{"report_id":"3034f4c5-1e0d-410f-90e2-b016602b7e0d","version":0,"status":"done","tags":[],"date":"2026-07-12T20:52:56Z","url":{"schema":"https","addr":"processguid.info/XBRQsvfv?utm_campaign={{campaign.name}}\u0026utm_source={{site_source_name}}\u0026utm_placement={{placement}}\u0026campaign_id={{campaign.id}}\u0026adset_id={{adset.id}}\u0026ad_id={{ad.id}}\u0026adset_name={{adset.name}}\u0026pixel=2533575263762967\u0026ad_name={{ad.name}}\u0026campaign_name={{campaign.name","fqdn":"processguid.info","domain":"processguid.info","tld":"info"},"ip":{"addr":"104.21.43.71","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"processguid.info/XBRQsvfv?utm_campaign={{campaign.name}}\u0026utm_source={{site_source_name}}\u0026utm_placement={{placement}}\u0026campaign_id={{campaign.id}}\u0026adset_id={{adset.id}}\u0026ad_id={{ad.id}}\u0026adset_name={{adset.name}}\u0026pixel=2533575263762967\u0026ad_name={{ad.name}}\u0026campaign_name={{campaign.name","fqdn":"processguid.info","domain":"processguid.info","tld":"info"},"title":"European Consumer Helpdesk | Европейский центр поддержки потребителей","dom":{"size":74325,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (13279)","md5":"8a6b24d64a0f1cd7f14dd958f5599de5","sha1":"8382acfdf7ca06bcc508c72938b13adc6cb1cdc9","sha256":"9e54d4d9249515d3e9e05b0d8b061438d8f365a092a616996072ae9de601b956","sha512":"61637a6db87d24ccf8ceb10635f43706532b5230e7a9686a82774b0bea1a80faea49e58623d171727d38df852a2fe34110e65207f5c9ef65443250d48095ca1e","ssdeep":"768:CF+mPThnr3R9aDW5xq1oTOxh1HibrZXdc1V8LT:AThmW5o1oTO/1HibrVy1Ve","tlshash":"2773b83861e2087f1443c0b1e6a2bf1a7c68d277ea5795c072ec56e92fd3d3285276d8","dom_hash":"domhash7c15c0fdba99a6b8b8af60b79bd57c1a","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"processguid.info/XBRQsvfv?utm_campaign={{campaign.name}}\u0026utm_source={{site_source_name}}\u0026utm_placement={{placement}}\u0026campaign_id={{campaign.id}}\u0026adset_id={{adset.id}}\u0026ad_id={{ad.id}}\u0026adset_name={{adset.name}}\u0026pixel=2533575263762967\u0026ad_name={{ad.name}}\u0026campaign_name={{campaign.name","fqdn":"processguid.info","domain":"processguid.info","tld":"info"},"ip":{"addr":"104.21.43.71","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-08-16T20:52:56Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"processguid.info","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"processguid.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"processguid.info","ip":{"addr":"172.67.222.56","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-07-10T08:14:02.289836Z","last_seen":"2026-07-10T08:14:02.289836Z","alert_count":36,"request_count":18,"received_data":1346348,"sent_data":9987,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]},{"name":"PHP:7.4.33","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Tailwind CSS","description":"Tailwind is a utility-first CSS framework.","website":"https://tailwindcss.com/","common_platform_enumeration":"","icon":"tailwindcss.svg","categories":["UI frameworks"]}]},{"fqdn":"cdn.jsdelivr.net","ip":{"addr":"151.101.65.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2012-05-16","domain_rank":1678,"first_seen":"2012-09-30T00:15:09Z","last_seen":"2026-07-05T22:48:05.057169Z","alert_count":0,"request_count":3,"received_data":311970,"sent_data":1414,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"cdn.tailwindcss.com","ip":{"addr":"104.26.3.143","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2017-07-20","domain_rank":117330,"first_seen":"2018-07-09T05:46:13Z","last_seen":"2026-07-06T08:13:00.320972Z","alert_count":0,"request_count":2,"received_data":408709,"sent_data":866,"comment":"","tags":null,"fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"processguid.info/lander/helpdesk_ru_eu_1783418410/js/mc-lead-form-crm.js?v=2","fqdn":"processguid.info","domain":"processguid.info","tld":"info"},"ip":{"addr":"172.67.222.56","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ac4f0db0210c1a01c433cd7aa746a4e0","sha1":"51addbad64786e6fcad905f046e5d918b9525fea","sha256":"61516d3c3412c5b1c7eb5a462b6d5d6ab4c98d50c6926b46322a38233173ba02","sha512":"ad6e7b9c45348f5ee2a3d4ca442bc846aa1010fee0b1f17053db32393300ab490dbe6ad6c89ce038c107c32c2c61e188286e9a183da5d16ffaa4eb61710a5273","ssdeep":"384:gBmKjsWLNjL8SXXabCVI3Wdm47g9myrU4yrI5N8NiIiZTgZJccd5NDRf:gBxqbC6Wd97gwkWivZTqbR1","tlshash":"399284c979eb20611473703a8bef6605b17b913b154cce413d6c86603fa4a7a43f6be8","size":20085,"data":"","first_seen":"2026-07-12T20:52:59.869864Z","last_seen":"2026-07-12T20:52:59.869864Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"processguid.info/lander/helpdesk_ru_eu_1783418410/js/mc-intl-phone.js?v=1","fqdn":"processguid.info","domain":"processguid.info","tld":"info"},"ip":{"addr":"172.67.222.56","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"fce19f37669e26134928b1c5b0bc8a6a","sha1":"2540900e456a03b2e647749abe1d4060e30bd7cb","sha256":"fcae1bec2dc05e90416b0ecf6d612dcf49ab924d05e7f8aa979f8f23b37d88bd","sha512":"35715438f508df03053ca45e898dbfa09d7e117136525e686cf4c0f8aa41bc8c057fc15ecd94a19f1b09b4de9d6bf4a053726c154eea9b2a8b6f2788eb27f933","ssdeep":"192:nYJHAlyNb73YmldC4Kq9/Yxi2dP3XaypaZaA5WQV4ky3rz3gqFk6pVq7:nYJ73E4L9A9dPnaW3E","tlshash":"5532c52f59e300765623d07bafaf6004792b80bb6a56de213d5ca7682f90121937dfcc","size":11203,"data":"","first_seen":"2026-07-12T20:52:59.890302Z","last_seen":"2026-07-12T20:52:59.890302Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.tailwindcss.com/","fqdn":"cdn.tailwindcss.com","domain":"tailwindcss.com","tld":"com"},"ip":{"addr":"104.26.3.143","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"7a614b9a197e532c00d09a23b0996b5f","sha1":"1ff1738a40f3716e30e9031b181b0955ae578955","sha256":"176e894661aa9cdc9a5cba6c720044cbbf7b8bd80d1c9a142a7c24b1b6c50d15","sha512":"a67bc26f52d938358471be5671ff4b79e11af4e68b486aaf73a35a4c9bf3777aab51101af81563b4e5b7ba4b04dd8971fcfa9ee2c41fb10a0c1ee5604a99abd6","ssdeep":"12288:fpgrZxSAoNbJb0Wie75aUXGuyQZhK4O0s:RCVoNB0Wie75aUWmnO0s","tlshash":"e8844aa57396702647eb51e850ea1042f2beaa38840c44bcf7edd4da39e5e4440fbf79","size":407279,"data":"","first_seen":"2025-07-28T16:58:08.903462Z","last_seen":"2026-07-18T04:53:45.680752Z","times_seen":44722,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"processguid.info/lander/helpdesk_ru_eu_1783418410/quiz.js?v=4","fqdn":"processguid.info","domain":"processguid.info","tld":"info"},"ip":{"addr":"172.67.222.56","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"b04d4ff68548ac660265b6cef795e2f9","sha1":"392f97ea72d18297d1174df5a39ffe730247c29e","sha256":"69db61a767ea706731107af54a52372de9548288e040b12b18fcfbf9914daafd","sha512":"9578a6a38bd717f072c4e2a99a7e8684d0b30ea68d32c833f917cf582189436724c764d9408801116b5e33d9cf68ceeeb56098b9aa3577064fde1d239da2c257","ssdeep":"96:viRFZ+0Ugw4FFFWJuDjzbTW96VryL6WDoTR339+Zsa1XPAQ+:6A0U77sDWgiQTJ39+Zsa1/C","tlshash":"d3c1f2986160043a8cbb7776979b84d9fe7704277501424dfc9e85882ff286c873afda","size":5812,"data":"","first_seen":"2026-07-12T20:52:59.876536Z","last_seen":"2026-07-12T20:52:59.876536Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"processguid.info/lander/helpdesk_ru_eu_1783418410/script.js","fqdn":"processguid.info","domain":"processguid.info","tld":"info"},"ip":{"addr":"172.67.222.56","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"47d2308a7e7d92443d3863d67794bf80","sha1":"00de4ce9a4496bdef11cf8fbb427494da0242a5e","sha256":"6e617c91bdbb4513eebce8b91e7be704fe62f066d7de5b4ec8a566ee253230ee","sha512":"588c26fcdbb239fc5aa61cc761f1bfa57443a179d28ad9c8317bb910c41006c0db0dd672bc01d2461987c488d47e1e7aa5009e42b550f8fd24eb964441029d35","ssdeep":"","tlshash":"7931cf5a64f5243605fb7aa7a38b968837305043b4449a063a6ccf441f62ab059f3fc9","size":1629,"data":"","first_seen":"2026-07-12T20:52:59.877472Z","last_seen":"2026-07-12T20:52:59.877472Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/intl-tel-input@22.0.2/build/js/intlTelInput.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.65.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"dc0cad37098f6ac39afbdb44c9c98dac","sha1":"3af4ea1640f9db1b81f011cae9bf607b9d371dbc","sha256":"12f210fc0d4432bb84356f01f2c521a69ecec7e2ba21ec6c5397e0d867728db7","sha512":"b1bc0e9b6b1dedbe169eed321c62809d89e649d27a4a26f56473f2ca0dc84e5c486f2a1c71c82a0972c726312424b5e7fa67dd7b35869f629674673518857ae2","ssdeep":"768:IY03Xlqn/kiIzOT9FSRo/6mCIQkjMdt24vD8Z:ItiIzU/6YjMdy","tlshash":"f3d2e7ae63655b37a6fcc2a270e54503ae6f79444a44083d7cacdece0288ed271f5b34","size":29520,"data":"","first_seen":"2025-03-11T00:47:09.445985Z","last_seen":"2026-07-17T14:39:11.608913Z","times_seen":78,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/intl-tel-input@22.0.2/build/js/utils.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.65.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"f19a2920e62e963c46cc986e1506a3fb","sha1":"7ef4ee15f2fce755f54c7e0da228a6474ba06dfc","sha256":"51ed384347b65b8cfd79b2be937d418697df6876215c1a2da4f2951b8754e258","sha512":"70bbba1ab4032029452b2cc6d30d3aeb0ee31eb9d60fe2802e76f536c6acc623f91860e29698f1ebc3fb788d982fd22cfb6f1bf1b44233c248058bf4d02a0740","ssdeep":"3072:PklM0F8CAJjFs3OwPss3MwPPmdV9T2xFM8Mpmxs5DyBpUsR56kmLNTg/QKWVRpFK:PklMpjBf0xFM8Mpm0/ZI","tlshash":"2544f1ebd63c9737a1e97b35968eb3cd5a8cbca3c848567826c3b54f52784e0706c205","size":259722,"data":"","first_seen":"2024-07-05T20:20:38Z","last_seen":"2026-07-16T08:45:27.558715Z","times_seen":43,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":[{"level":"warn","text":"cdn.tailwindcss.com should not be used in production. To use Tailwind CSS in production, install it as a PostCSS plugin or use the Tailwind CLI: https://tailwindcss.com/docs/installation","filename":"https://cdn.tailwindcss.com/","line_number":64,"column_number":1711}]},"http":[{"url":{"schema":"https","addr":"processguid.info/lander/helpdesk_ru_eu_1783418410/images/graphgrowth.png","fqdn":"processguid.info","domain":"processguid.info","tld":"info"},"ip":{"addr":"172.67.222.56","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://processguid.info/XBRQsvfv?utm_campaign={{campaign.name}}\u0026utm_source={{site_source_name}}\u0026utm_placement={{placement}}\u0026campaign_id={{campaign.id}}\u0026adset_id={{adset.id}}\u0026ad_id={{ad.id}}\u0026adset_name={{adset.name}}\u0026pixel=2533575263762967\u0026ad_name={{ad.name}}\u0026campaign_name={{campaign.name","date":"2026-07-12T20:52:28.001Z","timestamp":1783889548001,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"processguid.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Jun 2026 11:42:12 GMT","end":"Sun, 06 Sep 2026 12:39:54 GMT"},"fingerprint":{"sha1":"A4:15:CD:80:79:A2:C6:1A:44:1B:E5:19:3F:C8:50:16:4B:40:F1:92","sha256":"7F:22:86:57:93:43:24:75:43:26:F1:D4:96:D6:AB:50:00:60:B9:D3:88:D3:0E:7F:C6:94:A8:B7:CD:1C:1C:40"}}},"request":{"raw":"GET /lander/helpdesk_ru_eu_1783418410/images/graphgrowth.png HTTP/1.1\r\nHost: processguid.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=7bf2hv2i6j9nb9360em565usag\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 20:52:28 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 07 Jul 2026 10:08:25 GMT\r\npriority: u=5,i\r\netag: \"6a4cd019-1267f\"\r\nexpires: Wed, 22 Jul 2026 20:52:28 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cRS8jy6bwuSnUqbNe7Hb62h1QPstliEkxtS%2FzAGtk2eohJaLWlw9%2FDXiE99T%2FdtlwVO5swymF0EVp8zpsJtftTQfigKBAVrm80diwirHUUzPsTh8nS92LU4BGOVzBP1ephks\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1a2ee8b0dbfb509-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 75391\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":75391,"size_decoded":76152,"mime_type":"image/png","magic":"PNG image data, 476 x 452, 8-bit/color RGBA, non-interlaced","md5":"bd36efa38c086f770bef94f6129f7bd0","sha1":"1e8fe5cd47260580b2c745d67022f2737e807410","sha256":"75a45264ea5e2ba064cb5a6254516f38dee398857b3af5a0cac03aabd46303d4","sha512":"49d4bc770e5e1d524e1a4614dd4bd008ea346cd455b4c394b39f86611c4f8eaf1c1d84c487b78f181e70d8dfafea1c751d4299fcb694b59b3e15b2e6a0dfc12b","ssdeep":"1536:to8x8ypGiUG+YRutFNycY9sb5US/VT9Pakmv+Y62lK9BEIznhaX4rl73Tepqj:zxOig+uNyc5GqvPhz2lKrEIzhaXsZTIU","tlshash":"2b73f12dcc36df924a43c8203de7dd5aa5ee3abc868158c2f45e4b3b6048179727e395","first_seen":"2026-07-12T20:52:59.863287Z","last_seen":"2026-07-12T20:52:59.863287Z","times_seen":1,"resource_available":false,"data":null}},"time_used":215,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":182,"receive":33,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"processguid.info","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"processguid.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/intl-tel-input@22.0.2/build/css/intlTelInput.css","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.65.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://processguid.info/XBRQsvfv?utm_campaign={{campaign.name}}\u0026utm_source={{site_source_name}}\u0026utm_placement={{placement}}\u0026campaign_id={{campaign.id}}\u0026adset_id={{adset.id}}\u0026ad_id={{ad.id}}\u0026adset_name={{adset.name}}\u0026pixel=2533575263762967\u0026ad_name={{ad.name}}\u0026campaign_name={{campaign.name","date":"2026-07-12T20:52:27.961Z","timestamp":1783889547961,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2026 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 20 May 2026 15:48:47 GMT","end":"Sat, 05 Dec 2026 14:48:47 GMT"},"fingerprint":{"sha1":"D4:05:C2:EC:C7:EE:2B:D0:08:68:0D:3D:33:77:48:78:43:E7:D1:E1","sha256":"ED:84:90:EE:71:BC:6B:5E:B3:D2:50:B0:23:3A:06:0D:E0:50:C6:B6:A9:09:36:E6:CE:FE:E8:66:89:EB:4E:C5"}}},"request":{"raw":"GET /npm/intl-tel-input@22.0.2/build/css/intlTelInput.css HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: text/css; charset=utf-8\r\nx-jsd-version: 22.0.2\r\nx-jsd-version-type: version\r\netag: W/\"4f9c-YW++h4sxifKlsVyMHgLARnQAuWE\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\nage: 967190\r\ndate: Sun, 12 Jul 2026 20:52:28 GMT\r\nx-served-by: cache-fra-etou8220059-FRA, cache-bma-essb1270044-BMA\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 3384\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":20380,"size_decoded":4163,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (830)","md5":"b46140e6a10359c79822e7b801f0391b","sha1":"616fbe878b3189f2a5b15c8c1e02c0467400b961","sha256":"def1a0f6d2bd2a01f1f842475b7e7da7f2596f2783fd8872c37624ae406425af","sha512":"3a44a85b26a849c8d784e9bced73b9843cf51396eebe6d9a024abee73266698a72940d0e289e67a39a9ce1946b980a686971205dcde7d22c954b5ab91608898e","ssdeep":"192:WTxfNDsX5uVsAPkkk8ii/yE9y6czvZzorr8/zJHVyT1bK0VN12o7tHPVEVtVaVb2:IVsXk1kdCqE9y6mporr8LJj0H12o7U5","tlshash":"c5929e2346b00d3e965dc1fa38a2c1b5773f0c8a35eecc96eed9504a5887b90e5ebc54","first_seen":"2024-06-08T15:25:15Z","last_seen":"2026-07-18T04:44:58.921716Z","times_seen":1100,"resource_available":false,"data":null}},"time_used":45,"timings":{"blocked":-1,"dns":3,"connect":9,"send":0,"wait":13,"receive":0,"ssl":20},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/intl-tel-input@22.0.2/build/js/intlTelInput.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.65.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://processguid.info/XBRQsvfv?utm_campaign={{campaign.name}}\u0026utm_source={{site_source_name}}\u0026utm_placement={{placement}}\u0026campaign_id={{campaign.id}}\u0026adset_id={{adset.id}}\u0026ad_id={{ad.id}}\u0026adset_name={{adset.name}}\u0026pixel=2533575263762967\u0026ad_name={{ad.name}}\u0026campaign_name={{campaign.name","date":"2026-07-12T20:52:27.976Z","timestamp":1783889547976,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2026 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 20 May 2026 15:48:47 GMT","end":"Sat, 05 Dec 2026 14:48:47 GMT"},"fingerprint":{"sha1":"D4:05:C2:EC:C7:EE:2B:D0:08:68:0D:3D:33:77:48:78:43:E7:D1:E1","sha256":"ED:84:90:EE:71:BC:6B:5E:B3:D2:50:B0:23:3A:06:0D:E0:50:C6:B6:A9:09:36:E6:CE:FE:E8:66:89:EB:4E:C5"}}},"request":{"raw":"GET /npm/intl-tel-input@22.0.2/build/js/intlTelInput.min.js HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: application/javascript; charset=utf-8\r\nx-jsd-version: 22.0.2\r\nx-jsd-version-type: version\r\netag: W/\"7350-OvTqFkD52xuB8BHK6b9ge503Hbw\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\nage: 976503\r\ndate: Sun, 12 Jul 2026 20:52:28 GMT\r\nx-served-by: cache-fra-etou8220044-FRA, cache-bma-essb1270044-BMA\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 11310\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":29520,"size_decoded":12104,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (29164)","md5":"dc0cad37098f6ac39afbdb44c9c98dac","sha1":"3af4ea1640f9db1b81f011cae9bf607b9d371dbc","sha256":"12f210fc0d4432bb84356f01f2c521a69ecec7e2ba21ec6c5397e0d867728db7","sha512":"b1bc0e9b6b1dedbe169eed321c62809d89e649d27a4a26f56473f2ca0dc84e5c486f2a1c71c82a0972c726312424b5e7fa67dd7b35869f629674673518857ae2","ssdeep":"768:IY03Xlqn/kiIzOT9FSRo/6mCIQkjMdt24vD8Z:ItiIzU/6YjMdy","tlshash":"f3d2e7ae63655b37a6fcc2a270e54503ae6f79444a44083d7cacdece0288ed271f5b34","first_seen":"2025-03-11T00:47:09.445985Z","last_seen":"2026-07-17T14:39:11.608913Z","times_seen":78,"resource_available":true,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":1,"connect":9,"send":0,"wait":10,"receive":1,"ssl":15},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"processguid.info/lander/helpdesk_ru_eu_1783418410/css/lead-form.css?v=3","fqdn":"processguid.info","domain":"processguid.info","tld":"info"},"ip":{"addr":"172.67.222.56","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://processguid.info/XBRQsvfv?utm_campaign={{campaign.name}}\u0026utm_source={{site_source_name}}\u0026utm_placement={{placement}}\u0026campaign_id={{campaign.id}}\u0026adset_id={{adset.id}}\u0026ad_id={{ad.id}}\u0026adset_name={{adset.name}}\u0026pixel=2533575263762967\u0026ad_name={{ad.name}}\u0026campaign_name={{campaign.name","date":"2026-07-12T20:52:27.979Z","timestamp":1783889547979,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"processguid.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Jun 2026 11:42:12 GMT","end":"Sun, 06 Sep 2026 12:39:54 GMT"},"fingerprint":{"sha1":"A4:15:CD:80:79:A2:C6:1A:44:1B:E5:19:3F:C8:50:16:4B:40:F1:92","sha256":"7F:22:86:57:93:43:24:75:43:26:F1:D4:96:D6:AB:50:00:60:B9:D3:88:D3:0E:7F:C6:94:A8:B7:CD:1C:1C:40"}}},"request":{"raw":"GET /lander/helpdesk_ru_eu_1783418410/css/lead-form.css?v=3 HTTP/1.1\r\nHost: processguid.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=7bf2hv2i6j9nb9360em565usag\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 20:52:28 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 07 Jul 2026 13:08:47 GMT\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\netag: W/\"6a4cfa5f-19d2\"\r\nexpires: Wed, 22 Jul 2026 20:52:28 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0W3OKA854n9LwfNY2ddRCkzIxlrxsghVtJ6pLUSYakRv5f60%2B9LO5ZUEyrzTM4RSRupXzihNG%2BKwp6UXmXI5bdki1u668khJ6ZI3rT8Xkf64F%2FwlSS4zwK7I6UxfkLUKbJiu\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1a2ee8aedb4b509-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6610,"size_decoded":2282,"mime_type":"text/css","magic":"Unicode text, UTF-8 text","md5":"76588b7da3695e6acaca6c5c906aa048","sha1":"4c3159e59bda2b7cc36858d819551646f0fdbeb7","sha256":"9f7055ce04dc181ef5e1a37d5a07cfd137f30f1d69020ffcaa59cdc061265d75","sha512":"00c54412becc46eac09f3e0a46693acbe1c0e55bab67fe8af5cd076e3bb6a3f85eb64239bfce7daf9add1985f742d5b27c772d42f82122ba57d18cb555137321","ssdeep":"96:y5dEQd1BDZ4hl7NeRGz2uZQ2F9wgQOCHK1:yvVTd4L7NR2uZQ2F9wgQOCHc","tlshash":"18d1f502edd31444b85a45bc179b77fe3e3da05243468d757b80b7b89f4b3a38291b88","first_seen":"2026-07-12T20:52:59.865985Z","last_seen":"2026-07-12T20:52:59.865985Z","times_seen":1,"resource_available":false,"data":null}},"time_used":204,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":204,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"processguid.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"processguid.info","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"processguid.info/lander/helpdesk_ru_eu_1783418410/images/diplomat.png","fqdn":"processguid.info","domain":"processguid.info","tld":"info"},"ip":{"addr":"172.67.222.56","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://processguid.info/XBRQsvfv?utm_campaign={{campaign.name}}\u0026utm_source={{site_source_name}}\u0026utm_placement={{placement}}\u0026campaign_id={{campaign.id}}\u0026adset_id={{adset.id}}\u0026ad_id={{ad.id}}\u0026adset_name={{adset.name}}\u0026pixel=2533575263762967\u0026ad_name={{ad.name}}\u0026campaign_name={{campaign.name","date":"2026-07-12T20:52:27.989Z","timestamp":1783889547989,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"processguid.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Jun 2026 11:42:12 GMT","end":"Sun, 06 Sep 2026 12:39:54 GMT"},"fingerprint":{"sha1":"A4:15:CD:80:79:A2:C6:1A:44:1B:E5:19:3F:C8:50:16:4B:40:F1:92","sha256":"7F:22:86:57:93:43:24:75:43:26:F1:D4:96:D6:AB:50:00:60:B9:D3:88:D3:0E:7F:C6:94:A8:B7:CD:1C:1C:40"}}},"request":{"raw":"GET /lander/helpdesk_ru_eu_1783418410/images/diplomat.png HTTP/1.1\r\nHost: processguid.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=7bf2hv2i6j9nb9360em565usag\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 20:52:28 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 07 Jul 2026 10:08:25 GMT\r\npriority: u=5,i\r\netag: \"6a4cd019-20170\"\r\nexpires: Wed, 22 Jul 2026 20:52:28 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6G9d9rf8k44FbUW8jD4%2FPifJJpH1koHXicuuIcaKIU1eVoJM1RXEzkf42DfReF%2FF2qW4wfVtFaJBhGRhIRl0BY4rxBux2l21Hj%2B6wcCw0fntCFMMrG0B8%2Fs9sLLadVrR0jsB\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1a2ee8aedb8b509-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 131440\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":131440,"size_decoded":132204,"mime_type":"image/png","magic":"PNG image data, 476 x 452, 8-bit/color RGBA, non-interlaced","md5":"8aa11f7ba04d6839f83ccda226198a53","sha1":"052e6ab1221b943e76c7da2c4cb133c68f83f556","sha256":"44657f39fdc3dea97e68d0d10b026129c617e6e12e187b4fd8538fcdaac8688a","sha512":"65e1e8b8216e96c451311d5d03a84918acc1dac3a2198361b4fe90391348f323c1ac1d6557676b3de66b62919dfee59e8147aa7222a2f6cc642c534e19bd2d20","ssdeep":"3072:YvZDiHu0RGq8oo+Jse6zDuhxErzJH/Vz5hmXzz1H79ZyK:YCo+JspDUER554sK","tlshash":"fdd312cb15737b420173b08240cde41abf7622abd8aee8d7c6c153b1d9d0ea6997e161","first_seen":"2026-07-12T20:52:59.867015Z","last_seen":"2026-07-12T20:52:59.867015Z","times_seen":1,"resource_available":false,"data":null}},"time_used":244,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":180,"receive":64,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"processguid.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"processguid.info","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"processguid.info/lander/helpdesk_ru_eu_1783418410/images/lupa.png","fqdn":"processguid.info","domain":"processguid.info","tld":"info"},"ip":{"addr":"172.67.222.56","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://processguid.info/XBRQsvfv?utm_campaign={{campaign.name}}\u0026utm_source={{site_source_name}}\u0026utm_placement={{placement}}\u0026campaign_id={{campaign.id}}\u0026adset_id={{adset.id}}\u0026ad_id={{ad.id}}\u0026adset_name={{adset.name}}\u0026pixel=2533575263762967\u0026ad_name={{ad.name}}\u0026campaign_name={{campaign.name","date":"2026-07-12T20:52:27.992Z","timestamp":1783889547992,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"processguid.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Jun 2026 11:42:12 GMT","end":"Sun, 06 Sep 2026 12:39:54 GMT"},"fingerprint":{"sha1":"A4:15:CD:80:79:A2:C6:1A:44:1B:E5:19:3F:C8:50:16:4B:40:F1:92","sha256":"7F:22:86:57:93:43:24:75:43:26:F1:D4:96:D6:AB:50:00:60:B9:D3:88:D3:0E:7F:C6:94:A8:B7:CD:1C:1C:40"}}},"request":{"raw":"GET /lander/helpdesk_ru_eu_1783418410/images/lupa.png HTTP/1.1\r\nHost: processguid.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=7bf2hv2i6j9nb9360em565usag\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 20:52:28 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 07 Jul 2026 10:08:25 GMT\r\npriority: u=5,i\r\netag: \"6a4cd019-1afb4\"\r\nexpires: Wed, 22 Jul 2026 20:52:28 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=imsIxQwo3TZD78pbDSysJbtsfAd6qzV71hnTk2EjviS%2F0WrCqbDc0hOAE32lVEFYEsWXuq6anGjBn3bYytR%2F25L9%2FaUr%2BsPABmZugHHxBu%2Fsbzn3lQucyXG6%2FGw7LtCTLmJQ\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1a2ee8afdb9b509-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 110516\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":110516,"size_decoded":111284,"mime_type":"image/png","magic":"PNG image data, 476 x 452, 8-bit/color RGBA, non-interlaced","md5":"849b683d44b7c19749307c0bd1f2e45c","sha1":"29a3fac3deb52c1f3c619660f3b18368d4c5c779","sha256":"2c16e9a6359ad97fc020ac2f0876bfff276767511832e9230aa9eb5dc4cd9576","sha512":"f7c0ee80455f7ea182fa4fa9f7b2b7bbcf5ed34b4412c29b81749ade281e86627e8468b116838949cc9bc4ff7bbf94c7201ee4375e829b6e72a183da4207cc6b","ssdeep":"3072:qjtJRpP53bK52DYKph4yaZKQe4pAD2fSSmQiM+:8RK5gDpwoQe4pc2bhX+","tlshash":"93b312fdfeddef8812c10f31a1ac57db81ce5d42d1ae18e110a69d794800da9f5a238b","first_seen":"2026-07-12T20:52:59.868119Z","last_seen":"2026-07-12T20:52:59.868119Z","times_seen":1,"resource_available":false,"data":null}},"time_used":207,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":153,"receive":54,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"processguid.info","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"processguid.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.tailwindcss.com/","fqdn":"cdn.tailwindcss.com","domain":"tailwindcss.com","tld":"com"},"ip":{"addr":"104.26.3.143","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://processguid.info/XBRQsvfv?utm_campaign={{campaign.name}}\u0026utm_source={{site_source_name}}\u0026utm_placement={{placement}}\u0026campaign_id={{campaign.id}}\u0026adset_id={{adset.id}}\u0026ad_id={{ad.id}}\u0026adset_name={{adset.name}}\u0026pixel=2533575263762967\u0026ad_name={{ad.name}}\u0026campaign_name={{campaign.name","date":"2026-07-12T20:52:27.960Z","timestamp":1783889547960,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tailwindcss.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 19 May 2026 14:31:45 GMT","end":"Mon, 17 Aug 2026 15:31:39 GMT"},"fingerprint":{"sha1":"B6:67:6F:5A:BE:B9:2A:B2:16:10:49:96:1E:1F:99:2B:44:AF:EA:A6","sha256":"63:A9:BF:FB:46:E0:B8:37:95:77:F3:63:84:AE:78:22:46:11:85:5E:DF:87:F6:4B:EF:F2:2E:24:D5:74:70:39"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: cdn.tailwindcss.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 \r\ndate: Sun, 12 Jul 2026 20:52:27 GMT\r\ncache-control: max-age=14400\r\nlocation: /3.4.17\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: MISS\r\nx-vercel-id: fra1::iad1::m8dq8-1783888649719-8fcd3033390b\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 898\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Q3y9QgZwZKPkJvSIIRXvwAPYndfEMMP8MFVtvDqPpp3KHTHdHdmh1O5XgpaTUecspMleqaoqrqbGJuhr537SDq7oVMy%2FN894JyzqYros%2BwO%2FdilaW8J2QKWY85QtGS6s%2F8GFd4g%3D\"}]}\r\ncf-ray: a1a2ee8aeac856ca-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/javascript","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-18T04:39:01.448577Z","times_seen":17329118,"resource_available":true,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":4,"connect":3,"send":0,"wait":9,"receive":0,"ssl":17},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"processguid.info/lander/helpdesk_ru_eu_1783418410/js/mc-lead-form-crm.js?v=2","fqdn":"processguid.info","domain":"processguid.info","tld":"info"},"ip":{"addr":"172.67.222.56","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://processguid.info/XBRQsvfv?utm_campaign={{campaign.name}}\u0026utm_source={{site_source_name}}\u0026utm_placement={{placement}}\u0026campaign_id={{campaign.id}}\u0026adset_id={{adset.id}}\u0026ad_id={{ad.id}}\u0026adset_name={{adset.name}}\u0026pixel=2533575263762967\u0026ad_name={{ad.name}}\u0026campaign_name={{campaign.name","date":"2026-07-12T20:52:27.974Z","timestamp":1783889547974,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"processguid.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Jun 2026 11:42:12 GMT","end":"Sun, 06 Sep 2026 12:39:54 GMT"},"fingerprint":{"sha1":"A4:15:CD:80:79:A2:C6:1A:44:1B:E5:19:3F:C8:50:16:4B:40:F1:92","sha256":"7F:22:86:57:93:43:24:75:43:26:F1:D4:96:D6:AB:50:00:60:B9:D3:88:D3:0E:7F:C6:94:A8:B7:CD:1C:1C:40"}}},"request":{"raw":"GET /lander/helpdesk_ru_eu_1783418410/js/mc-lead-form-crm.js?v=2 HTTP/1.1\r\nHost: processguid.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=7bf2hv2i6j9nb9360em565usag\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 20:52:28 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 07 Jul 2026 13:06:00 GMT\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\netag: W/\"6a4cf9b8-4e82\"\r\nexpires: Wed, 22 Jul 2026 20:52:28 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oL6PnsllhacQwO8FWfV0CXPQ5q0WleRD2duxmWkbmgSri%2Br%2BOTNnhIad5NzuE5w2fDP2u50u2jfXLJHnTj2ipwR%2FT8caFXf8GimBdSTHm326nNeA2FHpYQwFQrwzGL2HKvA3\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1a2ee8aedb3b509-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":20098,"size_decoded":6306,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"ac4f0db0210c1a01c433cd7aa746a4e0","sha1":"51addbad64786e6fcad905f046e5d918b9525fea","sha256":"61516d3c3412c5b1c7eb5a462b6d5d6ab4c98d50c6926b46322a38233173ba02","sha512":"ad6e7b9c45348f5ee2a3d4ca442bc846aa1010fee0b1f17053db32393300ab490dbe6ad6c89ce038c107c32c2c61e188286e9a183da5d16ffaa4eb61710a5273","ssdeep":"384:gBmKjsWLNjL8SXXabCVI3Wdm47g9myrU4yrI5N8NiIiZTgZJccd5NDRf:gBxqbC6Wd97gwkWivZTqbR1","tlshash":"399284c979eb20611473703a8bef6605b17b913b154cce413d6c86603fa4a7a43f6be8","first_seen":"2026-07-12T20:52:59.869864Z","last_seen":"2026-07-12T20:52:59.869864Z","times_seen":1,"resource_available":true,"data":null}},"time_used":158,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":157,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"processguid.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"processguid.info","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"processguid.info/lander/helpdesk_ru_eu_1783418410/images/payment.png","fqdn":"processguid.info","domain":"processguid.info","tld":"info"},"ip":{"addr":"172.67.222.56","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://processguid.info/XBRQsvfv?utm_campaign={{campaign.name}}\u0026utm_source={{site_source_name}}\u0026utm_placement={{placement}}\u0026campaign_id={{campaign.id}}\u0026adset_id={{adset.id}}\u0026ad_id={{ad.id}}\u0026adset_name={{adset.name}}\u0026pixel=2533575263762967\u0026ad_name={{ad.name}}\u0026campaign_name={{campaign.name","date":"2026-07-12T20:52:27.994Z","timestamp":1783889547994,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"processguid.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Jun 2026 11:42:12 GMT","end":"Sun, 06 Sep 2026 12:39:54 GMT"},"fingerprint":{"sha1":"A4:15:CD:80:79:A2:C6:1A:44:1B:E5:19:3F:C8:50:16:4B:40:F1:92","sha256":"7F:22:86:57:93:43:24:75:43:26:F1:D4:96:D6:AB:50:00:60:B9:D3:88:D3:0E:7F:C6:94:A8:B7:CD:1C:1C:40"}}},"request":{"raw":"GET /lander/helpdesk_ru_eu_1783418410/images/payment.png HTTP/1.1\r\nHost: processguid.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=7bf2hv2i6j9nb9360em565usag\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 20:52:28 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 07 Jul 2026 10:08:25 GMT\r\npriority: u=5,i\r\netag: \"6a4cd019-1dbcd\"\r\nexpires: Wed, 22 Jul 2026 20:52:28 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sSBdCArrMapY1%2BEUH4l0pdk2uaoVgF%2BDYfmmSkZv9xNvJOWlHOknLtfzcOVX0cgLWP9%2FX99BhAEX1s0JdWQzk01Ef8rf1hRxfJFtr840dTo8Z1Sk0C9WfT4r3n54Ppa0pIIL\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1a2ee8afdbab509-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 121805\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":121805,"size_decoded":122567,"mime_type":"image/png","magic":"PNG image data, 476 x 452, 8-bit/color RGBA, non-interlaced","md5":"f476f9054935e14d502feedaf7979707","sha1":"9ee3b4503e4aa4cf6456b3c70f5dedb68efd776a","sha256":"3829893a673bc08e871c7355513dcd3020bcd7c851ee9a7b15327bbaf588f24c","sha512":"00387efe0709e4a8d4ba0a9a0dc6aaa3b1de4c0b156d6696fb89c28eaf0e587966159bf7682bfbfbdea396e7895a9732be3f5fc3c5b00f7df1a4799874f15782","ssdeep":"3072:oAluRE9YojATnbT8+p9W31Q7xIJiEsXNN4mhyFj0:IEJATbA+p9WFmeg9N4mAa","tlshash":"fac31281e7f19c0613b13b5fd8bfa4bab542e38d2ad2996cb84dc48910404b5ddb6bcd","first_seen":"2026-07-12T20:52:59.87085Z","last_seen":"2026-07-12T20:52:59.87085Z","times_seen":1,"resource_available":false,"data":null}},"time_used":253,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":189,"receive":64,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"processguid.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"processguid.info","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"processguid.info/lander/helpdesk_ru_eu_1783418410/images/money.png","fqdn":"processguid.info","domain":"processguid.info","tld":"info"},"ip":{"addr":"172.67.222.56","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://processguid.info/XBRQsvfv?utm_campaign={{campaign.name}}\u0026utm_source={{site_source_name}}\u0026utm_placement={{placement}}\u0026campaign_id={{campaign.id}}\u0026adset_id={{adset.id}}\u0026ad_id={{ad.id}}\u0026adset_name={{adset.name}}\u0026pixel=2533575263762967\u0026ad_name={{ad.name}}\u0026campaign_name={{campaign.name","date":"2026-07-12T20:52:27.998Z","timestamp":1783889547998,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"processguid.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Jun 2026 11:42:12 GMT","end":"Sun, 06 Sep 2026 12:39:54 GMT"},"fingerprint":{"sha1":"A4:15:CD:80:79:A2:C6:1A:44:1B:E5:19:3F:C8:50:16:4B:40:F1:92","sha256":"7F:22:86:57:93:43:24:75:43:26:F1:D4:96:D6:AB:50:00:60:B9:D3:88:D3:0E:7F:C6:94:A8:B7:CD:1C:1C:40"}}},"request":{"raw":"GET /lander/helpdesk_ru_eu_1783418410/images/money.png HTTP/1.1\r\nHost: processguid.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=7bf2hv2i6j9nb9360em565usag\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 20:52:28 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 07 Jul 2026 10:08:25 GMT\r\npriority: u=5,i\r\netag: \"6a4cd019-2da29\"\r\nexpires: Wed, 22 Jul 2026 20:52:28 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qIz0rj8VdfxF2L3HKOi2DR06WEF8Y0KNEJl6fhcJI8Aq0nLyDMBNebr1G8aC0GK5yWt8E1kigsMjPw3lxmCVe44IUA9a1%2FytdhDTXbTS8B9ITUnDtdx21UuXWeYiB283DqOk\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1a2ee8afdbdb509-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 186921\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":186921,"size_decoded":187679,"mime_type":"image/png","magic":"PNG image data, 476 x 452, 8-bit/color RGBA, non-interlaced","md5":"629cf25b634c33a5fe87f122a3d396a3","sha1":"5b4afc5a9884fd2e6e915771ccbd721cfcb89706","sha256":"2fde6e6c770e1fe755a9598fc3dc6f2496809c7ba071f0ee1aba0e901d2ff611","sha512":"bd20e741112c2fd13c257a500ae070f4f343140bb43b0101af57bbd00f7f5ea9de893b5fb21f46e4e7e2cbf52b09fdd5457d6d43c445067d63e96b468c0d5c80","ssdeep":"3072:YbFY4eSkoMC5+H9+mOVul8CFTwRzQ4NbqtlQIA/UgVjNUA3CJAaVO43XkVH1JEKD:gOJC5899OVu2+cNbqtlQIoJXaVz3XkVd","tlshash":"e504128ed36f8a3d0d72b263c8909ccacea68d4855a2fd837dc7d5c0d8a5814d4eb497","first_seen":"2026-07-12T20:52:59.871836Z","last_seen":"2026-07-12T20:52:59.871836Z","times_seen":1,"resource_available":false,"data":null}},"time_used":254,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":189,"receive":65,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"processguid.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"processguid.info","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"processguid.info/lander/helpdesk_ru_eu_1783418410/images/agreement.png","fqdn":"processguid.info","domain":"processguid.info","tld":"info"},"ip":{"addr":"172.67.222.56","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://processguid.info/XBRQsvfv?utm_campaign={{campaign.name}}\u0026utm_source={{site_source_name}}\u0026utm_placement={{placement}}\u0026campaign_id={{campaign.id}}\u0026adset_id={{adset.id}}\u0026ad_id={{ad.id}}\u0026adset_name={{adset.name}}\u0026pixel=2533575263762967\u0026ad_name={{ad.name}}\u0026campaign_name={{campaign.name","date":"2026-07-12T20:52:28.000Z","timestamp":1783889548000,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"processguid.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Jun 2026 11:42:12 GMT","end":"Sun, 06 Sep 2026 12:39:54 GMT"},"fingerprint":{"sha1":"A4:15:CD:80:79:A2:C6:1A:44:1B:E5:19:3F:C8:50:16:4B:40:F1:92","sha256":"7F:22:86:57:93:43:24:75:43:26:F1:D4:96:D6:AB:50:00:60:B9:D3:88:D3:0E:7F:C6:94:A8:B7:CD:1C:1C:40"}}},"request":{"raw":"GET /lander/helpdesk_ru_eu_1783418410/images/agreement.png HTTP/1.1\r\nHost: processguid.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=7bf2hv2i6j9nb9360em565usag\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 20:52:28 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 07 Jul 2026 10:08:25 GMT\r\npriority: u=5,i\r\netag: \"6a4cd019-22e37\"\r\nexpires: Wed, 22 Jul 2026 20:52:28 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vnJJHvg6RnKiVz3MkZCHruzVxB3Bkgp3rLvSMloEYC7vaqr%2BQXuu26%2FzafLDOW7KhRAWpYelYAEsflyNKyngGB0hjVC1S9etap8yGVpPAUU6Tp3Y6Ucn8fZBGpw0uxs9tMeI\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1a2ee8b0dbeb509-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 142903\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":142903,"size_decoded":143663,"mime_type":"image/png","magic":"PNG image data, 476 x 452, 8-bit/color RGBA, non-interlaced","md5":"c4e1bbbf14a7d7e60cdc7318f7e178b8","sha1":"f378215048c166aedaea5061eba01cebfc91930d","sha256":"f2ca39a06c9b8de3587a87c3ce07ded3ef75f2e65c7fc0d9cafa9ccf3077da8f","sha512":"4abbf0d12c5aee43925eb7486eb1698f94b7ae8d659b0c5149143e6864dbaff7b5b31b3505e33883b211eb978180824b6a561b2aebe6836593dcb7c0bd72c3fb","ssdeep":"3072:xMxaTTR9clfXhGNqxp5QLUtyovrMDMoR4ACx4s6emN7hydnX:GxQTbgGNC7QITvrMDM2Cx4SOhyX","tlshash":"f3d31257640f28e1b405be4f8dc1bc85b94e2670bff085b780be6d9177789b9e8600da","first_seen":"2026-07-12T20:52:59.872832Z","last_seen":"2026-07-12T20:52:59.872832Z","times_seen":1,"resource_available":false,"data":null}},"time_used":240,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":180,"receive":60,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"processguid.info","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"processguid.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.tailwindcss.com/3.4.17","fqdn":"cdn.tailwindcss.com","domain":"tailwindcss.com","tld":"com"},"ip":{"addr":"104.26.3.143","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://processguid.info/XBRQsvfv?utm_campaign={{campaign.name}}\u0026utm_source={{site_source_name}}\u0026utm_placement={{placement}}\u0026campaign_id={{campaign.id}}\u0026adset_id={{adset.id}}\u0026ad_id={{ad.id}}\u0026adset_name={{adset.name}}\u0026pixel=2533575263762967\u0026ad_name={{ad.name}}\u0026campaign_name={{campaign.name","date":"2026-07-12T20:52:28.090Z","timestamp":1783889548090,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tailwindcss.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 19 May 2026 14:31:45 GMT","end":"Mon, 17 Aug 2026 15:31:39 GMT"},"fingerprint":{"sha1":"B6:67:6F:5A:BE:B9:2A:B2:16:10:49:96:1E:1F:99:2B:44:AF:EA:A6","sha256":"63:A9:BF:FB:46:E0:B8:37:95:77:F3:63:84:AE:78:22:46:11:85:5E:DF:87:F6:4B:EF:F2:2E:24:D5:74:70:39"}}},"request":{"raw":"GET /3.4.17 HTTP/1.1\r\nHost: cdn.tailwindcss.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 12 Jul 2026 20:52:28 GMT\r\ncontent-type: text/javascript\r\ncache-control: max-age=31536000\r\ncontent-encoding: br\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: MISS\r\nx-vercel-id: fra1::iad1::bj55r-1781146628084-40ce7f37f405\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nage: 2742919\r\nlast-modified: Wed, 01 Jul 2026 01:49:34 GMT\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0n0%2BeUFxp6oBOteQvC9vNfnUhMIXKhQKGUwLa5YDenyplgj8DsWP4AMvxVW%2BySO5ndyI58kJOM%2FqPw%2BdHY5wPU0edYVybc4YexVJMlcYGxmQLhzVD3F16pBIYnWs6Eg%2F%2BxPNRUs%3D\"}]}\r\ncf-ray: a1a2ee8b8b5556ca-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":407279,"size_decoded":127126,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (52853)","md5":"7a614b9a197e532c00d09a23b0996b5f","sha1":"1ff1738a40f3716e30e9031b181b0955ae578955","sha256":"176e894661aa9cdc9a5cba6c720044cbbf7b8bd80d1c9a142a7c24b1b6c50d15","sha512":"a67bc26f52d938358471be5671ff4b79e11af4e68b486aaf73a35a4c9bf3777aab51101af81563b4e5b7ba4b04dd8971fcfa9ee2c41fb10a0c1ee5604a99abd6","ssdeep":"12288:fpgrZxSAoNbJb0Wie75aUXGuyQZhK4O0s:RCVoNB0Wie75aUWmnO0s","tlshash":"e8844aa57396702647eb51e850ea1042f2beaa38840c44bcf7edd4da39e5e4440fbf79","first_seen":"2025-07-28T16:58:08.903462Z","last_seen":"2026-07-18T04:53:45.680752Z","times_seen":44722,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"processguid.info/lander/helpdesk_ru_eu_1783418410/images/desktop_hero_bg.jpg","fqdn":"processguid.info","domain":"processguid.info","tld":"info"},"ip":{"addr":"172.67.222.56","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://processguid.info/XBRQsvfv?utm_campaign={{campaign.name}}\u0026utm_source={{site_source_name}}\u0026utm_placement={{placement}}\u0026campaign_id={{campaign.id}}\u0026adset_id={{adset.id}}\u0026ad_id={{ad.id}}\u0026adset_name={{adset.name}}\u0026pixel=2533575263762967\u0026ad_name={{ad.name}}\u0026campaign_name={{campaign.name","date":"2026-07-12T20:52:28.459Z","timestamp":1783889548459,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"processguid.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Jun 2026 11:42:12 GMT","end":"Sun, 06 Sep 2026 12:39:54 GMT"},"fingerprint":{"sha1":"A4:15:CD:80:79:A2:C6:1A:44:1B:E5:19:3F:C8:50:16:4B:40:F1:92","sha256":"7F:22:86:57:93:43:24:75:43:26:F1:D4:96:D6:AB:50:00:60:B9:D3:88:D3:0E:7F:C6:94:A8:B7:CD:1C:1C:40"}}},"request":{"raw":"GET /lander/helpdesk_ru_eu_1783418410/images/desktop_hero_bg.jpg HTTP/1.1\r\nHost: processguid.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://processguid.info/lander/helpdesk_ru_eu_1783418410/styles.css?v=2\r\nCookie: PHPSESSID=7bf2hv2i6j9nb9360em565usag\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 20:52:28 GMT\r\ncontent-type: image/jpeg\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 07 Jul 2026 10:08:25 GMT\r\npriority: u=4,i\r\netag: \"6a4cd019-e856\"\r\nexpires: Wed, 22 Jul 2026 20:52:28 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NAn6oGPi4QYnMJvNl8REn1BDSIMY%2BM4u61r3cmj%2BAyjVfd6g5Cux7RZupORdEbAIOJug2%2BkMpz2RCTwPJ1wrZ2BsYsgV7pB%2FSo%2BU6hyxogueaV4F1cOXTMISZtf6dUqEIhls\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1a2ee8ddde0b509-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 59478\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":59478,"size_decoded":60243,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 1280x853, components 3","md5":"6fa0f6f0a868d12e3a3486a9743be1f6","sha1":"fe4811585cbdc844359db9dae455fa8f4c4d7cbe","sha256":"c8a0c9ce77ac9bfc393c7baf8b981d64992e4367e81de6cc78beceb53d4fa8e7","sha512":"7645c0285e1b771b99c24f9d57dc699cffc7da465aeb8bdcfb7ed6d7b2caf1777b60e06e39076cdd3ed554fb8b502b33595192b6432c7657557e732922cf7dbf","ssdeep":"1536:Wa6USYa//MzUrw3UUGnMjarABNZY50J66PO:WKcM4rw3U/nMerAXf6V","tlshash":"6243027ad5098f21e535ac3e8efc7c85da697d23198a2f8872175972ed330cc21c82d2","first_seen":"2026-07-12T20:52:59.874363Z","last_seen":"2026-07-12T20:52:59.874363Z","times_seen":1,"resource_available":false,"data":null}},"time_used":150,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":105,"receive":45,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"processguid.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"processguid.info","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"processguid.info/XBRQsvfv?utm_campaign={{campaign.name}}\u0026utm_source={{site_source_name}}\u0026utm_placement={{placement}}\u0026campaign_id={{campaign.id}}\u0026adset_id={{adset.id}}\u0026ad_id={{ad.id}}\u0026adset_name={{adset.name}}\u0026pixel=2533575263762967\u0026ad_name={{ad.name}}\u0026campaign_name={{campaign.name","fqdn":"processguid.info","domain":"processguid.info","tld":"info"},"ip":{"addr":"172.67.222.56","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-07-12T20:52:27.300Z","timestamp":1783889547300,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"processguid.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Jun 2026 11:42:12 GMT","end":"Sun, 06 Sep 2026 12:39:54 GMT"},"fingerprint":{"sha1":"A4:15:CD:80:79:A2:C6:1A:44:1B:E5:19:3F:C8:50:16:4B:40:F1:92","sha256":"7F:22:86:57:93:43:24:75:43:26:F1:D4:96:D6:AB:50:00:60:B9:D3:88:D3:0E:7F:C6:94:A8:B7:CD:1C:1C:40"}}},"request":{"raw":"GET /XBRQsvfv?utm_campaign={{campaign.name}}\u0026utm_source={{site_source_name}}\u0026utm_placement={{placement}}\u0026campaign_id={{campaign.id}}\u0026adset_id={{adset.id}}\u0026ad_id={{ad.id}}\u0026adset_name={{adset.name}}\u0026pixel=2533575263762967\u0026ad_name={{ad.name}}\u0026campaign_name={{campaign.name HTTP/1.1\r\nHost: processguid.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 20:52:27 GMT\r\ncontent-type: text/html; charset=utf-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=0,i\r\ncache-control: no-store, no-cache, must-revalidate\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MMvKomyrZoaOaEKc%2B4EhOAABrvAoaTlv3bgqmJPSnahE4PlvXigiYp9asjF52IwXFyojymD9Z1J6F6H54omSjPfLbdaaHxzjLBZJUterccsUPD2FoVyj9vyixJ6Bf%2FZakUDr\"}]}\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\npragma: no-cache\r\nset-cookie: PHPSESSID=7bf2hv2i6j9nb9360em565usag; path=/\r\nvary: Accept-Encoding\r\nx-powered-by: PHP/7.4.33\r\naccess-control-allow-origin: *\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: zstd\r\ncf-ray: a1a2ee874d7bb509-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]},{"name":"PHP:7.4.33","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Tailwind CSS","description":"Tailwind is a utility-first CSS framework.","website":"https://tailwindcss.com/","common_platform_enumeration":"","icon":"tailwindcss.svg","categories":["UI frameworks"]}],"data":{"size":51937,"size_decoded":10010,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (448)","md5":"9d4b20f3f9d4b60c7b2087bf4099ebf1","sha1":"7b65ecaae9588439fc10a57d56e89140618ac3eb","sha256":"1d028ea985a7b6b92a8e4f3ec12b5d4bc8c80089d800d36a8a6cbea7a0b11bf9","sha512":"8fd71e76e4e7b22aa9628b2d272ecb4334911926a77a59a11501a2875d48f3381866c5de175e1415055590c31ba7cc88e70f5242f24b06c498422ebcd343d294","ssdeep":"384:MF+pPZVU9ac6OgtncAOFc6Ogtd6iakBSxeHBVYur6su3qc6htN8n:MF+pPbK0OgtcFlOgtMibb6ZX0htN8n","tlshash":"0233657461f148bb1043c172ea91bf193cb9c67beb17868472ac49d92fd3c258b1b6d8","first_seen":"2026-07-12T20:52:59.87536Z","last_seen":"2026-07-12T20:52:59.87536Z","times_seen":1,"resource_available":true,"data":null}},"time_used":303,"timings":{"blocked":-1,"dns":76,"connect":20,"send":0,"wait":204,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"processguid.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"processguid.info","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"processguid.info/lander/helpdesk_ru_eu_1783418410/quiz.js?v=4","fqdn":"processguid.info","domain":"processguid.info","tld":"info"},"ip":{"addr":"172.67.222.56","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://processguid.info/XBRQsvfv?utm_campaign={{campaign.name}}\u0026utm_source={{site_source_name}}\u0026utm_placement={{placement}}\u0026campaign_id={{campaign.id}}\u0026adset_id={{adset.id}}\u0026ad_id={{ad.id}}\u0026adset_name={{adset.name}}\u0026pixel=2533575263762967\u0026ad_name={{ad.name}}\u0026campaign_name={{campaign.name","date":"2026-07-12T20:52:27.967Z","timestamp":1783889547967,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"processguid.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Jun 2026 11:42:12 GMT","end":"Sun, 06 Sep 2026 12:39:54 GMT"},"fingerprint":{"sha1":"A4:15:CD:80:79:A2:C6:1A:44:1B:E5:19:3F:C8:50:16:4B:40:F1:92","sha256":"7F:22:86:57:93:43:24:75:43:26:F1:D4:96:D6:AB:50:00:60:B9:D3:88:D3:0E:7F:C6:94:A8:B7:CD:1C:1C:40"}}},"request":{"raw":"GET /lander/helpdesk_ru_eu_1783418410/quiz.js?v=4 HTTP/1.1\r\nHost: processguid.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=7bf2hv2i6j9nb9360em565usag\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 20:52:28 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 07 Jul 2026 13:05:56 GMT\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\netag: W/\"6a4cf9b4-16b4\"\r\nexpires: Wed, 22 Jul 2026 20:52:28 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sJeMk9SCpHvuUAMBUS%2Bas5jwap8fRPTUQAWgHmPxkxCxcai4KFIof1RYRUjIirjP0kwNNqnubQM%2ByHOxllyE339JqLMur6FQ%2Feyi%2BtFWPA7xE5rHI4%2FqyxxsH1K2OP6ln1Q8\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1a2ee8acdadb509-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5812,"size_decoded":2309,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"b04d4ff68548ac660265b6cef795e2f9","sha1":"392f97ea72d18297d1174df5a39ffe730247c29e","sha256":"69db61a767ea706731107af54a52372de9548288e040b12b18fcfbf9914daafd","sha512":"9578a6a38bd717f072c4e2a99a7e8684d0b30ea68d32c833f917cf582189436724c764d9408801116b5e33d9cf68ceeeb56098b9aa3577064fde1d239da2c257","ssdeep":"96:viRFZ+0Ugw4FFFWJuDjzbTW96VryL6WDoTR339+Zsa1XPAQ+:6A0U77sDWgiQTJ39+Zsa1/C","tlshash":"d3c1f2986160043a8cbb7776979b84d9fe7704277501424dfc9e85882ff286c873afda","first_seen":"2026-07-12T20:52:59.876536Z","last_seen":"2026-07-12T20:52:59.876536Z","times_seen":1,"resource_available":true,"data":null}},"time_used":209,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":209,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"processguid.info","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"processguid.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"processguid.info/lander/helpdesk_ru_eu_1783418410/script.js","fqdn":"processguid.info","domain":"processguid.info","tld":"info"},"ip":{"addr":"172.67.222.56","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://processguid.info/XBRQsvfv?utm_campaign={{campaign.name}}\u0026utm_source={{site_source_name}}\u0026utm_placement={{placement}}\u0026campaign_id={{campaign.id}}\u0026adset_id={{adset.id}}\u0026ad_id={{ad.id}}\u0026adset_name={{adset.name}}\u0026pixel=2533575263762967\u0026ad_name={{ad.name}}\u0026campaign_name={{campaign.name","date":"2026-07-12T20:52:27.969Z","timestamp":1783889547969,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"processguid.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Jun 2026 11:42:12 GMT","end":"Sun, 06 Sep 2026 12:39:54 GMT"},"fingerprint":{"sha1":"A4:15:CD:80:79:A2:C6:1A:44:1B:E5:19:3F:C8:50:16:4B:40:F1:92","sha256":"7F:22:86:57:93:43:24:75:43:26:F1:D4:96:D6:AB:50:00:60:B9:D3:88:D3:0E:7F:C6:94:A8:B7:CD:1C:1C:40"}}},"request":{"raw":"GET /lander/helpdesk_ru_eu_1783418410/script.js HTTP/1.1\r\nHost: processguid.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=7bf2hv2i6j9nb9360em565usag\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 20:52:28 GMT\r\ncontent-type: application/javascript\r\netag: W/\"6a4cd019-65d\"\r\nlast-modified: Tue, 07 Jul 2026 10:08:25 GMT\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Wed, 22 Jul 2026 20:52:28 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fS74B6JPc3M2tCRtPehYsCMAmXw3HWJnSNSiZxropfrd0GnotqYI%2FZv0f2ObO0nfUhUVx3p0mkzpJih%2FBVBxeIBzfAOe9YaYUKZCO6dbcKsPrmwPLblleOdM%2F%2BmeVHktX6z3\"}]}\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\ncf-ray: a1a2ee8acdafb509-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1629,"size_decoded":1390,"mime_type":"application/javascript","magic":"ASCII text","md5":"47d2308a7e7d92443d3863d67794bf80","sha1":"00de4ce9a4496bdef11cf8fbb427494da0242a5e","sha256":"6e617c91bdbb4513eebce8b91e7be704fe62f066d7de5b4ec8a566ee253230ee","sha512":"588c26fcdbb239fc5aa61cc761f1bfa57443a179d28ad9c8317bb910c41006c0db0dd672bc01d2461987c488d47e1e7aa5009e42b550f8fd24eb964441029d35","ssdeep":"","tlshash":"7931cf5a64f5243605fb7aa7a38b968837305043b4449a063a6ccf441f62ab059f3fc9","first_seen":"2026-07-12T20:52:59.877472Z","last_seen":"2026-07-12T20:52:59.877472Z","times_seen":1,"resource_available":true,"data":null}},"time_used":144,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":144,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"processguid.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"processguid.info","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"processguid.info/lander/helpdesk_ru_eu_1783418410/images/shield.png","fqdn":"processguid.info","domain":"processguid.info","tld":"info"},"ip":{"addr":"172.67.222.56","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://processguid.info/XBRQsvfv?utm_campaign={{campaign.name}}\u0026utm_source={{site_source_name}}\u0026utm_placement={{placement}}\u0026campaign_id={{campaign.id}}\u0026adset_id={{adset.id}}\u0026ad_id={{ad.id}}\u0026adset_name={{adset.name}}\u0026pixel=2533575263762967\u0026ad_name={{ad.name}}\u0026campaign_name={{campaign.name","date":"2026-07-12T20:52:27.996Z","timestamp":1783889547996,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"processguid.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Jun 2026 11:42:12 GMT","end":"Sun, 06 Sep 2026 12:39:54 GMT"},"fingerprint":{"sha1":"A4:15:CD:80:79:A2:C6:1A:44:1B:E5:19:3F:C8:50:16:4B:40:F1:92","sha256":"7F:22:86:57:93:43:24:75:43:26:F1:D4:96:D6:AB:50:00:60:B9:D3:88:D3:0E:7F:C6:94:A8:B7:CD:1C:1C:40"}}},"request":{"raw":"GET /lander/helpdesk_ru_eu_1783418410/images/shield.png HTTP/1.1\r\nHost: processguid.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=7bf2hv2i6j9nb9360em565usag\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 20:52:28 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 07 Jul 2026 10:08:25 GMT\r\npriority: u=5,i\r\netag: \"6a4cd019-23709\"\r\nexpires: Wed, 22 Jul 2026 20:52:28 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xnwfAOacnfi9DSRCXk3ok0l9hATPioKMfNc9ttR4Kge01IUczGQ1B2u8s2NOl1aa3HB%2F4hF%2Fo4rEzKkktYdtsZ6AaGEmFFCB2afBsLAiwxyNDELDXJbB454D4j2ZHkeBRj3K\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1a2ee8afdbcb509-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 145161\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":145161,"size_decoded":145921,"mime_type":"image/png","magic":"PNG image data, 476 x 452, 8-bit/color RGBA, non-interlaced","md5":"72c5839951ac791d38396db0d780590e","sha1":"00e4053127c8a9fbbb079c0770b47fbbbee446ab","sha256":"69e50c298e2668dcf89c0d1d1045b3fbfade909a4bc8db50556601e7f1b40566","sha512":"08ccba0611d23654308ebd14e091be6b4a7bc103bd7df8e35dcd9a79627d2d97f189441e154964fe4f1db099fed84609dabab79afd62570292e8af8167ac465d","ssdeep":"3072:VP4ePha/smUPtVspWGKJofJ2TrFNk5UXDVdhZUsFT7E:GC6sXFVspQJKJ2TrFNkWXDrfVFTA","tlshash":"04e31287e54bba3c786238d1d3b2ac22963159e81791b3a08dd9f4d4815c731e8e9f7c","first_seen":"2026-07-12T20:52:59.882702Z","last_seen":"2026-07-12T20:52:59.882702Z","times_seen":1,"resource_available":false,"data":null}},"time_used":355,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":261,"receive":94,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"processguid.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"processguid.info","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"processguid.info/favicon.ico","fqdn":"processguid.info","domain":"processguid.info","tld":"info"},"ip":{"addr":"172.67.222.56","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://processguid.info/XBRQsvfv?utm_campaign={{campaign.name}}\u0026utm_source={{site_source_name}}\u0026utm_placement={{placement}}\u0026campaign_id={{campaign.id}}\u0026adset_id={{adset.id}}\u0026ad_id={{ad.id}}\u0026adset_name={{adset.name}}\u0026pixel=2533575263762967\u0026ad_name={{ad.name}}\u0026campaign_name={{campaign.name","date":"2026-07-12T20:52:28.613Z","timestamp":1783889548613,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"processguid.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Jun 2026 11:42:12 GMT","end":"Sun, 06 Sep 2026 12:39:54 GMT"},"fingerprint":{"sha1":"A4:15:CD:80:79:A2:C6:1A:44:1B:E5:19:3F:C8:50:16:4B:40:F1:92","sha256":"7F:22:86:57:93:43:24:75:43:26:F1:D4:96:D6:AB:50:00:60:B9:D3:88:D3:0E:7F:C6:94:A8:B7:CD:1C:1C:40"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: processguid.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=7bf2hv2i6j9nb9360em565usag; pixel=2533575263762967; token=uuid_18uumd0qini_18uumd0qini6a53fe8b88bb43.07426132; subid=18uumd0qini\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 20:52:28 GMT\r\ncontent-type: text/html\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DvWV18y2TrHH%2BJbARfSVJqC86X1mOCP%2B2KobMQx845G2%2FuEtXbuSWldyU7wdPViscI1pzcL1LNoh18TWHkt81JfXOajCUMhKSGhHXt0dWjCIs2l7fryu8L4jJRp5ryXGb6t6\"}]}\r\npriority: u=6,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a1a2ee8edde6b509-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":146,"size_decoded":704,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"8eec510e57f5f732fd2cce73df7b73ef","sha1":"3c0af39ecb3753c5fee3b53d063c7286019eac3b","sha256":"55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0","sha512":"73bbf698482132b5fd60a0b58926fddec9055f8095a53bc52714e211e9340c3419736ceafd6b279667810114d306bfccdcfcddf51c0b67fe9e3c73c54583e574","ssdeep":"","tlshash":"b7c02b2d35133c4cc563313423c37140c0d6833b687a41110400c00371cf2998ec3397","first_seen":"2023-03-07T12:05:15Z","last_seen":"2026-07-18T04:32:20.350042Z","times_seen":540969,"resource_available":true,"data":null}},"time_used":213,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":213,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"processguid.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"processguid.info","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/intl-tel-input@22.0.2/build/js/utils.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.65.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://processguid.info/XBRQsvfv?utm_campaign={{campaign.name}}\u0026utm_source={{site_source_name}}\u0026utm_placement={{placement}}\u0026campaign_id={{campaign.id}}\u0026adset_id={{adset.id}}\u0026ad_id={{ad.id}}\u0026adset_name={{adset.name}}\u0026pixel=2533575263762967\u0026ad_name={{ad.name}}\u0026campaign_name={{campaign.name","date":"2026-07-12T20:52:28.618Z","timestamp":1783889548618,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2026 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 20 May 2026 15:48:47 GMT","end":"Sat, 05 Dec 2026 14:48:47 GMT"},"fingerprint":{"sha1":"D4:05:C2:EC:C7:EE:2B:D0:08:68:0D:3D:33:77:48:78:43:E7:D1:E1","sha256":"ED:84:90:EE:71:BC:6B:5E:B3:D2:50:B0:23:3A:06:0D:E0:50:C6:B6:A9:09:36:E6:CE:FE:E8:66:89:EB:4E:C5"}}},"request":{"raw":"GET /npm/intl-tel-input@22.0.2/build/js/utils.js HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-length: 62020\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: application/javascript; charset=utf-8\r\nx-jsd-version: 22.0.2\r\nx-jsd-version-type: version\r\netag: W/\"3f68a-fvTuFfL851X1TH4NoiimR0ugbfw\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\nage: 980416\r\ndate: Sun, 12 Jul 2026 20:52:28 GMT\r\nx-served-by: cache-fra-eddf8230145-FRA, cache-bma-essb1270026-BMA\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":259722,"size_decoded":62795,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (1903)","md5":"f19a2920e62e963c46cc986e1506a3fb","sha1":"7ef4ee15f2fce755f54c7e0da228a6474ba06dfc","sha256":"51ed384347b65b8cfd79b2be937d418697df6876215c1a2da4f2951b8754e258","sha512":"70bbba1ab4032029452b2cc6d30d3aeb0ee31eb9d60fe2802e76f536c6acc623f91860e29698f1ebc3fb788d982fd22cfb6f1bf1b44233c248058bf4d02a0740","ssdeep":"3072:PklM0F8CAJjFs3OwPss3MwPPmdV9T2xFM8Mpmxs5DyBpUsR56kmLNTg/QKWVRpFK:PklMpjBf0xFM8Mpm0/ZI","tlshash":"2544f1ebd63c9737a1e97b35968eb3cd5a8cbca3c848567826c3b54f52784e0706c205","first_seen":"2024-07-05T20:20:38Z","last_seen":"2026-07-16T08:45:27.558715Z","times_seen":43,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"processguid.info/lander/helpdesk_ru_eu_1783418410/styles.css?v=2","fqdn":"processguid.info","domain":"processguid.info","tld":"info"},"ip":{"addr":"172.67.222.56","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://processguid.info/XBRQsvfv?utm_campaign={{campaign.name}}\u0026utm_source={{site_source_name}}\u0026utm_placement={{placement}}\u0026campaign_id={{campaign.id}}\u0026adset_id={{adset.id}}\u0026ad_id={{ad.id}}\u0026adset_name={{adset.name}}\u0026pixel=2533575263762967\u0026ad_name={{ad.name}}\u0026campaign_name={{campaign.name","date":"2026-07-12T20:52:27.964Z","timestamp":1783889547964,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"processguid.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Jun 2026 11:42:12 GMT","end":"Sun, 06 Sep 2026 12:39:54 GMT"},"fingerprint":{"sha1":"A4:15:CD:80:79:A2:C6:1A:44:1B:E5:19:3F:C8:50:16:4B:40:F1:92","sha256":"7F:22:86:57:93:43:24:75:43:26:F1:D4:96:D6:AB:50:00:60:B9:D3:88:D3:0E:7F:C6:94:A8:B7:CD:1C:1C:40"}}},"request":{"raw":"GET /lander/helpdesk_ru_eu_1783418410/styles.css?v=2 HTTP/1.1\r\nHost: processguid.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=7bf2hv2i6j9nb9360em565usag\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 20:52:28 GMT\r\ncontent-type: text/css\r\netag: W/\"6a4cfa61-ae8\"\r\nlast-modified: Tue, 07 Jul 2026 13:08:49 GMT\r\npriority: u=2,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Wed, 22 Jul 2026 20:52:28 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SfsPQmFi8lj3Dgdlc8iZ3Sj%2B5kz2fnD06nRMJlaTM7Dqyy40HCkbtvg5a0B%2BKKSh%2FFSUpNmcRL2njzVoxRpNcWapsZJiVLuefosZP5kmR%2BT6M7%2BWpYTr%2Flsdk9efaJ5H97WU\"}]}\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\ncf-ray: a1a2ee8acdacb509-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2792,"size_decoded":1985,"mime_type":"text/css","magic":"Unicode text, UTF-8 text","md5":"87e92aabbefbef0cf086958071efba1d","sha1":"4fa6954cddb8cd50fc9f467dc260ead3b47c71e6","sha256":"3f62bea0c3ddcfdf21fb49f7d941df74118fc44295a3e7d90febbfc36abe86c1","sha512":"c729de06ff4d29b80f75377487678651fc127ec2e9e3c043770957c15a0c13a225a5f194998d4993509e25289c8476cd878790bac3519ccb2a8bb0f239e8f258","ssdeep":"","tlshash":"1d514645a9f51c417097a668a2efd309233c8023612d5e5db7ef22648f8517c5373b99","first_seen":"2026-07-12T20:52:59.889339Z","last_seen":"2026-07-12T20:52:59.889339Z","times_seen":1,"resource_available":false,"data":null}},"time_used":156,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":156,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"processguid.info","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"processguid.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"processguid.info/lander/helpdesk_ru_eu_1783418410/js/mc-intl-phone.js?v=1","fqdn":"processguid.info","domain":"processguid.info","tld":"info"},"ip":{"addr":"172.67.222.56","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://processguid.info/XBRQsvfv?utm_campaign={{campaign.name}}\u0026utm_source={{site_source_name}}\u0026utm_placement={{placement}}\u0026campaign_id={{campaign.id}}\u0026adset_id={{adset.id}}\u0026ad_id={{ad.id}}\u0026adset_name={{adset.name}}\u0026pixel=2533575263762967\u0026ad_name={{ad.name}}\u0026campaign_name={{campaign.name","date":"2026-07-12T20:52:27.978Z","timestamp":1783889547978,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"processguid.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Jun 2026 11:42:12 GMT","end":"Sun, 06 Sep 2026 12:39:54 GMT"},"fingerprint":{"sha1":"A4:15:CD:80:79:A2:C6:1A:44:1B:E5:19:3F:C8:50:16:4B:40:F1:92","sha256":"7F:22:86:57:93:43:24:75:43:26:F1:D4:96:D6:AB:50:00:60:B9:D3:88:D3:0E:7F:C6:94:A8:B7:CD:1C:1C:40"}}},"request":{"raw":"GET /lander/helpdesk_ru_eu_1783418410/js/mc-intl-phone.js?v=1 HTTP/1.1\r\nHost: processguid.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=7bf2hv2i6j9nb9360em565usag\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 20:52:28 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 07 Jul 2026 12:52:28 GMT\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\netag: W/\"6a4cf68c-2c5c\"\r\nexpires: Wed, 22 Jul 2026 20:52:28 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nPX5rgM%2FW6ZCHGXCH%2B8uY0XEOmvlMo1oqGV%2FtaIS4x8DuGtVzL5dk1%2BwV%2BpXleRHjMkm8Jp37FyZB%2FwzoBtgfXOCHNRppI1t2mzJ5ydeSIoAuQtQ0MIjy4EAt8Gl6JiZ4wPi\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1a2ee8aedb2b509-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11356,"size_decoded":4595,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"fce19f37669e26134928b1c5b0bc8a6a","sha1":"2540900e456a03b2e647749abe1d4060e30bd7cb","sha256":"fcae1bec2dc05e90416b0ecf6d612dcf49ab924d05e7f8aa979f8f23b37d88bd","sha512":"35715438f508df03053ca45e898dbfa09d7e117136525e686cf4c0f8aa41bc8c057fc15ecd94a19f1b09b4de9d6bf4a053726c154eea9b2a8b6f2788eb27f933","ssdeep":"192:nYJHAlyNb73YmldC4Kq9/Yxi2dP3XaypaZaA5WQV4ky3rz3gqFk6pVq7:nYJ73E4L9A9dPnaW3E","tlshash":"5532c52f59e300765623d07bafaf6004792b80bb6a56de213d5ca7682f90121937dfcc","first_seen":"2026-07-12T20:52:59.890302Z","last_seen":"2026-07-12T20:52:59.890302Z","times_seen":1,"resource_available":true,"data":null}},"time_used":138,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":138,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"processguid.info","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"processguid.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"processguid.info/lander/helpdesk_ru_eu_1783418410/images/logo.png","fqdn":"processguid.info","domain":"processguid.info","tld":"info"},"ip":{"addr":"172.67.222.56","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://processguid.info/XBRQsvfv?utm_campaign={{campaign.name}}\u0026utm_source={{site_source_name}}\u0026utm_placement={{placement}}\u0026campaign_id={{campaign.id}}\u0026adset_id={{adset.id}}\u0026ad_id={{ad.id}}\u0026adset_name={{adset.name}}\u0026pixel=2533575263762967\u0026ad_name={{ad.name}}\u0026campaign_name={{campaign.name","date":"2026-07-12T20:52:27.985Z","timestamp":1783889547985,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"processguid.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Jun 2026 11:42:12 GMT","end":"Sun, 06 Sep 2026 12:39:54 GMT"},"fingerprint":{"sha1":"A4:15:CD:80:79:A2:C6:1A:44:1B:E5:19:3F:C8:50:16:4B:40:F1:92","sha256":"7F:22:86:57:93:43:24:75:43:26:F1:D4:96:D6:AB:50:00:60:B9:D3:88:D3:0E:7F:C6:94:A8:B7:CD:1C:1C:40"}}},"request":{"raw":"GET /lander/helpdesk_ru_eu_1783418410/images/logo.png HTTP/1.1\r\nHost: processguid.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=7bf2hv2i6j9nb9360em565usag\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 20:52:28 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 07 Jul 2026 10:08:25 GMT\r\npriority: u=5,i\r\netag: \"6a4cd019-1b0e1\"\r\nexpires: Wed, 22 Jul 2026 20:52:28 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tnDwpjTVpSfSpFmoW1uUSFnUiX6htY6aYSkyk2dPsfGznQfBIKKdjQso6cAjkkEcQILK6WRED%2FcvgSuKsHaZZGOMV1KdeXZsgv%2BSi6OicRx6%2FBUiVFue9L%2BdbQuJ685MXZlk\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1a2ee8aedb6b509-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 110817\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":110817,"size_decoded":111581,"mime_type":"image/png","magic":"PNG image data, 476 x 452, 8-bit/color RGBA, non-interlaced","md5":"fa759ec892d57c89a36835aebe74d252","sha1":"2c51cab80fed71e54785e14a4047a7db82471833","sha256":"b7d60c94ae05c5849f91cd1da78f2b22cfddb09f9a245dd92e762e610da995c4","sha512":"334247856703477f341efe9880798841bac2c5322183e9fc97d9b30d1a210e8635a1a0b6a0f31fd141f93c476d5156cd56d36acc389799ad18f8f2e04c82e050","ssdeep":"3072:msPeE3/0QLYTb41ekNMFiBDgB9X2RUWcM1KIj:ms9385TANMFiu9XetPKi","tlshash":"5eb312beaed1024c0870f645149db6fe795eada8e66301ffb703178a350c6148f9d6c5","first_seen":"2026-07-12T20:52:59.891194Z","last_seen":"2026-07-12T20:52:59.891194Z","times_seen":1,"resource_available":false,"data":null}},"time_used":252,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":187,"receive":65,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"processguid.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"processguid.info","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"processguid.info/lander/helpdesk_ru_eu_1783418410/images/bank.png","fqdn":"processguid.info","domain":"processguid.info","tld":"info"},"ip":{"addr":"172.67.222.56","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://processguid.info/XBRQsvfv?utm_campaign={{campaign.name}}\u0026utm_source={{site_source_name}}\u0026utm_placement={{placement}}\u0026campaign_id={{campaign.id}}\u0026adset_id={{adset.id}}\u0026ad_id={{ad.id}}\u0026adset_name={{adset.name}}\u0026pixel=2533575263762967\u0026ad_name={{ad.name}}\u0026campaign_name={{campaign.name","date":"2026-07-12T20:52:27.997Z","timestamp":1783889547997,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"processguid.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Jun 2026 11:42:12 GMT","end":"Sun, 06 Sep 2026 12:39:54 GMT"},"fingerprint":{"sha1":"A4:15:CD:80:79:A2:C6:1A:44:1B:E5:19:3F:C8:50:16:4B:40:F1:92","sha256":"7F:22:86:57:93:43:24:75:43:26:F1:D4:96:D6:AB:50:00:60:B9:D3:88:D3:0E:7F:C6:94:A8:B7:CD:1C:1C:40"}}},"request":{"raw":"GET /lander/helpdesk_ru_eu_1783418410/images/bank.png HTTP/1.1\r\nHost: processguid.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=7bf2hv2i6j9nb9360em565usag\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 20:52:28 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 07 Jul 2026 10:08:25 GMT\r\npriority: u=5,i\r\netag: \"6a4cd019-24192\"\r\nexpires: Wed, 22 Jul 2026 20:52:28 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5F8AvKlxSVWyX1FsN11LVY3u6KkxAvAnMwELqP99CCpIWjqXpzV9K3G1U891FMxhLABDqi3KBEejHUpZennvM6EroNxPWAzJj%2FmPg0GH8TY2h%2FBoFF3GKf%2Fml5SVGf9vJSeN\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1a2ee8afdbbb509-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 147858\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":147858,"size_decoded":148620,"mime_type":"image/png","magic":"PNG image data, 476 x 452, 8-bit/color RGBA, non-interlaced","md5":"77cba516a86f42963912ca54b07750f7","sha1":"6b54c044ebcf2b31481ae990e12d7792e566fbd1","sha256":"353bae8db18e490f394b6aa954a0151c382dcee385b5b3b2554832d7fbd25a03","sha512":"3ba73ab21e9a749c882faabaadfeb180f163245a800b342db9b7c4124d57b245c35c7f2f39ef3fd191133fe2e935a795f6276c2c26130b49a9be998261e666ef","ssdeep":"3072:vmSzt5jdtyxPLGBxKqRJbMyRKOGWsebtU4M:+SztxdtkqX9RJHRrGWsmE","tlshash":"f0e312086f46bd7227af1a3106c2e0a201f96d936dc52b1c56794b7d89a31f3bdcf906","first_seen":"2026-07-12T20:52:59.892397Z","last_seen":"2026-07-12T20:52:59.892397Z","times_seen":1,"resource_available":false,"data":null}},"time_used":241,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":181,"receive":60,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"processguid.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"processguid.info","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}}]}