agency.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"username7853.invoice-ads-agency.com/_next/static/media/e4af272ccee01ff0-s.p.woff2","fqdn":"username7853.invoice-ads-agency.com","domain":"invoice-ads-agency.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://username7853.invoice-ads-agency.com/","date":"2026-04-27T04:57:34.517Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"username7853.invoice-ads-agency.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 26 Apr 2026 09:25:08 GMT","end":"Sat, 25 Jul 2026 10:24:56 GMT"},"fingerprint":{"sha1":"48:56:D0:29:97:26:14:90:70:9D:59:AD:5A:E0:1B:B2:64:EC:A0:34","sha256":"BB:2D:2D:D2:48:51:23:80:1A:A4:B6:6F:F1:02:BC:8B:25:AF:96:42:07:C0:53:97:56:34:62:CC:64:AA:C4:D0"}}},"request":{"raw":"GET /_next/static/media/e4af272ccee01ff0-s.p.woff2 HTTP/1.1\r\nHost: username7853.invoice-ads-agency.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://username7853.invoice-ads-agency.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: __cf_bm=71JL0B6vhLQsFK6jLSdRUzzx2oKPeswpNm7HH32hxvY-1777265854.2844844-1.0.1.1-5g_3Ds0XMuYtu_m9LfMf2ZercpmV6tTU31AQtp_0phvfg_o41Uq9J_i4Vnt5T9QTf8N2n5wJTrzuZaoAXMMhm0HvmHOcGE1z0QLl8xmdlIgGzcwbck_dKeOpT18F2OL1\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 27 Apr 2026 04:57:34 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 48432\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Tue, 01 Jan 1980 00:00:01 GMT\r\netag: W/\"bd30-49773873e8\"\r\nx-do-app-origin: 3f0c10dd-037d-4fae-b207-2f4a5d454a33\r\nx-do-orig-status: 200\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1yZOwSc%2BqSJ6eMDP73uEO2%2B%2BWJQlQeNkVlb39A4M6m%2FzxgJzwm3XgTztdm%2F2wfsv2TrsES%2Bi4iwEy2JJGXewerWOovSSPpXi2UMgjzIzajzTI5RTCND1aM6mMkKTgQCkZar4r96TDxZeOLdxHORDqExj0wZd6A%3D%3D\"}]}\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f2b3f469cdc4e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":48432,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48432, version 1.0","md5":"65850a373e258f1c897a2b3d75eb74de","sha1":"1dc044f4824fd5af6bfed67fee48be70fa069f3f","sha256":"c940764593d0fe5d596be327ca7558855e018039fb78509aa21921fd3644c3e4","sha512":"df2683f3dd9724de589451a47bc608c9925d54b874ad97b733dd465ef41f9db75e9e31604762415c2fc1433d050e45fdefc6ecd7ecadf58d1243d9ca5f4bf74b","ssdeep":"768:3IkDHBYoX5Pi4JxTGz9CDR0s1ROSsA8mF77YNt7wFhVq9oN2WfpdqWjBA:tNYoX53xTl/R8W77YNtUFrWoUWvdA","tlshash":"56230251f5f8624a7fc3003fbc317bd862909fe5996ee5d91288f30225611dd29ee017","first_seen":"2025-05-30T12:57:00.85385Z","last_seen":"2026-04-27T14:20:37.760487Z","times_seen":42530,"resource_available":false,"data":null}},"time_used":501,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":431,"receive":70,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-27","alert":"Sinkholed","trigger":"username7853.invoice-ads-agency.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-27","alert":"Sinkholed","trigger":"username7853.invoice-ads-agency.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-27","alert":"Sinkholed","trigger":"username7853.invoice-ads-agency.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-27","alert":"Phishing Block","trigger":"username7853.invoice-ads-agency.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"username7853.invoice-ads-agency.com/_next/static/chunks/9303-042415d7fe3fdc66.js","fqdn":"username7853.invoice-ads-agency.com","domain":"invoice-ads-agency.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://username7853.invoice-ads-agency.com/","date":"2026-04-27T04:57:34.534Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"username7853.invoice-ads-agency.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 26 Apr 2026 09:25:08 GMT","end":"Sat, 25 Jul 2026 10:24:56 GMT"},"fingerprint":{"sha1":"48:56:D0:29:97:26:14:90:70:9D:59:AD:5A:E0:1B:B2:64:EC:A0:34","sha256":"BB:2D:2D:D2:48:51:23:80:1A:A4:B6:6F:F1:02:BC:8B:25:AF:96:42:07:C0:53:97:56:34:62:CC:64:AA:C4:D0"}}},"request":{"raw":"GET /_next/static/chunks/9303-042415d7fe3fdc66.js HTTP/1.1\r\nHost: username7853.invoice-ads-agency.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://username7853.invoice-ads-agency.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: __cf_bm=71JL0B6vhLQsFK6jLSdRUzzx2oKPeswpNm7HH32hxvY-1777265854.2844844-1.0.1.1-5g_3Ds0XMuYtu_m9LfMf2ZercpmV6tTU31AQtp_0phvfg_o41Uq9J_i4Vnt5T9QTf8N2n5wJTrzuZaoAXMMhm0HvmHOcGE1z0QLl8xmdlIgGzcwbck_dKeOpT18F2OL1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 27 Apr 2026 04:57:34 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Tue, 01 Jan 1980 00:00:01 GMT\r\netag: W/\"2ad66-49773873e8\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nx-do-app-origin: 3f0c10dd-037d-4fae-b207-2f4a5d454a33\r\nx-do-orig-status: 200\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0RJq8oa3oPFFiL7lFnCi54DAMKTldZlz0p%2FhZERhyrfRjwDmgeVjNTMRessjMvcmBFxRG3Q1Vx%2FxtSj11nZRf72oSD7lBpvSuHE9QYCPkz8XK8QV70kaKaOjYEeJSeWpTybyP31HaEtMGmoYqxqxIruu7LuBdQ%3D%3D\"}]}\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f2b3f46bd134e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":175462,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"6509dbce0556b89b1ece696f9f7b963a","sha1":"a63a4c34077320b97f06ca6a686f79d596a10cf5","sha256":"227547e916158d8174ac257799e642fc4a26935d0b31acda5719b2d3bd0ef002","sha512":"3d16b5794692801ebb8dff7c1d8248873a74f0174d492b2e747960cf2aebddf6f1a6d1d8c95c8f803ffd065ec728dee065a3f5e6998ca88b327ef2cc2f0928d2","ssdeep":"1536:kZkRavHHx1XNnEAj2hTn4dJF/OX36+7+25UlXnxraZeXELiZXEoFUNn6g/e0cZ3N:2kIHCRn4dJ1OHzerLUNn/e3Zd","tlshash":"8b04b8b676d0f8d107a780d5843b400af3295c3b146f74a0a3e6cce975645dea1b3faa","first_seen":"2026-03-22T00:15:42.204518Z","last_seen":"2026-04-27T04:58:00.167666Z","times_seen":255,"resource_available":true,"data":null}},"time_used":570,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":394,"receive":176,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-27","alert":"Sinkholed","trigger":"username7853.invoice-ads-agency.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-27","alert":"Phishing Block","trigger":"username7853.invoice-ads-agency.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-27","alert":"Sinkholed","trigger":"username7853.invoice-ads-agency.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-27","alert":"Sinkholed","trigger":"username7853.invoice-ads-agency.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"username7853.invoice-ads-agency.com/_next/static/chunks/4385-790de5cddcc2d7d5.js","fqdn":"username7853.invoice-ads-agency.com","domain":"invoice-ads-agency.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://username7853.invoice-ads-agency.com/","date":"2026-04-27T04:57:34.539Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"username7853.invoice-ads-agency.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 26 Apr 2026 09:25:08 GMT","end":"Sat, 25 Jul 2026 10:24:56 GMT"},"fingerprint":{"sha1":"48:56:D0:29:97:26:14:90:70:9D:59:AD:5A:E0:1B:B2:64:EC:A0:34","sha256":"BB:2D:2D:D2:48:51:23:80:1A:A4:B6:6F:F1:02:BC:8B:25:AF:96:42:07:C0:53:97:56:34:62:CC:64:AA:C4:D0"}}},"request":{"raw":"GET /_next/static/chunks/4385-790de5cddcc2d7d5.js HTTP/1.1\r\nHost: username7853.invoice-ads-agency.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://username7853.invoice-ads-agency.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: __cf_bm=71JL0B6vhLQsFK6jLSdRUzzx2oKPeswpNm7HH32hxvY-1777265854.2844844-1.0.1.1-5g_3Ds0XMuYtu_m9LfMf2ZercpmV6tTU31AQtp_0phvfg_o41Uq9J_i4Vnt5T9QTf8N2n5wJTrzuZaoAXMMhm0HvmHOcGE1z0QLl8xmdlIgGzcwbck_dKeOpT18F2OL1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 27 Apr 2026 04:57:34 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Tue, 01 Jan 1980 00:00:01 GMT\r\netag: W/\"3b7d-49773873e8\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nx-do-app-origin: 3f0c10dd-037d-4fae-b207-2f4a5d454a33\r\nx-do-orig-status: 200\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=x07HJfWNlnIDuAdwRVQe25YgKPjYbM5bdj0Isdd5P1%2FkLCObfsENRPrZCGH%2FhwXBc%2BIO7Hs%2F60mEbLiUf72x55yvG3Zp7ywWQjeT8z5VjIFlUp3Ay%2Fe%2Fe0CqZ982GnaNM4oVk1C%2F6Q198YmqLPg8ZV9UPuwjvQ%3D%3D\"}]}\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f2b3f46bd2b4e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15229,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (15229), with no line terminators","md5":"e8f267b8bddcf517d4fde85e1f63ee8c","sha1":"4debf667d77af3dc0594cf084038414625c5cdff","sha256":"a701f7fb598a74e6340c23973c373058bf0f2b830586c079412eef354520e99a","sha512":"69f74382b627a7e1f8eb86672a52c49cf1f060fc63a9dc5758e4e7d74d59d2bccc29f0a6fc4a2c919e78eb8ec39c000312b6a98c4ce739e61dcb4564861114f8","ssdeep":"192:JOzKAJ+d8VBI7jRFVYMQuvyk+C4BeODsaWAD2B99wrddd82Y+jD8avn/C:JOdAWHk3jyc4AaWx925/D5/C","tlshash":"f16208723594fce6539bc0d5c83f000ef3756d76622ab18863ea8cd9a5a4584f0a2f77","first_seen":"2026-04-23T07:30:08.610024Z","last_seen":"2026-04-27T04:58:00.168896Z","times_seen":230,"resource_available":true,"data":null}},"time_used":368,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":368,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-27","alert":"Sinkholed","trigger":"username7853.invoice-ads-agency.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-27","alert":"Phishing Block","trigger":"username7853.invoice-ads-agency.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-27","alert":"Sinkholed","trigger":"username7853.invoice-ads-agency.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-27","alert":"Sinkholed","trigger":"username7853.invoice-ads-agency.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"username7853.invoice-ads-agency.com/_next/static/chunks/3568-9615f39838ef8f44.js","fqdn":"username7853.invoice-ads-agency.com","domain":"invoice-ads-agency.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://username7853.invoice-ads-agency.com/","date":"2026-04-27T04:57:34.540Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"username7853.invoice-ads-agency.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 26 Apr 2026 09:25:08 GMT","end":"Sat, 25 Jul 2026 10:24:56 GMT"},"fingerprint":{"sha1":"48:56:D0:29:97:26:14:90:70:9D:59:AD:5A:E0:1B:B2:64:EC:A0:34","sha256":"BB:2D:2D:D2:48:51:23:80:1A:A4:B6:6F:F1:02:BC:8B:25:AF:96:42:07:C0:53:97:56:34:62:CC:64:AA:C4:D0"}}},"request":{"raw":"GET /_next/static/chunks/3568-9615f39838ef8f44.js HTTP/1.1\r\nHost: username7853.invoice-ads-agency.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://username7853.invoice-ads-agency.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: __cf_bm=71JL0B6vhLQsFK6jLSdRUzzx2oKPeswpNm7HH32hxvY-1777265854.2844844-1.0.1.1-5g_3Ds0XMuYtu_m9LfMf2ZercpmV6tTU31AQtp_0phvfg_o41Uq9J_i4Vnt5T9QTf8N2n5wJTrzuZaoAXMMhm0HvmHOcGE1z0QLl8xmdlIgGzcwbck_dKeOpT18F2OL1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 27 Apr 2026 04:57:34 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Tue, 01 Jan 1980 00:00:01 GMT\r\netag: W/\"330b-49773873e8\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nx-do-app-origin: 3f0c10dd-037d-4fae-b207-2f4a5d454a33\r\nx-do-orig-status: 200\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XCAPLxAK%2BV9fb32njBNHJddBo9605CWVm0aw3%2BPQQP2Iy81r4TfNUxJKHttdnAnSnSZgoelBceqK0Ux4aWky0JU2vbz7lpFkfY4N84aiJVmlxIwd103dwR%2Fw9AkKDMmZD7ASZjOod0GQLYNm%2Be0R6ByqZLZl%2BQ%3D%3D\"}]}\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f2b3f46bd3c4e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13067,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (13067), with no line terminators","md5":"05a19e746455ee4787e71d2271000ad3","sha1":"f09cadf29c087e08f351fdcb7ed6212b5230f46e","sha256":"600221d75d4eaada3d62313c14ca45dfa4a0c023e1e3e3f19c78fbeff70b5b5e","sha512":"57a75661902837e3a8c7886a366077d0e6ebbee418e02f11b1cf4e796d0f2418a16b3972ee1088fd00a37decfd5212ea11408709b657597cd2e34a68a2edbf5a","ssdeep":"384:RnvRUJ22u+Z1MM89OuWSSXcu44JenLwClG5BIqgH+:RnWFnMM8guWSccu4gpgH+","tlshash":"bd42b6c8764371144b9bcf9692ff0715f27c1a98282e4829f3a5285f3254a4867f3f39","first_seen":"2025-06-19T03:12:38.852497Z","last_seen":"2026-04-27T04:58:00.169959Z","times_seen":262,"resource_available":true,"data":null}},"time_used":388,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":388,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-27","alert":"Sinkholed","trigger":"username7853.invoice-ads-agency.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-27","alert":"Phishing Block","trigger":"username7853.invoice-ads-agency.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-27","alert":"Sinkholed","trigger":"username7853.invoice-ads-agency.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-27","alert":"Sinkholed","trigger":"username7853.invoice-ads-agency.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"username7853.invoice-ads-agency.com/_next/static/chunks/2000-80660d8f368f73d8.js","fqdn":"username7853.invoice-ads-agency.com","domain":"invoice-ads-agency.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://username7853.invoice-ads-agency.com/","date":"2026-04-27T04:57:34.545Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"username7853.invoice-ads-agency.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 26 Apr 2026 09:25:08 GMT","end":"Sat, 25 Jul 2026 10:24:56 GMT"},"fingerprint":{"sha1":"48:56:D0:29:97:26:14:90:70:9D:59:AD:5A:E0:1B:B2:64:EC:A0:34","sha256":"BB:2D:2D:D2:48:51:23:80:1A:A4:B6:6F:F1:02:BC:8B:25:AF:96:42:07:C0:53:97:56:34:62:CC:64:AA:C4:D0"}}},"request":{"raw":"GET /_next/static/chunks/2000-80660d8f368f73d8.js HTTP/1.1\r\nHost: username7853.invoice-ads-agency.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://username7853.invoice-ads-agency.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: __cf_bm=71JL0B6vhLQsFK6jLSdRUzzx2oKPeswpNm7HH32hxvY-1777265854.2844844-1.0.1.1-5g_3Ds0XMuYtu_m9LfMf2ZercpmV6tTU31AQtp_0phvfg_o41Uq9J_i4Vnt5T9QTf8N2n5wJTrzuZaoAXMMhm0HvmHOcGE1z0QLl8xmdlIgGzcwbck_dKeOpT18F2OL1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 27 Apr 2026 04:57:34 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Tue, 01 Jan 1980 00:00:01 GMT\r\netag: W/\"2d00-49773873e8\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nx-do-app-origin: 3f0c10dd-037d-4fae-b207-2f4a5d454a33\r\nx-do-orig-status: 200\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OZhZJBmTOTl%2F4wSvu3xXGLA9Ph%2BL816%2B8BdjtKub%2FFbuKtRQrOZJXsvK50zVFN5XPvqNB9wH%2FWd5EY4IxqxS8bS6k1mn%2FzgTZrcsCnG8DAnmVNoqi5zHwpPEETLrt4J5T%2FZyPo%2B2wf4Z5kaORGY%2Flv5pCo6uVQ%3D%3D\"}]}\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f2b3f46dd844e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11520,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (11520), with no line terminators","md5":"e7e8615bcd1ecc55cfe2b00c098177bc","sha1":"fd14bdd81c8c8cd4dca2b88a6446fea516dd5d29","sha256":"d5130b80ac56b620257c773ebdbfe3f2ba777f8e09beaaf41251b727b45a09b4","sha512":"9095bac008f4f050e5994d3a1b0d1d24d4c3c58674f319912b3758d8242cbe5de927994e0f6a79a9d705f8724404d7572280011da2c7e0e6d3043551baf8b39b","ssdeep":"192:64wqWW90AF3oOpJqJi0vzXFuIpRLKC91qHU54GKAKKGNWdkS5ZkJcqwEFW9z:64sNAFYkJ8vz1BGQhKA1kWdkS5ZkWqZU","tlshash":"c03287aabb99741d170381f8d43b5107ab2e10342a0c8178b15dd8fe2db9987913bf7b","first_seen":"2026-04-23T07:30:08.599703Z","last_seen":"2026-04-27T04:58:00.171372Z","times_seen":230,"resource_available":true,"data":null}},"time_used":342,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":339,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-27","alert":"Sinkholed","trigger":"username7853.invoice-ads-agency.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-27","alert":"Phishing Block","trigger":"username7853.invoice-ads-agency.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-27","alert":"Sinkholed","trigger":"username7853.invoice-ads-agency.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-27","alert":"Sinkholed","trigger":"username7853.invoice-ads-agency.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"username7853.invoice-ads-agency.com/","fqdn":"username7853.invoice-ads-agency.com","domain":"invoice-ads-agency.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-04-27T04:57:34.233Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"username7853.invoice-ads-agency.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 26 Apr 2026 09:25:08 GMT","end":"Sat, 25 Jul 2026 10:24:56 GMT"},"fingerprint":{"sha1":"48:56:D0:29:97:26:14:90:70:9D:59:AD:5A:E0:1B:B2:64:EC:A0:34","sha256":"BB:2D:2D:D2:48:51:23:80:1A:A4:B6:6F:F1:02:BC:8B:25:AF:96:42:07:C0:53:97:56:34:62:CC:64:AA:C4:D0"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: username7853.invoice-ads-agency.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 27 Apr 2026 04:57:34 GMT\r\ncontent-type: text/html; charset=utf-8\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\nvary: RSC, Next-Router-State-Tree, Next-Router-Prefetch, Next-Router-Segment-Prefetch, Accept-Encoding\r\nx-nextjs-cache: HIT\r\nx-nextjs-prerender: 1\r\nx-nextjs-stale-time: 300\r\nx-powered-by: Next.js\r\ncache-control: s-maxage=31536000\r\nset-cookie: __cf_bm=71JL0B6vhLQsFK6jLSdRUzzx2oKPeswpNm7HH32hxvY-1777265854.2844844-1.0.1.1-5g_3Ds0XMuYtu_m9LfMf2ZercpmV6tTU31AQtp_0phvfg_o41Uq9J_i4Vnt5T9QTf8N2n5wJTrzuZaoAXMMhm0HvmHOcGE1z0QLl8xmdlIgGzcwbck_dKeOpT18F2OL1; HttpOnly; Secure; Path=/; Domain=username7853.invoice-ads-agency.com; Expires=Mon, 27 Apr 2026 05:27:34 GMT\r\nx-do-app-origin: 3f0c10dd-037d-4fae-b207-2f4a5d454a33\r\nx-do-orig-status: 200\r\nserver: cloudflare\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=34vmZPlKfPDOwBvPEH4eP5mtt8INuYkSMQvqW3T3dvoIrVz8f4IyP64gEYkBZN3sFJ3hMPUt4Lr1Et2KlCJHfyUATSxwsxLxyB7Uu%2Fv%2Fs38Boa50P%2F01JfPSObBsGMeuBTioaLpm8I0LKSUY%2Bh%2BZ%2F%2FtwhT2LFA%3D%3D\"}]}\r\ncontent-encoding: br\r\ncf-ray: 9f2b3f4539eba0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Next.js","description":"Next.js is a React framework for developing single page Javascript applications.","website":"https://nextjs.org","common_platform_enumeration":"cpe:2.3:a:zeit:next.js:*:*:*:*:*:*:*:*","icon":"Next.js.svg","categories":["JavaScript frameworks","Web frameworks"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"React","description":"React is an open-source JavaScript library for building user interfaces or UI components.","website":"https://reactjs.org","common_platform_enumeration":"cpe:2.3:a:facebook:react:*:*:*:*:*:*:*:*","icon":"React.svg","categories":["JavaScript frameworks"]},{"name":"Webpack","description":"Webpack is an open-source JavaScript module bundler.","website":"https://webpack.js.org/","common_platform_enumeration":"","icon":"Webpack.svg","categories":["Miscellaneous"]}],"data":{"size":28360,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (28360), with no line terminators","md5":"e1a89aa3c5178d214faa949a1ac5fa30","sha1":"cca905a8c48e51e7e683419a73b329ce048f9caa","sha256":"5ef6ef08e3f7bc79a43d66c696c44b1e002b7f4c82a277da070b93eedcc67285","sha512":"30e9d5cff49ec2e0bf3f22f7a8c40f1f02b6495abb0065a0454d8ad5b48939a9fccb39fea4d9833f52790a734503001aa04626fae6daa4b7b1bb61474b0d7561","ssdeep":"768:ISz0OadZu+3NT43lTnmu9vULvDvsIv7DWonpN:tIZu+dU1yu+TbsGFpN","tlshash":"1fd2843a9394d9bfa433479cd6307f3e21ed829fcd55c51c84b897d4c28aea6a9124c2","first_seen":"2026-04-23T07:30:08.602739Z","last_seen":"2026-04-27T04:58:00.172073Z","times_seen":64,"resource_available":true,"data":null}},"time_used":171,"timings":{"blocked":45,"dns":28,"connect":1,"send":0,"wait":77,"receive":0,"ssl":16},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-27","alert":"Phishing Block","trigger":"username7853.invoice-ads-agency.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-27","alert":"Sinkholed","trigger":"username7853.invoice-ads-agency.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-27","alert":"Sinkholed","trigger":"username7853.invoice-ads-agency.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-27","alert":"Sinkholed","trigger":"username7853.invoice-ads-agency.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"username7853.invoice-ads-agency.com/_next/static/chunks/app/page-e7285c6ec016a6d8.js","fqdn":"username7853.invoice-ads-agency.com","domain":"invoice-ads-agency.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://username7853.invoice-ads-agency.com/","date":"2026-04-27T04:57:34.548Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"username7853.invoice-ads-agency.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 26 Apr 2026 09:25:08 GMT","end":"Sat, 25 Jul 2026 10:24:56 GMT"},"fingerprint":{"sha1":"48:56:D0:29:97:26:14:90:70:9D:59:AD:5A:E0:1B:B2:64:EC:A0:34","sha256":"BB:2D:2D:D2:48:51:23:80:1A:A4:B6:6F:F1:02:BC:8B:25:AF:96:42:07:C0:53:97:56:34:62:CC:64:AA:C4:D0"}}},"request":{"raw":"GET /_next/static/chunks/app/page-e7285c6ec016a6d8.js HTTP/1.1\r\nHost: username7853.invoice-ads-agency.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://username7853.invoice-ads-agency.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: __cf_bm=71JL0B6vhLQsFK6jLSdRUzzx2oKPeswpNm7HH32hxvY-1777265854.2844844-1.0.1.1-5g_3Ds0XMuYtu_m9LfMf2ZercpmV6tTU31AQtp_0phvfg_o41Uq9J_i4Vnt5T9QTf8N2n5wJTrzuZaoAXMMhm0HvmHOcGE1z0QLl8xmdlIgGzcwbck_dKeOpT18F2OL1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 27 Apr 2026 04:57:34 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Tue, 01 Jan 1980 00:00:01 GMT\r\netag: W/\"6a13-49773873e8\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nx-do-app-origin: 3f0c10dd-037d-4fae-b207-2f4a5d454a33\r\nx-do-orig-status: 200\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sAFHUj7xJ2O9IhPJ3VALn0YaGzDWD%2FOJ1yaX%2FT7kx6PJC7VTDKrTgwxQ9cvMUXYlXt4OEOuFpD5l6zWadHYwgNgzE4yv6Q3Di8hlmhbTm4N7QmyTsNwoDTN6Gh%2FB%2FUiBGaexuGmtHjJJpjWM4bIgN7zZpBvZNA%3D%3D\"}]}\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f2b3f46dda94e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":27155,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (27155), with no line terminators","md5":"60b10a447cb9198ef4e2458a571877c5","sha1":"b6d7129f287c4f33323b7fbf27baf6ab28061ad0","sha256":"72d3b58ed0d23923af38cca30a7a4428fab6dbfafd01e7777909b2bf013d3d9c","sha512":"54f16e8269b1a4208631f3de7fcc6be85efd31cf19cf538b173bd2c040191cc02f6232dd3f740d332566ee36dc3439868cb01396a7f551fec52695e7e0763d90","ssdeep":"768:JqYKjP6TJYurnbD9V91k1PTjiHA7HA5Zll9VL1K1PTNaGym868A49g5KSpO:YYKjP6TNrnb0KICZlORaOijSpO","tlshash":"98c2435ae7e19aee7436079c494d910e32ee678fce5acd686474bad2c84d1c53b023c3","first_seen":"2026-04-23T07:30:08.592883Z","last_seen":"2026-04-27T04:58:00.172797Z","times_seen":230,"resource_available":true,"data":null}},"time_used":348,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":348,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-27","alert":"Sinkholed","trigger":"username7853.invoice-ads-agency.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-27","alert":"Sinkholed","trigger":"username7853.invoice-ads-agency.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-27","alert":"Phishing Block","trigger":"username7853.invoice-ads-agency.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-27","alert":"Sinkholed","trigger":"username7853.invoice-ads-agency.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"username7853.invoice-ads-agency.com/loading-logo.gif","fqdn":"username7853.invoice-ads-agency.com","domain":"invoice-ads-agency.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://username7853.invoice-ads-agency.com/","date":"2026-04-27T04:57:34.519Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"username7853.invoice-ads-agency.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 26 Apr 2026 09:25:08 GMT","end":"Sat, 25 Jul 2026 10:24:56 GMT"},"fingerprint":{"sha1":"48:56:D0:29:97:26:14:90:70:9D:59:AD:5A:E0:1B:B2:64:EC:A0:34","sha256":"BB:2D:2D:D2:48:51:23:80:1A:A4:B6:6F:F1:02:BC:8B:25:AF:96:42:07:C0:53:97:56:34:62:CC:64:AA:C4:D0"}}},"request":{"raw":"GET /loading-logo.gif HTTP/1.1\r\nHost: username7853.invoice-ads-agency.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://username7853.invoice-ads-agency.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: __cf_bm=71JL0B6vhLQsFK6jLSdRUzzx2oKPeswpNm7HH32hxvY-1777265854.2844844-1.0.1.1-5g_3Ds0XMuYtu_m9LfMf2ZercpmV6tTU31AQtp_0phvfg_o41Uq9J_i4Vnt5T9QTf8N2n5wJTrzuZaoAXMMhm0HvmHOcGE1z0QLl8xmdlIgGzcwbck_dKeOpT18F2OL1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 27 Apr 2026 04:57:34 GMT\r\ncontent-type: image/gif\r\ncontent-length: 1258265\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\naccept-ranges: bytes\r\ncache-control: public, max-age=14400\r\nlast-modified: Tue, 01 Jan 1980 00:00:01 GMT\r\netag: W/\"133319-49773873e8\"\r\nx-do-app-origin: 3f0c10dd-037d-4fae-b207-2f4a5d454a33\r\nx-do-orig-status: 200\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=S59KmO6DWL1zgCJ%2Fei2fBUjrntF7YMx3sZLsZBDEssiIH3CdWVVFNhMgHgM9p%2FzoC5N9owf%2BdJmhSU%2BvRQPh%2B1xiXf%2BhAkJEWCtKzkKuoK2pF80cbhUcu2uzUlvLkWR7%2BShMOxXRoQv37kXkEa%2BGlMYUkWbXnQ%3D%3D\"}]}\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f2b3f469ce44e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1258265,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1920 x 1080","md5":"6be3b823c3d12efcb7af4297bee297ac","sha1":"0224e616c020e0de4c64a5d2606868cbc33bd73a","sha256":"d376fb8f2eeef97914c66c8badeb1385f1fa789c3931c80e1233f0c4b3def896","sha512":"d230fc1449e86236e713808421945f9420b7c08521ec1c876cfbbe4f556bae6273a310d235470e0a68bc80e20cb71c50374ead257ea492b956989533306cc21b","ssdeep":"24576:P62FyvkoNoDlbiySCeSAS0J6IM0i+AD1gmgzo37QmgXi:l7oUF5IS0GJxBbgS","tlshash":"3a2533dfe2e8ac86d03a7c3c39370ab7c54729c5c83466d1b681f4e36b2251cd6aa751","first_seen":"2024-05-10T17:10:26Z","last_seen":"2026-04-27T14:20:36.624742Z","times_seen":1195,"resource_available":false,"data":null}},"time_used":996,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":375,"receive":621,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-27","alert":"Sinkholed","trigger":"username7853.invoice-ads-agency.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-27","alert":"Phishing Block","trigger":"username7853.invoice-ads-agency.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-27","alert":"Sinkholed","trigger":"username7853.invoice-ads-agency.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-27","alert":"Sinkholed","trigger":"username7853.invoice-ads-agency.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"username7853.invoice-ads-agency.com/banner-v3.png","fqdn":"username7853.invoice-ads-agency.com","domain":"invoice-ads-agency.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://username7853.invoice-ads-agency.com/","date":"2026-04-27T04:57:34.523Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"username7853.invoice-ads-agency.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 26 Apr 2026 09:25:08 GMT","end":"Sat, 25 Jul 2026 10:24:56 GMT"},"fingerprint":{"sha1":"48:56:D0:29:97:26:14:90:70:9D:59:AD:5A:E0:1B:B2:64:EC:A0:34","sha256":"BB:2D:2D:D2:48:51:23:80:1A:A4:B6:6F:F1:02:BC:8B:25:AF:96:42:07:C0:53:97:56:34:62:CC:64:AA:C4:D0"}}},"request":{"raw":"GET /banner-v3.png HTTP/1.1\r\nHost: username7853.invoice-ads-agency.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://username7853.invoice-ads-agency.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: __cf_bm=71JL0B6vhLQsFK6jLSdRUzzx2oKPeswpNm7HH32hxvY-1777265854.2844844-1.0.1.1-5g_3Ds0XMuYtu_m9LfMf2ZercpmV6tTU31AQtp_0phvfg_o41Uq9J_i4Vnt5T9QTf8N2n5wJTrzuZaoAXMMhm0HvmHOcGE1z0QLl8xmdlIgGzcwbck_dKeOpT18F2OL1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 27 Apr 2026 04:57:34 GMT\r\ncontent-type: image/png\r\ncontent-length: 87056\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\naccept-ranges: bytes\r\ncache-control: public, max-age=14400\r\nlast-modified: Tue, 01 Jan 1980 00:00:01 GMT\r\netag: W/\"15410-49773873e8\"\r\nx-do-app-origin: 3f0c10dd-037d-4fae-b207-2f4a5d454a33\r\nx-do-orig-status: 200\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NAQB4%2BP7WAfThFSt%2FNP7NYWnyGy4RlT%2BVUv7M57DRLhcw6eYfswUYcwyYLffJRg9GJvHm4UoXuSkRvRihlBIhR27gSE8RJlk%2FMx80ORHHIXvW7lnlgLsBN3QHE142vbf8zBdRKBLjPhE8phMq28vLIn7s5Efvw%3D%3D\"}]}\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f2b3f46aceb4e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":87056,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 640 x 280, 8-bit/color RGBA, non-interlaced","md5":"8e313fca8a58b4c21a9b764da5b07dd2","sha1":"394fa7507f97cb04abd97051f220fc96da6d722b","sha256":"c4d565f0933de43d900fd95189a097cece367607a1e71bd9e01fcfe4c6f7cba9","sha512":"e43e701de575092a010edd69e9bbc986ce5e2b40903c05d079950ac8ed7c5c4a3a8048c040322ab23fbf697b7da33a9edc880a846a11fdaf2f74b6925f6448a2","ssdeep":"1536:MhJbpR1YM7Zp4SOBkZaVkuv3hILba1R/2uqeyJ647HCujwjYhUxdqaZA3Yp:sBbv7Z0BMuv3Ma103eyf9jw80oT3Yp","tlshash":"928302c8fbb28e26385d766d9d0fab151ce283be25625a1d09cc8a1c5bdff025796034","first_seen":"2025-09-19T11:22:39.686449Z","last_seen":"2026-04-27T14:20:08.216354Z","times_seen":353,"resource_available":false,"data":null}},"time_used":568,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":374,"receive":194,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-27","alert":"Sinkholed","trigger":"username7853.invoice-ads-agency.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-27","alert":"Sinkholed","trigger":"username7853.invoice-ads-agency.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-27","alert":"Phishing Block","trigger":"username7853.invoice-ads-agency.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-27","alert":"Sinkholed","trigger":"username7853.invoice-ads-agency.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"username7853.invoice-ads-agency.com/icon-docs.png","fqdn":"username7853.invoice-ads-agency.com","domain":"invoice-ads-agency.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://username7853.invoice-ads-agency.com/","date":"2026-04-27T04:57:34.527Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"username7853.invoice-ads-agency.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 26 Apr 2026 09:25:08 GMT","end":"Sat, 25 Jul 2026 10:24:56 GMT"},"fingerprint":{"sha1":"48:56:D0:29:97:26:14:90:70:9D:59:AD:5A:E0:1B:B2:64:EC:A0:34","sha256":"BB:2D:2D:D2:48:51:23:80:1A:A4:B6:6F:F1:02:BC:8B:25:AF:96:42:07:C0:53:97:56:34:62:CC:64:AA:C4:D0"}}},"request":{"raw":"GET /icon-docs.png HTTP/1.1\r\nHost: username7853.invoice-ads-agency.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://username7853.invoice-ads-agency.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: __cf_bm=71JL0B6vhLQsFK6jLSdRUzzx2oKPeswpNm7HH32hxvY-1777265854.2844844-1.0.1.1-5g_3Ds0XMuYtu_m9LfMf2ZercpmV6tTU31AQtp_0phvfg_o41Uq9J_i4Vnt5T9QTf8N2n5wJTrzuZaoAXMMhm0HvmHOcGE1z0QLl8xmdlIgGzcwbck_dKeOpT18F2OL1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 27 Apr 2026 04:57:34 GMT\r\ncontent-type: image/png\r\ncontent-length: 6318\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\naccept-ranges: bytes\r\ncache-control: public, max-age=14400\r\nlast-modified: Tue, 01 Jan 1980 00:00:01 GMT\r\netag: W/\"18ae-49773873e8\"\r\nx-do-app-origin: 3f0c10dd-037d-4fae-b207-2f4a5d454a33\r\nx-do-orig-status: 200\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=q9pHZwntyH%2BPICGn%2BvMIz5kgcvUGhRqbZ6xDfS14p8txNuM6ydex0NY7HtIZoa%2Fxk6iJoezR233YnWj4hefoBHgmX88QTfqDgDk318JAXqKpoldFlM0%2FEOmB6zqO6KJ%2FIoFyba%2BvEsAGS3LEmX5rqXCQ3LKpOQ%3D%3D\"}]}\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f2b3f46acf84e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6318,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 60 x 60, 8-bit/color RGBA, non-interlaced","md5":"d553b17fa779d5bf82a1ee3d89c0a840","sha1":"3ba5bfc7904f4659550ca29c2edecaa7afcbe8fa","sha256":"7969126db3b2ce7e191e2d35fffc92a74421911e51a0c9d57916984882bf1e2f","sha512":"c91d95c4f3a5194b257cb186fbf46d040496960211c89cf2cf8059550a4c96968cb2f6b8d68e9d010654d07128e9591cb3dac47ae8ae71ea05d2beebb3f0aad3","ssdeep":"96:6SJopVWGp/d/q0f6YwP3ibVeW79FUlHXKF3yQI0EEfC3JoYSXYRmx5H:6SKpc0Bq0f4PSpVtLI09fWoYSYcx5H","tlshash":"cdd1aecd23f89d51e3a4b405c83614b41eeb3ca805b285848871d22fbbc1dbbde13b0a","first_seen":"2024-07-21T22:23:16Z","last_seen":"2026-04-27T14:20:36.690834Z","times_seen":2086,"resource_available":false,"data":null}},"time_used":333,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":333,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-27","alert":"Sinkholed","trigger":"username7853.invoice-ads-agency.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-27","alert":"Sinkholed","trigger":"username7853.invoice-ads-agency.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-27","alert":"Phishing Block","trigger":"username7853.invoice-ads-agency.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-27","alert":"Sinkholed","trigger":"username7853.invoice-ads-agency.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"username7853.invoice-ads-agency.com/_next/static/chunks/main-app-364e5d1c9e0fc9e6.js","fqdn":"username7853.invoice-ads-agency.com","domain":"invoice-ads-agency.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://username7853.invoice-ads-agency.com/","date":"2026-04-27T04:57:34.536Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"username7853.invoice-ads-agency.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 26 Apr 2026 09:25:08 GMT","end":"Sat, 25 Jul 2026 10:24:56 GMT"},"fingerprint":{"sha1":"48:56:D0:29:97:26:14:90:70:9D:59:AD:5A:E0:1B:B2:64:EC:A0:34","sha256":"BB:2D:2D:D2:48:51:23:80:1A:A4:B6:6F:F1:02:BC:8B:25:AF:96:42:07:C0:53:97:56:34:62:CC:64:AA:C4:D0"}}},"request":{"raw":"GET /_next/static/chunks/main-app-364e5d1c9e0fc9e6.js HTTP/1.1\r\nHost: username7853.invoice-ads-agency.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://username7853.invoice-ads-agency.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: __cf_bm=71JL0B6vhLQsFK6jLSdRUzzx2oKPeswpNm7HH32hxvY-1777265854.2844844-1.0.1.1-5g_3Ds0XMuYtu_m9LfMf2ZercpmV6tTU31AQtp_0phvfg_o41Uq9J_i4Vnt5T9QTf8N2n5wJTrzuZaoAXMMhm0HvmHOcGE1z0QLl8xmdlIgGzcwbck_dKeOpT18F2OL1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 27 Apr 2026 04:57:34 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncache-control: public, max-age=31536000, immutable\r\nlast-modified: Tue, 01 Jan 1980 00:00:01 GMT\r\netag: W/\"207-49773873e8\"\r\nvary: Accept-Encoding\r\nx-do-app-origin: 3f0c10dd-037d-4fae-b207-2f4a5d454a33\r\nx-do-orig-status: 200\r\ncf-cache-status: MISS\r\ncontent-encoding: br\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bpkV40ZEhMr7zFhUvXFnfIdzOl%2BqD0FSsydT2LzSckLeFBmkvDRahP8zLa5sNfL%2F%2BF3dgpEBdCfBpUvQXhBvihXAfbb4%2BSETc%2BxMNW%2BKIwkLPynghNSsOzPKx66v1f404fmfBwYV5QHGiWjUZiHTgWoLj1WonQ%3D%3D\"}]}\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f2b3f46bd164e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":519,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"ASCII text, with very long lines (519), with no line terminators","md5":"61976bef492c32b77473383a84a97bd6","sha1":"a5c5d7f5ae46f46b191c20f50b985ec9a399a176","sha256":"7649aa23a1b773b5cc5af454b74b9764940210f66a67af34594baf286f133a35","sha512":"ecf8e9f5240302ff305f222c0ca4d20ddc52be5bba65812eb6a0db782cc86067c123474f1ac11e349f19fb437e34b7495a6f22e0dad7dad1ea4a91908fba1975","ssdeep":"","tlshash":"07f0199a5f0cf42f1d266e74fd97ace31c1f5275302b4e607900dda12c67bacd664504","first_seen":"2026-04-20T12:08:33.561762Z","last_seen":"2026-04-27T04:58:00.175432Z","times_seen":239,"resource_available":true,"data":null}},"time_used":351,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":350,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-27","alert":"Sinkholed","trigger":"username7853.invoice-ads-agency.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-27","alert":"Sinkholed","trigger":"username7853.invoice-ads-agency.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-27","alert":"Sinkholed","trigger":"username7853.invoice-ads-agency.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-27","alert":"Phishing Block","trigger":"username7853.invoice-ads-agency.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"username7853.invoice-ads-agency.com/_next/static/chunks/4493-345c064d69dc5b01.js","fqdn":"username7853.invoice-ads-agency.com","domain":"invoice-ads-agency.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://username7853.invoice-ads-agency.com/","date":"2026-04-27T04:57:34.543Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"username7853.invoice-ads-agency.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 26 Apr 2026 09:25:08 GMT","end":"Sat, 25 Jul 2026 10:24:56 GMT"},"fingerprint":{"sha1":"48:56:D0:29:97:26:14:90:70:9D:59:AD:5A:E0:1B:B2:64:EC:A0:34","sha256":"BB:2D:2D:D2:48:51:23:80:1A:A4:B6:6F:F1:02:BC:8B:25:AF:96:42:07:C0:53:97:56:34:62:CC:64:AA:C4:D0"}}},"request":{"raw":"GET /_next/static/chunks/4493-345c064d69dc5b01.js HTTP/1.1\r\nHost: username7853.invoice-ads-agency.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://username7853.invoice-ads-agency.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: __cf_bm=71JL0B6vhLQsFK6jLSdRUzzx2oKPeswpNm7HH32hxvY-1777265854.2844844-1.0.1.1-5g_3Ds0XMuYtu_m9LfMf2ZercpmV6tTU31AQtp_0phvfg_o41Uq9J_i4Vnt5T9QTf8N2n5wJTrzuZaoAXMMhm0HvmHOcGE1z0QLl8xmdlIgGzcwbck_dKeOpT18F2OL1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 27 Apr 2026 04:57:34 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncache-control: public, max-age=31536000, immutable\r\nlast-modified: Tue, 01 Jan 1980 00:00:01 GMT\r\netag: W/\"2124-49773873e8\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nx-do-app-origin: 3f0c10dd-037d-4fae-b207-2f4a5d454a33\r\nx-do-orig-status: 200\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qKL7l5vF2KJgvGJ18qVsqL0XiWbV1NiDZZj6fZZRa0IJl%2Fj80NLOHPmOZk5Y8Ki%2BRF0GtvqDTO418G6kquVyVlK88ojXZYNx%2B3uHtlOavUgGfZOVzjg0VjePcFRl%2FePG%2F%2Fkz0dVYsMpL3QrKMnkL%2F4KtnRPusg%3D%3D\"}]}\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f2b3f46cd624e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8484,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (8484), with no line terminators","md5":"def83e7b4e518b54a038060c69718556","sha1":"473165f51c2b586a44ec271d2673a66478a9383f","sha256":"320004ff6ed7f86649043cb94dabf5e99e66d630bfe5800e5463f139bcc018d5","sha512":"f76cdb3543df1f30697b2ae9199823df2a42439d9da623af0a6542e933c36e47733c44d68a8f51bdd060fced0586a05a66e2d9ae63ea5540f9f6573dd57632fe","ssdeep":"192:oEbfLkEv9x8AiLMS5O7vZm2cyYO/C0dwMcGWx:oOxVQMz/jKmwMcGWx","tlshash":"e702a8ea71e1f8a2835b1050443b100bf37e1db5541e6098e7e99ce6f9b046ca1b3f6a","first_seen":"2025-10-24T00:39:28.71526Z","last_seen":"2026-04-27T04:58:00.176118Z","times_seen":266,"resource_available":true,"data":null}},"time_used":360,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":360,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-27","alert":"Sinkholed","trigger":"username7853.invoice-ads-agency.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-27","alert":"Sinkholed","trigger":"username7853.invoice-ads-agency.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-27","alert":"Sinkholed","trigger":"username7853.invoice-ads-agency.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-27","alert":"Phishing Block","trigger":"username7853.invoice-ads-agency.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"username7853.invoice-ads-agency.com/_next/static/chunks/app/not-found-48f4866caa49aa1f.js","fqdn":"username7853.invoice-ads-agency.com","domain":"invoice-ads-agency.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://username7853.invoice-ads-agency.com/","date":"2026-04-27T04:57:34.544Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"username7853.invoice-ads-agency.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 26 Apr 2026 09:25:08 GMT","end":"Sat, 25 Jul 2026 10:24:56 GMT"},"fingerprint":{"sha1":"48:56:D0:29:97:26:14:90:70:9D:59:AD:5A:E0:1B:B2:64:EC:A0:34","sha256":"BB:2D:2D:D2:48:51:23:80:1A:A4:B6:6F:F1:02:BC:8B:25:AF:96:42:07:C0:53:97:56:34:62:CC:64:AA:C4:D0"}}},"request":{"raw":"GET /_next/static/chunks/app/not-found-48f4866caa49aa1f.js HTTP/1.1\r\nHost: username7853.invoice-ads-agency.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://username7853.invoice-ads-agency.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: __cf_bm=71JL0B6vhLQsFK6jLSdRUzzx2oKPeswpNm7HH32hxvY-1777265854.2844844-1.0.1.1-5g_3Ds0XMuYtu_m9LfMf2ZercpmV6tTU31AQtp_0phvfg_o41Uq9J_i4Vnt5T9QTf8N2n5wJTrzuZaoAXMMhm0HvmHOcGE1z0QLl8xmdlIgGzcwbck_dKeOpT18F2OL1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 27 Apr 2026 04:57:34 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncache-control: public, max-age=31536000, immutable\r\nlast-modified: Tue, 01 Jan 1980 00:00:01 GMT\r\netag: W/\"121f-49773873e8\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nx-do-app-origin: 3f0c10dd-037d-4fae-b207-2f4a5d454a33\r\nx-do-orig-status: 200\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XR%2FA%2BQeYjPatw51rJDGzajhoSifEGRPskz%2FOFEeQc7oQG5bttg9ZDxz3dcofLwqUnV%2BP10%2ByqMLMLKHHIi6eHoHr%2FGZonsG85gK%2FindkLljT%2FCH%2FlibZs3AFtpj%2BUkVlGhjSLqnEkIv4cNPo7RoYFQRBnEffzg%3D%3D\"}]}\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f2b3f46cd784e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4639,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (4639), with no line terminators","md5":"190d4b8d45dd0df6fe26dc286046af35","sha1":"2fb57bbf0469f8dd4ef5f171a56d284a3f4f3e33","sha256":"d43146c0869ce83772c046d54e7e8e5432bc5d2d3ea8e169c47ecba5f50b9f29","sha512":"faadd3635f1c543ee1d47573b648851fbda029cb290171661aa379512a38c0e8e83b53592f56a66ed57b6488010a442419d7e6e992d0d65303badaa7daa5d281","ssdeep":"96:kVkotA4uJOiLNLWLmbNO0EVBp13q1EYT5+QBkPASQDlu6:krhDNCUFbp1a1PToASQJu6","tlshash":"c2a1848cd7d0befcb42a4addaaaa540c316f366cd65bcc78a5bcf515240a4d837067c1","first_seen":"2026-04-20T12:08:33.570264Z","last_seen":"2026-04-27T04:58:00.176739Z","times_seen":239,"resource_available":true,"data":null}},"time_used":368,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":368,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-27","alert":"Sinkholed","trigger":"username7853.invoice-ads-agency.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-27","alert":"Sinkholed","trigger":"username7853.invoice-ads-agency.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-27","alert":"Phishing Block","trigger":"username7853.invoice-ads-agency.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-27","alert":"Sinkholed","trigger":"username7853.invoice-ads-agency.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"username7853.invoice-ads-agency.com/2023_Facebook_icon.svg","fqdn":"username7853.invoice-ads-agency.com","domain":"invoice-ads-agency.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://username7853.invoice-ads-agency.com/","date":"2026-04-27T04:57:35.183Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"username7853.invoice-ads-agency.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 26 Apr 2026 09:25:08 GMT","end":"Sat, 25 Jul 2026 10:24:56 GMT"},"fingerprint":{"sha1":"48:56:D0:29:97:26:14:90:70:9D:59:AD:5A:E0:1B:B2:64:EC:A0:34","sha256":"BB:2D:2D:D2:48:51:23:80:1A:A4:B6:6F:F1:02:BC:8B:25:AF:96:42:07:C0:53:97:56:34:62:CC:64:AA:C4:D0"}}},"request":{"raw":"GET /2023_Facebook_icon.svg HTTP/1.1\r\nHost: username7853.invoice-ads-agency.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://username7853.invoice-ads-agency.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: __cf_bm=71JL0B6vhLQsFK6jLSdRUzzx2oKPeswpNm7HH32hxvY-1777265854.2844844-1.0.1.1-5g_3Ds0XMuYtu_m9LfMf2ZercpmV6tTU31AQtp_0phvfg_o41Uq9J_i4Vnt5T9QTf8N2n5wJTrzuZaoAXMMhm0HvmHOcGE1z0QLl8xmdlIgGzcwbck_dKeOpT18F2OL1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-27T14:20:15.653505Z","times_seen":14282763,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-27","alert":"Phishing Block","trigger":"username7853.invoice-ads-agency.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-27","alert":"Sinkholed","trigger":"username7853.invoice-ads-agency.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-27","alert":"Sinkholed","trigger":"username7853.invoice-ads-agency.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-27","alert":"Sinkholed","trigger":"username7853.invoice-ads-agency.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"username7853.invoice-ads-agency.com/2023_Facebook_icon.svg","fqdn":"username7853.invoice-ads-agency.com","domain":"invoice-ads-agency.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://username7853.invoice-ads-agency.com/","date":"2026-04-27T04:57:35.388Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"username7853.invoice-ads-agency.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 26 Apr 2026 09:25:08 GMT","end":"Sat, 25 Jul 2026 10:24:56 GMT"},"fingerprint":{"sha1":"48:56:D0:29:97:26:14:90:70:9D:59:AD:5A:E0:1B:B2:64:EC:A0:34","sha256":"BB:2D:2D:D2:48:51:23:80:1A:A4:B6:6F:F1:02:BC:8B:25:AF:96:42:07:C0:53:97:56:34:62:CC:64:AA:C4:D0"}}},"request":{"raw":"GET /2023_Facebook_icon.svg HTTP/1.1\r\nHost: username7853.invoice-ads-agency.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://username7853.invoice-ads-agency.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: __cf_bm=71JL0B6vhLQsFK6jLSdRUzzx2oKPeswpNm7HH32hxvY-1777265854.2844844-1.0.1.1-5g_3Ds0XMuYtu_m9LfMf2ZercpmV6tTU31AQtp_0phvfg_o41Uq9J_i4Vnt5T9QTf8N2n5wJTrzuZaoAXMMhm0HvmHOcGE1z0QLl8xmdlIgGzcwbck_dKeOpT18F2OL1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 27 Apr 2026 04:57:35 GMT\r\ncontent-type: image/svg+xml\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\naccept-ranges: bytes\r\ncache-control: public, max-age=14400\r\nlast-modified: Tue, 01 Jan 1980 00:00:01 GMT\r\netag: W/\"7a1-49773873e8\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nx-do-app-origin: 3f0c10dd-037d-4fae-b207-2f4a5d454a33\r\nx-do-orig-status: 200\r\nserver: cloudflare\r\ncf-cache-status: EXPIRED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gmghynVkNAoAnY8HISwj3xcHGs6%2ByYZIOCMWxJ99E%2Fa9qtUeVvkD3DFlzXt2YglhtyMgo8Fyy1r%2B3YtW10SFErpaqx2OqGU3DvXPbP8mzBZuFvThIaHDzm6X067pceMRRUjg7C06YEt%2FGwe7TY%2Fta%2FT4KPax5A%3D%3D\"}]}\r\npriority: u=6,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f2b3f4c483c4e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1953,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"2db6e2b3c840f3bab7b4d64d1e46cfb3","sha1":"9ae0a9ea1ea00e4a9188ee8931431de510cae03b","sha256":"ba34bb0a9e43fdad665ea2b84d0363046177147e763ec3765641501779356876","sha512":"d0fbdbc2c72ab543b610191cfad85344401df4c90d8d032dfaecfb113aa803ef6fcd780a171d5a5e3b2498b362831f600b4c04f41f78ba33eb76378337789a46","ssdeep":"","tlshash":"c1415544d3bd0265c58e836a7bf511481b2db0e326540c49bfbc09a13fc9b85a54a3cf","first_seen":"2024-08-19T16:00:28.223306Z","last_seen":"2026-04-27T04:58:00.178373Z","times_seen":365,"resource_available":false,"data":null}},"time_used":302,"timings":{"blocked":12,"dns":0,"connect":0,"send":0,"wait":290,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-27","alert":"Sinkholed","trigger":"username7853.invoice-ads-agency.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-27","alert":"Sinkholed","trigger":"username7853.invoice-ads-agency.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-27","alert":"Sinkholed","trigger":"username7853.invoice-ads-agency.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-27","alert":"Phishing Block","trigger":"username7853.invoice-ads-agency.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"username7853.invoice-ads-agency.com/icon-women.png","fqdn":"username7853.invoice-ads-agency.com","domain":"invoice-ads-agency.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://username7853.invoice-ads-agency.com/","date":"2026-04-27T04:57:34.525Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"username7853.invoice-ads-agency.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 26 Apr 2026 09:25:08 GMT","end":"Sat, 25 Jul 2026 10:24:56 GMT"},"fingerprint":{"sha1":"48:56:D0:29:97:26:14:90:70:9D:59:AD:5A:E0:1B:B2:64:EC:A0:34","sha256":"BB:2D:2D:D2:48:51:23:80:1A:A4:B6:6F:F1:02:BC:8B:25:AF:96:42:07:C0:53:97:56:34:62:CC:64:AA:C4:D0"}}},"request":{"raw":"GET /icon-women.png HTTP/1.1\r\nHost: username7853.invoice-ads-agency.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://username7853.invoice-ads-agency.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: __cf_bm=71JL0B6vhLQsFK6jLSdRUzzx2oKPeswpNm7HH32hxvY-1777265854.2844844-1.0.1.1-5g_3Ds0XMuYtu_m9LfMf2ZercpmV6tTU31AQtp_0phvfg_o41Uq9J_i4Vnt5T9QTf8N2n5wJTrzuZaoAXMMhm0HvmHOcGE1z0QLl8xmdlIgGzcwbck_dKeOpT18F2OL1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 27 Apr 2026 04:57:34 GMT\r\ncontent-type: image/png\r\ncontent-length: 16099\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\naccept-ranges: bytes\r\ncache-control: public, max-age=14400\r\nlast-modified: Tue, 01 Jan 1980 00:00:01 GMT\r\netag: W/\"3ee3-49773873e8\"\r\nx-do-app-origin: 3f0c10dd-037d-4fae-b207-2f4a5d454a33\r\nx-do-orig-status: 200\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WCCFO85vBpvnl5OpMEYJEIuf57g0DrDxFB2PAzfokuQCSuX%2FhfcC4ru%2Fy0i5b9gY4gJg2Un6wOGwbKRU0ffsVee9x9u2WYhnESfd4es8FT3ZJRCWrUf%2BTbpVnX4%2F0oECYc1p791v%2Fyx5NGYaPPXUbALHUokv5w%3D%3D\"}]}\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f2b3f46acf34e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16099,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 120 x 120, 8-bit/color RGBA, non-interlaced","md5":"5c16d06d4b48457e8b6e838b4ed29696","sha1":"b8d400caf154787827f80edd7be2598718aa1d27","sha256":"008beba70db4cc9ef1d7dc34635cef19620822da0722fd4670d36a1dfee543da","sha512":"a99cc696d4733d030d8f3184b31dd4367b3c1b46b6352ad479f0f28973fe4f36b99951dc570bc4cb75ca64e9ef25973c8639b4ca3e3ac720a80ef44426fb23b0","ssdeep":"384:xMOLcQo2hkjx7FYNBsy2TQ01kKVaWHzg9IXBioeIm6C2t:eIFhUxhMj0ESc+x8n6jt","tlshash":"6a72d0b784c4c8eb9a5dbf0b8cb9151c5331496e334618ab1d7a7731d7f9ab83c62086","first_seen":"2024-06-29T10:46:39Z","last_seen":"2026-04-27T14:20:36.618204Z","times_seen":2259,"resource_available":false,"data":null}},"time_used":371,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":363,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-27","alert":"Sinkholed","trigger":"username7853.invoice-ads-agency.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-27","alert":"Sinkholed","trigger":"username7853.invoice-ads-agency.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-27","alert":"Phishing Block","trigger":"username7853.invoice-ads-agency.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-27","alert":"Sinkholed","trigger":"username7853.invoice-ads-agency.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"username7853.invoice-ads-agency.com/_next/static/css/d215a44be3bda62f.css","fqdn":"username7853.invoice-ads-agency.com","domain":"invoice-ads-agency.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://username7853.invoice-ads-agency.com/","date":"2026-04-27T04:57:34.529Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"username7853.invoice-ads-agency.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 26 Apr 2026 09:25:08 GMT","end":"Sat, 25 Jul 2026 10:24:56 GMT"},"fingerprint":{"sha1":"48:56:D0:29:97:26:14:90:70:9D:59:AD:5A:E0:1B:B2:64:EC:A0:34","sha256":"BB:2D:2D:D2:48:51:23:80:1A:A4:B6:6F:F1:02:BC:8B:25:AF:96:42:07:C0:53:97:56:34:62:CC:64:AA:C4:D0"}}},"request":{"raw":"GET /_next/static/css/d215a44be3bda62f.css HTTP/1.1\r\nHost: username7853.invoice-ads-agency.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://username7853.invoice-ads-agency.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: __cf_bm=71JL0B6vhLQsFK6jLSdRUzzx2oKPeswpNm7HH32hxvY-1777265854.2844844-1.0.1.1-5g_3Ds0XMuYtu_m9LfMf2ZercpmV6tTU31AQtp_0phvfg_o41Uq9J_i4Vnt5T9QTf8N2n5wJTrzuZaoAXMMhm0HvmHOcGE1z0QLl8xmdlIgGzcwbck_dKeOpT18F2OL1\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 27 Apr 2026 04:57:34 GMT\r\ncontent-type: text/css; charset=UTF-8\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Tue, 01 Jan 1980 00:00:01 GMT\r\netag: W/\"14454-49773873e8\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nx-do-app-origin: 3f0c10dd-037d-4fae-b207-2f4a5d454a33\r\nx-do-orig-status: 200\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tVfy4nxyEX%2BkZ6XtJGux97XpMbv2Bcib3141oIsOg0WlfCdU5FrYPIhJe9sLeyIGxBL3laRAYLs1pF9TiT%2FgsoutE6IqZBvFCI7RLZVJDHAQhEB2a5DAQN2ThYaa4xQyyPcDxDVnVD%2FYR3Tfmq%2FHCzKHDoliDg%3D%3D\"}]}\r\npriority: u=2,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f2b3f46ad004e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":83028,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (63471)","md5":"eab2a035ce887a66f88f009dcf985f94","sha1":"94a89e3c9f0ed4ad3da2f191ab8c84141bb7317a","sha256":"af37c5f9c8b935ad4df9480ebf4315cc18fd9310d25e08241e6be71dabf1f32e","sha512":"637ecd0fe58a70db9087e9c511b994c7badaca1e74e7f345b658099a13b5995521527d0b6a6cd7233bc1beb32a96dcfa47249dff22d74b8c58a05af2a3994cb0","ssdeep":"1536:xhZeHSbl+OMT53rnh6S9PmwMx+aDr8FMdyJHw:rZeHSbl+OMT53rnh6S9PDu+aDr8FMdyC","tlshash":"db8320f4a2f1d97bfc17b1e9939cf41da518f196dd3a02c9fe01a10563e6bf208a5a10","first_seen":"2026-04-23T07:30:08.606212Z","last_seen":"2026-04-27T04:58:00.180041Z","times_seen":230,"resource_available":false,"data":null}},"time_used":342,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":331,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-27","alert":"Sinkholed","trigger":"username7853.invoice-ads-agency.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-27","alert":"Sinkholed","trigger":"username7853.invoice-ads-agency.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-27","alert":"Sinkholed","trigger":"username7853.invoice-ads-agency.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-27","alert":"Phishing Block","trigger":"username7853.invoice-ads-agency.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"username7853.invoice-ads-agency.com/_next/static/chunks/webpack-e51daf8838ae20e8.js","fqdn":"username7853.invoice-ads-agency.com","domain":"invoice-ads-agency.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://username7853.invoice-ads-agency.com/","date":"2026-04-27T04:57:34.530Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"username7853.invoice-ads-agency.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 26 Apr 2026 09:25:08 GMT","end":"Sat, 25 Jul 2026 10:24:56 GMT"},"fingerprint":{"sha1":"48:56:D0:29:97:26:14:90:70:9D:59:AD:5A:E0:1B:B2:64:EC:A0:34","sha256":"BB:2D:2D:D2:48:51:23:80:1A:A4:B6:6F:F1:02:BC:8B:25:AF:96:42:07:C0:53:97:56:34:62:CC:64:AA:C4:D0"}}},"request":{"raw":"GET /_next/static/chunks/webpack-e51daf8838ae20e8.js HTTP/1.1\r\nHost: username7853.invoice-ads-agency.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://username7853.invoice-ads-agency.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: __cf_bm=71JL0B6vhLQsFK6jLSdRUzzx2oKPeswpNm7HH32hxvY-1777265854.2844844-1.0.1.1-5g_3Ds0XMuYtu_m9LfMf2ZercpmV6tTU31AQtp_0phvfg_o41Uq9J_i4Vnt5T9QTf8N2n5wJTrzuZaoAXMMhm0HvmHOcGE1z0QLl8xmdlIgGzcwbck_dKeOpT18F2OL1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 27 Apr 2026 04:57:34 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncache-control: public, max-age=31536000, immutable\r\nlast-modified: Tue, 01 Jan 1980 00:00:01 GMT\r\netag: W/\"d6a-49773873e8\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nx-do-app-origin: 3f0c10dd-037d-4fae-b207-2f4a5d454a33\r\nx-do-orig-status: 200\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jhyc7Xe0c0gU7PNYLiraT8N5F3GjknGzbCPNwTedbLLwvr6t%2FAFNGEKSUXSG8mg4LKlv7FYpTWp4k1GCGTUi%2BAGKJfasObPEhEQm073AC7Vnds2NgzAsMAnDk7JNE8hxzgegl%2FkNq20nW7b5jYnpQxoAlZNWbA%3D%3D\"}]}\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f2b3f46ad054e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3434,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (3434), with no line terminators","md5":"873c9729b9c2a571feef1a50a8223205","sha1":"a8cae0833e32b8cf910e494f0ef6baae9567462c","sha256":"d3a2529480d1318d0d92410a1864d9256fe97116bb73d46114ca3bbed3312043","sha512":"ab5e5596f6502f8f9e820f52df1e2718cf88f2c4d35ae55587a371d12111a6b1745b876ad4d98f6f3d168505df7b6629cd634f58c35e908326d61ad768ad3cf4","ssdeep":"","tlshash":"e061b5a93625fab556f108c5887fc142f619243b051afca0e717dcb9b474aa10562ff3","first_seen":"2026-04-20T12:08:33.559927Z","last_seen":"2026-04-27T04:58:00.18085Z","times_seen":239,"resource_available":true,"data":null}},"time_used":365,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":365,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-27","alert":"Phishing Block","trigger":"username7853.invoice-ads-agency.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-27","alert":"Sinkholed","trigger":"username7853.invoice-ads-agency.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-27","alert":"Sinkholed","trigger":"username7853.invoice-ads-agency.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-27","alert":"Sinkholed","trigger":"username7853.invoice-ads-agency.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}}]}