{"report_id":"2eb47c77-dda0-4743-bddf-8bcb43b65ef7","version":6,"status":"done","tags":[],"date":"2025-07-19T14:28:05Z","url":{"schema":"https","addr":"privnotell.com/","fqdn":"privnotell.com","domain":"privnotell.com","tld":"com"},"ip":{"addr":"185.178.208.170","port":0,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"final":{"url":{"schema":"https","addr":"privnotell.com/","fqdn":"privnotell.com","domain":"privnotell.com","tld":"com"},"title":"Privnote - Send notes that self-destruct after being read."},"submit":{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":""},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-08-23T14:28:05Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":null},"summary":[{"fqdn":"www.google.com","ip":{"addr":"142.250.74.68","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"1997-09-15","domain_rank":7,"first_seen":"2015-05-10T13:11:19Z","last_seen":"2025-07-16T15:12:46.836417Z","alert_count":0,"request_count":2,"received_data":1003,"sent_data":1726,"comment":"","tags":null,"fingerprints":null},{"fqdn":"www.googletagmanager.com","ip":{"addr":"142.250.178.40","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2011-11-11","domain_rank":75,"first_seen":"2012-10-04T01:07:32Z","last_seen":"2025-07-16T15:11:30.352104Z","alert_count":0,"request_count":1,"received_data":322111,"sent_data":435,"comment":"","tags":null,"fingerprints":null},{"fqdn":"privnotell.com","ip":{"addr":"185.178.208.170","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"domain_registered":"2025-07-16","domain_rank":0,"first_seen":"2025-07-19T11:42:32.108276Z","last_seen":"2025-07-19T11:42:32.108276Z","alert_count":11,"request_count":11,"received_data":328609,"sent_data":6101,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":null}],"analyzer":[{"sensor_name":"infosec_yara","type":"yara","description":"Public InfoSec YARA rules","link":"","alerts":null},{"sensor_name":"openphish","type":"url","description":"OpenPhish","link":"","alerts":null},{"sensor_name":"phishtank","type":"url","description":"PhishTank","link":"","alerts":null},{"sensor_name":"quad9","type":"domain","description":"Quad9 DNS","link":"","alerts":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-07-19","alert":"Sinkholed","trigger":"privnotell.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}]},{"sensor_name":"threatfox","type":"url","description":"ThreatFox","link":"","alerts":null}],"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"privnotell.com/","fqdn":"privnotell.com","domain":"privnotell.com","tld":"com"},"ip":{"addr":"185.178.208.170","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"a5a4f359be27745b874b9fb6e548c2e3","sha1":"95450eb0f42e7405cb6c3e49e6d8c702f8d82a1f","sha256":"9e2296a3e4dd7a363efa62de6cb8cc0949babc17913e6c7c18fec8feb5781e98","sha512":"0fa5d4f9dbd7a3bc4ee22d11af9e2ab2763fa8004395f9364f32dd9fce8efe502e80ca7fe2d8a7a59ac4828bf18823ac23c970b27ab217a30a8970d05e01a825","ssdeep":"","tlshash":"9bc02b8b210e4cb141f76700cb3ffe04b0023314d4e15931482923485d20e43db448a0","size":153,"data":"","first_seen":"2025-07-19T11:42:35.794888Z","last_seen":"2025-07-19T14:28:06.243739Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"privnotell.com/static/js/apped32.js?ver=1724948209","fqdn":"privnotell.com","domain":"privnotell.com","tld":"com"},"ip":{"addr":"185.178.208.170","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"51dcac0c3d8d8c7ba17ea7a50391a110","sha1":"f0bbbe93ab4b4fbd22a433bbc96c532174e72605","sha256":"7abbff166b1ea49b6470ee4a0c8febf214762d48e4f555a681ee4ef30eca86bd","sha512":"92b2f07bedfaac3472d29844b206c884a605e6f909d030ece90a10cdfe31f5bd4e8a10fb33a7e60e7e1154153e8c7876f81ee565a1fd75dcdd666cd092601ff7","ssdeep":"96:+yGm1b658NKRJU6J1/i7PPKkY66BKea47UUYGSmFhDzaF:keHKVra44UYGSmFhDzaF","tlshash":"d6f10f09f1f20a6201bbb1fd1f5bd405b8618017c509de043fad9bd46f9e86d92a3b9e","size":7934,"data":"","first_seen":"2025-06-03T08:24:56.043799Z","last_seen":"2025-07-27T15:45:33.003351Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"privnotell.com/static/js/jquery.min.js","fqdn":"privnotell.com","domain":"privnotell.com","tld":"com"},"ip":{"addr":"185.178.208.170","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"70a0ed646e29b76a849557865fafc2fd","sha1":"7529413fe24d3983722304113371dac661b5a264","sha256":"2bb31ef0df1cf75b99497c6ebf638c432fb7ea6dcaddffea17d0d3dc8948b05b","sha512":"37ca29d9fa38806f7916c655c228f09099d3de3b1149fa2698efcdfc88822c0e86019057b851fd1b2b353588d33ffdd3ffaf69ef818dab3de8b930ec417755b7","ssdeep":"1536:lc+UvVG9yK1yJNQYEhBhc3QWqoYXcU4pUWokjMU4buOs9GJRSF7e0bBuxKhoG7Em:lc4oYxWo1U4buwSgau5v3NWra2Nh","tlshash":"f0f30b8a6ae721319223b17d4e6fd809b535545f1e98fe003d4c82a59f0c83c97baf9d","size":167983,"data":"","first_seen":"2023-09-18T18:41:37Z","last_seen":"2026-07-20T18:21:40.649833Z","times_seen":103,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"privnotell.com/static/js/sweetalert2.min.js","fqdn":"privnotell.com","domain":"privnotell.com","tld":"com"},"ip":{"addr":"185.178.208.170","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"e14495ccd41be793cf10e0063d5ff9af","sha1":"a66e8fbb70a0bbdd3173a0f8aa10e9d06ffcfd63","sha256":"aa520b17101e65e43c789226a6efdafbb0f8e8f0d07f962299c10a9f788ab81f","sha512":"65a1777cbcb1650572de479abe93346165dae69c06e4a80e925c0128578b3126e3f749e22fa95fd5af716eb6a25e47df38a78c21b1a0a9ae1980845cc1c6ff09","ssdeep":"768:jwIDRMuDYBiitIPVaUHmzPI9kCUmeZPODiNcb2bN7beCKHAViJKN2111VDt:j67BxtINQrI9Lelr42p7bp7MZ","tlshash":"12638216a1b228310567b0bd6a47d51a7a20101f2e85fd483e4c43855f9de3ee7f2fea","size":67039,"data":"","first_seen":"2025-06-03T08:24:56.064765Z","last_seen":"2026-04-05T07:10:42.43361Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=AW-762688665","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.40","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"f963a685063b05469cdfd4c6f80083d9","sha1":"24680f5d960e52c70f179622bacff42defda86ad","sha256":"ba1a6d68b539310183f8108db521787be198c71c8e4b2f422b788808bc9de623","sha512":"cfe84f5de9296b11f8dabb3ba63bf97cc36d4b8192ba98d3f3c6c37abeae4b3df4fbe55e74ff331214200eede745425c1c503e6a77cdabf6a8ebe3c9aa1914d2","ssdeep":"3072:7PbnhNqPx370p5pAWK00Bj1fpT0GBRznCrC14Md38nbR4mQC5FoAqhRctjND9P/R:D9sr0p8E40bRYqFoAqbSj9pR","tlshash":"536419cdb3c6b4228393a478503f014bb17b6d92b88cd894f185d9e42e74aaa4177f7d","size":321064,"data":"","first_seen":"2025-07-19T14:28:06.239675Z","last_seen":"2025-07-19T14:28:06.239675Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"privnotell.com/static/css/sweetalert2.min.css","fqdn":"privnotell.com","domain":"privnotell.com","tld":"com"},"ip":{"addr":"185.178.208.170","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"","requested_by":"https://privnotell.com/","date":"2025-07-19T14:27:45.017Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"privnotell.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Wed, 16 Jul 2025 20:37:26 GMT","end":"Tue, 14 Oct 2025 20:37:25 GMT"},"fingerprint":{"sha1":"D4:2C:9C:30:44:EF:50:DC:BD:D0:A2:79:0A:AA:B0:F8:1F:81:80:89","sha256":"C7:34:F3:94:C1:60:09:3F:E7:AE:BA:9E:EA:77:0B:CD:CA:34:08:26:62:A8:2A:72:CB:DE:B5:C4:51:04:00:D9"}}},"request":{"raw":"GET /static/css/sweetalert2.min.css HTTP/1.1\r\nHost: privnotell.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://privnotell.com/\r\nCookie: __ddg8_=k3Pnvn2EQ9N739L6; __ddg10_=1752935264; __ddg9_=91.90.42.154; __ddg1_=bP7ZH9ZvmRJD8UE8pI0Z\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=sDlVIM2Cs9aBYEfA; Domain=.privnotell.com; Path=/; Expires=Sat, 19-Jul-2025 14:47:45 GMT\n__ddg10_=1752935265; Domain=.privnotell.com; Path=/; Expires=Sat, 19-Jul-2025 14:47:45 GMT\n__ddg9_=91.90.42.154; Domain=.privnotell.com; Path=/; Expires=Sat, 19-Jul-2025 14:47:45 GMT\r\ndate: Sat, 19 Jul 2025 10:35:01 GMT\r\ncontent-type: text/css; charset=utf-8\r\naccept-ranges: bytes\r\ncontent-length: 28100\r\nlast-modified: Wed, 16 Jul 2025 21:29:02 GMT\r\nddg-cache-status: HIT,MISS\r\netag: \"722080e601ca9792797472479c7594f9\"\r\nage: 13964\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":28100,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"9e204eecf90e252df6c6dfadf5f57c45","sha1":"139245d13ce2daec7d3c39bbc99870e2ac4a6db8","sha256":"37487bb6885e34c72c723d431250fe0140f872ce4198558286589434e5264e7d","sha512":"94cf2205ffeb0bb66d87613a6aede763bf22dd435760bbbed08c521e9b80afdca6d7332bb34623d2f216ec8b44fa1021cc1462cdf3fb3c957c1b5448ddf0f040","ssdeep":"384:bV1/WkhTkFX1HF4uoFxNyWYQrIKB6PzMT82EumeceYxg:2kpkFX1HF4bF4QrIKB6PzMjbmeceV","tlshash":"0cc2ec406e98d543b66a812d1891fa0873cdd04aedfbcc6db6d4c4488fcbd5e36f9298","first_seen":"2025-06-03T08:24:56.056485Z","last_seen":"2026-04-05T07:10:42.437326Z","times_seen":7,"resource_available":false,"data":null}},"time_used":80,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":67,"receive":13,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-07-19","alert":"Sinkholed","trigger":"privnotell.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"privnotell.com/static/js/apped32.js?ver=1724948209","fqdn":"privnotell.com","domain":"privnotell.com","tld":"com"},"ip":{"addr":"185.178.208.170","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"","requested_by":"https://privnotell.com/","date":"2025-07-19T14:27:45.033Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"privnotell.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Wed, 16 Jul 2025 20:37:26 GMT","end":"Tue, 14 Oct 2025 20:37:25 GMT"},"fingerprint":{"sha1":"D4:2C:9C:30:44:EF:50:DC:BD:D0:A2:79:0A:AA:B0:F8:1F:81:80:89","sha256":"C7:34:F3:94:C1:60:09:3F:E7:AE:BA:9E:EA:77:0B:CD:CA:34:08:26:62:A8:2A:72:CB:DE:B5:C4:51:04:00:D9"}}},"request":{"raw":"GET /static/js/apped32.js?ver=1724948209 HTTP/1.1\r\nHost: privnotell.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://privnotell.com/\r\nCookie: __ddg8_=k3Pnvn2EQ9N739L6; __ddg10_=1752935264; __ddg9_=91.90.42.154; __ddg1_=bP7ZH9ZvmRJD8UE8pI0Z\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=BKf3OD2sDY4FmFud; Domain=.privnotell.com; Path=/; Expires=Sat, 19-Jul-2025 14:47:45 GMT\n__ddg10_=1752935265; Domain=.privnotell.com; Path=/; Expires=Sat, 19-Jul-2025 14:47:45 GMT\n__ddg9_=91.90.42.154; Domain=.privnotell.com; Path=/; Expires=Sat, 19-Jul-2025 14:47:45 GMT\r\ndate: Sat, 19 Jul 2025 11:42:09 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\naccept-ranges: bytes\r\ncontent-length: 7934\r\nlast-modified: Wed, 16 Jul 2025 21:29:01 GMT\r\nddg-cache-status: HIT,MISS\r\netag: \"7d930688a44ec1f8a487134ba55ccac6\"\r\nage: 9936\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":7934,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text","md5":"51dcac0c3d8d8c7ba17ea7a50391a110","sha1":"f0bbbe93ab4b4fbd22a433bbc96c532174e72605","sha256":"7abbff166b1ea49b6470ee4a0c8febf214762d48e4f555a681ee4ef30eca86bd","sha512":"92b2f07bedfaac3472d29844b206c884a605e6f909d030ece90a10cdfe31f5bd4e8a10fb33a7e60e7e1154153e8c7876f81ee565a1fd75dcdd666cd092601ff7","ssdeep":"96:+yGm1b658NKRJU6J1/i7PPKkY66BKea47UUYGSmFhDzaF:keHKVra44UYGSmFhDzaF","tlshash":"d6f10f09f1f20a6201bbb1fd1f5bd405b8618017c509de043fad9bd46f9e86d92a3b9e","first_seen":"2025-06-03T08:24:56.043799Z","last_seen":"2025-07-27T15:45:33.003351Z","times_seen":4,"resource_available":true,"data":null}},"time_used":62,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":60,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-07-19","alert":"Sinkholed","trigger":"privnotell.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"privnotell.com/static/js/sweetalert2.min.js","fqdn":"privnotell.com","domain":"privnotell.com","tld":"com"},"ip":{"addr":"185.178.208.170","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"","requested_by":"https://privnotell.com/","date":"2025-07-19T14:27:45.031Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"privnotell.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Wed, 16 Jul 2025 20:37:26 GMT","end":"Tue, 14 Oct 2025 20:37:25 GMT"},"fingerprint":{"sha1":"D4:2C:9C:30:44:EF:50:DC:BD:D0:A2:79:0A:AA:B0:F8:1F:81:80:89","sha256":"C7:34:F3:94:C1:60:09:3F:E7:AE:BA:9E:EA:77:0B:CD:CA:34:08:26:62:A8:2A:72:CB:DE:B5:C4:51:04:00:D9"}}},"request":{"raw":"GET /static/js/sweetalert2.min.js HTTP/1.1\r\nHost: privnotell.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://privnotell.com/\r\nCookie: __ddg8_=k3Pnvn2EQ9N739L6; __ddg10_=1752935264; __ddg9_=91.90.42.154; __ddg1_=bP7ZH9ZvmRJD8UE8pI0Z\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=OOq4VSPWwAnkvsJw; Domain=.privnotell.com; Path=/; Expires=Sat, 19-Jul-2025 14:47:45 GMT\n__ddg10_=1752935265; Domain=.privnotell.com; Path=/; Expires=Sat, 19-Jul-2025 14:47:45 GMT\n__ddg9_=91.90.42.154; Domain=.privnotell.com; Path=/; Expires=Sat, 19-Jul-2025 14:47:45 GMT\r\ndate: Sat, 19 Jul 2025 11:42:09 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\naccept-ranges: bytes\r\ncontent-length: 67039\r\nlast-modified: Wed, 16 Jul 2025 21:29:01 GMT\r\nddg-cache-status: HIT,MISS\r\netag: \"593b61c35eb7acc3de76c49d89d23fec\"\r\nage: 9936\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":67039,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (1404)","md5":"e14495ccd41be793cf10e0063d5ff9af","sha1":"a66e8fbb70a0bbdd3173a0f8aa10e9d06ffcfd63","sha256":"aa520b17101e65e43c789226a6efdafbb0f8e8f0d07f962299c10a9f788ab81f","sha512":"65a1777cbcb1650572de479abe93346165dae69c06e4a80e925c0128578b3126e3f749e22fa95fd5af716eb6a25e47df38a78c21b1a0a9ae1980845cc1c6ff09","ssdeep":"768:jwIDRMuDYBiitIPVaUHmzPI9kCUmeZPODiNcb2bN7beCKHAViJKN2111VDt:j67BxtINQrI9Lelr42p7bp7MZ","tlshash":"12638216a1b228310567b0bd6a47d51a7a20101f2e85fd483e4c43855f9de3ee7f2fea","first_seen":"2025-06-03T08:24:56.064765Z","last_seen":"2026-04-05T07:10:42.43361Z","times_seen":7,"resource_available":true,"data":null}},"time_used":91,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":61,"receive":30,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-07-19","alert":"Sinkholed","trigger":"privnotell.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"privnotell.com/static/images/favicons/privnotell.ico","fqdn":"privnotell.com","domain":"privnotell.com","tld":"com"},"ip":{"addr":"185.178.208.170","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"","requested_by":"https://privnotell.com/","date":"2025-07-19T14:27:45.384Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"privnotell.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Wed, 16 Jul 2025 20:37:26 GMT","end":"Tue, 14 Oct 2025 20:37:25 GMT"},"fingerprint":{"sha1":"D4:2C:9C:30:44:EF:50:DC:BD:D0:A2:79:0A:AA:B0:F8:1F:81:80:89","sha256":"C7:34:F3:94:C1:60:09:3F:E7:AE:BA:9E:EA:77:0B:CD:CA:34:08:26:62:A8:2A:72:CB:DE:B5:C4:51:04:00:D9"}}},"request":{"raw":"GET /static/images/favicons/privnotell.ico HTTP/1.1\r\nHost: privnotell.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://privnotell.com/\r\nCookie: __ddg8_=fJEH6CiokTX9OEmM; __ddg10_=1752935265; __ddg9_=91.90.42.154; __ddg1_=bP7ZH9ZvmRJD8UE8pI0Z\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=VlQCXmXAb3LCKYAC; Domain=.privnotell.com; Path=/; Expires=Sat, 19-Jul-2025 14:47:45 GMT\n__ddg10_=1752935265; Domain=.privnotell.com; Path=/; Expires=Sat, 19-Jul-2025 14:47:45 GMT\n__ddg9_=91.90.42.154; Domain=.privnotell.com; Path=/; Expires=Sat, 19-Jul-2025 14:47:45 GMT\r\ndate: Sat, 19 Jul 2025 11:42:10 GMT\r\ncontent-type: image/vnd.microsoft.icon\r\naccept-ranges: bytes\r\ncontent-length: 4286\r\nlast-modified: Wed, 16 Jul 2025 21:29:02 GMT\r\nddg-cache-status: HIT,HIT\r\netag: \"66d0feef0d2075d2cb65fc0ae9f50696\"\r\nage: 9935\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":4286,"size_decoded":0,"mime_type":"image/vnd.microsoft.icon","magic":"MS Windows icon resource - 1 icon, 32x32, 32 bits/pixel","md5":"f665c8505502fa81bcde67c50ac19022","sha1":"82c9d35ef164baade030a7b37c4a462c6ceaafdc","sha256":"e6029a6a3e72cbebb9f7653c3a62ed1da5c1486d926d9d60f293e1c860e8f21d","sha512":"b765f6b9fb0309ef257d0a612b1594e6a541789a6c5f8038829c860708ca12641103076f10602e28fc0e1384220bd7d67c02562317c423b0d117e8fc795172a1","ssdeep":"96:HJtttlttttttt3tttttt/PttttttxttttttRxttttttzEtttttt5ttttttZtttt+:HJtttlttttttt3tttttt3ttttttxtttT","tlshash":"8f91e4d24337ac38ec28a1bff019888b24c57d6e658b440927827fab747d3d3871d11a","first_seen":"2024-12-26T20:05:16.012491Z","last_seen":"2026-04-05T07:10:42.441035Z","times_seen":14,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-07-19","alert":"Sinkholed","trigger":"privnotell.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"privnotell.com/","fqdn":"privnotell.com","domain":"privnotell.com","tld":"com"},"ip":{"addr":"185.178.208.170","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":true,"resource_type":"","requested_by":"","date":"2025-07-19T14:27:44.204Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"privnotell.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Wed, 16 Jul 2025 20:37:26 GMT","end":"Tue, 14 Oct 2025 20:37:25 GMT"},"fingerprint":{"sha1":"D4:2C:9C:30:44:EF:50:DC:BD:D0:A2:79:0A:AA:B0:F8:1F:81:80:89","sha256":"C7:34:F3:94:C1:60:09:3F:E7:AE:BA:9E:EA:77:0B:CD:CA:34:08:26:62:A8:2A:72:CB:DE:B5:C4:51:04:00:D9"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: privnotell.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=k3Pnvn2EQ9N739L6; Domain=.privnotell.com; Path=/; Expires=Sat, 19-Jul-2025 14:47:44 GMT\n__ddg10_=1752935264; Domain=.privnotell.com; Path=/; Expires=Sat, 19-Jul-2025 14:47:44 GMT\n__ddg9_=91.90.42.154; Domain=.privnotell.com; Path=/; Expires=Sat, 19-Jul-2025 14:47:44 GMT\n__ddg1_=bP7ZH9ZvmRJD8UE8pI0Z; Domain=.privnotell.com; HttpOnly; Path=/; Expires=Sun, 19-Jul-2026 14:27:44 GMT\r\ndate: Sat, 19 Jul 2025 14:27:44 GMT\r\ncontent-length: 15281\r\ncontent-type: text/html; charset=utf-8\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":15281,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"0eb1d74e6232d5eaed57fbf713074130","sha1":"f289b803fba88b16bff118d84c1ab56947ca9ced","sha256":"ea7f77bbf5db75f16f6cc1d72a4ed3858e3e30450c0621aa43e5ffe03fa9c7bb","sha512":"32002c59330bd581980866d7bfc2eecce1145011210a6fb3e3ecfc29be7f84aa42bf9da6d3e477b7594baee710386d022c067d51bbc41652c21e65f3c408854b","ssdeep":"192:RJN+L3Ld8NaJO62gAVj691xABHsC97FlbMKzJ4Lm1NoA97NoiG:RJodw1fN691xQvd4spc","tlshash":"5f62765964f088e301dbc0d5fb56aa27ee94c257c31a1908b9fc4be00fe7d52d9670a7","first_seen":"2025-07-19T11:42:35.750417Z","last_seen":"2025-07-19T14:28:06.23679Z","times_seen":2,"resource_available":false,"data":null}},"time_used":535,"timings":{"blocked":128,"dns":21,"connect":20,"send":0,"wait":228,"receive":51,"ssl":84},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-07-19","alert":"Sinkholed","trigger":"privnotell.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"privnotell.com/static/css/mained32.css?ver=1724948209","fqdn":"privnotell.com","domain":"privnotell.com","tld":"com"},"ip":{"addr":"185.178.208.170","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"","requested_by":"https://privnotell.com/","date":"2025-07-19T14:27:45.020Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"privnotell.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Wed, 16 Jul 2025 20:37:26 GMT","end":"Tue, 14 Oct 2025 20:37:25 GMT"},"fingerprint":{"sha1":"D4:2C:9C:30:44:EF:50:DC:BD:D0:A2:79:0A:AA:B0:F8:1F:81:80:89","sha256":"C7:34:F3:94:C1:60:09:3F:E7:AE:BA:9E:EA:77:0B:CD:CA:34:08:26:62:A8:2A:72:CB:DE:B5:C4:51:04:00:D9"}}},"request":{"raw":"GET /static/css/mained32.css?ver=1724948209 HTTP/1.1\r\nHost: privnotell.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://privnotell.com/\r\nCookie: __ddg8_=k3Pnvn2EQ9N739L6; __ddg10_=1752935264; __ddg9_=91.90.42.154; __ddg1_=bP7ZH9ZvmRJD8UE8pI0Z\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=FxZZuKbvv0BrmfpX; Domain=.privnotell.com; Path=/; Expires=Sat, 19-Jul-2025 14:47:45 GMT\n__ddg10_=1752935265; Domain=.privnotell.com; Path=/; Expires=Sat, 19-Jul-2025 14:47:45 GMT\n__ddg9_=91.90.42.154; Domain=.privnotell.com; Path=/; Expires=Sat, 19-Jul-2025 14:47:45 GMT\r\ndate: Sat, 19 Jul 2025 10:35:01 GMT\r\ncontent-type: text/css; charset=utf-8\r\naccept-ranges: bytes\r\ncontent-length: 3993\r\nlast-modified: Wed, 16 Jul 2025 21:29:02 GMT\r\nddg-cache-status: HIT,MISS\r\netag: \"986023c04aa82578ccdda1e0eaa8559e\"\r\nage: 13964\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":3993,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"ca37a835a8e18a181a9d8972a1327a67","sha1":"56f73f739e2025e668dc1bd0f0f99ec57548b8b5","sha256":"9a3491c921c7e26883bbc19f7e004e6018ba1416fe03fa22a25b4c43db865301","sha512":"865b3f355fd3085f8a77667876fd76749274ce67a356b9b9491d4ce473e5e94fddccf30f924acc6b4031996aa404a3eddc834c98a4b92e9867844b8e3b41dd62","ssdeep":"","tlshash":"c881dd8625eb1f28b856d4d86ffa6705151dc17381cfd4ac3e88294ccfce18984e27ad","first_seen":"2024-12-26T20:05:15.996089Z","last_seen":"2026-04-05T07:10:42.439597Z","times_seen":14,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-07-19","alert":"Sinkholed","trigger":"privnotell.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"privnotell.com/static/css/ligthcbc6.css?ver=1714170657","fqdn":"privnotell.com","domain":"privnotell.com","tld":"com"},"ip":{"addr":"185.178.208.170","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"","requested_by":"https://privnotell.com/","date":"2025-07-19T14:27:45.023Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"privnotell.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Wed, 16 Jul 2025 20:37:26 GMT","end":"Tue, 14 Oct 2025 20:37:25 GMT"},"fingerprint":{"sha1":"D4:2C:9C:30:44:EF:50:DC:BD:D0:A2:79:0A:AA:B0:F8:1F:81:80:89","sha256":"C7:34:F3:94:C1:60:09:3F:E7:AE:BA:9E:EA:77:0B:CD:CA:34:08:26:62:A8:2A:72:CB:DE:B5:C4:51:04:00:D9"}}},"request":{"raw":"GET /static/css/ligthcbc6.css?ver=1714170657 HTTP/1.1\r\nHost: privnotell.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://privnotell.com/\r\nCookie: __ddg8_=k3Pnvn2EQ9N739L6; __ddg10_=1752935264; __ddg9_=91.90.42.154; __ddg1_=bP7ZH9ZvmRJD8UE8pI0Z\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=zVas3DEn4QyYbjlV; Domain=.privnotell.com; Path=/; Expires=Sat, 19-Jul-2025 14:47:45 GMT\n__ddg10_=1752935265; Domain=.privnotell.com; Path=/; Expires=Sat, 19-Jul-2025 14:47:45 GMT\n__ddg9_=91.90.42.154; Domain=.privnotell.com; Path=/; Expires=Sat, 19-Jul-2025 14:47:45 GMT\r\ndate: Sat, 19 Jul 2025 10:35:04 GMT\r\ncontent-type: text/css; charset=utf-8\r\naccept-ranges: bytes\r\ncontent-length: 17198\r\nlast-modified: Wed, 16 Jul 2025 21:29:02 GMT\r\nddg-cache-status: HIT,MISS\r\netag: \"300ff7be14f7002616e5230061f74206\"\r\nage: 13964\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":17198,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"00c42a02a83f069ecbe5a469c4ae992f","sha1":"aaec4d0e8d7656dcd9c70cf24ed483e7d6ce3fcc","sha256":"cf35fdc7c0f47f9224d0caa59c00b35eedf5a25624e1866bd23099050c1e22ee","sha512":"e0a537706b31f49d6d3085dccae50bb7861f0159f0850928c311e27f31b8c4ef26728905e73103eb45ffab97a6d49f509caca3a30a523bf7b44e9d4d41400469","ssdeep":"192:UI48X6X6bDNGke83wMkDFF1oqjGxjDun5+gYYX5bDZRbDSfV5FEFpFCFyKDDjD2J:65vPrKQBDHDSTFEFpFCFPD/D2xD0gV","tlshash":"ef724305aee30849b44bc8647bbbd781a32d4163890fde3c7f89b5a4cf4d09564b9b8d","first_seen":"2025-07-19T11:42:35.771893Z","last_seen":"2025-07-19T14:28:06.238237Z","times_seen":2,"resource_available":false,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-07-19","alert":"Sinkholed","trigger":"privnotell.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/ccm/collect?tid=AW-762688665\u0026en=page_view\u0026dl=https%3A%2F%2Fprivnotell.com%2F\u0026scrsrc=www.googletagmanager.com\u0026frm=0\u0026rnd=716035341.1752935265\u0026dt=Privnote%20-%20Send%20notes%20that%20self-destruct%20after%20being%20read.\u0026auid=204503000.1752935265\u0026navt=n\u0026npa=1\u0026gtm=45be57g1za200\u0026gcd=13l3l3l2l1l1\u0026dma_cps=syphamo\u0026dma=1\u0026tag_exp=101509157~103116026~103200004~103233427~104684208~104684211\u0026tft=1752935265389\u0026tfd=1218\u0026apve=1\u0026apvf=f\u0026img=1","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.74.68","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"","requested_by":"https://privnotell.com/","date":"2025-07-19T14:27:45.701Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Jun 2025 08:42:14 GMT","end":"Mon, 15 Sep 2025 08:42:13 GMT"},"fingerprint":{"sha1":"18:68:D7:A6:6E:58:DB:F0:4B:B6:53:AF:BA:2B:82:59:4F:36:D8:73","sha256":"C2:66:D2:BC:13:71:4F:72:4A:DE:85:BA:8D:BA:D1:40:C2:E6:CB:25:A3:25:62:EB:D9:17:BF:87:E7:EF:4D:67"}}},"request":{"raw":"GET /ccm/collect?tid=AW-762688665\u0026en=page_view\u0026dl=https%3A%2F%2Fprivnotell.com%2F\u0026scrsrc=www.googletagmanager.com\u0026frm=0\u0026rnd=716035341.1752935265\u0026dt=Privnote%20-%20Send%20notes%20that%20self-destruct%20after%20being%20read.\u0026auid=204503000.1752935265\u0026navt=n\u0026npa=1\u0026gtm=45be57g1za200\u0026gcd=13l3l3l2l1l1\u0026dma_cps=syphamo\u0026dma=1\u0026tag_exp=101509157~103116026~103200004~103233427~104684208~104684211\u0026tft=1752935265389\u0026tfd=1218\u0026apve=1\u0026apvf=f\u0026img=1 HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://privnotell.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\ncache-control: no-cache, no-store, must-revalidate\r\ncontent-type: text/plain\r\npragma: no-cache\r\ndate: Sat, 19 Jul 2025 14:27:45 GMT\r\nvary: Origin, X-Origin, Referer\r\nserver: scaffolding on HTTPServer2\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T23:24:28.748346Z","times_seen":17434361,"resource_available":true,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=AW-762688665","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.40","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"","requested_by":"https://privnotell.com/","date":"2025-07-19T14:27:45.014Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Jun 2025 08:40:16 GMT","end":"Mon, 15 Sep 2025 08:40:15 GMT"},"fingerprint":{"sha1":"3A:12:37:38:16:E5:9F:51:4E:B7:1D:5F:1F:C0:84:BB:92:EA:9E:20","sha256":"7C:C3:2F:91:ED:C8:F9:0D:09:BC:07:8E:79:FB:C7:5D:07:2F:F1:59:CD:23:2D:49:F9:C7:19:B9:05:9B:BF:6F"}}},"request":{"raw":"GET /gtag/js?id=AW-762688665 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://privnotell.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Sat, 19 Jul 2025 14:27:45 GMT\r\nexpires: Sat, 19 Jul 2025 14:27:45 GMT\r\ncache-control: private, max-age=900\r\nlast-modified: Sat, 19 Jul 2025 12:00:00 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\ncontent-security-policy-report-only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascgcycc:1077:0\r\ncross-origin-opener-policy-report-only: same-origin; report-to=ascgcycc:1077:0\r\nreport-to: {\"group\":\"ascgcycc:1077:0\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/scaffolding/ascgcycc:1077:0\"}],}\r\nserver: Google Tag Manager\r\ncontent-length: 112498\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":321064,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (4832)","md5":"f963a685063b05469cdfd4c6f80083d9","sha1":"24680f5d960e52c70f179622bacff42defda86ad","sha256":"ba1a6d68b539310183f8108db521787be198c71c8e4b2f422b788808bc9de623","sha512":"cfe84f5de9296b11f8dabb3ba63bf97cc36d4b8192ba98d3f3c6c37abeae4b3df4fbe55e74ff331214200eede745425c1c503e6a77cdabf6a8ebe3c9aa1914d2","ssdeep":"3072:7PbnhNqPx370p5pAWK00Bj1fpT0GBRznCrC14Md38nbR4mQC5FoAqhRctjND9P/R:D9sr0p8E40bRYqFoAqbSj9pR","tlshash":"536419cdb3c6b4228393a478503f014bb17b6d92b88cd894f185d9e42e74aaa4177f7d","first_seen":"2025-07-19T14:28:06.239675Z","last_seen":"2025-07-19T14:28:06.239675Z","times_seen":1,"resource_available":true,"data":null}},"time_used":283,"timings":{"blocked":90,"dns":1,"connect":15,"send":0,"wait":48,"receive":44,"ssl":78},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"privnotell.com/static/js/jquery.min.js","fqdn":"privnotell.com","domain":"privnotell.com","tld":"com"},"ip":{"addr":"185.178.208.170","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"","requested_by":"https://privnotell.com/","date":"2025-07-19T14:27:45.029Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"privnotell.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Wed, 16 Jul 2025 20:37:26 GMT","end":"Tue, 14 Oct 2025 20:37:25 GMT"},"fingerprint":{"sha1":"D4:2C:9C:30:44:EF:50:DC:BD:D0:A2:79:0A:AA:B0:F8:1F:81:80:89","sha256":"C7:34:F3:94:C1:60:09:3F:E7:AE:BA:9E:EA:77:0B:CD:CA:34:08:26:62:A8:2A:72:CB:DE:B5:C4:51:04:00:D9"}}},"request":{"raw":"GET /static/js/jquery.min.js HTTP/1.1\r\nHost: privnotell.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://privnotell.com/\r\nCookie: __ddg8_=k3Pnvn2EQ9N739L6; __ddg10_=1752935264; __ddg9_=91.90.42.154; __ddg1_=bP7ZH9ZvmRJD8UE8pI0Z\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=nC75aVANMggUlPwN; Domain=.privnotell.com; Path=/; Expires=Sat, 19-Jul-2025 14:47:45 GMT\n__ddg10_=1752935265; Domain=.privnotell.com; Path=/; Expires=Sat, 19-Jul-2025 14:47:45 GMT\n__ddg9_=91.90.42.154; Domain=.privnotell.com; Path=/; Expires=Sat, 19-Jul-2025 14:47:45 GMT\r\ndate: Sat, 19 Jul 2025 11:42:10 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\naccept-ranges: bytes\r\ncontent-length: 167983\r\nlast-modified: Wed, 16 Jul 2025 21:29:01 GMT\r\nddg-cache-status: HIT,MISS\r\netag: \"684e9a1d020e25c48622ad36f7d68c23\"\r\nage: 9936\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":167983,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text","md5":"70a0ed646e29b76a849557865fafc2fd","sha1":"7529413fe24d3983722304113371dac661b5a264","sha256":"2bb31ef0df1cf75b99497c6ebf638c432fb7ea6dcaddffea17d0d3dc8948b05b","sha512":"37ca29d9fa38806f7916c655c228f09099d3de3b1149fa2698efcdfc88822c0e86019057b851fd1b2b353588d33ffdd3ffaf69ef818dab3de8b930ec417755b7","ssdeep":"1536:lc+UvVG9yK1yJNQYEhBhc3QWqoYXcU4pUWokjMU4buOs9GJRSF7e0bBuxKhoG7Em:lc4oYxWo1U4buwSgau5v3NWra2Nh","tlshash":"f0f30b8a6ae721319223b17d4e6fd809b535545f1e98fe003d4c82a59f0c83c97baf9d","first_seen":"2023-09-18T18:41:37Z","last_seen":"2026-07-20T18:21:40.649833Z","times_seen":103,"resource_available":true,"data":null}},"time_used":97,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":38,"receive":59,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-07-19","alert":"Sinkholed","trigger":"privnotell.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"privnotell.com/static/images/touch-icons/privnotell-192x192.png","fqdn":"privnotell.com","domain":"privnotell.com","tld":"com"},"ip":{"addr":"185.178.208.170","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"","requested_by":"https://privnotell.com/","date":"2025-07-19T14:27:45.369Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"privnotell.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Wed, 16 Jul 2025 20:37:26 GMT","end":"Tue, 14 Oct 2025 20:37:25 GMT"},"fingerprint":{"sha1":"D4:2C:9C:30:44:EF:50:DC:BD:D0:A2:79:0A:AA:B0:F8:1F:81:80:89","sha256":"C7:34:F3:94:C1:60:09:3F:E7:AE:BA:9E:EA:77:0B:CD:CA:34:08:26:62:A8:2A:72:CB:DE:B5:C4:51:04:00:D9"}}},"request":{"raw":"GET /static/images/touch-icons/privnotell-192x192.png HTTP/1.1\r\nHost: privnotell.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://privnotell.com/\r\nCookie: __ddg8_=fJEH6CiokTX9OEmM; __ddg10_=1752935265; __ddg9_=91.90.42.154; __ddg1_=bP7ZH9ZvmRJD8UE8pI0Z\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=xXOmmeCtfdjae6YI; Domain=.privnotell.com; Path=/; Expires=Sat, 19-Jul-2025 14:47:45 GMT\n__ddg10_=1752935265; Domain=.privnotell.com; Path=/; Expires=Sat, 19-Jul-2025 14:47:45 GMT\n__ddg9_=91.90.42.154; Domain=.privnotell.com; Path=/; Expires=Sat, 19-Jul-2025 14:47:45 GMT\r\ndate: Sat, 19 Jul 2025 11:42:10 GMT\r\ncontent-type: image/png\r\naccept-ranges: bytes\r\ncontent-length: 2421\r\nlast-modified: Wed, 16 Jul 2025 21:29:01 GMT\r\nddg-cache-status: HIT,MISS\r\netag: \"413c6925769f9621d3e3a1ffbf84a5be\"\r\nage: 9935\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":2421,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 192 x 192, 8-bit colormap, non-interlaced","md5":"8dcdd782ed3a9878a0ae7b4d5460eb4b","sha1":"09efc3e60cef11e74a7046e008f7d6e2d6517b05","sha256":"92d890fc3c12e7b55ac7120a963a75745e92fba031ceb97089793f229be94c10","sha512":"bad4d21e2b60a3ff19b3f7e866ade5173a4d2524eee35fd4e5e6f391ca993a5be3251b258ee6e4e0cdacd167df0ca4cc727278ce77f34806a7a587a17d31ca6b","ssdeep":"","tlshash":"4841f753c4e682ece49609f2703d1b0cb7812190e23a4ca2228150b27589d1fe1dabd1","first_seen":"2024-12-26T20:05:16.014882Z","last_seen":"2026-04-05T07:10:42.442248Z","times_seen":14,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-07-19","alert":"Sinkholed","trigger":"privnotell.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"privnotell.com/static/images/logos/privnotell.svg","fqdn":"privnotell.com","domain":"privnotell.com","tld":"com"},"ip":{"addr":"185.178.208.170","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"","requested_by":"https://privnotell.com/","date":"2025-07-19T14:27:45.027Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"privnotell.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Wed, 16 Jul 2025 20:37:26 GMT","end":"Tue, 14 Oct 2025 20:37:25 GMT"},"fingerprint":{"sha1":"D4:2C:9C:30:44:EF:50:DC:BD:D0:A2:79:0A:AA:B0:F8:1F:81:80:89","sha256":"C7:34:F3:94:C1:60:09:3F:E7:AE:BA:9E:EA:77:0B:CD:CA:34:08:26:62:A8:2A:72:CB:DE:B5:C4:51:04:00:D9"}}},"request":{"raw":"GET /static/images/logos/privnotell.svg HTTP/1.1\r\nHost: privnotell.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://privnotell.com/\r\nCookie: __ddg8_=k3Pnvn2EQ9N739L6; __ddg10_=1752935264; __ddg9_=91.90.42.154; __ddg1_=bP7ZH9ZvmRJD8UE8pI0Z\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=M1963JTHIiCJcKK0; Domain=.privnotell.com; Path=/; Expires=Sat, 19-Jul-2025 14:47:45 GMT\n__ddg10_=1752935265; Domain=.privnotell.com; Path=/; Expires=Sat, 19-Jul-2025 14:47:45 GMT\n__ddg9_=91.90.42.154; Domain=.privnotell.com; Path=/; Expires=Sat, 19-Jul-2025 14:47:45 GMT\r\ndate: Sat, 19 Jul 2025 10:34:17 GMT\r\ncontent-type: image/svg+xml\r\naccept-ranges: bytes\r\ncontent-length: 6928\r\nlast-modified: Wed, 16 Jul 2025 21:29:01 GMT\r\nddg-cache-status: HIT,HIT\r\netag: \"01c4cadc1e7feceea42c962cb4105fc3\"\r\nage: 14008\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":6928,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"38357f932582c8e86b93ed0d212821fa","sha1":"5d59f19e7c32d597940cd27f3be499fdb45eed6a","sha256":"e51c30bad2a27cd8a55d9168b2ccf649a6878f767f7cd8d9d646e7d417119c9e","sha512":"bf11b2e34cfdbafe611936108ade5dbb0bb21c5cffe8407b7c98347292d7927e5519cb08ae8d4bb8cfd2927725e1049b020116051674293c684bf89c15f30dd9","ssdeep":"96:q+fIxYPRmcLT/qqo3UEdSpjK33VN+pCMwHqfjgD6VRXBeMd5CtGjwrn:nIxiR1/2pdSpje3VNkCQLc6djdgtGjE","tlshash":"47e1df1b0304dbea6da941acad642c99b5d0d9c7e070f0d0bbab3413d54c4e8fa9c6f8","first_seen":"2025-06-03T08:24:56.040365Z","last_seen":"2026-04-05T07:10:42.432347Z","times_seen":7,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-07-19","alert":"Sinkholed","trigger":"privnotell.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"privnotell.com/static/images/privnotell-page-flip-30.png","fqdn":"privnotell.com","domain":"privnotell.com","tld":"com"},"ip":{"addr":"185.178.208.170","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"","requested_by":"https://privnotell.com/","date":"2025-07-19T14:27:45.118Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"privnotell.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Wed, 16 Jul 2025 20:37:26 GMT","end":"Tue, 14 Oct 2025 20:37:25 GMT"},"fingerprint":{"sha1":"D4:2C:9C:30:44:EF:50:DC:BD:D0:A2:79:0A:AA:B0:F8:1F:81:80:89","sha256":"C7:34:F3:94:C1:60:09:3F:E7:AE:BA:9E:EA:77:0B:CD:CA:34:08:26:62:A8:2A:72:CB:DE:B5:C4:51:04:00:D9"}}},"request":{"raw":"GET /static/images/privnotell-page-flip-30.png HTTP/1.1\r\nHost: privnotell.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://privnotell.com/static/css/ligthcbc6.css?ver=1714170657\r\nCookie: __ddg8_=BKf3OD2sDY4FmFud; __ddg10_=1752935265; __ddg9_=91.90.42.154; __ddg1_=bP7ZH9ZvmRJD8UE8pI0Z\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=fJEH6CiokTX9OEmM; Domain=.privnotell.com; Path=/; Expires=Sat, 19-Jul-2025 14:47:45 GMT\n__ddg10_=1752935265; Domain=.privnotell.com; Path=/; Expires=Sat, 19-Jul-2025 14:47:45 GMT\n__ddg9_=91.90.42.154; Domain=.privnotell.com; Path=/; Expires=Sat, 19-Jul-2025 14:47:45 GMT\r\ndate: Sat, 19 Jul 2025 10:34:17 GMT\r\ncontent-type: image/png\r\naccept-ranges: bytes\r\ncontent-length: 937\r\nlast-modified: Wed, 16 Jul 2025 21:29:01 GMT\r\nddg-cache-status: HIT,HIT\r\netag: \"0c194d6a0b76ee7100e13ba88a62e5ba\"\r\nage: 14008\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":937,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 30 x 30, 8-bit colormap, non-interlaced","md5":"37558f1dbf46dee91827eef599cb12af","sha1":"b70abf98e4aaf41c26f6496de6380a5462721d66","sha256":"651b06d79cee906b369232a1ab6e498971f3a22780f8aea3d06196766449a36c","sha512":"fbb29b151ed8ec735b324c11f7f3c0d696e530dc1009895d5b246a2def5c6fe3ed7dafcd0d72a24def224860bc5704689a6b67a7c9e105509511ab90b64f6bba","ssdeep":"","tlshash":"e41180d64ef62c55ff5715357355d405940f0f186ed3579d94b6dd6066380801483507","first_seen":"2025-06-03T08:24:56.048013Z","last_seen":"2026-04-05T07:10:42.435379Z","times_seen":12,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-07-19","alert":"Sinkholed","trigger":"privnotell.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/ccm/collect?tid=AW-762688665\u0026en=page_view\u0026dl=https%3A%2F%2Fprivnotell.com%2F\u0026scrsrc=www.googletagmanager.com\u0026frm=0\u0026rnd=716035341.1752935265\u0026dt=Privnote%20-%20Send%20notes%20that%20self-destruct%20after%20being%20read.\u0026auid=204503000.1752935265\u0026navt=n\u0026npa=1\u0026gtm=45be57g1za200\u0026gcd=13l3l3l2l1l1\u0026dma_cps=syphamo\u0026dma=1\u0026tag_exp=101509157~103116026~103200004~103233427~104684208~104684211\u0026tft=1752935265389\u0026tfd=1218\u0026apve=1\u0026apvf=f","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.74.68","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"","requested_by":"https://privnotell.com/","date":"2025-07-19T14:27:45.469Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Jun 2025 08:42:14 GMT","end":"Mon, 15 Sep 2025 08:42:13 GMT"},"fingerprint":{"sha1":"18:68:D7:A6:6E:58:DB:F0:4B:B6:53:AF:BA:2B:82:59:4F:36:D8:73","sha256":"C2:66:D2:BC:13:71:4F:72:4A:DE:85:BA:8D:BA:D1:40:C2:E6:CB:25:A3:25:62:EB:D9:17:BF:87:E7:EF:4D:67"}}},"request":{"raw":"POST /ccm/collect?tid=AW-762688665\u0026en=page_view\u0026dl=https%3A%2F%2Fprivnotell.com%2F\u0026scrsrc=www.googletagmanager.com\u0026frm=0\u0026rnd=716035341.1752935265\u0026dt=Privnote%20-%20Send%20notes%20that%20self-destruct%20after%20being%20read.\u0026auid=204503000.1752935265\u0026navt=n\u0026npa=1\u0026gtm=45be57g1za200\u0026gcd=13l3l3l2l1l1\u0026dma_cps=syphamo\u0026dma=1\u0026tag_exp=101509157~103116026~103200004~103233427~104684208~104684211\u0026tft=1752935265389\u0026tfd=1218\u0026apve=1\u0026apvf=f HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://privnotell.com/\r\nOrigin: https://privnotell.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 19 Jul 2025 14:27:45 GMT\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\ncache-control: no-cache, no-store, must-revalidate\r\ncontent-type: text/plain\r\npragma: no-cache\r\nvary: Origin, X-Origin, Referer\r\nserver: scaffolding on HTTPServer2\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: https://privnotell.com\r\naccess-control-expose-headers: date,vary,vary,vary,server,content-length\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T23:24:28.748346Z","times_seen":17434361,"resource_available":true,"data":null}},"time_used":348,"timings":{"blocked":152,"dns":52,"connect":21,"send":0,"wait":32,"receive":0,"ssl":87},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}