{"report_id":"33d6b82f-c4a7-428e-a970-a72d6e126ccd","version":0,"status":"done","tags":[],"date":"2026-08-10T01:43:03Z","url":{"schema":"http","addr":"affiduciary.com/","fqdn":"affiduciary.com","domain":"affiduciary.com","tld":"com"},"ip":{"addr":"84.75.144.0","port":0,"asn":6730,"as":"Sunrise GmbH","country":"Switzerland","country_code":"CH"},"final":{"url":{"schema":"https","addr":"affiduciary.com/","fqdn":"affiduciary.com","domain":"affiduciary.com","tld":"com"},"title":"Affiduciary | Home Page","dom":{"size":41914,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (26399)","md5":"f9c80be5efe2f2e7908cbc6464a4baa1","sha1":"7c0e9f1f6a741316015e209aaccd4280bb8140e6","sha256":"3432aeb269181b7717693d00dee9e8cb7c65d8ca5f55cd8f256814ef3c1dfcc8","sha512":"21d456fda273365aef1226c05d8ece08a4ef27ce93be2cef19159c86b92fcf060e436cc20acfb22e4e9b1c3830c864d76efec26873cd4ef89d1a3e7202ec1a98","ssdeep":"768:0yJi2qbCmmWq38FTbfsTO+hDGq3t8UtN2v3k/SR+D/5km58:FJzqbCmmWq38FTbfsTO+hDZ3t8UtAk/C","tlshash":"a513a7276784452c9c53d278f399b54ea32af688ef6259eef7c23410c2d93ff088a455","dom_hash":"domhash5a2e7b986a359100c1311ce7180015d1","first_seen":"2026-07-07T22:08:47.685476Z","last_seen":"2026-08-10T01:43:08.432388Z","times_seen":880,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"affiduciary.com/","fqdn":"affiduciary.com","domain":"affiduciary.com","tld":"com"},"ip":{"addr":"84.75.144.0","port":0,"asn":6730,"as":"Sunrise GmbH","country":"Switzerland","country_code":"CH"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-09-14T01:43:03Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"affiduciary.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"translations.smartsuppcdn.com","ip":{"addr":"185.76.9.27","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"domain_registered":"2018-11-20","domain_rank":560346,"first_seen":"2022-11-04T22:28:35Z","last_seen":"2026-08-07T16:27:35.8724Z","alert_count":0,"request_count":1,"received_data":7743,"sent_data":515,"comment":"","tags":null,"fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}]},{"fqdn":"websocket-visitors.smartsupp.com","ip":{"addr":"18.198.19.146","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"domain_registered":"2012-08-25","domain_rank":411464,"first_seen":"2021-07-12T07:42:32Z","last_seen":"2026-08-07T16:27:35.787499Z","alert_count":0,"request_count":1,"received_data":224,"sent_data":630,"comment":"","tags":null,"fingerprints":null},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-08-09T22:23:43.881052Z","alert_count":0,"request_count":2,"received_data":34493,"sent_data":1146,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-08-09T22:20:44.514027Z","alert_count":0,"request_count":7,"received_data":259221,"sent_data":3960,"comment":"","tags":null,"fingerprints":null},{"fqdn":"translate.google.com","ip":{"addr":"142.250.178.110","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"1997-09-15","domain_rank":609,"first_seen":"2012-05-30T01:30:32Z","last_seen":"2026-08-03T22:25:48.238919Z","alert_count":0,"request_count":1,"received_data":3557,"sent_data":503,"comment":"","tags":null,"fingerprints":null},{"fqdn":"www.smartsuppchat.com","ip":{"addr":"185.76.9.11","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"domain_registered":"2014-02-02","domain_rank":491650,"first_seen":"2017-01-30T05:24:57Z","last_seen":"2026-08-07T16:27:37.298573Z","alert_count":0,"request_count":1,"received_data":18547,"sent_data":462,"comment":"","tags":null,"fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}]},{"fqdn":"widget-v3.smartsuppcdn.com","ip":{"addr":"185.76.9.12","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"domain_registered":"2018-11-20","domain_rank":532262,"first_seen":"2022-10-03T13:48:45Z","last_seen":"2026-08-07T16:27:37.300999Z","alert_count":0,"request_count":4,"received_data":330508,"sent_data":1870,"comment":"","tags":null,"fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}]},{"fqdn":"www.google.com","ip":{"addr":"142.251.156.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"1997-09-15","domain_rank":22,"first_seen":"2015-05-10T13:11:19Z","last_seen":"2026-08-09T22:53:32.360554Z","alert_count":0,"request_count":1,"received_data":717,"sent_data":547,"comment":"","tags":null,"fingerprints":null},{"fqdn":"www.gstatic.com","ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":146047,"first_seen":"2012-05-29T15:36:17Z","last_seen":"2026-08-09T23:11:55.336398Z","alert_count":0,"request_count":5,"received_data":48621,"sent_data":3077,"comment":"","tags":null,"fingerprints":null},{"fqdn":"translate-pa.googleapis.com","ip":{"addr":"172.217.116.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":8472,"first_seen":"2021-11-04T06:37:42Z","last_seen":"2026-08-04T22:03:14.861099Z","alert_count":0,"request_count":1,"received_data":32351,"sent_data":571,"comment":"","tags":null,"fingerprints":null},{"fqdn":"bootstrap.smartsuppchat.com","ip":{"addr":"3.77.221.71","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"domain_registered":"2014-02-02","domain_rank":425291,"first_seen":"2018-01-29T06:10:36Z","last_seen":"2026-08-07T16:27:35.868588Z","alert_count":0,"request_count":1,"received_data":1579,"sent_data":533,"comment":"","tags":null,"fingerprints":null},{"fqdn":"affiduciary.com","ip":{"addr":"84.75.144.0","port":443,"asn":6730,"as":"Sunrise GmbH","country":"Switzerland","country_code":"CH"},"domain_registered":"2025-03-16","domain_rank":0,"first_seen":"2025-10-23T11:34:49.113434Z","last_seen":"2026-08-10T01:17:44.380112Z","alert_count":60,"request_count":60,"received_data":2969278,"sent_data":71799,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"PHP:8.2.32","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Popper","description":"Popper is a positioning engine, its purpose is to calculate the position of an element to make it possible to position it near a given reference element.","website":"https://popper.js.org","common_platform_enumeration":"","icon":"Popper.svg","categories":["Miscellaneous"]},{"name":"WOW","description":"Reveal CSS animation as you scroll down a page.","website":"https://www.delac.io/WOW","common_platform_enumeration":"","icon":"","categories":["JavaScript frameworks","Web frameworks","JavaScript graphics"]},{"name":"FancyBox","description":"FancyBox is a tool for displaying images, html content and multi-media in a Mac-style 'lightbox' that floats overtop of web page.","website":"https://fancyapps.com/fancybox","common_platform_enumeration":"","icon":"FancyBox.svg","categories":["JavaScript libraries"]}]},{"fqdn":"translate.googleapis.com","ip":{"addr":"142.250.178.74","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":6317,"first_seen":"2012-05-31T07:21:21Z","last_seen":"2026-08-03T14:57:01.762277Z","alert_count":0,"request_count":5,"received_data":273469,"sent_data":2923,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"affiduciary.com/home/js/bootstrap.min.js","fqdn":"affiduciary.com","domain":"affiduciary.com","tld":"com"},"ip":{"addr":"84.75.144.0","port":443,"asn":6730,"as":"Sunrise GmbH","country":"Switzerland","country_code":"CH"},"introduction_type":"scriptElement","is_inline":false,"md5":"e6f488c5766fb06169100bdbd2b4fdbd","sha1":"f7365985962f78092d8eeaca6d6633d6fbf75583","sha256":"0ce9de398de7e7ec63e836b70090643c7c5a3f29ea4a519a67defdd206c13ac1","sha512":"f18f1e18af76773a2ec2944e229a70afed243dabaed2aaad9f365934417c3dab79b6e44d2712570a46d07c9d079541b7cb51c1df3d7c0922a6528ee2db370fa6","ssdeep":"768:KZYN+vOLYakObgUDZj8fW+l3sLaSLPe6CMhYVRK0H/9V2Vz/kq8GPnl+G/AX22b+:Kk9PXht8xm+Yx2UPnAe","tlshash":"2443a5563244b8330ade85a78136434bf7295c98b547806cb5bc6cde2b7dc863276bbc","size":60104,"data":"","first_seen":"2023-03-07T01:19:35Z","last_seen":"2026-08-10T01:43:08.461093Z","times_seen":687,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"affiduciary.com/home/js/scrollbar.js","fqdn":"affiduciary.com","domain":"affiduciary.com","tld":"com"},"ip":{"addr":"84.75.144.0","port":443,"asn":6730,"as":"Sunrise GmbH","country":"Switzerland","country_code":"CH"},"introduction_type":"scriptElement","is_inline":false,"md5":"71951b246c4726520dce912a5ac7f03c","sha1":"56906b9b9f41df67063091b7a66c8584d87d748f","sha256":"dd3bda90c210c66fd618bb0c35f4b21f871ce1dae7396053cb4b3a90b3ec51b0","sha512":"ff0b38e4e02096dedcc6fb1a0899a7f8924a89e9b25bb8d712f5ffb01414641b009da55c45241ddea6440eecb7ebff11ea93318aea46ff3ff71a2e22670cb48d","ssdeep":"768:nAGHgQl8dA0unnTUOxZ5ynGi65vqjSDHR17JayK:nAGHUSnTUOxZqxjv","tlshash":"7a03f9e9370534fb12db6f5e441b010963365956a70b8870387d8cb82fb1ea622b7b6d","size":40547,"data":"","first_seen":"2023-03-07T12:05:43Z","last_seen":"2026-08-10T01:45:19.746915Z","times_seen":4294,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"affiduciary.com/home/js/script.js","fqdn":"affiduciary.com","domain":"affiduciary.com","tld":"com"},"ip":{"addr":"84.75.144.0","port":443,"asn":6730,"as":"Sunrise GmbH","country":"Switzerland","country_code":"CH"},"introduction_type":"scriptElement","is_inline":false,"md5":"6ffc36ef501ed901639625b2b181bb49","sha1":"8a6f9667d29b24a33eb2acbf645964afbba498ae","sha256":"df8c87ae274ae3714a9d30e0515b09db6a6e4c1da5deef04a0482a0ea327663d","sha512":"7baa3b9cb8715b550e055e12d1faa6c7e416e86b1d8f584cded2b6cacfcf3382116612aaee3a5fc4f215503e8f48136953dc24d7b8fc570eda2718fc7bec9b74","ssdeep":"192:rx92ENcaCrDDZZnOKu2B0M1xplTMCj5L/TF5L/9u51JO50v5PrO5055fbO50J5fP:r6ZZnOKu26YptleZnX6laiij1xD","tlshash":"6e422ec0f7bc26a340bb3156a95e61c52b6c4437d94258b7fcbe15281fc872e32aad1d","size":12996,"data":"","first_seen":"2025-10-23T11:35:38.864209Z","last_seen":"2026-08-10T01:43:08.451534Z","times_seen":11,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"translate.google.com/translate_a/element.js?cb=googleTranslateElementInit","fqdn":"translate.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.178.110","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"9f89a902ac1f0bd03d2b7972c6e79277","sha1":"830e58586ff122e72e01dc62e3879e5de0bb1148","sha256":"a66ab6a0efcc60b97a2f633fda232d18512ff119c46926c7121a5105bc73c61c","sha512":"373ba7fbef51a35cc30583e73064e9d7febd210c828b61b89cdfafeae2b13809c82f8c81f74afd8c782fe1454ad5c97dd277d51c154c89689514eea14a09837f","ssdeep":"","tlshash":"4551239a88b2d0cac8437c29cfaf927921050037a811dce57edcd902fff064ab64d8e4","size":2989,"data":"","first_seen":"2026-08-10T01:10:59.664444Z","last_seen":"2026-08-10T01:46:40.152614Z","times_seen":35,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"affiduciary.com/","fqdn":"affiduciary.com","domain":"affiduciary.com","tld":"com"},"ip":{"addr":"84.75.144.0","port":443,"asn":6730,"as":"Sunrise GmbH","country":"Switzerland","country_code":"CH"},"introduction_type":"scriptElement","is_inline":true,"md5":"1f4ff2507fe85d01fd878d25ab56e11a","sha1":"94ab3a8ee4be8a72423e991e016ae88fcabe4822","sha256":"0d5047bb15a3652cd515ef10f9863814af667dc19c57b1cb5fbe8cbdaa5cf6c9","sha512":"680cd32150be94039fcffaa0d807b7f576704824e8cdab42d2543185c3b82ef223f88d4ac785b76ec2ef7e1a47059fbe2001f0a07cde9c7e08a0c9f2daf23f54","ssdeep":"","tlshash":"4dc08c07b130840a009bf105d383a4887124400a01390d243249908a3fb2f8e030d1e8","size":160,"data":"","first_seen":"2026-06-13T23:23:00.753294Z","last_seen":"2026-08-10T01:43:08.481366Z","times_seen":24,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"affiduciary.com/","fqdn":"affiduciary.com","domain":"affiduciary.com","tld":"com"},"ip":{"addr":"84.75.144.0","port":443,"asn":6730,"as":"Sunrise GmbH","country":"Switzerland","country_code":"CH"},"introduction_type":"scriptElement","is_inline":true,"md5":"20b613342047d43faac0a47588fccc9d","sha1":"4b11d7d15703b964501f9cd04420acd834d8f467","sha256":"52ce634aadba3b4bdf30649f8fa0f80d2adf8add4abbcffb0545bfa9c2cdd9b2","sha512":"ba55e21c95a10e1f941c63968208c3664c5e7dc726a7bc50086326be44d61caf246212a681100ee1fdfcb5ff1b3b9be8b57e1d1fbdb968b10e9c3b93dcc41b65","ssdeep":"","tlshash":"aa21ac2cef230097b5f301567e96411d08aaf017aa42de09bb9c16984fc9f26f12d7b8","size":1427,"data":"","first_seen":"2026-07-11T03:52:55.813255Z","last_seen":"2026-08-10T01:43:08.481905Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"affiduciary.com/","fqdn":"affiduciary.com","domain":"affiduciary.com","tld":"com"},"ip":{"addr":"84.75.144.0","port":443,"asn":6730,"as":"Sunrise GmbH","country":"Switzerland","country_code":"CH"},"introduction_type":"scriptElement","is_inline":true,"md5":"d8a1aae82d22182c823c99dd6857b596","sha1":"73eef2c35df89e2ca16a93e1204c5283bfcedba1","sha256":"324d85f81673a69c32e06da6c52c5b59eaa4e14bc75735ecb109539a707fcb1a","sha512":"9d03c8dfe3e760f5ef45fb2b2d59bc3ac6e90bd7d59b85c8fd2ecc1bdc87a89f26d35cc1842b43540636e354c8a8dacb816c244de73ba1d07f487cc495ffaddc","ssdeep":"","tlshash":"4ff0ab7e3c76419447d310b5c3abe228392630664080c41fb85d88284fb0fda6d00aa8","size":452,"data":"","first_seen":"2026-08-10T01:17:46.534214Z","last_seen":"2026-08-10T01:43:08.482361Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"affiduciary.com/home/js/owl.js","fqdn":"affiduciary.com","domain":"affiduciary.com","tld":"com"},"ip":{"addr":"84.75.144.0","port":443,"asn":6730,"as":"Sunrise GmbH","country":"Switzerland","country_code":"CH"},"introduction_type":"scriptElement","is_inline":false,"md5":"ccdf893e7d8b26933af0c336bcc3943e","sha1":"ac575ba3377f95ef22bad865ec35b0b3dcb0dfe0","sha256":"db9d6cf3c1c4b047c62f646e7d9991c06a212931c362bf53f9a2406b30f09466","sha512":"818db99c2eb775d1342dc2cf871509185c5ad86a08c80e452f29b8509a870c43078e9f11113e999ff487a35b25b6ddd6b95b6a7f2c4408fdfcfdd69473f59510","ssdeep":"1536:owLoreUC7AuLMjvNlP8GNMBJ6IcIhKJQIOybQOoiYM9OJ0QQKOv:oUMNlPBqJTuOGQOotEhKOv","tlshash":"bf9393c5f36c261b422631785eae23ce723d402ad911186f7ca8e9dc29d546c436eff9","size":89992,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-08-10T01:45:19.78004Z","times_seen":12737,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"affiduciary.com/home/js/jquery.fancybox.js","fqdn":"affiduciary.com","domain":"affiduciary.com","tld":"com"},"ip":{"addr":"84.75.144.0","port":443,"asn":6730,"as":"Sunrise GmbH","country":"Switzerland","country_code":"CH"},"introduction_type":"scriptElement","is_inline":false,"md5":"6e11711058a9459a94d5a19b26a78135","sha1":"76792d5913afe035b6ccbac585b0b5e70b33aa76","sha256":"7b99eee1db728472aaa8452017a0d755f488e8d647cc0f62baf45f8ff65b95ba","sha512":"6ecbe997bc6e82fa7976a98e291ec31e043de23f0f5d06834fcc809cde8d0c3ffa0e96c734dfc0b0fbc313e405eac603540913794bb3a9a86ac56db5d2ab868a","ssdeep":"1536:26iljQs+4wETv0qwF/fwUsjuFR4amerr3txU0Me7/pby+mHWgGbAdKfW7WP83RSp:2NoETcqwF3wO/VUbZZr7WP83RSD6E3t","tlshash":"f3e3968a67bd112589333129ab8f705eb57e8423a10dd9263cad53481fc13a943f5fee","size":154104,"data":"","first_seen":"2023-03-07T12:02:41Z","last_seen":"2026-08-10T01:45:19.745118Z","times_seen":3592,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"affiduciary.com/home/js/isotope.js","fqdn":"affiduciary.com","domain":"affiduciary.com","tld":"com"},"ip":{"addr":"84.75.144.0","port":443,"asn":6730,"as":"Sunrise GmbH","country":"Switzerland","country_code":"CH"},"introduction_type":"scriptElement","is_inline":false,"md5":"cedfc3cc73a712bf69fb86ce2f4c6281","sha1":"3fef439a03231dc3383dc26c1d53d942f898af11","sha256":"4217b832640548933d47886eff17b5624397e63d95cc1917107d9fb1fc241215","sha512":"2643f8006759ad3e07c791563b4acfd057821ce14911debf6803796dc7177fe0c32f696a72bdfeef4ca9d3f147f3db522cfa78c985b1dd06a8740cd743d3d13b","ssdeep":"768:BjlIew3PtifBnQ/KMDwmWD6sMKD6gjfGQre4+ZhFVByQ9zx:BjWSBnQ/LEBD6YD6Ee4+rf9zx","tlshash":"fe03b649b74079304387b1a696af110f733aa47ca90690ecb369d8fb1cb684d6133f79","size":37772,"data":"","first_seen":"2023-03-07T01:38:15Z","last_seen":"2026-08-10T01:43:08.44141Z","times_seen":814,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"affiduciary.com/home/js/jquery.nice-select.min.js","fqdn":"affiduciary.com","domain":"affiduciary.com","tld":"com"},"ip":{"addr":"84.75.144.0","port":443,"asn":6730,"as":"Sunrise GmbH","country":"Switzerland","country_code":"CH"},"introduction_type":"scriptElement","is_inline":false,"md5":"d13462ec489f9f0c309a811f85feb3d6","sha1":"d9545f8b139eae5b387de1a60a84abe949c7e88f","sha256":"66bdef0724e5306421bcc7e0910e41b5645228119ad9096ca4a6099e48d94e6a","sha512":"36a61db3cb2eea38afcb5fd62e85bcc75b593110fbff565f8561bf8dc4502cecd5d64d6b20e0c2a4c8280676abe505ec84a24657bbe2d0b5cb3573e816c33966","ssdeep":"","tlshash":"a4511114b10512f648ff25d37911b147a075493dc42ac14be97e86b21efec02aab6d5f","size":2942,"data":"","first_seen":"2023-03-07T01:31:39Z","last_seen":"2026-08-10T03:48:44.846796Z","times_seen":10552,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"translate.googleapis.com/_/translate_http/_/js/k=translate_http.tr.no.8-rDjGGwZWc.O/am=BIgABw/d=1/ed=1/rs=AN8SPfpUAFa5uYv7pPLt2IODKHQhyZPuWA/m=el_main","fqdn":"translate.googleapis.com","domain":"translate.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.74","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"9f8b0ad3fad30afcb3ec46707c910fcb","sha1":"266e6f8d5f830f7947a8795a1fc9a34fbe959ad9","sha256":"531c37e7d35123b151a0bdd6d17945ee13373e7e2947d128e931cffc6a1035c6","sha512":"3a138175ca85f29c3a8013a8ea87948cea7cb472c6f3afcd53b51573ab39f332330db617c9041824e168dfec1a9e8c5e4151731e099ade9ba5eebd47d37bab4c","ssdeep":"3072:JYVhKITKZo2bsbW7UlCbzjfOHuQq8F9uFk4V8GyZnMtb5qCNSZA/:GGo2bwPtg5","tlshash":"b344ead8b2a170769363f4a5413f000eb17b68a9f8484dacb28dd8e26df4959417bf7c","size":267146,"data":"","first_seen":"2026-08-06T19:44:18.072611Z","last_seen":"2026-08-10T03:09:03.860528Z","times_seen":267,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"about","addr":"about:srcdoc#140","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"888a21ab7fc56d220a59dd25a83b18b6","sha1":"3bc9b8d495cf8e016aadf7e2bba091f2bd8b7188","sha256":"18c0d112e350349ca7390bc25c50a5fc92e9dc9b63416147c7e57851d105237e","sha512":"3dd8c3099c3300b3f74ffbe65e93e383d5c31087fb362f08bb241107c1061ef7dc8b61113851723a8588b54465c38056721341402f6a0072adce178ed3daf86e","ssdeep":"","tlshash":"b73147cdbbb7e0554272209a992f860bf17a2577981cd050e555ccd0fc70e9b447de14","size":1713,"data":"","first_seen":"2025-06-11T00:07:11.79824Z","last_seen":"2026-08-10T01:43:08.483158Z","times_seen":37114,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"affiduciary.com/home/js/popper.min.js","fqdn":"affiduciary.com","domain":"affiduciary.com","tld":"com"},"ip":{"addr":"84.75.144.0","port":443,"asn":6730,"as":"Sunrise GmbH","country":"Switzerland","country_code":"CH"},"introduction_type":"scriptElement","is_inline":false,"md5":"c1d29c9b4fa7a8ee8417a01bc9ac1b56","sha1":"0c78c7993cba9ca26741f1df9735eb18d4c0e50d","sha256":"e074908c3749fe751173f181f33c7092f3a7b4de504dc12ebe072d537a7607c4","sha512":"142f2b7fa9dc007d01f6d44cc89eba587d7c47258bd3b2b4360359ab2345e822306e79588da16b9518728f4dc99a495990897ab800f8a3a7107f5fd0a8ed8eb2","ssdeep":"384:f5LFrVVVnCQvIR/CFU4hHPV4kdxXvYqo2D75zCx+vI2am3MxGpGTgd/9jt9+Db9O:hNVVVnyiU41xXvlD7wx+v0xyGTgnZO9O","tlshash":"2892a2cc3294b06647e791a7a07f960eb2339875650e9410f299f2e97c30ef9913bc79","size":20494,"data":"","first_seen":"2023-03-07T12:27:54Z","last_seen":"2026-08-10T01:43:08.438012Z","times_seen":509,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"affiduciary.com/home/js/wow.js","fqdn":"affiduciary.com","domain":"affiduciary.com","tld":"com"},"ip":{"addr":"84.75.144.0","port":443,"asn":6730,"as":"Sunrise GmbH","country":"Switzerland","country_code":"CH"},"introduction_type":"scriptElement","is_inline":false,"md5":"105fb3799fcf14f1ea8fcff23f2686dc","sha1":"00a8a01378a8259b38cba29dc69ddf761450053f","sha256":"704ae255ab62df5481884eb0db69b552c686e7094b21581b1cbc86a9b6c3800b","sha512":"ebdee19d8c8ab3f2d751c753ccad4a0631c1a1520821682dbcc8d9555a42d48ef9d67e333c2b9854e3452f783e5b37ecac686e287fa0f9d2ce6ce42168e87ba7","ssdeep":"96:gGqKWTAKHF/suCdaOVEE1FnePgJqg4SImYad6Q:N30suCYOVEE7ne4JqgpIwdh","tlshash":"e1d175c9b7467036d79ba1f6873f0145a23a19acb008047cb7e984e57d348699237f3c","size":6299,"data":"","first_seen":"2023-03-07T01:38:15Z","last_seen":"2026-08-10T01:43:08.476289Z","times_seen":3961,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"affiduciary.com/home/js/parallax-scroll.js","fqdn":"affiduciary.com","domain":"affiduciary.com","tld":"com"},"ip":{"addr":"84.75.144.0","port":443,"asn":6730,"as":"Sunrise GmbH","country":"Switzerland","country_code":"CH"},"introduction_type":"scriptElement","is_inline":false,"md5":"810d193a9aa270c89eef7d853eafc40d","sha1":"b83e1b50960f26ad33e8ce0d1477e8bd3553c305","sha256":"b9e4bc2c6fdd59d3d68e1a4c20d3a80014e1a4879970a4d59d1d6bba1830e565","sha512":"a1a1259358b0858de0dc69837d052ed870f882ff1f12536d0fbe57166b44f768f44dc0d1a5ccb2afeefb2f4b6f7ce20dea71bf9a77eba06b8fa032dbc614ead0","ssdeep":"192:/tb/ji8aJhFCCw6eOki/XJliQyliyVS+ZgW67P0WUPskQKe66:t/jF2hm6eOkiftEvliP0/2t","tlshash":"52122108e493042ae4f77135cf7e03aa7729b6179159d9257b0d8a8d4f80934a3d8ff6","size":9117,"data":"","first_seen":"2023-03-09T16:51:00Z","last_seen":"2026-08-10T01:43:08.468488Z","times_seen":121,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"widget-v3.smartsuppcdn.com/assets/shared-BKfXgL7M.js","fqdn":"widget-v3.smartsuppcdn.com","domain":"smartsuppcdn.com","tld":"com"},"ip":{"addr":"185.76.9.12","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"introduction_type":"scriptElement","is_inline":false,"md5":"6d330899eb0177ca492d1cf16427c94b","sha1":"11b3e62f0c12c835c12c5d257f0ce22aea3e1954","sha256":"012c673b4f73512d934760a31f93679d3525ef13e30f4473a0db5d115a037544","sha512":"c9b9d475ba9d05ee38e02cd796dad489ddcc46a4d1728dc818475a047ea61261f9aaca97596ef5f189e1d571ce03aa1f46b382cd8a1d4fef892dc9cad53aa8b9","ssdeep":"6144:FMAopqOWSr8ad2jJKaQKhJp9cuIfoTkqM+9+:4qOW2Rd29B/DIfoTtM+9+","tlshash":"b3443ad53294b035439b51e6906f1106f33e5c19580d812cf269ece679baec8a2f7fb8","size":273837,"data":"","first_seen":"2026-08-03T19:54:11.723826Z","last_seen":"2026-08-10T01:51:44.882968Z","times_seen":250,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"affiduciary.com/home/js/jquery.js","fqdn":"affiduciary.com","domain":"affiduciary.com","tld":"com"},"ip":{"addr":"84.75.144.0","port":443,"asn":6730,"as":"Sunrise GmbH","country":"Switzerland","country_code":"CH"},"introduction_type":"scriptElement","is_inline":false,"md5":"4f252523d4af0b478c810c2547a63e19","sha1":"5a9dcfbef655a2668e78baebeaa8dc6f41d8dabb","sha256":"668b046d12db350ccba6728890476b3efee53b2f42dbb84743e5e9f1ae0cc404","sha512":"8c6b0c1fcde829ef5ab02a643959019d4ac30d3a7cc25f9a7640760fefff26d9713b84ab2e825d85b3b2b08150265a10143f82e05975accb10645efa26357479","ssdeep":"1536:GYE1JVoiB9JqZdXXe2pD3PgoIiulrUdTJSFk/zkZ4HjL5o8srOaS9TwD6b7/Jp9i:t4J+R3jL5TCOauTwD6FdnCVQNea98HrV","tlshash":"8893d7d9b6d6706287b734a851bf410bb17aa8eab40c4c60f058c8e47e74e9d507bf2d","size":97163,"data":"","first_seen":"2023-03-07T01:02:06Z","last_seen":"2026-08-10T03:23:03.160019Z","times_seen":84415,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"affiduciary.com/home/js/validation.js","fqdn":"affiduciary.com","domain":"affiduciary.com","tld":"com"},"ip":{"addr":"84.75.144.0","port":443,"asn":6730,"as":"Sunrise GmbH","country":"Switzerland","country_code":"CH"},"introduction_type":"scriptElement","is_inline":false,"md5":"62a2ff47d8ea93f9eb32d18497502d4b","sha1":"35709e0cd4a77507d7d04963b7cc3785a89651f1","sha256":"81317fa1d0f757e2f2264758b9e7cbf11dd33200c5cd983f1e2c138dfe939728","sha512":"1a3e777c3fdac6a13c3fb4e1a37d8e85c924bb301e6f3886bedabd2822ec958fe63234d2aca75768ab7d7676e71df422e22185c7773f90314c48160636448b84","ssdeep":"768:Q+Jx6U2lHUdS2QQ54R7/1Eny+WwhqxVcvgz/PyUEvPe0+vPziVqdPuj4kcOE0mBN:rfdS2QQ54R7/1Eny+vyiYLXEiHziYdPR","tlshash":"51f21a8937c170664fa630f4945f5607a172ad65900ce478b6b8d8e17ef8ec860b7f78","size":36153,"data":"","first_seen":"2023-04-09T01:25:20Z","last_seen":"2026-08-10T01:45:19.724396Z","times_seen":1187,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"affiduciary.com/home/js/appear.js","fqdn":"affiduciary.com","domain":"affiduciary.com","tld":"com"},"ip":{"addr":"84.75.144.0","port":443,"asn":6730,"as":"Sunrise GmbH","country":"Switzerland","country_code":"CH"},"introduction_type":"scriptElement","is_inline":false,"md5":"cbbd68c06c9cdb2481b7050f6e64375e","sha1":"1ee3d2e29b6279f1986cd878072780d596250878","sha256":"4aded4f99d9aa82ccf099bfc6ddb735e25a6de44a124791c1e258cd05daee11c","sha512":"4de42f78a6ab93d9dce738e73c7dd889e7ffeea3dc01f8e09055b6eab195d1a759fbc502ecadeeeead6ec9be7fdcdededd440e154ee7e9742d77ff1a2fd48fac","ssdeep":"48:Yo3dwd2k3yV5egTkYRSdaMxlehOBOrMR6nZNBFxDNE9l92bA4FS4flyu:X3/skfRwbDOrdfFjg/2cmVflyu","tlshash":"48910e0a79eb1ab54877713e8fafa2442231503b2202d8113ceddf6c6fa1c64a597fd4","size":4228,"data":"","first_seen":"2023-03-07T12:11:58Z","last_seen":"2026-08-10T01:43:08.452973Z","times_seen":5274,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.smartsuppchat.com/loader.js?","fqdn":"www.smartsuppchat.com","domain":"smartsuppchat.com","tld":"com"},"ip":{"addr":"185.76.9.11","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"introduction_type":"scriptElement","is_inline":false,"md5":"218d24439d4e2c0990f35338a7ac220c","sha1":"5a7b913584c1244bf61beab9dc644204d130101c","sha256":"efb497f7159de26ea5e0521d675d909dc063e36d0d23c2ad96fa9109b73ee263","sha512":"17af39bfdc350c9d1f8dd74652641d0c028881ecb3935d2d9fdb763d24136665d135d00219aabac57693112e2314d4fa91b802ba2662a1580aa35c5e0b6e624b","ssdeep":"384:2/xzy2A3wyxNeBWbEgl/EuVaBWbE0rIcvqSI/aQ/UpG:2/xzy2A3wXscuVaAxka05","tlshash":"4182b7cc7691b16543ab61b4843f620ff1376929740d8865b965eae13cb8c8ed037fb8","size":18024,"data":"","first_seen":"2026-03-30T19:01:55.527327Z","last_seen":"2026-08-10T01:51:44.865453Z","times_seen":8256,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"widget-v3.smartsuppcdn.com/assets/main-BI-Moxe0.js","fqdn":"widget-v3.smartsuppcdn.com","domain":"smartsuppcdn.com","tld":"com"},"ip":{"addr":"185.76.9.12","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"introduction_type":"scriptElement","is_inline":false,"md5":"6a9d55e8dc66eb0b690bd00f7271e647","sha1":"befc832793a4eb6de6db51438d8b904079c156b9","sha256":"433b24ab945d5bf78deacbbb62265f4ce7fe10d8c06fa050f4c007c0e9f4f0eb","sha512":"af067ad24e8068dc001f356c1b6e8b3f821564fd781c448c2998cf3a081be1a37979d9804f20eb8de2960507e53ba46533d583dfae51eef19e217421a3049c04","ssdeep":"384:D7wI6JME1dwQBSB8g6eBtoK6hnETSzgfQBATS:DMxN1dwQk8g6Q+nEGiQBAu","tlshash":"c472e8341240783fb62b6919526ce497623ad25ce6d3c038de5fdd4d32d8cc299a3bb9","size":16032,"data":"","first_seen":"2026-08-03T19:54:11.753674Z","last_seen":"2026-08-10T01:51:44.869626Z","times_seen":257,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"affiduciary.com/home/css/animate.css","fqdn":"affiduciary.com","domain":"affiduciary.com","tld":"com"},"ip":{"addr":"84.75.144.0","port":443,"asn":6730,"as":"Sunrise GmbH","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://affiduciary.com/","date":"2026-08-10T01:42:11.579Z","timestamp":1786326131579,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.affiduciary.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 18 Jul 2026 22:13:22 GMT","end":"Fri, 16 Oct 2026 22:13:21 GMT"},"fingerprint":{"sha1":"32:43:A0:00:CF:FD:A9:87:65:2E:DD:F9:02:A4:05:36:9F:CB:8F:92","sha256":"1C:59:C8:76:96:00:CF:9A:AC:CF:35:1C:3E:BB:59:D9:02:79:09:FF:C2:68:CC:63:53:B2:D6:D6:EE:2E:D1:FB"}}},"request":{"raw":"GET /home/css/animate.css HTTP/1.1\r\nHost: affiduciary.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://affiduciary.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6Img3VjgvSG16V0N1ZmFOUWVSNDl0R2c9PSIsInZhbHVlIjoiRlpQOEFoNFRwci9TakdBZ3NWRThUblljOWZVSnNtcjZmdm1yVmY1YnNVL29QQmFnajVDMlh2aGF1Z3B2Sm1YLzdKL29zMmpJcFVWa21oZzMxbEhoUmFMUnlhcEQ2WitpYWoxSC9KQ2VNS244dEZRaDBHRG9WbEJHZkFhRThNRFQiLCJtYWMiOiI0OTgzNDk2ODI5NTEzMzllNDUzODgzN2RlZTk1YTg5OTMxOWVmMDBhYWY5M2MxZjUwYTNiOWU5ODE2Yzc5NjA3IiwidGFnIjoiIn0%3D; affiduciary_session=eyJpdiI6ImdBMktxSFlhN0ROL1d3NE1HaVVqNEE9PSIsInZhbHVlIjoiZUwrMW44M0ZnZHN6TVJPTmg3M1l2Y1kwNVF5OE0rbjBraEtVekdvSmpIR2xuUW51NFhVRzRSaTJIcUdMaldibFdyTmU5L09jUkRESVpYY0VCb0QvZEZxNEhGM3VUcERiamZIdC9uZ3F3TzdTNUNBQTVmekdlb2c2UUZHWmcwQzciLCJtYWMiOiJjYWUwYzNlNWU2MDJkMGQzNmZmM2RlZDE4YjFkZjRmN2FmMWVmODgzNzMxYjcwYzkzNDdlZWVmYjBlYWRmNjE3IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 10 Aug 2026 01:42:11 GMT\r\nContent-Type: text/css\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nStrict-Transport-Security: max-age=63072000; includeSubDomains; preload\r\nContent-Security-Policy: upgrade-insecure-requests\r\nVary: Accept-Encoding, User-Agent,Accept-Encoding\r\nLast-Modified: Sun, 16 Mar 2025 15:58:09 GMT\r\nContent-Encoding: br\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":84213,"size_decoded":5486,"mime_type":"text/css","magic":"ASCII text","md5":"55c622ecb1b0267ab5d0214b188f133f","sha1":"f8a19140e498354e7a4bfb36a099ed0e7f5840ec","sha256":"77741086b60cd713ca8042b9c14e07972f15a1974159605948d57c4506b105ea","sha512":"c6b9357c34342090ae464ecf302dbb870bb84ba04ef25394468dbf15c744c7df598f3c8935be50ca4de2ffdb41cb00d09f9b489489afc4467d205c5ad4bf9856","ssdeep":"768:truGuwpkfTf4ucuAfFfoHzfSf/fhfzSSSefZf2uhjx:QfTfsfFfoHzfSf/fhfBfZf2uhjx","tlshash":"21835ead2991104453778a1993df9e78263ce5631826acef73c2588fcf46fac63c9607","first_seen":"2025-04-23T06:54:26.658308Z","last_seen":"2026-08-10T01:43:08.43325Z","times_seen":51,"resource_available":false,"data":null}},"time_used":493,"timings":{"blocked":-1,"dns":0,"connect":163,"send":0,"wait":164,"receive":0,"ssl":165},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"affiduciary.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"affiduciary.com/home/css/color.css","fqdn":"affiduciary.com","domain":"affiduciary.com","tld":"com"},"ip":{"addr":"84.75.144.0","port":443,"asn":6730,"as":"Sunrise GmbH","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://affiduciary.com/","date":"2026-08-10T01:42:11.583Z","timestamp":1786326131583,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.affiduciary.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 18 Jul 2026 22:13:22 GMT","end":"Fri, 16 Oct 2026 22:13:21 GMT"},"fingerprint":{"sha1":"32:43:A0:00:CF:FD:A9:87:65:2E:DD:F9:02:A4:05:36:9F:CB:8F:92","sha256":"1C:59:C8:76:96:00:CF:9A:AC:CF:35:1C:3E:BB:59:D9:02:79:09:FF:C2:68:CC:63:53:B2:D6:D6:EE:2E:D1:FB"}}},"request":{"raw":"GET /home/css/color.css HTTP/1.1\r\nHost: affiduciary.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://affiduciary.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6Img3VjgvSG16V0N1ZmFOUWVSNDl0R2c9PSIsInZhbHVlIjoiRlpQOEFoNFRwci9TakdBZ3NWRThUblljOWZVSnNtcjZmdm1yVmY1YnNVL29QQmFnajVDMlh2aGF1Z3B2Sm1YLzdKL29zMmpJcFVWa21oZzMxbEhoUmFMUnlhcEQ2WitpYWoxSC9KQ2VNS244dEZRaDBHRG9WbEJHZkFhRThNRFQiLCJtYWMiOiI0OTgzNDk2ODI5NTEzMzllNDUzODgzN2RlZTk1YTg5OTMxOWVmMDBhYWY5M2MxZjUwYTNiOWU5ODE2Yzc5NjA3IiwidGFnIjoiIn0%3D; affiduciary_session=eyJpdiI6ImdBMktxSFlhN0ROL1d3NE1HaVVqNEE9PSIsInZhbHVlIjoiZUwrMW44M0ZnZHN6TVJPTmg3M1l2Y1kwNVF5OE0rbjBraEtVekdvSmpIR2xuUW51NFhVRzRSaTJIcUdMaldibFdyTmU5L09jUkRESVpYY0VCb0QvZEZxNEhGM3VUcERiamZIdC9uZ3F3TzdTNUNBQTVmekdlb2c2UUZHWmcwQzciLCJtYWMiOiJjYWUwYzNlNWU2MDJkMGQzNmZmM2RlZDE4YjFkZjRmN2FmMWVmODgzNzMxYjcwYzkzNDdlZWVmYjBlYWRmNjE3IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 10 Aug 2026 01:42:11 GMT\r\nContent-Type: text/css\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nStrict-Transport-Security: max-age=63072000; includeSubDomains; preload\r\nContent-Security-Policy: upgrade-insecure-requests\r\nVary: Accept-Encoding, User-Agent,Accept-Encoding\r\nLast-Modified: Sun, 16 Mar 2025 15:58:09 GMT\r\nContent-Encoding: br\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":12452,"size_decoded":2214,"mime_type":"text/css","magic":"ASCII text","md5":"b7a2fcb15672391aad889e6999abbc5e","sha1":"7f90dc626982f0dff5eb6467832a0b9be51714f0","sha256":"5899385ca2e87d75fb2a2427da0e34c93fa2b38e780cc3bc52be17c3b976ffed","sha512":"8e9e5f53be5abfc3739e87448570af589d1f5242759cec84c2714001e0646289540952324de83c385864585a76bfc25c1ee14b082d2a5b2091cfd0159149a460","ssdeep":"96:e16fFXr5PmbajyeRbSvM/SzL0SatgzAxaBTyqrbzbVvJSfPSSA3BlUi/tfCU0DXR:zf3mba2vM/SoqzAvibzbVoi3n5tKU0DB","tlshash":"3042b396b1de0c5e625b851aa046f6701b4db0e4e919a7d4f2f1e63c129c10c3ebdf8e","first_seen":"2025-10-23T11:35:38.922129Z","last_seen":"2026-08-10T01:43:08.434002Z","times_seen":8,"resource_available":false,"data":null}},"time_used":415,"timings":{"blocked":254,"dns":0,"connect":0,"send":0,"wait":161,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"affiduciary.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"affiduciary.com/home/css/style.css","fqdn":"affiduciary.com","domain":"affiduciary.com","tld":"com"},"ip":{"addr":"84.75.144.0","port":443,"asn":6730,"as":"Sunrise GmbH","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://affiduciary.com/","date":"2026-08-10T01:42:11.587Z","timestamp":1786326131587,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.affiduciary.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 18 Jul 2026 22:13:22 GMT","end":"Fri, 16 Oct 2026 22:13:21 GMT"},"fingerprint":{"sha1":"32:43:A0:00:CF:FD:A9:87:65:2E:DD:F9:02:A4:05:36:9F:CB:8F:92","sha256":"1C:59:C8:76:96:00:CF:9A:AC:CF:35:1C:3E:BB:59:D9:02:79:09:FF:C2:68:CC:63:53:B2:D6:D6:EE:2E:D1:FB"}}},"request":{"raw":"GET /home/css/style.css HTTP/1.1\r\nHost: affiduciary.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://affiduciary.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6Img3VjgvSG16V0N1ZmFOUWVSNDl0R2c9PSIsInZhbHVlIjoiRlpQOEFoNFRwci9TakdBZ3NWRThUblljOWZVSnNtcjZmdm1yVmY1YnNVL29QQmFnajVDMlh2aGF1Z3B2Sm1YLzdKL29zMmpJcFVWa21oZzMxbEhoUmFMUnlhcEQ2WitpYWoxSC9KQ2VNS244dEZRaDBHRG9WbEJHZkFhRThNRFQiLCJtYWMiOiI0OTgzNDk2ODI5NTEzMzllNDUzODgzN2RlZTk1YTg5OTMxOWVmMDBhYWY5M2MxZjUwYTNiOWU5ODE2Yzc5NjA3IiwidGFnIjoiIn0%3D; affiduciary_session=eyJpdiI6ImdBMktxSFlhN0ROL1d3NE1HaVVqNEE9PSIsInZhbHVlIjoiZUwrMW44M0ZnZHN6TVJPTmg3M1l2Y1kwNVF5OE0rbjBraEtVekdvSmpIR2xuUW51NFhVRzRSaTJIcUdMaldibFdyTmU5L09jUkRESVpYY0VCb0QvZEZxNEhGM3VUcERiamZIdC9uZ3F3TzdTNUNBQTVmekdlb2c2UUZHWmcwQzciLCJtYWMiOiJjYWUwYzNlNWU2MDJkMGQzNmZmM2RlZDE4YjFkZjRmN2FmMWVmODgzNzMxYjcwYzkzNDdlZWVmYjBlYWRmNjE3IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 10 Aug 2026 01:42:12 GMT\r\nContent-Type: text/css\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nStrict-Transport-Security: max-age=63072000; includeSubDomains; preload\r\nContent-Security-Policy: upgrade-insecure-requests\r\nVary: Accept-Encoding, User-Agent,Accept-Encoding\r\nLast-Modified: Sun, 16 Mar 2025 15:58:09 GMT\r\nContent-Encoding: br\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":43771,"size_decoded":7457,"mime_type":"text/css","magic":"Unicode text, UTF-8 text","md5":"6ac2485eb3af603447c90fde38e22577","sha1":"fb45d7f970ce8c70f91d5a21612e5d6d78bb69fe","sha256":"34e157e9daa8180405bb3b764da4dd287aa3143b4a00b6085f9a5e5045f032a6","sha512":"ea5a0c15213d5059ea42b6f29af5b04e8ffb71ce67ab182a266089d8c0b8fc7939c63dee12635f31083540cbf7f079c892f36e91eedd4995d86583e8e9856c59","ssdeep":"768:PFCRoRTgyJNtlGRQGFYBKtMEFuJtf048VgY:9CRoRTgyJSyBKtMEMGVgY","tlshash":"3e133fdaa2b51000342b87aa76c65b58277c9143fa1bc4bc77e7201cdf8a7d91263f5e","first_seen":"2025-10-23T11:35:38.946859Z","last_seen":"2026-08-10T01:43:08.434891Z","times_seen":11,"resource_available":false,"data":null}},"time_used":578,"timings":{"blocked":415,"dns":0,"connect":0,"send":0,"wait":163,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"affiduciary.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"affiduciary.com/home/css/elements-css/news.css","fqdn":"affiduciary.com","domain":"affiduciary.com","tld":"com"},"ip":{"addr":"84.75.144.0","port":443,"asn":6730,"as":"Sunrise GmbH","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://affiduciary.com/","date":"2026-08-10T01:42:11.604Z","timestamp":1786326131604,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.affiduciary.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 18 Jul 2026 22:13:22 GMT","end":"Fri, 16 Oct 2026 22:13:21 GMT"},"fingerprint":{"sha1":"32:43:A0:00:CF:FD:A9:87:65:2E:DD:F9:02:A4:05:36:9F:CB:8F:92","sha256":"1C:59:C8:76:96:00:CF:9A:AC:CF:35:1C:3E:BB:59:D9:02:79:09:FF:C2:68:CC:63:53:B2:D6:D6:EE:2E:D1:FB"}}},"request":{"raw":"GET /home/css/elements-css/news.css HTTP/1.1\r\nHost: affiduciary.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://affiduciary.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6Img3VjgvSG16V0N1ZmFOUWVSNDl0R2c9PSIsInZhbHVlIjoiRlpQOEFoNFRwci9TakdBZ3NWRThUblljOWZVSnNtcjZmdm1yVmY1YnNVL29QQmFnajVDMlh2aGF1Z3B2Sm1YLzdKL29zMmpJcFVWa21oZzMxbEhoUmFMUnlhcEQ2WitpYWoxSC9KQ2VNS244dEZRaDBHRG9WbEJHZkFhRThNRFQiLCJtYWMiOiI0OTgzNDk2ODI5NTEzMzllNDUzODgzN2RlZTk1YTg5OTMxOWVmMDBhYWY5M2MxZjUwYTNiOWU5ODE2Yzc5NjA3IiwidGFnIjoiIn0%3D; affiduciary_session=eyJpdiI6ImdBMktxSFlhN0ROL1d3NE1HaVVqNEE9PSIsInZhbHVlIjoiZUwrMW44M0ZnZHN6TVJPTmg3M1l2Y1kwNVF5OE0rbjBraEtVekdvSmpIR2xuUW51NFhVRzRSaTJIcUdMaldibFdyTmU5L09jUkRESVpYY0VCb0QvZEZxNEhGM3VUcERiamZIdC9uZ3F3TzdTNUNBQTVmekdlb2c2UUZHWmcwQzciLCJtYWMiOiJjYWUwYzNlNWU2MDJkMGQzNmZmM2RlZDE4YjFkZjRmN2FmMWVmODgzNzMxYjcwYzkzNDdlZWVmYjBlYWRmNjE3IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 10 Aug 2026 01:42:12 GMT\r\nContent-Type: text/css\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nStrict-Transport-Security: max-age=63072000; includeSubDomains; preload\r\nContent-Security-Policy: upgrade-insecure-requests\r\nVary: Accept-Encoding, User-Agent,Accept-Encoding\r\nLast-Modified: Sun, 16 Mar 2025 15:58:09 GMT\r\nContent-Encoding: br\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5175,"size_decoded":1343,"mime_type":"text/css","magic":"ASCII text","md5":"631357885fb0262c03085d510c6cb5ba","sha1":"882a8a1419a56cf26b4ecf737985e5be381048ed","sha256":"713adf3ea7084eea50c0c3b1f947a077a777d17e07107fe9f3a5c7673a0a70ec","sha512":"86d536aab0c4a3947e2eb94d95db06627ef2498d2be598a05fe68380eaf832f18ceb6845bf803028c7e0cbad3a8e71aa783eed17ec550e766f82977fd0e69be5","ssdeep":"96:wQulxhnEhbHdxeCJthrFSxCkboZWewOYv9MDBQtN86:J9lF4oG6QNx","tlshash":"abb1ccea423419c577eff3587c837792211f44a3e82f8ad8e7a2900ca69c6941593f4f","first_seen":"2025-10-23T11:35:38.880152Z","last_seen":"2026-08-10T01:43:08.435574Z","times_seen":13,"resource_available":false,"data":null}},"time_used":892,"timings":{"blocked":733,"dns":0,"connect":0,"send":0,"wait":159,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"affiduciary.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"affiduciary.com/home/css/elements-css/subscribe.css","fqdn":"affiduciary.com","domain":"affiduciary.com","tld":"com"},"ip":{"addr":"84.75.144.0","port":443,"asn":6730,"as":"Sunrise GmbH","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://affiduciary.com/","date":"2026-08-10T01:42:11.605Z","timestamp":1786326131605,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.affiduciary.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 18 Jul 2026 22:13:22 GMT","end":"Fri, 16 Oct 2026 22:13:21 GMT"},"fingerprint":{"sha1":"32:43:A0:00:CF:FD:A9:87:65:2E:DD:F9:02:A4:05:36:9F:CB:8F:92","sha256":"1C:59:C8:76:96:00:CF:9A:AC:CF:35:1C:3E:BB:59:D9:02:79:09:FF:C2:68:CC:63:53:B2:D6:D6:EE:2E:D1:FB"}}},"request":{"raw":"GET /home/css/elements-css/subscribe.css HTTP/1.1\r\nHost: affiduciary.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://affiduciary.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6Img3VjgvSG16V0N1ZmFOUWVSNDl0R2c9PSIsInZhbHVlIjoiRlpQOEFoNFRwci9TakdBZ3NWRThUblljOWZVSnNtcjZmdm1yVmY1YnNVL29QQmFnajVDMlh2aGF1Z3B2Sm1YLzdKL29zMmpJcFVWa21oZzMxbEhoUmFMUnlhcEQ2WitpYWoxSC9KQ2VNS244dEZRaDBHRG9WbEJHZkFhRThNRFQiLCJtYWMiOiI0OTgzNDk2ODI5NTEzMzllNDUzODgzN2RlZTk1YTg5OTMxOWVmMDBhYWY5M2MxZjUwYTNiOWU5ODE2Yzc5NjA3IiwidGFnIjoiIn0%3D; affiduciary_session=eyJpdiI6ImdBMktxSFlhN0ROL1d3NE1HaVVqNEE9PSIsInZhbHVlIjoiZUwrMW44M0ZnZHN6TVJPTmg3M1l2Y1kwNVF5OE0rbjBraEtVekdvSmpIR2xuUW51NFhVRzRSaTJIcUdMaldibFdyTmU5L09jUkRESVpYY0VCb0QvZEZxNEhGM3VUcERiamZIdC9uZ3F3TzdTNUNBQTVmekdlb2c2UUZHWmcwQzciLCJtYWMiOiJjYWUwYzNlNWU2MDJkMGQzNmZmM2RlZDE4YjFkZjRmN2FmMWVmODgzNzMxYjcwYzkzNDdlZWVmYjBlYWRmNjE3IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 10 Aug 2026 01:42:12 GMT\r\nContent-Type: text/css\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nStrict-Transport-Security: max-age=63072000; includeSubDomains; preload\r\nContent-Security-Policy: upgrade-insecure-requests\r\nVary: Accept-Encoding, User-Agent,Accept-Encoding\r\nLast-Modified: Sun, 16 Mar 2025 15:58:09 GMT\r\nContent-Encoding: br\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1378,"size_decoded":760,"mime_type":"text/css","magic":"ASCII text","md5":"8b29ff66a166a7b7aa7abff6e1de3a12","sha1":"b25f0feedb9db9a5d12d905c7500343bbd990fe4","sha256":"200d09fc17562c2f3a187312cb7356237d5c7e585c561986e4576e23a5978a4f","sha512":"16fef75b56ec3c7e847418e143406f33fa05283a5ae56bd008530148c562b520063aaaa507b50e5c7d9cc1a7c2343c64ba158884058695d646beba3ba1acf4ef","ssdeep":"","tlshash":"e9216c16fd702845d21fb5b5bcd23bcf11290565e92e0c99a4f22078939c4ec5657e8f","first_seen":"2025-10-23T11:35:38.92607Z","last_seen":"2026-08-10T01:43:08.436167Z","times_seen":13,"resource_available":false,"data":null}},"time_used":895,"timings":{"blocked":735,"dns":0,"connect":0,"send":0,"wait":160,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"affiduciary.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"affiduciary.com/home/js/scrollbar.js","fqdn":"affiduciary.com","domain":"affiduciary.com","tld":"com"},"ip":{"addr":"84.75.144.0","port":443,"asn":6730,"as":"Sunrise GmbH","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://affiduciary.com/","date":"2026-08-10T01:42:11.623Z","timestamp":1786326131623,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.affiduciary.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 18 Jul 2026 22:13:22 GMT","end":"Fri, 16 Oct 2026 22:13:21 GMT"},"fingerprint":{"sha1":"32:43:A0:00:CF:FD:A9:87:65:2E:DD:F9:02:A4:05:36:9F:CB:8F:92","sha256":"1C:59:C8:76:96:00:CF:9A:AC:CF:35:1C:3E:BB:59:D9:02:79:09:FF:C2:68:CC:63:53:B2:D6:D6:EE:2E:D1:FB"}}},"request":{"raw":"GET /home/js/scrollbar.js HTTP/1.1\r\nHost: affiduciary.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://affiduciary.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6Img3VjgvSG16V0N1ZmFOUWVSNDl0R2c9PSIsInZhbHVlIjoiRlpQOEFoNFRwci9TakdBZ3NWRThUblljOWZVSnNtcjZmdm1yVmY1YnNVL29QQmFnajVDMlh2aGF1Z3B2Sm1YLzdKL29zMmpJcFVWa21oZzMxbEhoUmFMUnlhcEQ2WitpYWoxSC9KQ2VNS244dEZRaDBHRG9WbEJHZkFhRThNRFQiLCJtYWMiOiI0OTgzNDk2ODI5NTEzMzllNDUzODgzN2RlZTk1YTg5OTMxOWVmMDBhYWY5M2MxZjUwYTNiOWU5ODE2Yzc5NjA3IiwidGFnIjoiIn0%3D; affiduciary_session=eyJpdiI6ImdBMktxSFlhN0ROL1d3NE1HaVVqNEE9PSIsInZhbHVlIjoiZUwrMW44M0ZnZHN6TVJPTmg3M1l2Y1kwNVF5OE0rbjBraEtVekdvSmpIR2xuUW51NFhVRzRSaTJIcUdMaldibFdyTmU5L09jUkRESVpYY0VCb0QvZEZxNEhGM3VUcERiamZIdC9uZ3F3TzdTNUNBQTVmekdlb2c2UUZHWmcwQzciLCJtYWMiOiJjYWUwYzNlNWU2MDJkMGQzNmZmM2RlZDE4YjFkZjRmN2FmMWVmODgzNzMxYjcwYzkzNDdlZWVmYjBlYWRmNjE3IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 10 Aug 2026 01:42:12 GMT\r\nContent-Type: text/javascript\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nStrict-Transport-Security: max-age=63072000; includeSubDomains; preload\r\nContent-Security-Policy: upgrade-insecure-requests\r\nVary: Accept-Encoding, User-Agent,Accept-Encoding\r\nLast-Modified: Sun, 16 Mar 2025 15:58:09 GMT\r\nContent-Encoding: br\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":40547,"size_decoded":12123,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (32009)","md5":"71951b246c4726520dce912a5ac7f03c","sha1":"56906b9b9f41df67063091b7a66c8584d87d748f","sha256":"dd3bda90c210c66fd618bb0c35f4b21f871ce1dae7396053cb4b3a90b3ec51b0","sha512":"ff0b38e4e02096dedcc6fb1a0899a7f8924a89e9b25bb8d712f5ffb01414641b009da55c45241ddea6440eecb7ebff11ea93318aea46ff3ff71a2e22670cb48d","ssdeep":"768:nAGHgQl8dA0unnTUOxZ5ynGi65vqjSDHR17JayK:nAGHUSnTUOxZqxjv","tlshash":"7a03f9e9370534fb12db6f5e441b010963365956a70b8870387d8cb82fb1ea622b7b6d","first_seen":"2023-03-07T12:05:43Z","last_seen":"2026-08-10T01:45:19.746915Z","times_seen":4294,"resource_available":true,"data":null}},"time_used":1206,"timings":{"blocked":1044,"dns":0,"connect":0,"send":0,"wait":162,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"affiduciary.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"affiduciary.com/home/images/cigar-afficinado.jpeg","fqdn":"affiduciary.com","domain":"affiduciary.com","tld":"com"},"ip":{"addr":"84.75.144.0","port":443,"asn":6730,"as":"Sunrise GmbH","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://affiduciary.com/","date":"2026-08-10T01:42:11.646Z","timestamp":1786326131646,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.affiduciary.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 18 Jul 2026 22:13:22 GMT","end":"Fri, 16 Oct 2026 22:13:21 GMT"},"fingerprint":{"sha1":"32:43:A0:00:CF:FD:A9:87:65:2E:DD:F9:02:A4:05:36:9F:CB:8F:92","sha256":"1C:59:C8:76:96:00:CF:9A:AC:CF:35:1C:3E:BB:59:D9:02:79:09:FF:C2:68:CC:63:53:B2:D6:D6:EE:2E:D1:FB"}}},"request":{"raw":"GET /home/images/cigar-afficinado.jpeg HTTP/1.1\r\nHost: affiduciary.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://affiduciary.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6Img3VjgvSG16V0N1ZmFOUWVSNDl0R2c9PSIsInZhbHVlIjoiRlpQOEFoNFRwci9TakdBZ3NWRThUblljOWZVSnNtcjZmdm1yVmY1YnNVL29QQmFnajVDMlh2aGF1Z3B2Sm1YLzdKL29zMmpJcFVWa21oZzMxbEhoUmFMUnlhcEQ2WitpYWoxSC9KQ2VNS244dEZRaDBHRG9WbEJHZkFhRThNRFQiLCJtYWMiOiI0OTgzNDk2ODI5NTEzMzllNDUzODgzN2RlZTk1YTg5OTMxOWVmMDBhYWY5M2MxZjUwYTNiOWU5ODE2Yzc5NjA3IiwidGFnIjoiIn0%3D; affiduciary_session=eyJpdiI6ImdBMktxSFlhN0ROL1d3NE1HaVVqNEE9PSIsInZhbHVlIjoiZUwrMW44M0ZnZHN6TVJPTmg3M1l2Y1kwNVF5OE0rbjBraEtVekdvSmpIR2xuUW51NFhVRzRSaTJIcUdMaldibFdyTmU5L09jUkRESVpYY0VCb0QvZEZxNEhGM3VUcERiamZIdC9uZ3F3TzdTNUNBQTVmekdlb2c2UUZHWmcwQzciLCJtYWMiOiJjYWUwYzNlNWU2MDJkMGQzNmZmM2RlZDE4YjFkZjRmN2FmMWVmODgzNzMxYjcwYzkzNDdlZWVmYjBlYWRmNjE3IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 10 Aug 2026 01:42:13 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 79623\r\nConnection: keep-alive\r\nStrict-Transport-Security: max-age=63072000; includeSubDomains; preload\r\nContent-Security-Policy: upgrade-insecure-requests\r\nVary: User-Agent\r\nLast-Modified: Sun, 16 Mar 2025 15:58:09 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":79623,"size_decoded":79978,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 684x855, components 3","md5":"44eb5fb73a7939b64b9e7543e15df8d1","sha1":"48339b04c74f03bb6a9bdf0da7f0de397b3a3c69","sha256":"27d987ad8a78d84372bfd0cc06049b15e4e73aed0d458af6e774ee658ff93e8b","sha512":"e118ae3c9ca0b4b2631fdc7c1ef4a4b67b5e4af788c137611aaff4d5fdccb67395604ac0ec8fc450255dd0be7bd070f577d3b1e04b0eaf767b2dcb9043028701","ssdeep":"1536:JdXZT5ZzhMJ8ZPKuy9EfoVgk7DOXHrXoSFwvF5bfhUB0:P5haQ3mvOXIvWB0","tlshash":"d5731230f9744d4eb306875e9e2b5ee1cb80271a221a886d15b16d129cf7c6bbc37772","first_seen":"2025-10-23T11:35:38.943044Z","last_seen":"2026-08-10T01:43:08.437432Z","times_seen":3,"resource_available":false,"data":null}},"time_used":1728,"timings":{"blocked":1407,"dns":0,"connect":0,"send":0,"wait":161,"receive":160,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"affiduciary.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"affiduciary.com/home/js/popper.min.js","fqdn":"affiduciary.com","domain":"affiduciary.com","tld":"com"},"ip":{"addr":"84.75.144.0","port":443,"asn":6730,"as":"Sunrise GmbH","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://affiduciary.com/","date":"2026-08-10T01:42:11.613Z","timestamp":1786326131613,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.affiduciary.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 18 Jul 2026 22:13:22 GMT","end":"Fri, 16 Oct 2026 22:13:21 GMT"},"fingerprint":{"sha1":"32:43:A0:00:CF:FD:A9:87:65:2E:DD:F9:02:A4:05:36:9F:CB:8F:92","sha256":"1C:59:C8:76:96:00:CF:9A:AC:CF:35:1C:3E:BB:59:D9:02:79:09:FF:C2:68:CC:63:53:B2:D6:D6:EE:2E:D1:FB"}}},"request":{"raw":"GET /home/js/popper.min.js HTTP/1.1\r\nHost: affiduciary.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://affiduciary.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6Img3VjgvSG16V0N1ZmFOUWVSNDl0R2c9PSIsInZhbHVlIjoiRlpQOEFoNFRwci9TakdBZ3NWRThUblljOWZVSnNtcjZmdm1yVmY1YnNVL29QQmFnajVDMlh2aGF1Z3B2Sm1YLzdKL29zMmpJcFVWa21oZzMxbEhoUmFMUnlhcEQ2WitpYWoxSC9KQ2VNS244dEZRaDBHRG9WbEJHZkFhRThNRFQiLCJtYWMiOiI0OTgzNDk2ODI5NTEzMzllNDUzODgzN2RlZTk1YTg5OTMxOWVmMDBhYWY5M2MxZjUwYTNiOWU5ODE2Yzc5NjA3IiwidGFnIjoiIn0%3D; affiduciary_session=eyJpdiI6ImdBMktxSFlhN0ROL1d3NE1HaVVqNEE9PSIsInZhbHVlIjoiZUwrMW44M0ZnZHN6TVJPTmg3M1l2Y1kwNVF5OE0rbjBraEtVekdvSmpIR2xuUW51NFhVRzRSaTJIcUdMaldibFdyTmU5L09jUkRESVpYY0VCb0QvZEZxNEhGM3VUcERiamZIdC9uZ3F3TzdTNUNBQTVmekdlb2c2UUZHWmcwQzciLCJtYWMiOiJjYWUwYzNlNWU2MDJkMGQzNmZmM2RlZDE4YjFkZjRmN2FmMWVmODgzNzMxYjcwYzkzNDdlZWVmYjBlYWRmNjE3IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 10 Aug 2026 01:42:12 GMT\r\nContent-Type: text/javascript\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nStrict-Transport-Security: max-age=63072000; includeSubDomains; preload\r\nContent-Security-Policy: upgrade-insecure-requests\r\nVary: Accept-Encoding, User-Agent,Accept-Encoding\r\nLast-Modified: Sun, 16 Mar 2025 15:58:09 GMT\r\nContent-Encoding: br\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":20494,"size_decoded":7349,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (20322)","md5":"c1d29c9b4fa7a8ee8417a01bc9ac1b56","sha1":"0c78c7993cba9ca26741f1df9735eb18d4c0e50d","sha256":"e074908c3749fe751173f181f33c7092f3a7b4de504dc12ebe072d537a7607c4","sha512":"142f2b7fa9dc007d01f6d44cc89eba587d7c47258bd3b2b4360359ab2345e822306e79588da16b9518728f4dc99a495990897ab800f8a3a7107f5fd0a8ed8eb2","ssdeep":"384:f5LFrVVVnCQvIR/CFU4hHPV4kdxXvYqo2D75zCx+vI2am3MxGpGTgd/9jt9+Db9O:hNVVVnyiU41xXvlD7wx+v0xyGTgnZO9O","tlshash":"2892a2cc3294b06647e791a7a07f960eb2339875650e9410f299f2e97c30ef9913bc79","first_seen":"2023-03-07T12:27:54Z","last_seen":"2026-08-10T01:43:08.438012Z","times_seen":509,"resource_available":true,"data":null}},"time_used":942,"timings":{"blocked":770,"dns":0,"connect":0,"send":0,"wait":172,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"affiduciary.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"affiduciary.com/home/css/flaticon.css","fqdn":"affiduciary.com","domain":"affiduciary.com","tld":"com"},"ip":{"addr":"84.75.144.0","port":443,"asn":6730,"as":"Sunrise GmbH","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://affiduciary.com/","date":"2026-08-10T01:42:11.570Z","timestamp":1786326131570,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.affiduciary.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 18 Jul 2026 22:13:22 GMT","end":"Fri, 16 Oct 2026 22:13:21 GMT"},"fingerprint":{"sha1":"32:43:A0:00:CF:FD:A9:87:65:2E:DD:F9:02:A4:05:36:9F:CB:8F:92","sha256":"1C:59:C8:76:96:00:CF:9A:AC:CF:35:1C:3E:BB:59:D9:02:79:09:FF:C2:68:CC:63:53:B2:D6:D6:EE:2E:D1:FB"}}},"request":{"raw":"GET /home/css/flaticon.css HTTP/1.1\r\nHost: affiduciary.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://affiduciary.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6Img3VjgvSG16V0N1ZmFOUWVSNDl0R2c9PSIsInZhbHVlIjoiRlpQOEFoNFRwci9TakdBZ3NWRThUblljOWZVSnNtcjZmdm1yVmY1YnNVL29QQmFnajVDMlh2aGF1Z3B2Sm1YLzdKL29zMmpJcFVWa21oZzMxbEhoUmFMUnlhcEQ2WitpYWoxSC9KQ2VNS244dEZRaDBHRG9WbEJHZkFhRThNRFQiLCJtYWMiOiI0OTgzNDk2ODI5NTEzMzllNDUzODgzN2RlZTk1YTg5OTMxOWVmMDBhYWY5M2MxZjUwYTNiOWU5ODE2Yzc5NjA3IiwidGFnIjoiIn0%3D; affiduciary_session=eyJpdiI6ImdBMktxSFlhN0ROL1d3NE1HaVVqNEE9PSIsInZhbHVlIjoiZUwrMW44M0ZnZHN6TVJPTmg3M1l2Y1kwNVF5OE0rbjBraEtVekdvSmpIR2xuUW51NFhVRzRSaTJIcUdMaldibFdyTmU5L09jUkRESVpYY0VCb0QvZEZxNEhGM3VUcERiamZIdC9uZ3F3TzdTNUNBQTVmekdlb2c2UUZHWmcwQzciLCJtYWMiOiJjYWUwYzNlNWU2MDJkMGQzNmZmM2RlZDE4YjFkZjRmN2FmMWVmODgzNzMxYjcwYzkzNDdlZWVmYjBlYWRmNjE3IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 10 Aug 2026 01:42:11 GMT\r\nContent-Type: text/css\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nStrict-Transport-Security: max-age=63072000; includeSubDomains; preload\r\nContent-Security-Policy: upgrade-insecure-requests\r\nVary: Accept-Encoding, User-Agent,Accept-Encoding\r\nLast-Modified: Sun, 16 Mar 2025 15:58:09 GMT\r\nContent-Encoding: br\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2827,"size_decoded":934,"mime_type":"text/css","magic":"ASCII text","md5":"30d1c32df39d171e28fa513b15c4d74e","sha1":"ad3077c04aafc975f52bdffa99829a0d17a3e4f9","sha256":"40f2017b974211652b85233fa35e9c39c3865095374b5decc5618f0b4d65033f","sha512":"cfca0eb7a4c03bf95778bd8854bb75f92c20819a3b1065ea899f1e0d4a2056bc39b4f9a7b5ff481cab7d734b5f3603c0dbec66d2dd16447b196a739ac2a9281b","ssdeep":"","tlshash":"5751d6e098bd1d805300e5c522523621ef18a3299d8f6c5bf7a7798dbbf6241c1d63ec","first_seen":"2025-10-23T11:35:38.885874Z","last_seen":"2026-08-10T01:43:08.438559Z","times_seen":13,"resource_available":false,"data":null}},"time_used":485,"timings":{"blocked":-1,"dns":0,"connect":160,"send":0,"wait":161,"receive":0,"ssl":163},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"affiduciary.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"affiduciary.com/home/css/bootstrap.css","fqdn":"affiduciary.com","domain":"affiduciary.com","tld":"com"},"ip":{"addr":"84.75.144.0","port":443,"asn":6730,"as":"Sunrise GmbH","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://affiduciary.com/","date":"2026-08-10T01:42:11.575Z","timestamp":1786326131575,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.affiduciary.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 18 Jul 2026 22:13:22 GMT","end":"Fri, 16 Oct 2026 22:13:21 GMT"},"fingerprint":{"sha1":"32:43:A0:00:CF:FD:A9:87:65:2E:DD:F9:02:A4:05:36:9F:CB:8F:92","sha256":"1C:59:C8:76:96:00:CF:9A:AC:CF:35:1C:3E:BB:59:D9:02:79:09:FF:C2:68:CC:63:53:B2:D6:D6:EE:2E:D1:FB"}}},"request":{"raw":"GET /home/css/bootstrap.css HTTP/1.1\r\nHost: affiduciary.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://affiduciary.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6Img3VjgvSG16V0N1ZmFOUWVSNDl0R2c9PSIsInZhbHVlIjoiRlpQOEFoNFRwci9TakdBZ3NWRThUblljOWZVSnNtcjZmdm1yVmY1YnNVL29QQmFnajVDMlh2aGF1Z3B2Sm1YLzdKL29zMmpJcFVWa21oZzMxbEhoUmFMUnlhcEQ2WitpYWoxSC9KQ2VNS244dEZRaDBHRG9WbEJHZkFhRThNRFQiLCJtYWMiOiI0OTgzNDk2ODI5NTEzMzllNDUzODgzN2RlZTk1YTg5OTMxOWVmMDBhYWY5M2MxZjUwYTNiOWU5ODE2Yzc5NjA3IiwidGFnIjoiIn0%3D; affiduciary_session=eyJpdiI6ImdBMktxSFlhN0ROL1d3NE1HaVVqNEE9PSIsInZhbHVlIjoiZUwrMW44M0ZnZHN6TVJPTmg3M1l2Y1kwNVF5OE0rbjBraEtVekdvSmpIR2xuUW51NFhVRzRSaTJIcUdMaldibFdyTmU5L09jUkRESVpYY0VCb0QvZEZxNEhGM3VUcERiamZIdC9uZ3F3TzdTNUNBQTVmekdlb2c2UUZHWmcwQzciLCJtYWMiOiJjYWUwYzNlNWU2MDJkMGQzNmZmM2RlZDE4YjFkZjRmN2FmMWVmODgzNzMxYjcwYzkzNDdlZWVmYjBlYWRmNjE3IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 10 Aug 2026 01:42:11 GMT\r\nContent-Type: text/css\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nStrict-Transport-Security: max-age=63072000; includeSubDomains; preload\r\nContent-Security-Policy: upgrade-insecure-requests\r\nVary: Accept-Encoding, User-Agent,Accept-Encoding\r\nLast-Modified: Sun, 16 Mar 2025 15:58:09 GMT\r\nContent-Encoding: br\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":237901,"size_decoded":27049,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (560)","md5":"da3ef3abaf70aa5a4db4d4a238ae9ec5","sha1":"8ee118e07ac22c4a6991b5c8fdef3d8ac64851c0","sha256":"805c3f7b50a5da26971f3ff50e4d106d46273b9ceb361ed10da942709d1e9150","sha512":"4075ca28f315da8b4cc58530d0471ba85f3cb4ba9eb63d42a75f292424ee84b7c84e953383e940474070d8225a7ceffdea3b7716aa2950d89bb1f5e9c2c7db70","ssdeep":"1536:fBK5SE0/geRhzzT7K3HHnC9Df5E9gTYSN5g1yl9SB5/k7uptIjNbPZb:flgeR17uptIjNbPZb","tlshash":"cd345458fdf12828387b9259649abef9bb7c5082c60dcd75b5d32224cf893d15ca29c8","first_seen":"2025-10-23T11:35:39.016087Z","last_seen":"2026-08-10T01:43:08.439583Z","times_seen":13,"resource_available":false,"data":null}},"time_used":640,"timings":{"blocked":-1,"dns":0,"connect":158,"send":0,"wait":320,"receive":0,"ssl":161},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"affiduciary.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"translate.googleapis.com/translate_static/img/loading.gif","fqdn":"translate.googleapis.com","domain":"translate.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.74","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://affiduciary.com/","date":"2026-08-10T01:42:16.789Z","timestamp":1786326136789,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Jul 2026 18:07:43 GMT","end":"Mon, 12 Oct 2026 18:07:42 GMT"},"fingerprint":{"sha1":"3C:2E:4A:58:D0:DB:8D:00:50:7D:0E:E6:87:DE:CA:95:B3:BA:1B:89","sha256":"C2:4F:05:DF:4B:24:E4:A9:E4:2A:30:66:F4:78:E7:75:AC:AE:71:43:E7:DA:3E:24:4B:A3:AA:9A:39:4E:E2:E1"}}},"request":{"raw":"GET /translate_static/img/loading.gif HTTP/1.1\r\nHost: translate.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://affiduciary.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"static-on-bigtable\"\r\nreport-to: {\"group\":\"static-on-bigtable\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/static-on-bigtable\"}]}\r\ncontent-length: 702\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 07 Aug 2026 21:37:37 GMT\r\nexpires: Sat, 07 Aug 2027 21:37:37 GMT\r\ncache-control: public, max-age=31536000\r\nage: 187479\r\nlast-modified: Thu, 03 Oct 2019 10:15:00 GMT\r\ncontent-type: image/gif\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":702,"size_decoded":1361,"mime_type":"image/gif","magic":"GIF image data, version 89a, 16 x 16","md5":"eefaa072b284a305c12c06608333abc2","sha1":"58272721ccc1efda26eaa22354022c7c793edbb6","sha256":"fb6b7bcc1ab09f27db17bcbdf5239ce1d52af34f1fc5125b3fc8528a07848d21","sha512":"c5ccfdcd9ce76de85f043a1733c9f0b620e15babbaf2a5639684c7b2bb8e5a66473c9a83f14cb48d9cb6c6a1c6b36f2c5a28e25abaf131fb85ec5eedecbae4ac","ssdeep":"","tlshash":"5d01dd13f3d50473f66d0075a20cc57f010635daaadad7089a48117cfe1983c5239b82","first_seen":"2023-04-05T11:18:23Z","last_seen":"2026-08-10T02:31:29.70624Z","times_seen":19381,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"widget-v3.smartsuppcdn.com/assets/main-BI-Moxe0.js","fqdn":"widget-v3.smartsuppcdn.com","domain":"smartsuppcdn.com","tld":"com"},"ip":{"addr":"185.76.9.12","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://affiduciary.com/","date":"2026-08-10T01:42:20.073Z","timestamp":1786326140073,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1857279285.rsc.cdn77.org","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 04 Jun 2026 14:34:45 GMT","end":"Wed, 02 Sep 2026 14:34:44 GMT"},"fingerprint":{"sha1":"92:5D:A0:17:13:91:72:7B:B6:8C:6A:7D:A9:55:7F:C8:A9:47:11:99","sha256":"0E:FC:E3:4D:AD:32:B2:11:05:DC:E3:CD:CC:9E:10:DC:C5:2D:9E:1C:D7:C1:9C:00:92:15:43:C5:B7:0B:3A:D6"}}},"request":{"raw":"GET /assets/main-BI-Moxe0.js HTTP/1.1\r\nHost: widget-v3.smartsuppcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://affiduciary.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Mon, 10 Aug 2026 01:42:20 GMT\r\ncontent-type: application/javascript\r\naccess-control-allow-origin: *\r\ncache-control: max-age=31536000, public, immutable\r\netag: W/\"6a7093a4-3ea0\"\r\nexpires: Tue, 03 Aug 2027 13:15:01 GMT\r\nlast-modified: Mon, 03 Aug 2026 13:12:04 GMT\r\nx-77-nzt: k77cEdKtbQ6nazSy09OpuOCvL6vqc7G7KITfPi35MU/ESH9/o60BcVpkk7+8p4Qop2Lei6w\r\nx-77-nzt-ray: e2f75420ba2bfb1ca12c796a0bc58104\r\nage: 0\r\nx-77-cache: HIT\r\nx-77-age: 563220\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nserver: CDN77-Turbo\r\nx-77-pop: stockholmSE\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":16032,"size_decoded":6730,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (15624)","md5":"6a9d55e8dc66eb0b690bd00f7271e647","sha1":"befc832793a4eb6de6db51438d8b904079c156b9","sha256":"433b24ab945d5bf78deacbbb62265f4ce7fe10d8c06fa050f4c007c0e9f4f0eb","sha512":"af067ad24e8068dc001f356c1b6e8b3f821564fd781c448c2998cf3a081be1a37979d9804f20eb8de2960507e53ba46533d583dfae51eef19e217421a3049c04","ssdeep":"384:D7wI6JME1dwQBSB8g6eBtoK6hnETSzgfQBATS:DMxN1dwQk8g6Q+nEGiQBAu","tlshash":"c472e8341240783fb62b6919526ce497623ad25ce6d3c038de5fdd4d32d8cc299a3bb9","first_seen":"2026-08-03T19:54:11.753674Z","last_seen":"2026-08-10T01:51:44.869626Z","times_seen":257,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"affiduciary.com/home/js/isotope.js","fqdn":"affiduciary.com","domain":"affiduciary.com","tld":"com"},"ip":{"addr":"84.75.144.0","port":443,"asn":6730,"as":"Sunrise GmbH","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://affiduciary.com/","date":"2026-08-10T01:42:11.624Z","timestamp":1786326131624,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.affiduciary.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 18 Jul 2026 22:13:22 GMT","end":"Fri, 16 Oct 2026 22:13:21 GMT"},"fingerprint":{"sha1":"32:43:A0:00:CF:FD:A9:87:65:2E:DD:F9:02:A4:05:36:9F:CB:8F:92","sha256":"1C:59:C8:76:96:00:CF:9A:AC:CF:35:1C:3E:BB:59:D9:02:79:09:FF:C2:68:CC:63:53:B2:D6:D6:EE:2E:D1:FB"}}},"request":{"raw":"GET /home/js/isotope.js HTTP/1.1\r\nHost: affiduciary.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://affiduciary.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6Img3VjgvSG16V0N1ZmFOUWVSNDl0R2c9PSIsInZhbHVlIjoiRlpQOEFoNFRwci9TakdBZ3NWRThUblljOWZVSnNtcjZmdm1yVmY1YnNVL29QQmFnajVDMlh2aGF1Z3B2Sm1YLzdKL29zMmpJcFVWa21oZzMxbEhoUmFMUnlhcEQ2WitpYWoxSC9KQ2VNS244dEZRaDBHRG9WbEJHZkFhRThNRFQiLCJtYWMiOiI0OTgzNDk2ODI5NTEzMzllNDUzODgzN2RlZTk1YTg5OTMxOWVmMDBhYWY5M2MxZjUwYTNiOWU5ODE2Yzc5NjA3IiwidGFnIjoiIn0%3D; affiduciary_session=eyJpdiI6ImdBMktxSFlhN0ROL1d3NE1HaVVqNEE9PSIsInZhbHVlIjoiZUwrMW44M0ZnZHN6TVJPTmg3M1l2Y1kwNVF5OE0rbjBraEtVekdvSmpIR2xuUW51NFhVRzRSaTJIcUdMaldibFdyTmU5L09jUkRESVpYY0VCb0QvZEZxNEhGM3VUcERiamZIdC9uZ3F3TzdTNUNBQTVmekdlb2c2UUZHWmcwQzciLCJtYWMiOiJjYWUwYzNlNWU2MDJkMGQzNmZmM2RlZDE4YjFkZjRmN2FmMWVmODgzNzMxYjcwYzkzNDdlZWVmYjBlYWRmNjE3IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 10 Aug 2026 01:42:12 GMT\r\nContent-Type: text/javascript\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nStrict-Transport-Security: max-age=63072000; includeSubDomains; preload\r\nContent-Security-Policy: upgrade-insecure-requests\r\nVary: Accept-Encoding, User-Agent,Accept-Encoding\r\nLast-Modified: Sun, 16 Mar 2025 15:58:09 GMT\r\nContent-Encoding: br\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":37772,"size_decoded":10284,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (32039)","md5":"cedfc3cc73a712bf69fb86ce2f4c6281","sha1":"3fef439a03231dc3383dc26c1d53d942f898af11","sha256":"4217b832640548933d47886eff17b5624397e63d95cc1917107d9fb1fc241215","sha512":"2643f8006759ad3e07c791563b4acfd057821ce14911debf6803796dc7177fe0c32f696a72bdfeef4ca9d3f147f3db522cfa78c985b1dd06a8740cd743d3d13b","ssdeep":"768:BjlIew3PtifBnQ/KMDwmWD6sMKD6gjfGQre4+ZhFVByQ9zx:BjWSBnQ/LEBD6YD6Ee4+rf9zx","tlshash":"fe03b649b74079304387b1a696af110f733aa47ca90690ecb369d8fb1cb684d6133f79","first_seen":"2023-03-07T01:38:15Z","last_seen":"2026-08-10T01:43:08.44141Z","times_seen":814,"resource_available":true,"data":null}},"time_used":1206,"timings":{"blocked":1044,"dns":0,"connect":0,"send":0,"wait":162,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"affiduciary.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"affiduciary.com/home/serv/6.jpg","fqdn":"affiduciary.com","domain":"affiduciary.com","tld":"com"},"ip":{"addr":"84.75.144.0","port":443,"asn":6730,"as":"Sunrise GmbH","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://affiduciary.com/","date":"2026-08-10T01:42:11.652Z","timestamp":1786326131652,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.affiduciary.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 18 Jul 2026 22:13:22 GMT","end":"Fri, 16 Oct 2026 22:13:21 GMT"},"fingerprint":{"sha1":"32:43:A0:00:CF:FD:A9:87:65:2E:DD:F9:02:A4:05:36:9F:CB:8F:92","sha256":"1C:59:C8:76:96:00:CF:9A:AC:CF:35:1C:3E:BB:59:D9:02:79:09:FF:C2:68:CC:63:53:B2:D6:D6:EE:2E:D1:FB"}}},"request":{"raw":"GET /home/serv/6.jpg HTTP/1.1\r\nHost: affiduciary.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://affiduciary.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6Img3VjgvSG16V0N1ZmFOUWVSNDl0R2c9PSIsInZhbHVlIjoiRlpQOEFoNFRwci9TakdBZ3NWRThUblljOWZVSnNtcjZmdm1yVmY1YnNVL29QQmFnajVDMlh2aGF1Z3B2Sm1YLzdKL29zMmpJcFVWa21oZzMxbEhoUmFMUnlhcEQ2WitpYWoxSC9KQ2VNS244dEZRaDBHRG9WbEJHZkFhRThNRFQiLCJtYWMiOiI0OTgzNDk2ODI5NTEzMzllNDUzODgzN2RlZTk1YTg5OTMxOWVmMDBhYWY5M2MxZjUwYTNiOWU5ODE2Yzc5NjA3IiwidGFnIjoiIn0%3D; affiduciary_session=eyJpdiI6ImdBMktxSFlhN0ROL1d3NE1HaVVqNEE9PSIsInZhbHVlIjoiZUwrMW44M0ZnZHN6TVJPTmg3M1l2Y1kwNVF5OE0rbjBraEtVekdvSmpIR2xuUW51NFhVRzRSaTJIcUdMaldibFdyTmU5L09jUkRESVpYY0VCb0QvZEZxNEhGM3VUcERiamZIdC9uZ3F3TzdTNUNBQTVmekdlb2c2UUZHWmcwQzciLCJtYWMiOiJjYWUwYzNlNWU2MDJkMGQzNmZmM2RlZDE4YjFkZjRmN2FmMWVmODgzNzMxYjcwYzkzNDdlZWVmYjBlYWRmNjE3IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 10 Aug 2026 01:42:13 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 211266\r\nConnection: keep-alive\r\nStrict-Transport-Security: max-age=63072000; includeSubDomains; preload\r\nContent-Security-Policy: upgrade-insecure-requests\r\nVary: User-Agent\r\nLast-Modified: Sun, 16 Mar 2025 15:58:09 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":211266,"size_decoded":211622,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, progressive, precision 8, 1280x640, components 3","md5":"34b801dca8e09c09aaf18a1c1fb69e18","sha1":"5cff6876a928becdf5db16d329692732faa24c85","sha256":"57d1a2bd0a999f05643af021adf0df182623479e368465a3989869315d6548a0","sha512":"3951641797d6efc6a7815d11589050aeb6343358ac1f816e53ebd2fc229972483b522a1d95830bb07c6bf2630e692bb937b5e1713f941dab2b10f1b62bb5a0e1","ssdeep":"6144:gV4B1PH3myS8neA6P9Q/Lu0I5RRN75LgSo6e48TYbi:04fmyS8ne/i/LnCRTNLhneTYbi","tlshash":"3024129c982e8f36b50f5a5bd7f6a769a907fd2172c3319e263f8e706420b581013e35","first_seen":"2025-08-02T15:51:36.110551Z","last_seen":"2026-08-10T01:43:08.441951Z","times_seen":137,"resource_available":false,"data":null}},"time_used":1903,"timings":{"blocked":1569,"dns":0,"connect":0,"send":0,"wait":167,"receive":167,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"affiduciary.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"affiduciary.com/home/images/banner/banner-7.jpg","fqdn":"affiduciary.com","domain":"affiduciary.com","tld":"com"},"ip":{"addr":"84.75.144.0","port":443,"asn":6730,"as":"Sunrise GmbH","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://affiduciary.com/","date":"2026-08-10T01:42:13.056Z","timestamp":1786326133056,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.affiduciary.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 18 Jul 2026 22:13:22 GMT","end":"Fri, 16 Oct 2026 22:13:21 GMT"},"fingerprint":{"sha1":"32:43:A0:00:CF:FD:A9:87:65:2E:DD:F9:02:A4:05:36:9F:CB:8F:92","sha256":"1C:59:C8:76:96:00:CF:9A:AC:CF:35:1C:3E:BB:59:D9:02:79:09:FF:C2:68:CC:63:53:B2:D6:D6:EE:2E:D1:FB"}}},"request":{"raw":"GET /home/images/banner/banner-7.jpg HTTP/1.1\r\nHost: affiduciary.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://affiduciary.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6Img3VjgvSG16V0N1ZmFOUWVSNDl0R2c9PSIsInZhbHVlIjoiRlpQOEFoNFRwci9TakdBZ3NWRThUblljOWZVSnNtcjZmdm1yVmY1YnNVL29QQmFnajVDMlh2aGF1Z3B2Sm1YLzdKL29zMmpJcFVWa21oZzMxbEhoUmFMUnlhcEQ2WitpYWoxSC9KQ2VNS244dEZRaDBHRG9WbEJHZkFhRThNRFQiLCJtYWMiOiI0OTgzNDk2ODI5NTEzMzllNDUzODgzN2RlZTk1YTg5OTMxOWVmMDBhYWY5M2MxZjUwYTNiOWU5ODE2Yzc5NjA3IiwidGFnIjoiIn0%3D; affiduciary_session=eyJpdiI6ImdBMktxSFlhN0ROL1d3NE1HaVVqNEE9PSIsInZhbHVlIjoiZUwrMW44M0ZnZHN6TVJPTmg3M1l2Y1kwNVF5OE0rbjBraEtVekdvSmpIR2xuUW51NFhVRzRSaTJIcUdMaldibFdyTmU5L09jUkRESVpYY0VCb0QvZEZxNEhGM3VUcERiamZIdC9uZ3F3TzdTNUNBQTVmekdlb2c2UUZHWmcwQzciLCJtYWMiOiJjYWUwYzNlNWU2MDJkMGQzNmZmM2RlZDE4YjFkZjRmN2FmMWVmODgzNzMxYjcwYzkzNDdlZWVmYjBlYWRmNjE3IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 10 Aug 2026 01:42:13 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 129414\r\nConnection: keep-alive\r\nStrict-Transport-Security: max-age=63072000; includeSubDomains; preload\r\nContent-Security-Policy: upgrade-insecure-requests\r\nVary: User-Agent\r\nLast-Modified: Sun, 16 Mar 2025 15:58:09 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":129414,"size_decoded":129770,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1920x710, components 3","md5":"a894a31f7da8bf46efa0785864ce3bb9","sha1":"46033cfa687e9df517ccb068eb3ad572ce0030a4","sha256":"617cba9edb5ddf7d5a211dcd604d2b4a0a15d4391bf36aa4aa7770a3a3d8dfd8","sha512":"16782b2ec7e9ffaa678b1922da12dcf20ff3ba70a46672eaec58c7bee654b54925fbd502f818868e3c0f5029e3d691f21f29fb8fa9ebc5c32dc53df220ff2faf","ssdeep":"3072:eyx1Rv83LgMEuCf7nd+nGtr/gFjZitJS4uDt3q1:eGvU3LXENf7nd+nojAj+E4u5a1","tlshash":"a8c31224b40b7b11f59d4ceb88656e06e620c38c477d60ea39ff58ae2a107525df0dbb","first_seen":"2025-10-23T11:35:38.931242Z","last_seen":"2026-08-10T01:43:08.44257Z","times_seen":8,"resource_available":false,"data":null}},"time_used":790,"timings":{"blocked":618,"dns":0,"connect":0,"send":0,"wait":170,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"affiduciary.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"affiduciary.com/home/images/affiduciary.png","fqdn":"affiduciary.com","domain":"affiduciary.com","tld":"com"},"ip":{"addr":"84.75.144.0","port":443,"asn":6730,"as":"Sunrise GmbH","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://affiduciary.com/","date":"2026-08-10T01:42:13.981Z","timestamp":1786326133981,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.affiduciary.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 18 Jul 2026 22:13:22 GMT","end":"Fri, 16 Oct 2026 22:13:21 GMT"},"fingerprint":{"sha1":"32:43:A0:00:CF:FD:A9:87:65:2E:DD:F9:02:A4:05:36:9F:CB:8F:92","sha256":"1C:59:C8:76:96:00:CF:9A:AC:CF:35:1C:3E:BB:59:D9:02:79:09:FF:C2:68:CC:63:53:B2:D6:D6:EE:2E:D1:FB"}}},"request":{"raw":"GET /home/images/affiduciary.png HTTP/1.1\r\nHost: affiduciary.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://affiduciary.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6InplUlhwV1YybjRnQ1NEV1dVZ3piZFE9PSIsInZhbHVlIjoiUnRwVmtSVlBndjdQWG56b0JEOTQ2Q0pFTzVXSUtVd0didjNkS3NERmw5RDQzK1JXME82VDlEemEydDJ3Rm9XY2hnMUt6anBJV25nbXpkS29KTkZSblRLQUNOSFdzR2N0bnlrMnVCQkhDc3pQTE9KSEFzeitkTTlNZEsvbjg4N1QiLCJtYWMiOiJmZGIyMDQ5YjhjODFiNTdhZWM5Y2E1ODVmYmI0MTZiYTlkOTEwMmIwMThmMTdhNTI4ZmM0ZjZlMmE3ODUwMGEwIiwidGFnIjoiIn0%3D; affiduciary_session=eyJpdiI6IkNjWHNxOHFnN29jTXI3TkU3Qy9TRXc9PSIsInZhbHVlIjoiSEZEVnRZdWNMdk4rZkJoOVhoUCt1TFo0dUtXaVJDRktqVnZVaTNCK0pOSS9pZWs5NlZQZzBVRTZpckorRnE4UjdOYkNSbEVwaWhzZkx2amp0enlMY200TmJUd2R5VlNybGI0eEpSWFM0amdoREtaaEtyUmlLY1dPY2NwWngxYkciLCJtYWMiOiI0MWI5Yzk5YmU2YTBhZmQ1ZjdiNmExNjhiNTgyMDhmNDZlYzFjNzE1NDEwYmZmMjUwNDUyN2E1MjEzODBiMjVkIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 10 Aug 2026 01:42:14 GMT\r\nContent-Type: image/png\r\nContent-Length: 4737\r\nConnection: keep-alive\r\nStrict-Transport-Security: max-age=63072000; includeSubDomains; preload\r\nContent-Security-Policy: upgrade-insecure-requests\r\nVary: User-Agent\r\nLast-Modified: Sun, 16 Mar 2025 15:58:09 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4737,"size_decoded":5090,"mime_type":"image/png","magic":"PNG image data, 175 x 39, 8-bit colormap, non-interlaced","md5":"4bcd702f0afd89abc60a58f506615545","sha1":"ee1c66cdbfc526376b1ce1bcded1a51d160c7fbd","sha256":"97e9f414a5840a163ef5845f6d761a86340e32a8f63dfb938d735c732d974467","sha512":"53effa0501328a8ce822d11235e57137500538b59374e04458ab53327dcbf1b7e24dee4b6093cef67a2017d4729955f51f43ef2f5660e20866cac52d2b1c4906","ssdeep":"96:Krg7N3Lnyrj77GV87voY15evx/KVkMgDJzXiGcsRkMSZmr:X7Nmra20yUvp3DxS/1M7r","tlshash":"4fa17d3607760c6bc8161722b383145f8b3d6c872cd009b44862d2cae68b578fa9b6de","first_seen":"2025-10-23T11:35:38.892383Z","last_seen":"2026-08-10T01:43:08.443125Z","times_seen":3,"resource_available":false,"data":null}},"time_used":173,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":173,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"affiduciary.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/images/cleardot.gif","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.156.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://affiduciary.com/","date":"2026-08-10T01:42:16.788Z","timestamp":1786326136788,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Jul 2026 18:05:56 GMT","end":"Mon, 12 Oct 2026 18:05:55 GMT"},"fingerprint":{"sha1":"A9:3F:6E:0B:AD:3D:D0:80:52:15:1D:D5:E8:C7:78:BA:77:A7:82:4B","sha256":"F1:7B:9C:4B:5F:76:59:53:51:8B:60:95:36:73:6F:F0:DA:9D:43:63:A0:64:4C:CD:48:FD:44:DC:79:FC:F2:DA"}}},"request":{"raw":"GET /images/cleardot.gif HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://affiduciary.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\ncontent-type: image/gif\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"static-on-bigtable\"\r\nreport-to: {\"group\":\"static-on-bigtable\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/static-on-bigtable\"}]}\r\ncontent-length: 43\r\ndate: Mon, 10 Aug 2026 01:42:16 GMT\r\npragma: no-cache\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\ncache-control: no-cache, no-store, must-revalidate\r\nlast-modified: Tue, 22 Oct 2019 18:30:00 GMT\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":43,"size_decoded":717,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"fc94fb0c3ed8a8f909dbc7630a0987ff","sha1":"56d45f8a17f5078a20af9962c992ca4678450765","sha256":"2dfe28cbdb83f01c940de6a88ab86200154fd772d568035ac568664e52068363","sha512":"c87bf81fd70cf6434ca3a6c05ad6e9bd3f1d96f77dddad8d45ee043b126b2cb07a5cf23b4137b9d8462cd8a9adf2b463ab6de2b38c93db72d2d511ca60e3b57e","ssdeep":"","tlshash":"cb900003cac8c022c2a2c0300a0c03002bbaa8300228030ec0bc30fcec2a3a38c02000","first_seen":"2023-04-05T02:54:04Z","last_seen":"2026-08-10T03:38:46.717268Z","times_seen":82790,"resource_available":true,"data":null}},"time_used":42,"timings":{"blocked":0,"dns":2,"connect":24,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"translations.smartsuppcdn.com/api/v1/widget/translations/lang/en/defaults","fqdn":"translations.smartsuppcdn.com","domain":"smartsuppcdn.com","tld":"com"},"ip":{"addr":"185.76.9.27","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://affiduciary.com/","date":"2026-08-10T01:42:20.201Z","timestamp":1786326140201,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1087630013.rsc.cdn77.org","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 03 Jun 2026 14:33:02 GMT","end":"Tue, 01 Sep 2026 14:33:01 GMT"},"fingerprint":{"sha1":"CE:B9:32:81:E9:D2:46:C8:31:53:55:D3:41:19:F7:94:91:30:D1:93","sha256":"54:C9:41:2F:97:E8:14:28:D7:2C:4F:FA:E0:C3:3A:BC:85:F8:14:22:1C:98:23:82:53:4D:5D:58:C9:0B:C9:68"}}},"request":{"raw":"GET /api/v1/widget/translations/lang/en/defaults HTTP/1.1\r\nHost: translations.smartsuppcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://affiduciary.com/\r\nOrigin: https://affiduciary.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Mon, 10 Aug 2026 01:42:27 GMT\r\ncontent-type: application/json; charset=utf-8\r\naccess-control-allow-origin: *\r\ncache-control: max-age=600\r\nx-response-time: 0ms\r\nx-version: 143765d349003193ebd3783518e376c4c54f428f\r\nx-77-nzt: k4Ymah319g2yMOsykVG+NiejUGBoj3u98crjskimdAreeD681YwqMu/tqq1+GA5EyEoD7hs\r\nx-77-nzt-ray: fdb54123af7f4ac7a82c796acb8fde00\r\nage: 0\r\nx-77-cache: HIT\r\nx-77-age: 423\r\nvary: Origin, Accept-Encoding\r\ncontent-encoding: gzip\r\nserver: CDN77-Turbo\r\nx-77-pop: stockholmSE\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":7219,"size_decoded":3357,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"0259a73d21d0110609c1b3d5cab20ebe","sha1":"f80fcc484290999d3c48fe3d75f434cb63a00b4a","sha256":"ff798ee596d00dfbc59c3916cde6ce6cc8fd9183e1cd673c45dc6be9b333e582","sha512":"fbb7720f87a9673084b909fc940d2861fb5b1a7ce80d7a60d469eabe47765e69bce287d2bece28eb226d2e75e1c8202283aeda38f34ff354c2466f567ee3535b","ssdeep":"192:Ccdft/hcRl6WKHSY8pZcqq+jT0UHAfoW/Ymz8:CgF/hcSWbYKZcF+jhqoWQmw","tlshash":"ede1b64f9a144ea987c643c276cfb84675bc807342509d7afd8cc9b842697cda3e3b94","first_seen":"2026-07-27T13:24:21.79927Z","last_seen":"2026-08-10T01:51:44.880418Z","times_seen":701,"resource_available":false,"data":null}},"time_used":6820,"timings":{"blocked":0,"dns":31,"connect":8,"send":0,"wait":8,"receive":0,"ssl":6773},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"wss","addr":"wss://websocket-visitors.smartsupp.com/socket/?EIO=3\u0026transport=websocket","fqdn":"websocket-visitors.smartsupp.com","domain":"smartsupp.com","tld":"com"},"ip":{"addr":"18.198.19.146","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://affiduciary.com/","date":"2026-08-10T01:42:27.105Z","timestamp":1786326147105,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.smartsupp.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Wed, 24 Jun 2026 00:00:00 GMT","end":"Thu, 07 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"4F:1A:3B:79:00:E3:DC:1F:92:62:7C:DC:85:3A:BE:8C:D1:68:F2:57","sha256":"7F:93:E6:29:5D:CA:78:BD:30:0D:25:11:3B:E2:01:C9:DC:80:3C:80:90:3F:84:D2:72:1B:0D:42:F1:20:13:D9"}}},"request":{"raw":"GET /socket/?EIO=3\u0026transport=websocket HTTP/1.1\r\nHost: websocket-visitors.smartsupp.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-WebSocket-Version: 13\r\nOrigin: https://affiduciary.com\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: jQaI38+xSHXkJdhCvtM0hA==\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: Upgrade\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 101 Switching Protocols\r\nDate: Mon, 10 Aug 2026 01:42:27 GMT\r\nConnection: upgrade\r\nUpgrade: websocket\r\nSec-WebSocket-Accept: 10G7uLhCrsF4YlCWci8214ONeWU=\r\nSec-WebSocket-Version: 13\r\nWebSocket-Server: uWebSockets\r\n\r\n","headers":null,"cookies":null,"status_code":"101","status_text":"Switching Protocols","fingerprints":null,"data":{"size":0,"size_decoded":224,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-10T04:49:07.925952Z","times_seen":17811481,"resource_available":true,"data":null}},"time_used":247,"timings":{"blocked":0,"dns":86,"connect":106,"send":0,"wait":27,"receive":0,"ssl":28},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Jost:ital,wght@0,300;0,400;0,500;0,600;0,700;0,800;0,900;1,300;1,400;1,500;1,600;1,700;1,800;1,900\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://affiduciary.com/","date":"2026-08-10T01:42:11.565Z","timestamp":1786326131565,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Jul 2026 18:07:43 GMT","end":"Mon, 12 Oct 2026 18:07:42 GMT"},"fingerprint":{"sha1":"3C:2E:4A:58:D0:DB:8D:00:50:7D:0E:E6:87:DE:CA:95:B3:BA:1B:89","sha256":"C2:4F:05:DF:4B:24:E4:A9:E4:2A:30:66:F4:78:E7:75:AC:AE:71:43:E7:DA:3E:24:4B:A3:AA:9A:39:4E:E2:E1"}}},"request":{"raw":"GET /css2?family=Jost:ital,wght@0,300;0,400;0,500;0,600;0,700;0,800;0,900;1,300;1,400;1,500;1,600;1,700;1,800;1,900\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://affiduciary.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Mon, 10 Aug 2026 01:42:11 GMT\r\ndate: Mon, 10 Aug 2026 01:42:11 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":15456,"size_decoded":1325,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"f3852aa0722854457b97927a17c0c86a","sha1":"80986f73897b7264ded240b71c1582031519d76c","sha256":"1a665ca3ecaa0bccac596e2a05876ea23752eca3979ecf185cf0bb69053a80db","sha512":"d34cc424fe79af4061f4444196c6cbf52d77a1a478ba61bb42021682dd1dbe14644c3256a27f39a6cfb8b4d626260e5eb0c91458f1138074819d0232c7120321","ssdeep":"384:JXlfnXCm+XnJtXE4EXRT7XuqCXjNR/ApqDMb:r","tlshash":"3662ac91042be510eb931dc237cfbe379e0fa1556844da798efd18d8ec9adaa426070d","first_seen":"2025-09-11T09:28:44.4372Z","last_seen":"2026-08-10T01:43:08.445295Z","times_seen":333,"resource_available":false,"data":null}},"time_used":317,"timings":{"blocked":-1,"dns":1,"connect":16,"send":0,"wait":35,"receive":0,"ssl":28},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"affiduciary.com/home/css/jquery.fancybox.min.css","fqdn":"affiduciary.com","domain":"affiduciary.com","tld":"com"},"ip":{"addr":"84.75.144.0","port":443,"asn":6730,"as":"Sunrise GmbH","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://affiduciary.com/","date":"2026-08-10T01:42:11.578Z","timestamp":1786326131578,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.affiduciary.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 18 Jul 2026 22:13:22 GMT","end":"Fri, 16 Oct 2026 22:13:21 GMT"},"fingerprint":{"sha1":"32:43:A0:00:CF:FD:A9:87:65:2E:DD:F9:02:A4:05:36:9F:CB:8F:92","sha256":"1C:59:C8:76:96:00:CF:9A:AC:CF:35:1C:3E:BB:59:D9:02:79:09:FF:C2:68:CC:63:53:B2:D6:D6:EE:2E:D1:FB"}}},"request":{"raw":"GET /home/css/jquery.fancybox.min.css HTTP/1.1\r\nHost: affiduciary.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://affiduciary.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6Img3VjgvSG16V0N1ZmFOUWVSNDl0R2c9PSIsInZhbHVlIjoiRlpQOEFoNFRwci9TakdBZ3NWRThUblljOWZVSnNtcjZmdm1yVmY1YnNVL29QQmFnajVDMlh2aGF1Z3B2Sm1YLzdKL29zMmpJcFVWa21oZzMxbEhoUmFMUnlhcEQ2WitpYWoxSC9KQ2VNS244dEZRaDBHRG9WbEJHZkFhRThNRFQiLCJtYWMiOiI0OTgzNDk2ODI5NTEzMzllNDUzODgzN2RlZTk1YTg5OTMxOWVmMDBhYWY5M2MxZjUwYTNiOWU5ODE2Yzc5NjA3IiwidGFnIjoiIn0%3D; affiduciary_session=eyJpdiI6ImdBMktxSFlhN0ROL1d3NE1HaVVqNEE9PSIsInZhbHVlIjoiZUwrMW44M0ZnZHN6TVJPTmg3M1l2Y1kwNVF5OE0rbjBraEtVekdvSmpIR2xuUW51NFhVRzRSaTJIcUdMaldibFdyTmU5L09jUkRESVpYY0VCb0QvZEZxNEhGM3VUcERiamZIdC9uZ3F3TzdTNUNBQTVmekdlb2c2UUZHWmcwQzciLCJtYWMiOiJjYWUwYzNlNWU2MDJkMGQzNmZmM2RlZDE4YjFkZjRmN2FmMWVmODgzNzMxYjcwYzkzNDdlZWVmYjBlYWRmNjE3IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 10 Aug 2026 01:42:11 GMT\r\nContent-Type: text/css\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nStrict-Transport-Security: max-age=63072000; includeSubDomains; preload\r\nContent-Security-Policy: upgrade-insecure-requests\r\nVary: Accept-Encoding, User-Agent,Accept-Encoding\r\nLast-Modified: Sun, 16 Mar 2025 15:58:09 GMT\r\nContent-Encoding: br\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":13735,"size_decoded":3330,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (13734), with no line terminators","md5":"35d290afd71a6053d8195ea13170b4e9","sha1":"a64676403bb5c23f9800963b0b8f0475b532601f","sha256":"e467f75601e845da217ae845b688b227a19fbf1e8fc776a42a4905869496d2e2","sha512":"0136028681f47450835a9bd6345bb647c95f2be3e963980e5b5e355f3cdc602772313640c5d9b72ae71252bbe8099b11de5663f3fde49b71a5170e42959f7788","ssdeep":"96:tGA07/mPQRZa6f3sNGzssDH7jGSWWf8+WDJT53RjRuCicfMAJpEbyZh5fN2WdZ:tVQfXcVa7KWdMT539MCeAL55fJ","tlshash":"b0524e63a140311c903bce21d7df8948e279d55266221affe68cf919cbc7be912d62c6","first_seen":"2023-04-05T04:47:26Z","last_seen":"2026-08-10T01:49:01.45832Z","times_seen":7127,"resource_available":false,"data":null}},"time_used":507,"timings":{"blocked":-1,"dns":0,"connect":167,"send":0,"wait":170,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"affiduciary.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/jost/v20/92zatBhPNqw73oTd4g.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://affiduciary.com/","date":"2026-08-10T01:42:12.643Z","timestamp":1786326132643,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Jul 2026 18:07:39 GMT","end":"Mon, 12 Oct 2026 18:07:38 GMT"},"fingerprint":{"sha1":"12:E8:CE:14:FC:4E:1E:0D:A3:9B:2E:5D:D0:88:79:79:71:C9:F8:6A","sha256":"58:07:B9:A1:6C:54:97:F9:9D:6A:66:E2:49:57:FB:86:86:8D:12:97:8F:4A:C9:74:A1:9D:69:4E:1F:A6:CC:9D"}}},"request":{"raw":"GET /s/jost/v20/92zatBhPNqw73oTd4g.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://affiduciary.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 26576\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 06 Aug 2026 07:47:11 GMT\r\nexpires: Fri, 06 Aug 2027 07:47:11 GMT\r\ncache-control: public, max-age=31536000\r\nage: 323701\r\nlast-modified: Tue, 09 Sep 2025 18:31:07 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":26576,"size_decoded":27389,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 26576, version 1.0","md5":"928f4210aa4859fcfdb853d2c6329589","sha1":"d3fc5b412c86d44da139622eb1712e22c3c510e0","sha256":"7726a5cd6f3c0e876c028ea2a643d45f7aad4b0f164b70966c669f4a4668f4b9","sha512":"41af246a04d784717cf33d2b4d03aaf639f37e4b1fa71694efeb65cc17369b4634ba6f51c202411b566c1f14f20cb69aba3f60a76ee740365fa9b135a51e878d","ssdeep":"768:c/bdLR0K3WlvjqHiGVNQsbQbVBjDcOrMNZYYH4V+:wTzW7qHijHVBjRrM3BY4","tlshash":"dac2e0c934e88a02d2cce133115e65511f98e170ba4e55aed5efe1dfcd98b403d88e86","first_seen":"2024-09-30T20:29:44Z","last_seen":"2026-08-10T04:02:29.750017Z","times_seen":25146,"resource_available":false,"data":null}},"time_used":73,"timings":{"blocked":18,"dns":0,"connect":0,"send":0,"wait":34,"receive":21,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"affiduciary.com/home/css/elements-css/service.css","fqdn":"affiduciary.com","domain":"affiduciary.com","tld":"com"},"ip":{"addr":"84.75.144.0","port":443,"asn":6730,"as":"Sunrise GmbH","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://affiduciary.com/","date":"2026-08-10T01:42:11.596Z","timestamp":1786326131596,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.affiduciary.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 18 Jul 2026 22:13:22 GMT","end":"Fri, 16 Oct 2026 22:13:21 GMT"},"fingerprint":{"sha1":"32:43:A0:00:CF:FD:A9:87:65:2E:DD:F9:02:A4:05:36:9F:CB:8F:92","sha256":"1C:59:C8:76:96:00:CF:9A:AC:CF:35:1C:3E:BB:59:D9:02:79:09:FF:C2:68:CC:63:53:B2:D6:D6:EE:2E:D1:FB"}}},"request":{"raw":"GET /home/css/elements-css/service.css HTTP/1.1\r\nHost: affiduciary.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://affiduciary.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6Img3VjgvSG16V0N1ZmFOUWVSNDl0R2c9PSIsInZhbHVlIjoiRlpQOEFoNFRwci9TakdBZ3NWRThUblljOWZVSnNtcjZmdm1yVmY1YnNVL29QQmFnajVDMlh2aGF1Z3B2Sm1YLzdKL29zMmpJcFVWa21oZzMxbEhoUmFMUnlhcEQ2WitpYWoxSC9KQ2VNS244dEZRaDBHRG9WbEJHZkFhRThNRFQiLCJtYWMiOiI0OTgzNDk2ODI5NTEzMzllNDUzODgzN2RlZTk1YTg5OTMxOWVmMDBhYWY5M2MxZjUwYTNiOWU5ODE2Yzc5NjA3IiwidGFnIjoiIn0%3D; affiduciary_session=eyJpdiI6ImdBMktxSFlhN0ROL1d3NE1HaVVqNEE9PSIsInZhbHVlIjoiZUwrMW44M0ZnZHN6TVJPTmg3M1l2Y1kwNVF5OE0rbjBraEtVekdvSmpIR2xuUW51NFhVRzRSaTJIcUdMaldibFdyTmU5L09jUkRESVpYY0VCb0QvZEZxNEhGM3VUcERiamZIdC9uZ3F3TzdTNUNBQTVmekdlb2c2UUZHWmcwQzciLCJtYWMiOiJjYWUwYzNlNWU2MDJkMGQzNmZmM2RlZDE4YjFkZjRmN2FmMWVmODgzNzMxYjcwYzkzNDdlZWVmYjBlYWRmNjE3IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 10 Aug 2026 01:42:12 GMT\r\nContent-Type: text/css\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nStrict-Transport-Security: max-age=63072000; includeSubDomains; preload\r\nContent-Security-Policy: upgrade-insecure-requests\r\nVary: Accept-Encoding, User-Agent,Accept-Encoding\r\nLast-Modified: Sun, 16 Mar 2025 15:58:09 GMT\r\nContent-Encoding: br\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6195,"size_decoded":1401,"mime_type":"text/css","magic":"ASCII text","md5":"40a62d409bc71db27148b92858955a83","sha1":"e947969ed849852da32a108ee9a3b553eb9561d2","sha256":"084d11bc6023133cfcc377943c740028cf3f64fb432dfd1e50196cfa718eaec1","sha512":"3829617f862bd7c6700104d9855b6c50ebffff2dc3af922dc4f9d5df6ce63ec3125aba50e09270b79744fc4a2ecbc964e157b7a592c9bc066997054323b7fda1","ssdeep":"96:OLRrH2sjzmM1G6ObCE8Pl++roFQXhs5Ur/yI9q2Anw:wjUej","tlshash":"46d1ed96d0a40a98534ef2542d96b7d1120e4092df3f1ed9e2faa018b2dc6cc249ff4f","first_seen":"2025-10-23T11:35:38.948447Z","last_seen":"2026-08-10T01:43:08.446901Z","times_seen":13,"resource_available":false,"data":null}},"time_used":734,"timings":{"blocked":575,"dns":0,"connect":0,"send":0,"wait":159,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"affiduciary.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"affiduciary.com/home/js/jquery.fancybox.js","fqdn":"affiduciary.com","domain":"affiduciary.com","tld":"com"},"ip":{"addr":"84.75.144.0","port":443,"asn":6730,"as":"Sunrise GmbH","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://affiduciary.com/","date":"2026-08-10T01:42:11.620Z","timestamp":1786326131620,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.affiduciary.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 18 Jul 2026 22:13:22 GMT","end":"Fri, 16 Oct 2026 22:13:21 GMT"},"fingerprint":{"sha1":"32:43:A0:00:CF:FD:A9:87:65:2E:DD:F9:02:A4:05:36:9F:CB:8F:92","sha256":"1C:59:C8:76:96:00:CF:9A:AC:CF:35:1C:3E:BB:59:D9:02:79:09:FF:C2:68:CC:63:53:B2:D6:D6:EE:2E:D1:FB"}}},"request":{"raw":"GET /home/js/jquery.fancybox.js HTTP/1.1\r\nHost: affiduciary.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://affiduciary.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6Img3VjgvSG16V0N1ZmFOUWVSNDl0R2c9PSIsInZhbHVlIjoiRlpQOEFoNFRwci9TakdBZ3NWRThUblljOWZVSnNtcjZmdm1yVmY1YnNVL29QQmFnajVDMlh2aGF1Z3B2Sm1YLzdKL29zMmpJcFVWa21oZzMxbEhoUmFMUnlhcEQ2WitpYWoxSC9KQ2VNS244dEZRaDBHRG9WbEJHZkFhRThNRFQiLCJtYWMiOiI0OTgzNDk2ODI5NTEzMzllNDUzODgzN2RlZTk1YTg5OTMxOWVmMDBhYWY5M2MxZjUwYTNiOWU5ODE2Yzc5NjA3IiwidGFnIjoiIn0%3D; affiduciary_session=eyJpdiI6ImdBMktxSFlhN0ROL1d3NE1HaVVqNEE9PSIsInZhbHVlIjoiZUwrMW44M0ZnZHN6TVJPTmg3M1l2Y1kwNVF5OE0rbjBraEtVekdvSmpIR2xuUW51NFhVRzRSaTJIcUdMaldibFdyTmU5L09jUkRESVpYY0VCb0QvZEZxNEhGM3VUcERiamZIdC9uZ3F3TzdTNUNBQTVmekdlb2c2UUZHWmcwQzciLCJtYWMiOiJjYWUwYzNlNWU2MDJkMGQzNmZmM2RlZDE4YjFkZjRmN2FmMWVmODgzNzMxYjcwYzkzNDdlZWVmYjBlYWRmNjE3IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 10 Aug 2026 01:42:12 GMT\r\nContent-Type: text/javascript\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nStrict-Transport-Security: max-age=63072000; includeSubDomains; preload\r\nContent-Security-Policy: upgrade-insecure-requests\r\nVary: Accept-Encoding, User-Agent,Accept-Encoding\r\nLast-Modified: Sun, 16 Mar 2025 15:58:09 GMT\r\nContent-Encoding: br\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":154104,"size_decoded":34552,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"6e11711058a9459a94d5a19b26a78135","sha1":"76792d5913afe035b6ccbac585b0b5e70b33aa76","sha256":"7b99eee1db728472aaa8452017a0d755f488e8d647cc0f62baf45f8ff65b95ba","sha512":"6ecbe997bc6e82fa7976a98e291ec31e043de23f0f5d06834fcc809cde8d0c3ffa0e96c734dfc0b0fbc313e405eac603540913794bb3a9a86ac56db5d2ab868a","ssdeep":"1536:26iljQs+4wETv0qwF/fwUsjuFR4amerr3txU0Me7/pby+mHWgGbAdKfW7WP83RSp:2NoETcqwF3wO/VUbZZr7WP83RSD6E3t","tlshash":"f3e3968a67bd112589333129ab8f705eb57e8423a10dd9263cad53481fc13a943f5fee","first_seen":"2023-03-07T12:02:41Z","last_seen":"2026-08-10T01:45:19.745118Z","times_seen":3592,"resource_available":true,"data":null}},"time_used":1286,"timings":{"blocked":942,"dns":0,"connect":0,"send":0,"wait":174,"receive":170,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"affiduciary.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/images/branding/product/2x/translate_24dp.png","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://affiduciary.com/","date":"2026-08-10T01:42:16.585Z","timestamp":1786326136585,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Jul 2026 18:07:39 GMT","end":"Mon, 12 Oct 2026 18:07:38 GMT"},"fingerprint":{"sha1":"12:E8:CE:14:FC:4E:1E:0D:A3:9B:2E:5D:D0:88:79:79:71:C9:F8:6A","sha256":"58:07:B9:A1:6C:54:97:F9:9D:6A:66:E2:49:57:FB:86:86:8D:12:97:8F:4A:C9:74:A1:9D:69:4E:1F:A6:CC:9D"}}},"request":{"raw":"GET /images/branding/product/2x/translate_24dp.png HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.gstatic.com/_/translate_http/_/ss/k=translate_http.tr.B7Dih9Jyjnw.L.F4.O/am=BIgABw/d=0/rs=AN8SPfoeobjU4Qsxvdz3-dk54RrUWPxdGg/m=el_main_css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"static-on-bigtable\"\r\nreport-to: {\"group\":\"static-on-bigtable\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/static-on-bigtable\"}]}\r\ncontent-length: 1842\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sun, 09 Aug 2026 21:19:25 GMT\r\nexpires: Mon, 09 Aug 2027 21:19:25 GMT\r\ncache-control: public, max-age=31536000\r\nage: 15771\r\nlast-modified: Thu, 14 Oct 2021 09:08:00 GMT\r\ncontent-type: image/png\r\nvary: Origin\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":1842,"size_decoded":2515,"mime_type":"image/png","magic":"PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced","md5":"c69c796362406f9e11c7f4bf5bb628da","sha1":"e489ce95ab56208090868882113d7416abf46775","sha256":"4dac0026fbfa2615dce30c0af12830863fe885f84387a0147b9e338f548d5d82","sha512":"d3ad560ed0fd29be7d2cc434694f09e5a6fbea8b29c0611aecb54a1b73b4d722c53f42a19dae9e3d5d358444e50fb8fffbc39d67ce751bdbc8c861f6f95d3162","ssdeep":"","tlshash":"4e31f9fd129220437101ade72165eef798347c15f412da60ce65ba389c9fe20ed9a619","first_seen":"2023-04-05T07:39:29Z","last_seen":"2026-08-10T03:09:03.831583Z","times_seen":74359,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://affiduciary.com/","date":"2026-08-10T01:42:37.945Z","timestamp":1786326157945,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Jul 2026 18:07:39 GMT","end":"Mon, 12 Oct 2026 18:07:38 GMT"},"fingerprint":{"sha1":"12:E8:CE:14:FC:4E:1E:0D:A3:9B:2E:5D:D0:88:79:79:71:C9:F8:6A","sha256":"58:07:B9:A1:6C:54:97:F9:9D:6A:66:E2:49:57:FB:86:86:8D:12:97:8F:4A:C9:74:A1:9D:69:4E:1F:A6:CC:9D"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://affiduciary.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 05 Aug 2026 13:10:32 GMT\r\nexpires: Thu, 05 Aug 2027 13:10:32 GMT\r\ncache-control: public, max-age=31536000\r\nage: 390725\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":48532,"size_decoded":49345,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-08-10T03:48:27.884429Z","times_seen":255812,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"affiduciary.com/home/images/shape/shape-27.png","fqdn":"affiduciary.com","domain":"affiduciary.com","tld":"com"},"ip":{"addr":"84.75.144.0","port":443,"asn":6730,"as":"Sunrise GmbH","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://affiduciary.com/","date":"2026-08-10T01:42:12.598Z","timestamp":1786326132598,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.affiduciary.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 18 Jul 2026 22:13:22 GMT","end":"Fri, 16 Oct 2026 22:13:21 GMT"},"fingerprint":{"sha1":"32:43:A0:00:CF:FD:A9:87:65:2E:DD:F9:02:A4:05:36:9F:CB:8F:92","sha256":"1C:59:C8:76:96:00:CF:9A:AC:CF:35:1C:3E:BB:59:D9:02:79:09:FF:C2:68:CC:63:53:B2:D6:D6:EE:2E:D1:FB"}}},"request":{"raw":"GET /home/images/shape/shape-27.png HTTP/1.1\r\nHost: affiduciary.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://affiduciary.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6Img3VjgvSG16V0N1ZmFOUWVSNDl0R2c9PSIsInZhbHVlIjoiRlpQOEFoNFRwci9TakdBZ3NWRThUblljOWZVSnNtcjZmdm1yVmY1YnNVL29QQmFnajVDMlh2aGF1Z3B2Sm1YLzdKL29zMmpJcFVWa21oZzMxbEhoUmFMUnlhcEQ2WitpYWoxSC9KQ2VNS244dEZRaDBHRG9WbEJHZkFhRThNRFQiLCJtYWMiOiI0OTgzNDk2ODI5NTEzMzllNDUzODgzN2RlZTk1YTg5OTMxOWVmMDBhYWY5M2MxZjUwYTNiOWU5ODE2Yzc5NjA3IiwidGFnIjoiIn0%3D; affiduciary_session=eyJpdiI6ImdBMktxSFlhN0ROL1d3NE1HaVVqNEE9PSIsInZhbHVlIjoiZUwrMW44M0ZnZHN6TVJPTmg3M1l2Y1kwNVF5OE0rbjBraEtVekdvSmpIR2xuUW51NFhVRzRSaTJIcUdMaldibFdyTmU5L09jUkRESVpYY0VCb0QvZEZxNEhGM3VUcERiamZIdC9uZ3F3TzdTNUNBQTVmekdlb2c2UUZHWmcwQzciLCJtYWMiOiJjYWUwYzNlNWU2MDJkMGQzNmZmM2RlZDE4YjFkZjRmN2FmMWVmODgzNzMxYjcwYzkzNDdlZWVmYjBlYWRmNjE3IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 10 Aug 2026 01:42:13 GMT\r\nContent-Type: image/png\r\nContent-Length: 15735\r\nConnection: keep-alive\r\nStrict-Transport-Security: max-age=63072000; includeSubDomains; preload\r\nContent-Security-Policy: upgrade-insecure-requests\r\nVary: User-Agent\r\nLast-Modified: Sun, 16 Mar 2025 15:58:09 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":15735,"size_decoded":16089,"mime_type":"image/png","magic":"PNG image data, 626 x 617, 8-bit/color RGBA, non-interlaced","md5":"92df9254d69abc4f2f8a242cfb0e8d64","sha1":"f0154e08d7e5531e6cb6cfcd75073c134da75215","sha256":"843676f612c32bc270e1cce2fa2acb79b6f2c90be34bbc38f841e6b8ddc1fd79","sha512":"163ddd3ae1867668629835390385d906e5008d0d86530040c22f8538799ad86a63845ce8668e777a3c96cbc56100703d6ac52abd3b486da0a740c86518a28eed","ssdeep":"384:7hA5n/c111hC8hnlLVn+b4kWeCYY3yl0fDm8Xh0gAVdU0PhLm:dA5nOC87p+b4/tYdmC8RRAVdlpq","tlshash":"ab62b0ed95f6c1ace30486c79afef167c3044b8da1fdc6969774b916f01a3a0221f05a","first_seen":"2024-08-19T19:47:46.933458Z","last_seen":"2026-08-10T01:43:08.449006Z","times_seen":19,"resource_available":false,"data":null}},"time_used":1215,"timings":{"blocked":1055,"dns":0,"connect":0,"send":0,"wait":160,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"affiduciary.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/jost/v20/92zatBhPNqw73oTd4g.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://affiduciary.com/","date":"2026-08-10T01:42:12.647Z","timestamp":1786326132647,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Jul 2026 18:07:39 GMT","end":"Mon, 12 Oct 2026 18:07:38 GMT"},"fingerprint":{"sha1":"12:E8:CE:14:FC:4E:1E:0D:A3:9B:2E:5D:D0:88:79:79:71:C9:F8:6A","sha256":"58:07:B9:A1:6C:54:97:F9:9D:6A:66:E2:49:57:FB:86:86:8D:12:97:8F:4A:C9:74:A1:9D:69:4E:1F:A6:CC:9D"}}},"request":{"raw":"GET /s/jost/v20/92zatBhPNqw73oTd4g.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://affiduciary.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 26576\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 06 Aug 2026 07:47:11 GMT\r\nexpires: Fri, 06 Aug 2027 07:47:11 GMT\r\ncache-control: public, max-age=31536000\r\nage: 323701\r\nlast-modified: Tue, 09 Sep 2025 18:31:07 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":26576,"size_decoded":27389,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 26576, version 1.0","md5":"928f4210aa4859fcfdb853d2c6329589","sha1":"d3fc5b412c86d44da139622eb1712e22c3c510e0","sha256":"7726a5cd6f3c0e876c028ea2a643d45f7aad4b0f164b70966c669f4a4668f4b9","sha512":"41af246a04d784717cf33d2b4d03aaf639f37e4b1fa71694efeb65cc17369b4634ba6f51c202411b566c1f14f20cb69aba3f60a76ee740365fa9b135a51e878d","ssdeep":"768:c/bdLR0K3WlvjqHiGVNQsbQbVBjDcOrMNZYYH4V+:wTzW7qHijHVBjRrM3BY4","tlshash":"dac2e0c934e88a02d2cce133115e65511f98e170ba4e55aed5efe1dfcd98b403d88e86","first_seen":"2024-09-30T20:29:44Z","last_seen":"2026-08-10T04:02:29.750017Z","times_seen":25146,"resource_available":false,"data":null}},"time_used":67,"timings":{"blocked":17,"dns":0,"connect":0,"send":0,"wait":18,"receive":32,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"translate.googleapis.com/_/translate_http/_/js/k=translate_http.tr.no.8-rDjGGwZWc.O/am=BIgABw/d=1/ed=1/rs=AN8SPfpUAFa5uYv7pPLt2IODKHQhyZPuWA/m=el_main","fqdn":"translate.googleapis.com","domain":"translate.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.74","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://affiduciary.com/","date":"2026-08-10T01:42:13.100Z","timestamp":1786326133100,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Jul 2026 18:07:43 GMT","end":"Mon, 12 Oct 2026 18:07:42 GMT"},"fingerprint":{"sha1":"3C:2E:4A:58:D0:DB:8D:00:50:7D:0E:E6:87:DE:CA:95:B3:BA:1B:89","sha256":"C2:4F:05:DF:4B:24:E4:A9:E4:2A:30:66:F4:78:E7:75:AC:AE:71:43:E7:DA:3E:24:4B:A3:AA:9A:39:4E:E2:E1"}}},"request":{"raw":"GET /_/translate_http/_/js/k=translate_http.tr.no.8-rDjGGwZWc.O/am=BIgABw/d=1/ed=1/rs=AN8SPfpUAFa5uYv7pPLt2IODKHQhyZPuWA/m=el_main HTTP/1.1\r\nHost: translate.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://affiduciary.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/rosetta\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"rosetta\"\r\nreport-to: {\"group\":\"rosetta\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/rosetta\"}]}\r\ncontent-length: 92975\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 06 Aug 2026 18:51:06 GMT\r\nexpires: Fri, 06 Aug 2027 18:51:06 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 04 Aug 2026 22:58:10 GMT\r\ncontent-type: text/javascript; charset=UTF-8\r\nvary: Accept-Encoding\r\nage: 283868\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":267146,"size_decoded":93835,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (2543)","md5":"9f8b0ad3fad30afcb3ec46707c910fcb","sha1":"266e6f8d5f830f7947a8795a1fc9a34fbe959ad9","sha256":"531c37e7d35123b151a0bdd6d17945ee13373e7e2947d128e931cffc6a1035c6","sha512":"3a138175ca85f29c3a8013a8ea87948cea7cb472c6f3afcd53b51573ab39f332330db617c9041824e168dfec1a9e8c5e4151731e099ade9ba5eebd47d37bab4c","ssdeep":"3072:JYVhKITKZo2bsbW7UlCbzjfOHuQq8F9uFk4V8GyZnMtb5qCNSZA/:GGo2bwPtg5","tlshash":"b344ead8b2a170769363f4a5413f000eb17b68a9f8484dacb28dd8e26df4959417bf7c","first_seen":"2026-08-06T19:44:18.072611Z","last_seen":"2026-08-10T03:09:03.860528Z","times_seen":267,"resource_available":true,"data":null}},"time_used":145,"timings":{"blocked":-1,"dns":14,"connect":29,"send":0,"wait":18,"receive":36,"ssl":47},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/i/productlogos/translate/v14/24px.svg","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://affiduciary.com/","date":"2026-08-10T01:42:16.570Z","timestamp":1786326136570,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Jul 2026 18:07:39 GMT","end":"Mon, 12 Oct 2026 18:07:38 GMT"},"fingerprint":{"sha1":"12:E8:CE:14:FC:4E:1E:0D:A3:9B:2E:5D:D0:88:79:79:71:C9:F8:6A","sha256":"58:07:B9:A1:6C:54:97:F9:9D:6A:66:E2:49:57:FB:86:86:8D:12:97:8F:4A:C9:74:A1:9D:69:4E:1F:A6:CC:9D"}}},"request":{"raw":"GET /s/i/productlogos/translate/v14/24px.svg HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://affiduciary.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ncontent-length: 3340\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 06 Aug 2026 10:10:10 GMT\r\nexpires: Fri, 06 Aug 2027 10:10:10 GMT\r\ncache-control: public, max-age=31536000\r\nage: 315126\r\nlast-modified: Wed, 20 Apr 2022 14:24:23 GMT\r\ncontent-type: image/svg+xml\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":6225,"size_decoded":4178,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"2bd5c073a88b83ed74db88282a56ddfb","sha1":"d0ebfc376f8c6a44a8d4cd216817dcd7d0c33650","sha256":"ab5c23a05e39deed14d9d8262b0dce9f024f86105a27196cad37d14a3f516e09","sha512":"5c6c4a92e93fc0f6a675658cc84f6187fdebd3eee94efd07e24658736cba598f3bc7156b19834b13fb44c1d43fcb7df9fcca7f0a453037e30da76ba8f4b23b89","ssdeep":"96:+R2K3Z4n7tyVwip82hezk6227gLFoXhu1XuE20ot+pVY3YptWDzOzgXK3Zx:ql3KnxyGGMzb7noR20NTww33","tlshash":"c1d1e6f19309d815cd6a83d8cd9b8002aa1f25ddd50ac6cc7639fb3bd1a50eb1d2d7a4","first_seen":"2023-04-06T21:34:37Z","last_seen":"2026-08-10T03:09:03.854971Z","times_seen":79338,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"widget-v3.smartsuppcdn.com/assets/style-CliJwUTR.css","fqdn":"widget-v3.smartsuppcdn.com","domain":"smartsuppcdn.com","tld":"com"},"ip":{"addr":"185.76.9.12","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://affiduciary.com/","date":"2026-08-10T01:42:20.079Z","timestamp":1786326140079,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1857279285.rsc.cdn77.org","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 04 Jun 2026 14:34:45 GMT","end":"Wed, 02 Sep 2026 14:34:44 GMT"},"fingerprint":{"sha1":"92:5D:A0:17:13:91:72:7B:B6:8C:6A:7D:A9:55:7F:C8:A9:47:11:99","sha256":"0E:FC:E3:4D:AD:32:B2:11:05:DC:E3:CD:CC:9E:10:DC:C5:2D:9E:1C:D7:C1:9C:00:92:15:43:C5:B7:0B:3A:D6"}}},"request":{"raw":"GET /assets/style-CliJwUTR.css HTTP/1.1\r\nHost: widget-v3.smartsuppcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://affiduciary.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Mon, 10 Aug 2026 01:42:20 GMT\r\ncontent-type: text/css\r\naccess-control-allow-origin: *\r\ncache-control: max-age=31536000, public, immutable\r\netag: W/\"6a4cb803-8d68\"\r\nexpires: Wed, 07 Jul 2027 08:30:01 GMT\r\nlast-modified: Tue, 07 Jul 2026 08:25:39 GMT\r\nx-77-nzt: kyyXouVLITG4lYMw5cRLaxTw/OyiCSA0kppOmEz+zXVWKWBriH5CcZYWyl2HOliGeVH9zl0\r\nx-77-nzt-ray: e2f75420ba2bfb1ca12c796ab7bed604\r\nx-77-cache: HIT\r\nx-77-age: 2913098\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nserver: CDN77-Turbo\r\nx-77-pop: stockholmSE\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":36200,"size_decoded":8208,"mime_type":"text/css","magic":"ASCII text, with very long lines (36187)","md5":"840dfdb09fc1a11a5c3a5b5f808e3160","sha1":"46140a50b100fa33b974027c13bb9f2de5c784b7","sha256":"b5b9a339413a55a0d828ab6be236e2a495594a19fb3283f846c607d7b6996ad7","sha512":"61e37700ee60ed584c8ae7b6313c5dddf6950c9664aa57f32bb4a70d775b1a1d5bfc249c6c1238495ef2cb7e12bae5f00c4ddb3df4dde44a01081117b74e2ba2","ssdeep":"384:F8fY2l091g7Tc6/WYtGLadKzSVX8Kj6+eZcrNSN56qB56YR9evZLLq51vZLLq5G:F8wM091gTcCWYtG4XqcrNSN56DwQ43","tlshash":"05f2966daad9093dac23c179e3f8e58c911af5d5df3226daf74239008ac17ff0986514","first_seen":"2026-07-07T11:50:17.712499Z","last_seen":"2026-08-10T01:51:44.873548Z","times_seen":3296,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"affiduciary.com/home/css/nice-select.css","fqdn":"affiduciary.com","domain":"affiduciary.com","tld":"com"},"ip":{"addr":"84.75.144.0","port":443,"asn":6730,"as":"Sunrise GmbH","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://affiduciary.com/","date":"2026-08-10T01:42:11.581Z","timestamp":1786326131581,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.affiduciary.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 18 Jul 2026 22:13:22 GMT","end":"Fri, 16 Oct 2026 22:13:21 GMT"},"fingerprint":{"sha1":"32:43:A0:00:CF:FD:A9:87:65:2E:DD:F9:02:A4:05:36:9F:CB:8F:92","sha256":"1C:59:C8:76:96:00:CF:9A:AC:CF:35:1C:3E:BB:59:D9:02:79:09:FF:C2:68:CC:63:53:B2:D6:D6:EE:2E:D1:FB"}}},"request":{"raw":"GET /home/css/nice-select.css HTTP/1.1\r\nHost: affiduciary.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://affiduciary.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6Img3VjgvSG16V0N1ZmFOUWVSNDl0R2c9PSIsInZhbHVlIjoiRlpQOEFoNFRwci9TakdBZ3NWRThUblljOWZVSnNtcjZmdm1yVmY1YnNVL29QQmFnajVDMlh2aGF1Z3B2Sm1YLzdKL29zMmpJcFVWa21oZzMxbEhoUmFMUnlhcEQ2WitpYWoxSC9KQ2VNS244dEZRaDBHRG9WbEJHZkFhRThNRFQiLCJtYWMiOiI0OTgzNDk2ODI5NTEzMzllNDUzODgzN2RlZTk1YTg5OTMxOWVmMDBhYWY5M2MxZjUwYTNiOWU5ODE2Yzc5NjA3IiwidGFnIjoiIn0%3D; affiduciary_session=eyJpdiI6ImdBMktxSFlhN0ROL1d3NE1HaVVqNEE9PSIsInZhbHVlIjoiZUwrMW44M0ZnZHN6TVJPTmg3M1l2Y1kwNVF5OE0rbjBraEtVekdvSmpIR2xuUW51NFhVRzRSaTJIcUdMaldibFdyTmU5L09jUkRESVpYY0VCb0QvZEZxNEhGM3VUcERiamZIdC9uZ3F3TzdTNUNBQTVmekdlb2c2UUZHWmcwQzciLCJtYWMiOiJjYWUwYzNlNWU2MDJkMGQzNmZmM2RlZDE4YjFkZjRmN2FmMWVmODgzNzMxYjcwYzkzNDdlZWVmYjBlYWRmNjE3IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 10 Aug 2026 01:42:11 GMT\r\nContent-Type: text/css\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nStrict-Transport-Security: max-age=63072000; includeSubDomains; preload\r\nContent-Security-Policy: upgrade-insecure-requests\r\nVary: Accept-Encoding, User-Agent,Accept-Encoding\r\nLast-Modified: Sun, 16 Mar 2025 15:58:09 GMT\r\nContent-Encoding: br\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4007,"size_decoded":1323,"mime_type":"text/css","magic":"ASCII text","md5":"a7ace323b9fc8a831a6e64feb23fa0b9","sha1":"9317ad29306bc72eb3fa92981be8141fcd394e7c","sha256":"c13280e79f74109c5e3854822c0f0c972d0a57245c95b0b3762f9788bd918f8d","sha512":"b87b828a0726bf70724ea050404c278175a4ec4fcd68f60ff821609699173e74506d2b9b26610436087e8ad44361b595d1f519994cfb7c3ffe24375e4050f9f8","ssdeep":"","tlshash":"2781e2779b530141642a876fafd62b582339c003b826cdacbbdd960b8f0d5dc94e6747","first_seen":"2023-04-05T04:47:26Z","last_seen":"2026-08-10T01:45:19.780647Z","times_seen":4217,"resource_available":false,"data":null}},"time_used":443,"timings":{"blocked":276,"dns":0,"connect":0,"send":0,"wait":167,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"affiduciary.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"affiduciary.com/home/js/script.js","fqdn":"affiduciary.com","domain":"affiduciary.com","tld":"com"},"ip":{"addr":"84.75.144.0","port":443,"asn":6730,"as":"Sunrise GmbH","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://affiduciary.com/","date":"2026-08-10T01:42:11.629Z","timestamp":1786326131629,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.affiduciary.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 18 Jul 2026 22:13:22 GMT","end":"Fri, 16 Oct 2026 22:13:21 GMT"},"fingerprint":{"sha1":"32:43:A0:00:CF:FD:A9:87:65:2E:DD:F9:02:A4:05:36:9F:CB:8F:92","sha256":"1C:59:C8:76:96:00:CF:9A:AC:CF:35:1C:3E:BB:59:D9:02:79:09:FF:C2:68:CC:63:53:B2:D6:D6:EE:2E:D1:FB"}}},"request":{"raw":"GET /home/js/script.js HTTP/1.1\r\nHost: affiduciary.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://affiduciary.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6Img3VjgvSG16V0N1ZmFOUWVSNDl0R2c9PSIsInZhbHVlIjoiRlpQOEFoNFRwci9TakdBZ3NWRThUblljOWZVSnNtcjZmdm1yVmY1YnNVL29QQmFnajVDMlh2aGF1Z3B2Sm1YLzdKL29zMmpJcFVWa21oZzMxbEhoUmFMUnlhcEQ2WitpYWoxSC9KQ2VNS244dEZRaDBHRG9WbEJHZkFhRThNRFQiLCJtYWMiOiI0OTgzNDk2ODI5NTEzMzllNDUzODgzN2RlZTk1YTg5OTMxOWVmMDBhYWY5M2MxZjUwYTNiOWU5ODE2Yzc5NjA3IiwidGFnIjoiIn0%3D; affiduciary_session=eyJpdiI6ImdBMktxSFlhN0ROL1d3NE1HaVVqNEE9PSIsInZhbHVlIjoiZUwrMW44M0ZnZHN6TVJPTmg3M1l2Y1kwNVF5OE0rbjBraEtVekdvSmpIR2xuUW51NFhVRzRSaTJIcUdMaldibFdyTmU5L09jUkRESVpYY0VCb0QvZEZxNEhGM3VUcERiamZIdC9uZ3F3TzdTNUNBQTVmekdlb2c2UUZHWmcwQzciLCJtYWMiOiJjYWUwYzNlNWU2MDJkMGQzNmZmM2RlZDE4YjFkZjRmN2FmMWVmODgzNzMxYjcwYzkzNDdlZWVmYjBlYWRmNjE3IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 10 Aug 2026 01:42:12 GMT\r\nContent-Type: text/javascript\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nStrict-Transport-Security: max-age=63072000; includeSubDomains; preload\r\nContent-Security-Policy: upgrade-insecure-requests\r\nVary: Accept-Encoding, User-Agent,Accept-Encoding\r\nLast-Modified: Sun, 16 Mar 2025 15:58:09 GMT\r\nContent-Encoding: br\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":12996,"size_decoded":3448,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text","md5":"6ffc36ef501ed901639625b2b181bb49","sha1":"8a6f9667d29b24a33eb2acbf645964afbba498ae","sha256":"df8c87ae274ae3714a9d30e0515b09db6a6e4c1da5deef04a0482a0ea327663d","sha512":"7baa3b9cb8715b550e055e12d1faa6c7e416e86b1d8f584cded2b6cacfcf3382116612aaee3a5fc4f215503e8f48136953dc24d7b8fc570eda2718fc7bec9b74","ssdeep":"192:rx92ENcaCrDDZZnOKu2B0M1xplTMCj5L/TF5L/9u51JO50v5PrO5055fbO50J5fP:r6ZZnOKu26YptleZnX6laiij1xD","tlshash":"6e422ec0f7bc26a340bb3156a95e61c52b6c4437d94258b7fcbe15281fc872e32aad1d","first_seen":"2025-10-23T11:35:38.864209Z","last_seen":"2026-08-10T01:43:08.451534Z","times_seen":11,"resource_available":true,"data":null}},"time_used":1360,"timings":{"blocked":1201,"dns":0,"connect":0,"send":0,"wait":159,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"affiduciary.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"translate.google.com/translate_a/element.js?cb=googleTranslateElementInit","fqdn":"translate.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.178.110","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://affiduciary.com/","date":"2026-08-10T01:42:11.630Z","timestamp":1786326131630,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Jul 2026 18:06:16 GMT","end":"Mon, 12 Oct 2026 18:06:15 GMT"},"fingerprint":{"sha1":"64:80:9A:B1:D7:B2:9A:C6:56:E1:91:F3:47:13:AA:16:8B:69:FC:A0","sha256":"31:BC:F7:A3:58:2E:CD:BC:6A:64:1A:22:73:92:E0:49:C4:7B:F3:06:1E:D5:6F:BC:D5:73:FC:D2:44:3D:AC:3B"}}},"request":{"raw":"GET /translate_a/element.js?cb=googleTranslateElementInit HTTP/1.1\r\nHost: translate.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://affiduciary.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/javascript; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: Mon, 01 Jan 1990 00:00:00 GMT\r\ndate: Mon, 10 Aug 2026 01:42:11 GMT\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":2989,"size_decoded":1580,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (1824)","md5":"9f89a902ac1f0bd03d2b7972c6e79277","sha1":"830e58586ff122e72e01dc62e3879e5de0bb1148","sha256":"a66ab6a0efcc60b97a2f633fda232d18512ff119c46926c7121a5105bc73c61c","sha512":"373ba7fbef51a35cc30583e73064e9d7febd210c828b61b89cdfafeae2b13809c82f8c81f74afd8c782fe1454ad5c97dd277d51c154c89689514eea14a09837f","ssdeep":"","tlshash":"4551239a88b2d0cac8437c29cfaf927921050037a811dce57edcd902fff064ab64d8e4","first_seen":"2026-08-10T01:10:59.664444Z","last_seen":"2026-08-10T01:46:40.152614Z","times_seen":35,"resource_available":true,"data":null}},"time_used":161,"timings":{"blocked":-1,"dns":3,"connect":17,"send":0,"wait":108,"receive":0,"ssl":33},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://affiduciary.com/","date":"2026-08-10T01:42:12.635Z","timestamp":1786326132635,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Jul 2026 18:07:39 GMT","end":"Mon, 12 Oct 2026 18:07:38 GMT"},"fingerprint":{"sha1":"12:E8:CE:14:FC:4E:1E:0D:A3:9B:2E:5D:D0:88:79:79:71:C9:F8:6A","sha256":"58:07:B9:A1:6C:54:97:F9:9D:6A:66:E2:49:57:FB:86:86:8D:12:97:8F:4A:C9:74:A1:9D:69:4E:1F:A6:CC:9D"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://affiduciary.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 05 Aug 2026 13:10:32 GMT\r\nexpires: Thu, 05 Aug 2027 13:10:32 GMT\r\ncache-control: public, max-age=31536000\r\nage: 390700\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":48532,"size_decoded":49345,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-08-10T03:48:27.884429Z","times_seen":255812,"resource_available":false,"data":null}},"time_used":83,"timings":{"blocked":23,"dns":0,"connect":0,"send":0,"wait":36,"receive":24,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"affiduciary.com/home/js/appear.js","fqdn":"affiduciary.com","domain":"affiduciary.com","tld":"com"},"ip":{"addr":"84.75.144.0","port":443,"asn":6730,"as":"Sunrise GmbH","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://affiduciary.com/","date":"2026-08-10T01:42:11.621Z","timestamp":1786326131621,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.affiduciary.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 18 Jul 2026 22:13:22 GMT","end":"Fri, 16 Oct 2026 22:13:21 GMT"},"fingerprint":{"sha1":"32:43:A0:00:CF:FD:A9:87:65:2E:DD:F9:02:A4:05:36:9F:CB:8F:92","sha256":"1C:59:C8:76:96:00:CF:9A:AC:CF:35:1C:3E:BB:59:D9:02:79:09:FF:C2:68:CC:63:53:B2:D6:D6:EE:2E:D1:FB"}}},"request":{"raw":"GET /home/js/appear.js HTTP/1.1\r\nHost: affiduciary.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://affiduciary.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6Img3VjgvSG16V0N1ZmFOUWVSNDl0R2c9PSIsInZhbHVlIjoiRlpQOEFoNFRwci9TakdBZ3NWRThUblljOWZVSnNtcjZmdm1yVmY1YnNVL29QQmFnajVDMlh2aGF1Z3B2Sm1YLzdKL29zMmpJcFVWa21oZzMxbEhoUmFMUnlhcEQ2WitpYWoxSC9KQ2VNS244dEZRaDBHRG9WbEJHZkFhRThNRFQiLCJtYWMiOiI0OTgzNDk2ODI5NTEzMzllNDUzODgzN2RlZTk1YTg5OTMxOWVmMDBhYWY5M2MxZjUwYTNiOWU5ODE2Yzc5NjA3IiwidGFnIjoiIn0%3D; affiduciary_session=eyJpdiI6ImdBMktxSFlhN0ROL1d3NE1HaVVqNEE9PSIsInZhbHVlIjoiZUwrMW44M0ZnZHN6TVJPTmg3M1l2Y1kwNVF5OE0rbjBraEtVekdvSmpIR2xuUW51NFhVRzRSaTJIcUdMaldibFdyTmU5L09jUkRESVpYY0VCb0QvZEZxNEhGM3VUcERiamZIdC9uZ3F3TzdTNUNBQTVmekdlb2c2UUZHWmcwQzciLCJtYWMiOiJjYWUwYzNlNWU2MDJkMGQzNmZmM2RlZDE4YjFkZjRmN2FmMWVmODgzNzMxYjcwYzkzNDdlZWVmYjBlYWRmNjE3IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 10 Aug 2026 01:42:12 GMT\r\nContent-Type: text/javascript\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nStrict-Transport-Security: max-age=63072000; includeSubDomains; preload\r\nContent-Security-Policy: upgrade-insecure-requests\r\nVary: Accept-Encoding, User-Agent,Accept-Encoding\r\nLast-Modified: Sun, 16 Mar 2025 15:58:09 GMT\r\nContent-Encoding: br\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4228,"size_decoded":1625,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text","md5":"cbbd68c06c9cdb2481b7050f6e64375e","sha1":"1ee3d2e29b6279f1986cd878072780d596250878","sha256":"4aded4f99d9aa82ccf099bfc6ddb735e25a6de44a124791c1e258cd05daee11c","sha512":"4de42f78a6ab93d9dce738e73c7dd889e7ffeea3dc01f8e09055b6eab195d1a759fbc502ecadeeeead6ec9be7fdcdededd440e154ee7e9742d77ff1a2fd48fac","ssdeep":"48:Yo3dwd2k3yV5egTkYRSdaMxlehOBOrMR6nZNBFxDNE9l92bA4FS4flyu:X3/skfRwbDOrdfFjg/2cmVflyu","tlshash":"48910e0a79eb1ab54877713e8fafa2442231503b2202d8113ceddf6c6fa1c64a597fd4","first_seen":"2023-03-07T12:11:58Z","last_seen":"2026-08-10T01:43:08.452973Z","times_seen":5274,"resource_available":true,"data":null}},"time_used":1201,"timings":{"blocked":1042,"dns":0,"connect":0,"send":0,"wait":159,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"affiduciary.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"affiduciary.com/home/serv/9.jpg","fqdn":"affiduciary.com","domain":"affiduciary.com","tld":"com"},"ip":{"addr":"84.75.144.0","port":443,"asn":6730,"as":"Sunrise GmbH","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://affiduciary.com/","date":"2026-08-10T01:42:11.657Z","timestamp":1786326131657,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.affiduciary.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 18 Jul 2026 22:13:22 GMT","end":"Fri, 16 Oct 2026 22:13:21 GMT"},"fingerprint":{"sha1":"32:43:A0:00:CF:FD:A9:87:65:2E:DD:F9:02:A4:05:36:9F:CB:8F:92","sha256":"1C:59:C8:76:96:00:CF:9A:AC:CF:35:1C:3E:BB:59:D9:02:79:09:FF:C2:68:CC:63:53:B2:D6:D6:EE:2E:D1:FB"}}},"request":{"raw":"GET /home/serv/9.jpg HTTP/1.1\r\nHost: affiduciary.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://affiduciary.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6Img3VjgvSG16V0N1ZmFOUWVSNDl0R2c9PSIsInZhbHVlIjoiRlpQOEFoNFRwci9TakdBZ3NWRThUblljOWZVSnNtcjZmdm1yVmY1YnNVL29QQmFnajVDMlh2aGF1Z3B2Sm1YLzdKL29zMmpJcFVWa21oZzMxbEhoUmFMUnlhcEQ2WitpYWoxSC9KQ2VNS244dEZRaDBHRG9WbEJHZkFhRThNRFQiLCJtYWMiOiI0OTgzNDk2ODI5NTEzMzllNDUzODgzN2RlZTk1YTg5OTMxOWVmMDBhYWY5M2MxZjUwYTNiOWU5ODE2Yzc5NjA3IiwidGFnIjoiIn0%3D; affiduciary_session=eyJpdiI6ImdBMktxSFlhN0ROL1d3NE1HaVVqNEE9PSIsInZhbHVlIjoiZUwrMW44M0ZnZHN6TVJPTmg3M1l2Y1kwNVF5OE0rbjBraEtVekdvSmpIR2xuUW51NFhVRzRSaTJIcUdMaldibFdyTmU5L09jUkRESVpYY0VCb0QvZEZxNEhGM3VUcERiamZIdC9uZ3F3TzdTNUNBQTVmekdlb2c2UUZHWmcwQzciLCJtYWMiOiJjYWUwYzNlNWU2MDJkMGQzNmZmM2RlZDE4YjFkZjRmN2FmMWVmODgzNzMxYjcwYzkzNDdlZWVmYjBlYWRmNjE3IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 10 Aug 2026 01:42:13 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 95834\r\nConnection: keep-alive\r\nStrict-Transport-Security: max-age=63072000; includeSubDomains; preload\r\nContent-Security-Policy: upgrade-insecure-requests\r\nVary: User-Agent\r\nLast-Modified: Sun, 16 Mar 2025 15:58:09 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":95834,"size_decoded":96189,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 612x427, components 3","md5":"91335244683c8300b55d2f996435c1cc","sha1":"854a33e685260e30ee4c465ae36d5152499f015f","sha256":"76f00ade89df599b0b81035af4cdeef9a77787b9d6f77346b941a34d07334761","sha512":"12b3ed3138dde35114305411956503577b982bc30c8870236f1af50fc1380a0a06848e4cbf25fa2ec6d216d8f89dc63693e46e9306f317e010627fd95442ff24","ssdeep":"1536:oY87Zle4n7ha1ItxJSttHnCc6+qrJMDCMjYj/KDlQ0NSRZ4bu0+aIhrlBUKQz1EJ:GX5noCLJMJCc6+AJMDLcIlrNdu0+aYft","tlshash":"089302eb2b69195a1eae8783e478c736a0e51f1d14e7d578c2041af0f383967388553f","first_seen":"2023-11-04T11:29:26Z","last_seen":"2026-08-10T01:43:08.453825Z","times_seen":144,"resource_available":false,"data":null}},"time_used":2026,"timings":{"blocked":1863,"dns":0,"connect":0,"send":0,"wait":162,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"affiduciary.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"affiduciary.com/home/images/banner/banner-6.jpg","fqdn":"affiduciary.com","domain":"affiduciary.com","tld":"com"},"ip":{"addr":"84.75.144.0","port":443,"asn":6730,"as":"Sunrise GmbH","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://affiduciary.com/","date":"2026-08-10T01:42:13.053Z","timestamp":1786326133053,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.affiduciary.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 18 Jul 2026 22:13:22 GMT","end":"Fri, 16 Oct 2026 22:13:21 GMT"},"fingerprint":{"sha1":"32:43:A0:00:CF:FD:A9:87:65:2E:DD:F9:02:A4:05:36:9F:CB:8F:92","sha256":"1C:59:C8:76:96:00:CF:9A:AC:CF:35:1C:3E:BB:59:D9:02:79:09:FF:C2:68:CC:63:53:B2:D6:D6:EE:2E:D1:FB"}}},"request":{"raw":"GET /home/images/banner/banner-6.jpg HTTP/1.1\r\nHost: affiduciary.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://affiduciary.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6Img3VjgvSG16V0N1ZmFOUWVSNDl0R2c9PSIsInZhbHVlIjoiRlpQOEFoNFRwci9TakdBZ3NWRThUblljOWZVSnNtcjZmdm1yVmY1YnNVL29QQmFnajVDMlh2aGF1Z3B2Sm1YLzdKL29zMmpJcFVWa21oZzMxbEhoUmFMUnlhcEQ2WitpYWoxSC9KQ2VNS244dEZRaDBHRG9WbEJHZkFhRThNRFQiLCJtYWMiOiI0OTgzNDk2ODI5NTEzMzllNDUzODgzN2RlZTk1YTg5OTMxOWVmMDBhYWY5M2MxZjUwYTNiOWU5ODE2Yzc5NjA3IiwidGFnIjoiIn0%3D; affiduciary_session=eyJpdiI6ImdBMktxSFlhN0ROL1d3NE1HaVVqNEE9PSIsInZhbHVlIjoiZUwrMW44M0ZnZHN6TVJPTmg3M1l2Y1kwNVF5OE0rbjBraEtVekdvSmpIR2xuUW51NFhVRzRSaTJIcUdMaldibFdyTmU5L09jUkRESVpYY0VCb0QvZEZxNEhGM3VUcERiamZIdC9uZ3F3TzdTNUNBQTVmekdlb2c2UUZHWmcwQzciLCJtYWMiOiJjYWUwYzNlNWU2MDJkMGQzNmZmM2RlZDE4YjFkZjRmN2FmMWVmODgzNzMxYjcwYzkzNDdlZWVmYjBlYWRmNjE3IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 10 Aug 2026 01:42:13 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 167718\r\nConnection: keep-alive\r\nStrict-Transport-Security: max-age=63072000; includeSubDomains; preload\r\nContent-Security-Policy: upgrade-insecure-requests\r\nVary: User-Agent\r\nLast-Modified: Sun, 16 Mar 2025 15:58:09 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":167718,"size_decoded":168074,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1920x710, components 3","md5":"66c4253a9487b4174c6c490bac0c56e5","sha1":"8fd5525b6038e1d44094e15b6ccaf404b75d0a6b","sha256":"c76f702db4498dc345f9d103bad36c427e078ecd8ad64f9a8091a6862f0746e5","sha512":"e39de3470dfe72c15ab21858ac567c43bb7b61a220a9de0cc9a17174d3f460589d4a78a19216220a5bd854ca76787cdd833a83faa76de2d9b27c7fee395e8bfb","ssdeep":"3072:BmuP4JVn8DKxJ1UlgwVvQpx7YqASBFigZgoHJcLno1lEPM55GxiKTgMxg+W8:4uPi8+xXU2yY77N7j1gopcmEPM55DMXP","tlshash":"d3f3122cf980a3a1ec46c3be2bb6417adbbe361542b54bf71cf3444780d9797589c1a2","first_seen":"2025-10-23T11:35:38.998412Z","last_seen":"2026-08-10T01:43:08.454332Z","times_seen":7,"resource_available":false,"data":null}},"time_used":620,"timings":{"blocked":109,"dns":0,"connect":0,"send":0,"wait":171,"receive":340,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"affiduciary.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"widget-v3.smartsuppcdn.com/assets/shared-BKfXgL7M.js","fqdn":"widget-v3.smartsuppcdn.com","domain":"smartsuppcdn.com","tld":"com"},"ip":{"addr":"185.76.9.12","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://affiduciary.com/","date":"2026-08-10T01:42:20.076Z","timestamp":1786326140076,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1857279285.rsc.cdn77.org","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 04 Jun 2026 14:34:45 GMT","end":"Wed, 02 Sep 2026 14:34:44 GMT"},"fingerprint":{"sha1":"92:5D:A0:17:13:91:72:7B:B6:8C:6A:7D:A9:55:7F:C8:A9:47:11:99","sha256":"0E:FC:E3:4D:AD:32:B2:11:05:DC:E3:CD:CC:9E:10:DC:C5:2D:9E:1C:D7:C1:9C:00:92:15:43:C5:B7:0B:3A:D6"}}},"request":{"raw":"GET /assets/shared-BKfXgL7M.js HTTP/1.1\r\nHost: widget-v3.smartsuppcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://affiduciary.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Mon, 10 Aug 2026 01:42:20 GMT\r\ncontent-type: application/javascript\r\naccess-control-allow-origin: *\r\ncache-control: max-age=31536000, public, immutable\r\netag: W/\"6a7093a4-42dad\"\r\nexpires: Tue, 03 Aug 2027 13:15:01 GMT\r\nlast-modified: Mon, 03 Aug 2026 13:12:04 GMT\r\nx-77-nzt: k4+7ycA4DaL4v9QG1BIoHN+A3Yjn1pDuPyetrTv49RJg2g7MWyDflVSAK/Mvx42FijfBg9I\r\nx-77-nzt-ray: e2f75420ba2bfb1ca12c796abcd4b104\r\nage: 0\r\nx-77-cache: HIT\r\nx-77-age: 563220\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nserver: CDN77-Turbo\r\nx-77-pop: stockholmSE\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":273837,"size_decoded":93095,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (44710)","md5":"6d330899eb0177ca492d1cf16427c94b","sha1":"11b3e62f0c12c835c12c5d257f0ce22aea3e1954","sha256":"012c673b4f73512d934760a31f93679d3525ef13e30f4473a0db5d115a037544","sha512":"c9b9d475ba9d05ee38e02cd796dad489ddcc46a4d1728dc818475a047ea61261f9aaca97596ef5f189e1d571ce03aa1f46b382cd8a1d4fef892dc9cad53aa8b9","ssdeep":"6144:FMAopqOWSr8ad2jJKaQKhJp9cuIfoTkqM+9+:4qOW2Rd29B/DIfoTtM+9+","tlshash":"b3443ad53294b035439b51e6906f1106f33e5c19580d812cf269ece679baec8a2f7fb8","first_seen":"2026-08-03T19:54:11.723826Z","last_seen":"2026-08-10T01:51:44.882968Z","times_seen":250,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"affiduciary.com/#","fqdn":"affiduciary.com","domain":"affiduciary.com","tld":"com"},"ip":{"addr":"84.75.144.0","port":443,"asn":6730,"as":"Sunrise GmbH","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://affiduciary.com/","date":"2026-08-10T01:42:11.632Z","timestamp":1786326131632,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.affiduciary.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 18 Jul 2026 22:13:22 GMT","end":"Fri, 16 Oct 2026 22:13:21 GMT"},"fingerprint":{"sha1":"32:43:A0:00:CF:FD:A9:87:65:2E:DD:F9:02:A4:05:36:9F:CB:8F:92","sha256":"1C:59:C8:76:96:00:CF:9A:AC:CF:35:1C:3E:BB:59:D9:02:79:09:FF:C2:68:CC:63:53:B2:D6:D6:EE:2E:D1:FB"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: affiduciary.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://affiduciary.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6Img3VjgvSG16V0N1ZmFOUWVSNDl0R2c9PSIsInZhbHVlIjoiRlpQOEFoNFRwci9TakdBZ3NWRThUblljOWZVSnNtcjZmdm1yVmY1YnNVL29QQmFnajVDMlh2aGF1Z3B2Sm1YLzdKL29zMmpJcFVWa21oZzMxbEhoUmFMUnlhcEQ2WitpYWoxSC9KQ2VNS244dEZRaDBHRG9WbEJHZkFhRThNRFQiLCJtYWMiOiI0OTgzNDk2ODI5NTEzMzllNDUzODgzN2RlZTk1YTg5OTMxOWVmMDBhYWY5M2MxZjUwYTNiOWU5ODE2Yzc5NjA3IiwidGFnIjoiIn0%3D; affiduciary_session=eyJpdiI6ImdBMktxSFlhN0ROL1d3NE1HaVVqNEE9PSIsInZhbHVlIjoiZUwrMW44M0ZnZHN6TVJPTmg3M1l2Y1kwNVF5OE0rbjBraEtVekdvSmpIR2xuUW51NFhVRzRSaTJIcUdMaldibFdyTmU5L09jUkRESVpYY0VCb0QvZEZxNEhGM3VUcERiamZIdC9uZ3F3TzdTNUNBQTVmekdlb2c2UUZHWmcwQzciLCJtYWMiOiJjYWUwYzNlNWU2MDJkMGQzNmZmM2RlZDE4YjFkZjRmN2FmMWVmODgzNzMxYjcwYzkzNDdlZWVmYjBlYWRmNjE3IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 10 Aug 2026 01:42:12 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nX-Powered-By: PHP/8.2.32\r\nCache-Control: private, must-revalidate\r\npragma: no-cache\r\nexpires: -1\r\nSet-Cookie: XSRF-TOKEN=eyJpdiI6InplUlhwV1YybjRnQ1NEV1dVZ3piZFE9PSIsInZhbHVlIjoiUnRwVmtSVlBndjdQWG56b0JEOTQ2Q0pFTzVXSUtVd0didjNkS3NERmw5RDQzK1JXME82VDlEemEydDJ3Rm9XY2hnMUt6anBJV25nbXpkS29KTkZSblRLQUNOSFdzR2N0bnlrMnVCQkhDc3pQTE9KSEFzeitkTTlNZEsvbjg4N1QiLCJtYWMiOiJmZGIyMDQ5YjhjODFiNTdhZWM5Y2E1ODVmYmI0MTZiYTlkOTEwMmIwMThmMTdhNTI4ZmM0ZjZlMmE3ODUwMGEwIiwidGFnIjoiIn0%3D; expires=Mon, 10-Aug-2026 03:42:12 GMT; Max-Age=7200; path=/; samesite=lax\naffiduciary_session=eyJpdiI6IkNjWHNxOHFnN29jTXI3TkU3Qy9TRXc9PSIsInZhbHVlIjoiSEZEVnRZdWNMdk4rZkJoOVhoUCt1TFo0dUtXaVJDRktqVnZVaTNCK0pOSS9pZWs5NlZQZzBVRTZpckorRnE4UjdOYkNSbEVwaWhzZkx2amp0enlMY200TmJUd2R5VlNybGI0eEpSWFM0amdoREtaaEtyUmlLY1dPY2NwWngxYkciLCJtYWMiOiI0MWI5Yzk5YmU2YTBhZmQ1ZjdiNmExNjhiNTgyMDhmNDZlYzFjNzE1NDEwYmZmMjUwNDUyN2E1MjEzODBiMjVkIiwidGFnIjoiIn0%3D; expires=Mon, 10-Aug-2026 03:42:12 GMT; Max-Age=7200; path=/; httponly; samesite=lax\r\nStrict-Transport-Security: max-age=63072000; includeSubDomains; preload\r\nContent-Security-Policy: upgrade-insecure-requests\r\nVary: Accept-Encoding, User-Agent,Accept-Encoding\r\nContent-Encoding: br\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP:8.2.32","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Popper","description":"Popper is a positioning engine, its purpose is to calculate the position of an element to make it possible to position it near a given reference element.","website":"https://popper.js.org","common_platform_enumeration":"","icon":"Popper.svg","categories":["Miscellaneous"]},{"name":"WOW","description":"Reveal CSS animation as you scroll down a page.","website":"https://www.delac.io/WOW","common_platform_enumeration":"","icon":"","categories":["JavaScript frameworks","Web frameworks","JavaScript graphics"]},{"name":"FancyBox","description":"FancyBox is a tool for displaying images, html content and multi-media in a Mac-style 'lightbox' that floats overtop of web page.","website":"https://fancyapps.com/fancybox","common_platform_enumeration":"","icon":"FancyBox.svg","categories":["JavaScript libraries"]}],"data":{"size":52895,"size_decoded":8802,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"8308d1382e9fac4bdf668e015508fa3f","sha1":"caa7a293f4713cf28c3745be4a53fe42c03364e6","sha256":"3ac622bab9e4c22b991106cb3434caf031560e01abdf12888173885827681917","sha512":"cea5566336fb97e8221d7639fef77ff056b184ba63f2caa12af8ea4253d4a26daf5a4056af5cbb8320d9a1e231deef4b495df54b0004f64d6369dde0ed013d56","ssdeep":"1536:huepL6HJHaX7DX3YYwljWpQjFMGUFLglgVGqpS:HXaljWpQjFMGUFLglgVGqI","tlshash":"bb33fe22d4f15067417380e8be727a6b9f82e407ca4ac946b6ed0bd85fd2dcadc4760d","first_seen":"2026-08-10T01:17:46.45914Z","last_seen":"2026-08-10T01:43:08.45539Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1410,"timings":{"blocked":1205,"dns":0,"connect":0,"send":0,"wait":205,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"affiduciary.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"affiduciary.com/home/images/shape/shape-23.png","fqdn":"affiduciary.com","domain":"affiduciary.com","tld":"com"},"ip":{"addr":"84.75.144.0","port":443,"asn":6730,"as":"Sunrise GmbH","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://affiduciary.com/","date":"2026-08-10T01:42:12.593Z","timestamp":1786326132593,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.affiduciary.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 18 Jul 2026 22:13:22 GMT","end":"Fri, 16 Oct 2026 22:13:21 GMT"},"fingerprint":{"sha1":"32:43:A0:00:CF:FD:A9:87:65:2E:DD:F9:02:A4:05:36:9F:CB:8F:92","sha256":"1C:59:C8:76:96:00:CF:9A:AC:CF:35:1C:3E:BB:59:D9:02:79:09:FF:C2:68:CC:63:53:B2:D6:D6:EE:2E:D1:FB"}}},"request":{"raw":"GET /home/images/shape/shape-23.png HTTP/1.1\r\nHost: affiduciary.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://affiduciary.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6Img3VjgvSG16V0N1ZmFOUWVSNDl0R2c9PSIsInZhbHVlIjoiRlpQOEFoNFRwci9TakdBZ3NWRThUblljOWZVSnNtcjZmdm1yVmY1YnNVL29QQmFnajVDMlh2aGF1Z3B2Sm1YLzdKL29zMmpJcFVWa21oZzMxbEhoUmFMUnlhcEQ2WitpYWoxSC9KQ2VNS244dEZRaDBHRG9WbEJHZkFhRThNRFQiLCJtYWMiOiI0OTgzNDk2ODI5NTEzMzllNDUzODgzN2RlZTk1YTg5OTMxOWVmMDBhYWY5M2MxZjUwYTNiOWU5ODE2Yzc5NjA3IiwidGFnIjoiIn0%3D; affiduciary_session=eyJpdiI6ImdBMktxSFlhN0ROL1d3NE1HaVVqNEE9PSIsInZhbHVlIjoiZUwrMW44M0ZnZHN6TVJPTmg3M1l2Y1kwNVF5OE0rbjBraEtVekdvSmpIR2xuUW51NFhVRzRSaTJIcUdMaldibFdyTmU5L09jUkRESVpYY0VCb0QvZEZxNEhGM3VUcERiamZIdC9uZ3F3TzdTNUNBQTVmekdlb2c2UUZHWmcwQzciLCJtYWMiOiJjYWUwYzNlNWU2MDJkMGQzNmZmM2RlZDE4YjFkZjRmN2FmMWVmODgzNzMxYjcwYzkzNDdlZWVmYjBlYWRmNjE3IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 10 Aug 2026 01:42:13 GMT\r\nContent-Type: image/png\r\nContent-Length: 19444\r\nConnection: keep-alive\r\nStrict-Transport-Security: max-age=63072000; includeSubDomains; preload\r\nContent-Security-Policy: upgrade-insecure-requests\r\nVary: User-Agent\r\nLast-Modified: Sun, 16 Mar 2025 15:58:09 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":19444,"size_decoded":19798,"mime_type":"image/png","magic":"PNG image data, 620 x 510, 8-bit/color RGBA, non-interlaced","md5":"b2eb63860bad955a3de8e62595a85e5f","sha1":"b64812408b34faecf6d4523d626517c73bd288af","sha256":"75bdbf1709d13634af849277bfd8138ba17824181bfedbfce79c94599e3eb9c4","sha512":"304f6eb2046c930701a474648e0b22421af6d247db95e3eaf11477f5467ba397caa8a086be4fbea5436d370e98dfc5634e0e3215827787d88e9d60d1bd3dda24","ssdeep":"384:BBpobYYGX2tiBmELzDXZvGy+qNNwtM420wIfRzPqJ/8XZgEu7EZ/Lx7YbtafhMWN:ivGX2toXDXZvp5NNyxwmRzPqJ/8mLgdj","tlshash":"6d92df8aa907d933a3323150d4c1de16e0df31baa99b6c9b9681bfb15c3b43c78502f5","first_seen":"2025-03-04T00:44:45.005237Z","last_seen":"2026-08-10T01:43:08.456354Z","times_seen":16,"resource_available":false,"data":null}},"time_used":584,"timings":{"blocked":425,"dns":0,"connect":0,"send":0,"wait":159,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"affiduciary.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"affiduciary.com/home/css/font-awesome-all.css","fqdn":"affiduciary.com","domain":"affiduciary.com","tld":"com"},"ip":{"addr":"84.75.144.0","port":443,"asn":6730,"as":"Sunrise GmbH","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://affiduciary.com/","date":"2026-08-10T01:42:11.567Z","timestamp":1786326131567,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.affiduciary.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 18 Jul 2026 22:13:22 GMT","end":"Fri, 16 Oct 2026 22:13:21 GMT"},"fingerprint":{"sha1":"32:43:A0:00:CF:FD:A9:87:65:2E:DD:F9:02:A4:05:36:9F:CB:8F:92","sha256":"1C:59:C8:76:96:00:CF:9A:AC:CF:35:1C:3E:BB:59:D9:02:79:09:FF:C2:68:CC:63:53:B2:D6:D6:EE:2E:D1:FB"}}},"request":{"raw":"GET /home/css/font-awesome-all.css HTTP/1.1\r\nHost: affiduciary.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://affiduciary.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6Img3VjgvSG16V0N1ZmFOUWVSNDl0R2c9PSIsInZhbHVlIjoiRlpQOEFoNFRwci9TakdBZ3NWRThUblljOWZVSnNtcjZmdm1yVmY1YnNVL29QQmFnajVDMlh2aGF1Z3B2Sm1YLzdKL29zMmpJcFVWa21oZzMxbEhoUmFMUnlhcEQ2WitpYWoxSC9KQ2VNS244dEZRaDBHRG9WbEJHZkFhRThNRFQiLCJtYWMiOiI0OTgzNDk2ODI5NTEzMzllNDUzODgzN2RlZTk1YTg5OTMxOWVmMDBhYWY5M2MxZjUwYTNiOWU5ODE2Yzc5NjA3IiwidGFnIjoiIn0%3D; affiduciary_session=eyJpdiI6ImdBMktxSFlhN0ROL1d3NE1HaVVqNEE9PSIsInZhbHVlIjoiZUwrMW44M0ZnZHN6TVJPTmg3M1l2Y1kwNVF5OE0rbjBraEtVekdvSmpIR2xuUW51NFhVRzRSaTJIcUdMaldibFdyTmU5L09jUkRESVpYY0VCb0QvZEZxNEhGM3VUcERiamZIdC9uZ3F3TzdTNUNBQTVmekdlb2c2UUZHWmcwQzciLCJtYWMiOiJjYWUwYzNlNWU2MDJkMGQzNmZmM2RlZDE4YjFkZjRmN2FmMWVmODgzNzMxYjcwYzkzNDdlZWVmYjBlYWRmNjE3IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 10 Aug 2026 01:42:11 GMT\r\nContent-Type: text/css\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nStrict-Transport-Security: max-age=63072000; includeSubDomains; preload\r\nContent-Security-Policy: upgrade-insecure-requests\r\nVary: Accept-Encoding, User-Agent,Accept-Encoding\r\nLast-Modified: Sun, 16 Mar 2025 15:58:09 GMT\r\nContent-Encoding: br\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":99392,"size_decoded":16630,"mime_type":"text/css","magic":"ASCII text","md5":"f131c6ace3db5a8d437ccdc695e536fd","sha1":"d334ff209db8af8d0eface7e3bc20bb0f4c83b5b","sha256":"e898b42879d56bfaeb1bef43f8ff0816eb6b84a781be953c8431d28ae13c6523","sha512":"b17c6cd25571b06149c1dc3829af3dcc88b0cc3bc51930e5ec6e1efc3b14d9f9789ed21faf282480c0d1788c20fffc30fd5068bf93a750f26cee687311f7a468","ssdeep":"1536:aiib6jl6LlvtisUa3JDPFNnk13YhMq5fAYkFzRI:aiiejl6L3isUa3JDPFNnk13YRtirI","tlshash":"1ea3fbfee1bf11944311e4812743e3e4b72ab62cec8a4c94d2a67d8df1c165ca186bdd","first_seen":"2023-12-03T13:30:20Z","last_seen":"2026-08-10T01:45:19.775325Z","times_seen":96,"resource_available":false,"data":null}},"time_used":163,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":163,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"affiduciary.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"affiduciary.com/home/css/elements-css/chooseus.css","fqdn":"affiduciary.com","domain":"affiduciary.com","tld":"com"},"ip":{"addr":"84.75.144.0","port":443,"asn":6730,"as":"Sunrise GmbH","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://affiduciary.com/","date":"2026-08-10T01:42:11.600Z","timestamp":1786326131600,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.affiduciary.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 18 Jul 2026 22:13:22 GMT","end":"Fri, 16 Oct 2026 22:13:21 GMT"},"fingerprint":{"sha1":"32:43:A0:00:CF:FD:A9:87:65:2E:DD:F9:02:A4:05:36:9F:CB:8F:92","sha256":"1C:59:C8:76:96:00:CF:9A:AC:CF:35:1C:3E:BB:59:D9:02:79:09:FF:C2:68:CC:63:53:B2:D6:D6:EE:2E:D1:FB"}}},"request":{"raw":"GET /home/css/elements-css/chooseus.css HTTP/1.1\r\nHost: affiduciary.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://affiduciary.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6Img3VjgvSG16V0N1ZmFOUWVSNDl0R2c9PSIsInZhbHVlIjoiRlpQOEFoNFRwci9TakdBZ3NWRThUblljOWZVSnNtcjZmdm1yVmY1YnNVL29QQmFnajVDMlh2aGF1Z3B2Sm1YLzdKL29zMmpJcFVWa21oZzMxbEhoUmFMUnlhcEQ2WitpYWoxSC9KQ2VNS244dEZRaDBHRG9WbEJHZkFhRThNRFQiLCJtYWMiOiI0OTgzNDk2ODI5NTEzMzllNDUzODgzN2RlZTk1YTg5OTMxOWVmMDBhYWY5M2MxZjUwYTNiOWU5ODE2Yzc5NjA3IiwidGFnIjoiIn0%3D; affiduciary_session=eyJpdiI6ImdBMktxSFlhN0ROL1d3NE1HaVVqNEE9PSIsInZhbHVlIjoiZUwrMW44M0ZnZHN6TVJPTmg3M1l2Y1kwNVF5OE0rbjBraEtVekdvSmpIR2xuUW51NFhVRzRSaTJIcUdMaldibFdyTmU5L09jUkRESVpYY0VCb0QvZEZxNEhGM3VUcERiamZIdC9uZ3F3TzdTNUNBQTVmekdlb2c2UUZHWmcwQzciLCJtYWMiOiJjYWUwYzNlNWU2MDJkMGQzNmZmM2RlZDE4YjFkZjRmN2FmMWVmODgzNzMxYjcwYzkzNDdlZWVmYjBlYWRmNjE3IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 10 Aug 2026 01:42:12 GMT\r\nContent-Type: text/css\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nStrict-Transport-Security: max-age=63072000; includeSubDomains; preload\r\nContent-Security-Policy: upgrade-insecure-requests\r\nVary: Accept-Encoding, User-Agent,Accept-Encoding\r\nLast-Modified: Sun, 16 Mar 2025 15:58:09 GMT\r\nContent-Encoding: br\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3483,"size_decoded":1195,"mime_type":"text/css","magic":"ASCII text","md5":"6e4b1af4ce12e1dff9b4afee3af8f64c","sha1":"b257d001754621e7ea2b4b937452006bdc37d286","sha256":"e68fcd5f7d6d91279a400dc0658f2f757dbe97480506a2c632c7998f3c30d523","sha512":"4b6a29817b9a84f36af399024d1d7bd87aa1c2728a76c63050d2097b1f5d53c102cb1eaf1a5b91b32424b8d6dd08f3426c241284c641ae9717200c3e3e62fa10","ssdeep":"","tlshash":"2471ef3675341944a70bf5a8ae64bb49523d81a2de0f0c9ef463b81cd3cc6d408e3e8e","first_seen":"2025-10-23T11:35:38.793596Z","last_seen":"2026-08-10T01:43:08.457406Z","times_seen":13,"resource_available":false,"data":null}},"time_used":757,"timings":{"blocked":594,"dns":0,"connect":0,"send":0,"wait":163,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"affiduciary.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://affiduciary.com/","date":"2026-08-10T01:42:12.633Z","timestamp":1786326132633,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Jul 2026 18:07:39 GMT","end":"Mon, 12 Oct 2026 18:07:38 GMT"},"fingerprint":{"sha1":"12:E8:CE:14:FC:4E:1E:0D:A3:9B:2E:5D:D0:88:79:79:71:C9:F8:6A","sha256":"58:07:B9:A1:6C:54:97:F9:9D:6A:66:E2:49:57:FB:86:86:8D:12:97:8F:4A:C9:74:A1:9D:69:4E:1F:A6:CC:9D"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://affiduciary.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 05 Aug 2026 13:10:32 GMT\r\nexpires: Thu, 05 Aug 2027 13:10:32 GMT\r\ncache-control: public, max-age=31536000\r\nage: 390700\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":48532,"size_decoded":49345,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-08-10T03:48:27.884429Z","times_seen":255812,"resource_available":false,"data":null}},"time_used":93,"timings":{"blocked":-1,"dns":3,"connect":29,"send":0,"wait":24,"receive":36,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://affiduciary.com/","date":"2026-08-10T01:42:12.640Z","timestamp":1786326132640,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Jul 2026 18:07:39 GMT","end":"Mon, 12 Oct 2026 18:07:38 GMT"},"fingerprint":{"sha1":"12:E8:CE:14:FC:4E:1E:0D:A3:9B:2E:5D:D0:88:79:79:71:C9:F8:6A","sha256":"58:07:B9:A1:6C:54:97:F9:9D:6A:66:E2:49:57:FB:86:86:8D:12:97:8F:4A:C9:74:A1:9D:69:4E:1F:A6:CC:9D"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://affiduciary.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 05 Aug 2026 13:10:32 GMT\r\nexpires: Thu, 05 Aug 2027 13:10:32 GMT\r\ncache-control: public, max-age=31536000\r\nage: 390700\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":48532,"size_decoded":49345,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-08-10T03:48:27.884429Z","times_seen":255812,"resource_available":false,"data":null}},"time_used":81,"timings":{"blocked":18,"dns":0,"connect":0,"send":0,"wait":41,"receive":22,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"affiduciary.com/home/fonts/fa-solid-900.woff2","fqdn":"affiduciary.com","domain":"affiduciary.com","tld":"com"},"ip":{"addr":"84.75.144.0","port":443,"asn":6730,"as":"Sunrise GmbH","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://affiduciary.com/","date":"2026-08-10T01:42:12.648Z","timestamp":1786326132648,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.affiduciary.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 18 Jul 2026 22:13:22 GMT","end":"Fri, 16 Oct 2026 22:13:21 GMT"},"fingerprint":{"sha1":"32:43:A0:00:CF:FD:A9:87:65:2E:DD:F9:02:A4:05:36:9F:CB:8F:92","sha256":"1C:59:C8:76:96:00:CF:9A:AC:CF:35:1C:3E:BB:59:D9:02:79:09:FF:C2:68:CC:63:53:B2:D6:D6:EE:2E:D1:FB"}}},"request":{"raw":"GET /home/fonts/fa-solid-900.woff2 HTTP/1.1\r\nHost: affiduciary.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://affiduciary.com/home/css/font-awesome-all.css\r\nCookie: XSRF-TOKEN=eyJpdiI6Img3VjgvSG16V0N1ZmFOUWVSNDl0R2c9PSIsInZhbHVlIjoiRlpQOEFoNFRwci9TakdBZ3NWRThUblljOWZVSnNtcjZmdm1yVmY1YnNVL29QQmFnajVDMlh2aGF1Z3B2Sm1YLzdKL29zMmpJcFVWa21oZzMxbEhoUmFMUnlhcEQ2WitpYWoxSC9KQ2VNS244dEZRaDBHRG9WbEJHZkFhRThNRFQiLCJtYWMiOiI0OTgzNDk2ODI5NTEzMzllNDUzODgzN2RlZTk1YTg5OTMxOWVmMDBhYWY5M2MxZjUwYTNiOWU5ODE2Yzc5NjA3IiwidGFnIjoiIn0%3D; affiduciary_session=eyJpdiI6ImdBMktxSFlhN0ROL1d3NE1HaVVqNEE9PSIsInZhbHVlIjoiZUwrMW44M0ZnZHN6TVJPTmg3M1l2Y1kwNVF5OE0rbjBraEtVekdvSmpIR2xuUW51NFhVRzRSaTJIcUdMaldibFdyTmU5L09jUkRESVpYY0VCb0QvZEZxNEhGM3VUcERiamZIdC9uZ3F3TzdTNUNBQTVmekdlb2c2UUZHWmcwQzciLCJtYWMiOiJjYWUwYzNlNWU2MDJkMGQzNmZmM2RlZDE4YjFkZjRmN2FmMWVmODgzNzMxYjcwYzkzNDdlZWVmYjBlYWRmNjE3IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 10 Aug 2026 01:42:12 GMT\r\nContent-Type: font/woff2\r\nContent-Length: 117452\r\nConnection: keep-alive\r\nStrict-Transport-Security: max-age=63072000; includeSubDomains; preload\r\nContent-Security-Policy: upgrade-insecure-requests\r\nVary: User-Agent,Accept-Encoding\r\nLast-Modified: Sun, 16 Mar 2025 15:58:09 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":117452,"size_decoded":117824,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 117452, version 329.-17826","md5":"525bd4ae5b9eaa1e23b4a5c8b28c0d9f","sha1":"0985532515d580890822bd544fab4a7aea46cb33","sha256":"b5869f6bb9116c6dd0b6b691d57a17954f3c522cf9ae4497094e62146d8bac15","sha512":"b6eef4e10d2a2817f2c26702e7233c37e7810a1f8897c8cdb0d350dc16fd81ab59ed4edd60e0e1239076e15520dc5faa57fcba7f398b3fdadeaebd0b8022b94a","ssdeep":"3072:KZLPgc1pVJJoRhAqVq4sBvlHblJBFiGqDGTwm:K9gclJJkIB9H5JSvDGEm","tlshash":"39b312c0a3537ddeb86e18218d32e4e388953753edb046d899f99e130b9d68cbbc7150","first_seen":"2023-04-05T04:47:26Z","last_seen":"2026-08-10T01:45:19.785318Z","times_seen":2526,"resource_available":false,"data":null}},"time_used":607,"timings":{"blocked":272,"dns":0,"connect":0,"send":0,"wait":168,"receive":167,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"affiduciary.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/images/branding/googlelogo/1x/googlelogo_color_68x28dp.png","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://affiduciary.com/","date":"2026-08-10T01:42:16.786Z","timestamp":1786326136786,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Jul 2026 18:07:39 GMT","end":"Mon, 12 Oct 2026 18:07:38 GMT"},"fingerprint":{"sha1":"12:E8:CE:14:FC:4E:1E:0D:A3:9B:2E:5D:D0:88:79:79:71:C9:F8:6A","sha256":"58:07:B9:A1:6C:54:97:F9:9D:6A:66:E2:49:57:FB:86:86:8D:12:97:8F:4A:C9:74:A1:9D:69:4E:1F:A6:CC:9D"}}},"request":{"raw":"GET /images/branding/googlelogo/1x/googlelogo_color_68x28dp.png HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://affiduciary.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"static-on-bigtable\"\r\nreport-to: {\"group\":\"static-on-bigtable\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/static-on-bigtable\"}]}\r\ncontent-length: 1597\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 05 Aug 2026 13:10:22 GMT\r\nexpires: Thu, 05 Aug 2027 13:10:22 GMT\r\ncache-control: public, max-age=31536000\r\nage: 390714\r\nlast-modified: Fri, 30 Jun 2023 18:58:00 GMT\r\ncontent-type: image/png\r\nvary: Origin\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":1597,"size_decoded":2271,"mime_type":"image/png","magic":"PNG image data, 68 x 28, 8-bit/color RGBA, non-interlaced","md5":"c4a931d597decd2553aac6634b766cf2","sha1":"6ec84fb4a2745b4b71520241be77db1fd1013830","sha256":"f56402b127698db4b4dc611a97a6f081d04c4691c60522c5912d189e37c94a9e","sha512":"4932e0f7f38085a7c52539bdd5c7f470740e560a4471bea30d12ef9e3efe77f6bbfac28d26c62a245c43d98ebf74c824b2b414843080a27edf1563a5f874ac84","ssdeep":"","tlshash":"7c310afff39e8cec419e764069ba5965a362cd68233e928f14499592e4d007710f5f41","first_seen":"2023-04-05T08:27:37Z","last_seen":"2026-08-10T02:31:29.697221Z","times_seen":19755,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Inter:wght@300;400;500;600;700;800;900\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://affiduciary.com/","date":"2026-08-10T01:42:11.562Z","timestamp":1786326131562,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Jul 2026 18:07:43 GMT","end":"Mon, 12 Oct 2026 18:07:42 GMT"},"fingerprint":{"sha1":"3C:2E:4A:58:D0:DB:8D:00:50:7D:0E:E6:87:DE:CA:95:B3:BA:1B:89","sha256":"C2:4F:05:DF:4B:24:E4:A9:E4:2A:30:66:F4:78:E7:75:AC:AE:71:43:E7:DA:3E:24:4B:A3:AA:9A:39:4E:E2:E1"}}},"request":{"raw":"GET /css2?family=Inter:wght@300;400;500;600;700;800;900\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://affiduciary.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Mon, 10 Aug 2026 01:42:11 GMT\r\ndate: Mon, 10 Aug 2026 01:42:11 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":17689,"size_decoded":1563,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"30e76aaeae29f594433bc728a08b4d8f","sha1":"ac1b677b4d702295e7802802376ddd8c84acbc13","sha256":"395e51e3dc84faf99710da8cf316e573703addd6eb598e1b334eff76653e820d","sha512":"93b1661d34210abbdb2c6cca46bb229254b615ba07c05dbcadb65199b9d1e61e18dbb4302236e89188ddc34be20528f503f6140358f82385b1f0e621f93ec4d8","ssdeep":"192:wNA1cO3lnxirNNIxO34OxDENOPCO3/Nx8NNryfO3iExlONEhYO3RrxGfNx0NO3kV:8KYXuM0p2+g7GQK","tlshash":"b1828892002ba400ab971dc233cf7f3aaece10896085d1b95ffd0dc59cead66436876d","first_seen":"2025-09-11T05:09:40.151737Z","last_seen":"2026-08-10T01:43:08.459314Z","times_seen":5411,"resource_available":false,"data":null}},"time_used":87,"timings":{"blocked":-1,"dns":3,"connect":14,"send":0,"wait":34,"receive":0,"ssl":35},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"affiduciary.com/home/css/owl.css","fqdn":"affiduciary.com","domain":"affiduciary.com","tld":"com"},"ip":{"addr":"84.75.144.0","port":443,"asn":6730,"as":"Sunrise GmbH","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://affiduciary.com/","date":"2026-08-10T01:42:11.571Z","timestamp":1786326131571,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.affiduciary.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 18 Jul 2026 22:13:22 GMT","end":"Fri, 16 Oct 2026 22:13:21 GMT"},"fingerprint":{"sha1":"32:43:A0:00:CF:FD:A9:87:65:2E:DD:F9:02:A4:05:36:9F:CB:8F:92","sha256":"1C:59:C8:76:96:00:CF:9A:AC:CF:35:1C:3E:BB:59:D9:02:79:09:FF:C2:68:CC:63:53:B2:D6:D6:EE:2E:D1:FB"}}},"request":{"raw":"GET /home/css/owl.css HTTP/1.1\r\nHost: affiduciary.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://affiduciary.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6Img3VjgvSG16V0N1ZmFOUWVSNDl0R2c9PSIsInZhbHVlIjoiRlpQOEFoNFRwci9TakdBZ3NWRThUblljOWZVSnNtcjZmdm1yVmY1YnNVL29QQmFnajVDMlh2aGF1Z3B2Sm1YLzdKL29zMmpJcFVWa21oZzMxbEhoUmFMUnlhcEQ2WitpYWoxSC9KQ2VNS244dEZRaDBHRG9WbEJHZkFhRThNRFQiLCJtYWMiOiI0OTgzNDk2ODI5NTEzMzllNDUzODgzN2RlZTk1YTg5OTMxOWVmMDBhYWY5M2MxZjUwYTNiOWU5ODE2Yzc5NjA3IiwidGFnIjoiIn0%3D; affiduciary_session=eyJpdiI6ImdBMktxSFlhN0ROL1d3NE1HaVVqNEE9PSIsInZhbHVlIjoiZUwrMW44M0ZnZHN6TVJPTmg3M1l2Y1kwNVF5OE0rbjBraEtVekdvSmpIR2xuUW51NFhVRzRSaTJIcUdMaldibFdyTmU5L09jUkRESVpYY0VCb0QvZEZxNEhGM3VUcERiamZIdC9uZ3F3TzdTNUNBQTVmekdlb2c2UUZHWmcwQzciLCJtYWMiOiJjYWUwYzNlNWU2MDJkMGQzNmZmM2RlZDE4YjFkZjRmN2FmMWVmODgzNzMxYjcwYzkzNDdlZWVmYjBlYWRmNjE3IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 10 Aug 2026 01:42:11 GMT\r\nContent-Type: text/css\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nStrict-Transport-Security: max-age=63072000; includeSubDomains; preload\r\nContent-Security-Policy: upgrade-insecure-requests\r\nVary: Accept-Encoding, User-Agent,Accept-Encoding\r\nLast-Modified: Sun, 16 Mar 2025 15:58:09 GMT\r\nContent-Encoding: br\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5435,"size_decoded":1594,"mime_type":"text/css","magic":"ASCII text","md5":"a2b37f6ee585a7a6275657f6465de19c","sha1":"a8add7a09817a0e906b1fca8e2edc4314d52db9c","sha256":"f3ae1868271d210fc0899711fb599754b60373c24c5789338151c8a1de0cd2aa","sha512":"3947549a4d553b68fbe5c536ab54a4a4f7168a298d87526c81160aec12ecde79a427f47a0e08dd3abd4d7ed403c38ab3d0507c443ed46044acc8aea35946b12c","ssdeep":"96:15+VPKCDemllo7PZ2RUPKuT+8F/pgvYGuC1lrhxfr5BEO:15+VPKChleHT+ypgT1Rhxz5B/","tlshash":"f9b1ede81276114d342b83e81a9d571a3b3dd452e909cc58b6eb26098fcef58602fb5b","first_seen":"2023-10-19T16:16:35Z","last_seen":"2026-08-10T01:43:08.459789Z","times_seen":83,"resource_available":false,"data":null}},"time_used":322,"timings":{"blocked":-1,"dns":0,"connect":170,"send":0,"wait":162,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"affiduciary.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"affiduciary.com/home/css/elements-css/cta.css","fqdn":"affiduciary.com","domain":"affiduciary.com","tld":"com"},"ip":{"addr":"84.75.144.0","port":443,"asn":6730,"as":"Sunrise GmbH","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://affiduciary.com/","date":"2026-08-10T01:42:11.598Z","timestamp":1786326131598,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.affiduciary.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 18 Jul 2026 22:13:22 GMT","end":"Fri, 16 Oct 2026 22:13:21 GMT"},"fingerprint":{"sha1":"32:43:A0:00:CF:FD:A9:87:65:2E:DD:F9:02:A4:05:36:9F:CB:8F:92","sha256":"1C:59:C8:76:96:00:CF:9A:AC:CF:35:1C:3E:BB:59:D9:02:79:09:FF:C2:68:CC:63:53:B2:D6:D6:EE:2E:D1:FB"}}},"request":{"raw":"GET /home/css/elements-css/cta.css HTTP/1.1\r\nHost: affiduciary.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://affiduciary.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6Img3VjgvSG16V0N1ZmFOUWVSNDl0R2c9PSIsInZhbHVlIjoiRlpQOEFoNFRwci9TakdBZ3NWRThUblljOWZVSnNtcjZmdm1yVmY1YnNVL29QQmFnajVDMlh2aGF1Z3B2Sm1YLzdKL29zMmpJcFVWa21oZzMxbEhoUmFMUnlhcEQ2WitpYWoxSC9KQ2VNS244dEZRaDBHRG9WbEJHZkFhRThNRFQiLCJtYWMiOiI0OTgzNDk2ODI5NTEzMzllNDUzODgzN2RlZTk1YTg5OTMxOWVmMDBhYWY5M2MxZjUwYTNiOWU5ODE2Yzc5NjA3IiwidGFnIjoiIn0%3D; affiduciary_session=eyJpdiI6ImdBMktxSFlhN0ROL1d3NE1HaVVqNEE9PSIsInZhbHVlIjoiZUwrMW44M0ZnZHN6TVJPTmg3M1l2Y1kwNVF5OE0rbjBraEtVekdvSmpIR2xuUW51NFhVRzRSaTJIcUdMaldibFdyTmU5L09jUkRESVpYY0VCb0QvZEZxNEhGM3VUcERiamZIdC9uZ3F3TzdTNUNBQTVmekdlb2c2UUZHWmcwQzciLCJtYWMiOiJjYWUwYzNlNWU2MDJkMGQzNmZmM2RlZDE4YjFkZjRmN2FmMWVmODgzNzMxYjcwYzkzNDdlZWVmYjBlYWRmNjE3IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 10 Aug 2026 01:42:12 GMT\r\nContent-Type: text/css\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nStrict-Transport-Security: max-age=63072000; includeSubDomains; preload\r\nContent-Security-Policy: upgrade-insecure-requests\r\nVary: Accept-Encoding, User-Agent,Accept-Encoding\r\nLast-Modified: Sun, 16 Mar 2025 15:58:09 GMT\r\nContent-Encoding: br\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":790,"size_decoded":669,"mime_type":"text/css","magic":"ASCII text","md5":"c4ce648e22f399cb161f250362bbe19f","sha1":"90d0914dbba362a836731213649cc4010f6fcc4b","sha256":"1669f40558902a0c4e975a646ffba3de45de131b2ab85d8a4a12b396d21fca4a","sha512":"5eff553bfbf3a84247bbc67b0d9a2a3a75da3f40845b0c83671cdb38a966d481e788aba845819538fa8c8093d938f14c24280855023cfd735ad650a4bee61ee2","ssdeep":"","tlshash":"84014c17e7246850c317e1b97ee93b9d112801b2de7b0e8ad4f26808e35c4941347ecf","first_seen":"2025-10-23T11:35:38.940935Z","last_seen":"2026-08-10T01:43:08.460137Z","times_seen":13,"resource_available":false,"data":null}},"time_used":735,"timings":{"blocked":575,"dns":0,"connect":0,"send":0,"wait":160,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"affiduciary.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"affiduciary.com/home/css/elements-css/working-process.css","fqdn":"affiduciary.com","domain":"affiduciary.com","tld":"com"},"ip":{"addr":"84.75.144.0","port":443,"asn":6730,"as":"Sunrise GmbH","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://affiduciary.com/","date":"2026-08-10T01:42:11.602Z","timestamp":1786326131602,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.affiduciary.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 18 Jul 2026 22:13:22 GMT","end":"Fri, 16 Oct 2026 22:13:21 GMT"},"fingerprint":{"sha1":"32:43:A0:00:CF:FD:A9:87:65:2E:DD:F9:02:A4:05:36:9F:CB:8F:92","sha256":"1C:59:C8:76:96:00:CF:9A:AC:CF:35:1C:3E:BB:59:D9:02:79:09:FF:C2:68:CC:63:53:B2:D6:D6:EE:2E:D1:FB"}}},"request":{"raw":"GET /home/css/elements-css/working-process.css HTTP/1.1\r\nHost: affiduciary.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://affiduciary.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6Img3VjgvSG16V0N1ZmFOUWVSNDl0R2c9PSIsInZhbHVlIjoiRlpQOEFoNFRwci9TakdBZ3NWRThUblljOWZVSnNtcjZmdm1yVmY1YnNVL29QQmFnajVDMlh2aGF1Z3B2Sm1YLzdKL29zMmpJcFVWa21oZzMxbEhoUmFMUnlhcEQ2WitpYWoxSC9KQ2VNS244dEZRaDBHRG9WbEJHZkFhRThNRFQiLCJtYWMiOiI0OTgzNDk2ODI5NTEzMzllNDUzODgzN2RlZTk1YTg5OTMxOWVmMDBhYWY5M2MxZjUwYTNiOWU5ODE2Yzc5NjA3IiwidGFnIjoiIn0%3D; affiduciary_session=eyJpdiI6ImdBMktxSFlhN0ROL1d3NE1HaVVqNEE9PSIsInZhbHVlIjoiZUwrMW44M0ZnZHN6TVJPTmg3M1l2Y1kwNVF5OE0rbjBraEtVekdvSmpIR2xuUW51NFhVRzRSaTJIcUdMaldibFdyTmU5L09jUkRESVpYY0VCb0QvZEZxNEhGM3VUcERiamZIdC9uZ3F3TzdTNUNBQTVmekdlb2c2UUZHWmcwQzciLCJtYWMiOiJjYWUwYzNlNWU2MDJkMGQzNmZmM2RlZDE4YjFkZjRmN2FmMWVmODgzNzMxYjcwYzkzNDdlZWVmYjBlYWRmNjE3IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 10 Aug 2026 01:42:12 GMT\r\nContent-Type: text/css\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nStrict-Transport-Security: max-age=63072000; includeSubDomains; preload\r\nContent-Security-Policy: upgrade-insecure-requests\r\nVary: Accept-Encoding, User-Agent,Accept-Encoding\r\nLast-Modified: Sun, 16 Mar 2025 15:58:09 GMT\r\nContent-Encoding: br\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2405,"size_decoded":924,"mime_type":"text/css","magic":"ASCII text","md5":"456373292b97e3fe7e87a362437703a3","sha1":"0ebc5ec44e3566cbbb8170d1be5069f2188ad97b","sha256":"f5c1d570c2fdd37b8d9a4c126bdd40c4b876f6e67fe8f767cc4ed7eb18090a7b","sha512":"c615734335ae36a1c11b6d2b17b78c94536f7acff7909fc94d4fdeae4a30a72268844c425c087cd90f5012b65b2780765fc3f519658800cc9bf78412de50e5c1","ssdeep":"","tlshash":"d141c066a038685db787f1797d2c3f4680a94462de1f0d56d4a2f82f47ac0983053b9f","first_seen":"2025-10-23T11:35:38.912072Z","last_seen":"2026-08-10T01:43:08.460599Z","times_seen":13,"resource_available":false,"data":null}},"time_used":775,"timings":{"blocked":608,"dns":0,"connect":0,"send":0,"wait":167,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"affiduciary.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"affiduciary.com/home/js/bootstrap.min.js","fqdn":"affiduciary.com","domain":"affiduciary.com","tld":"com"},"ip":{"addr":"84.75.144.0","port":443,"asn":6730,"as":"Sunrise GmbH","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://affiduciary.com/","date":"2026-08-10T01:42:11.614Z","timestamp":1786326131614,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.affiduciary.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 18 Jul 2026 22:13:22 GMT","end":"Fri, 16 Oct 2026 22:13:21 GMT"},"fingerprint":{"sha1":"32:43:A0:00:CF:FD:A9:87:65:2E:DD:F9:02:A4:05:36:9F:CB:8F:92","sha256":"1C:59:C8:76:96:00:CF:9A:AC:CF:35:1C:3E:BB:59:D9:02:79:09:FF:C2:68:CC:63:53:B2:D6:D6:EE:2E:D1:FB"}}},"request":{"raw":"GET /home/js/bootstrap.min.js HTTP/1.1\r\nHost: affiduciary.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://affiduciary.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6Img3VjgvSG16V0N1ZmFOUWVSNDl0R2c9PSIsInZhbHVlIjoiRlpQOEFoNFRwci9TakdBZ3NWRThUblljOWZVSnNtcjZmdm1yVmY1YnNVL29QQmFnajVDMlh2aGF1Z3B2Sm1YLzdKL29zMmpJcFVWa21oZzMxbEhoUmFMUnlhcEQ2WitpYWoxSC9KQ2VNS244dEZRaDBHRG9WbEJHZkFhRThNRFQiLCJtYWMiOiI0OTgzNDk2ODI5NTEzMzllNDUzODgzN2RlZTk1YTg5OTMxOWVmMDBhYWY5M2MxZjUwYTNiOWU5ODE2Yzc5NjA3IiwidGFnIjoiIn0%3D; affiduciary_session=eyJpdiI6ImdBMktxSFlhN0ROL1d3NE1HaVVqNEE9PSIsInZhbHVlIjoiZUwrMW44M0ZnZHN6TVJPTmg3M1l2Y1kwNVF5OE0rbjBraEtVekdvSmpIR2xuUW51NFhVRzRSaTJIcUdMaldibFdyTmU5L09jUkRESVpYY0VCb0QvZEZxNEhGM3VUcERiamZIdC9uZ3F3TzdTNUNBQTVmekdlb2c2UUZHWmcwQzciLCJtYWMiOiJjYWUwYzNlNWU2MDJkMGQzNmZmM2RlZDE4YjFkZjRmN2FmMWVmODgzNzMxYjcwYzkzNDdlZWVmYjBlYWRmNjE3IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 10 Aug 2026 01:42:12 GMT\r\nContent-Type: text/javascript\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nStrict-Transport-Security: max-age=63072000; includeSubDomains; preload\r\nContent-Security-Policy: upgrade-insecure-requests\r\nVary: Accept-Encoding, User-Agent,Accept-Encoding\r\nLast-Modified: Sun, 16 Mar 2025 15:58:09 GMT\r\nContent-Encoding: br\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":60104,"size_decoded":15904,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (59825)","md5":"e6f488c5766fb06169100bdbd2b4fdbd","sha1":"f7365985962f78092d8eeaca6d6633d6fbf75583","sha256":"0ce9de398de7e7ec63e836b70090643c7c5a3f29ea4a519a67defdd206c13ac1","sha512":"f18f1e18af76773a2ec2944e229a70afed243dabaed2aaad9f365934417c3dab79b6e44d2712570a46d07c9d079541b7cb51c1df3d7c0922a6528ee2db370fa6","ssdeep":"768:KZYN+vOLYakObgUDZj8fW+l3sLaSLPe6CMhYVRK0H/9V2Vz/kq8GPnl+G/AX22b+:Kk9PXht8xm+Yx2UPnAe","tlshash":"2443a5563244b8330ade85a78136434bf7295c98b547806cb5bc6cde2b7dc863276bbc","first_seen":"2023-03-07T01:19:35Z","last_seen":"2026-08-10T01:43:08.461093Z","times_seen":687,"resource_available":true,"data":null}},"time_used":1042,"timings":{"blocked":877,"dns":0,"connect":0,"send":0,"wait":165,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"affiduciary.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/_/translate_http/_/ss/k=translate_http.tr.B7Dih9Jyjnw.L.F4.O/am=BIgABw/d=0/rs=AN8SPfoeobjU4Qsxvdz3-dk54RrUWPxdGg/m=el_main_css","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://affiduciary.com/","date":"2026-08-10T01:42:13.096Z","timestamp":1786326133096,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Jul 2026 18:07:39 GMT","end":"Mon, 12 Oct 2026 18:07:38 GMT"},"fingerprint":{"sha1":"12:E8:CE:14:FC:4E:1E:0D:A3:9B:2E:5D:D0:88:79:79:71:C9:F8:6A","sha256":"58:07:B9:A1:6C:54:97:F9:9D:6A:66:E2:49:57:FB:86:86:8D:12:97:8F:4A:C9:74:A1:9D:69:4E:1F:A6:CC:9D"}}},"request":{"raw":"GET /_/translate_http/_/ss/k=translate_http.tr.B7Dih9Jyjnw.L.F4.O/am=BIgABw/d=0/rs=AN8SPfoeobjU4Qsxvdz3-dk54RrUWPxdGg/m=el_main_css HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://affiduciary.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/rosetta\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"rosetta\"\r\nreport-to: {\"group\":\"rosetta\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/rosetta\"}]}\r\ncontent-length: 3967\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 03 Aug 2026 19:07:34 GMT\r\nexpires: Tue, 03 Aug 2027 19:07:34 GMT\r\ncache-control: public, max-age=31536000\r\nage: 542079\r\nlast-modified: Thu, 09 Apr 2026 01:12:55 GMT\r\ncontent-type: text/css; charset=UTF-8\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":20284,"size_decoded":4819,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (20284), with no line terminators","md5":"fde4f72b90fe807270db3c332dd058df","sha1":"7ef4d70af01c38a7f80a7650be25f63aff4ba751","sha256":"ab31c9be358d2107fc1158434c7aeaaf15f82e3e405ed67ab236b5ac232ed159","sha512":"9bef39350af557afeb10cb71068426ab28befaf5295359954787be06a5ce0993d69e8f5018a5a17c44311d294dd1a87a6f82edd0f5743df0149b8e4e53061695","ssdeep":"192:nvqx/EhZINcrXsfg0SgG8CqA3uku9SJFzvQVMbnUIfIxIVVpTrecfzPtcmt4v78l:gMF8Sb3i0JFzourUqWMVpTrdfzPtcBG","tlshash":"c492872057aed01967efa82364d36dff71d444db90123eeaaf5a7352cd821f231ea214","first_seen":"2026-04-13T20:43:22.641436Z","last_seen":"2026-08-10T03:09:03.814171Z","times_seen":19820,"resource_available":false,"data":null}},"time_used":68,"timings":{"blocked":-1,"dns":3,"connect":17,"send":0,"wait":18,"receive":0,"ssl":30},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/_/translate_http/_/ss/k=translate_http.tr.B7Dih9Jyjnw.L.F4.O/am=BIgABw/d=0/rs=AN8SPfoeobjU4Qsxvdz3-dk54RrUWPxdGg/m=el_main_css","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://affiduciary.com/","date":"2026-08-10T01:42:16.778Z","timestamp":1786326136778,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Jul 2026 18:07:39 GMT","end":"Mon, 12 Oct 2026 18:07:38 GMT"},"fingerprint":{"sha1":"12:E8:CE:14:FC:4E:1E:0D:A3:9B:2E:5D:D0:88:79:79:71:C9:F8:6A","sha256":"58:07:B9:A1:6C:54:97:F9:9D:6A:66:E2:49:57:FB:86:86:8D:12:97:8F:4A:C9:74:A1:9D:69:4E:1F:A6:CC:9D"}}},"request":{"raw":"GET /_/translate_http/_/ss/k=translate_http.tr.B7Dih9Jyjnw.L.F4.O/am=BIgABw/d=0/rs=AN8SPfoeobjU4Qsxvdz3-dk54RrUWPxdGg/m=el_main_css HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://affiduciary.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/rosetta\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"rosetta\"\r\nreport-to: {\"group\":\"rosetta\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/rosetta\"}]}\r\ncontent-length: 3967\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 03 Aug 2026 19:07:34 GMT\r\nexpires: Tue, 03 Aug 2027 19:07:34 GMT\r\ncache-control: public, max-age=31536000\r\nage: 542082\r\nlast-modified: Thu, 09 Apr 2026 01:12:55 GMT\r\ncontent-type: text/css; charset=UTF-8\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":20284,"size_decoded":4799,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (20284), with no line terminators","md5":"fde4f72b90fe807270db3c332dd058df","sha1":"7ef4d70af01c38a7f80a7650be25f63aff4ba751","sha256":"ab31c9be358d2107fc1158434c7aeaaf15f82e3e405ed67ab236b5ac232ed159","sha512":"9bef39350af557afeb10cb71068426ab28befaf5295359954787be06a5ce0993d69e8f5018a5a17c44311d294dd1a87a6f82edd0f5743df0149b8e4e53061695","ssdeep":"192:nvqx/EhZINcrXsfg0SgG8CqA3uku9SJFzvQVMbnUIfIxIVVpTrecfzPtcmt4v78l:gMF8Sb3i0JFzourUqWMVpTrdfzPtcBG","tlshash":"c492872057aed01967efa82364d36dff71d444db90123eeaaf5a7352cd821f231ea214","first_seen":"2026-04-13T20:43:22.641436Z","last_seen":"2026-08-10T03:09:03.814171Z","times_seen":19820,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"affiduciary.com/","fqdn":"affiduciary.com","domain":"affiduciary.com","tld":"com"},"ip":{"addr":"84.75.144.0","port":443,"asn":6730,"as":"Sunrise GmbH","country":"Switzerland","country_code":"CH"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-08-10T01:42:09.782Z","timestamp":1786326129782,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.affiduciary.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 18 Jul 2026 22:13:22 GMT","end":"Fri, 16 Oct 2026 22:13:21 GMT"},"fingerprint":{"sha1":"32:43:A0:00:CF:FD:A9:87:65:2E:DD:F9:02:A4:05:36:9F:CB:8F:92","sha256":"1C:59:C8:76:96:00:CF:9A:AC:CF:35:1C:3E:BB:59:D9:02:79:09:FF:C2:68:CC:63:53:B2:D6:D6:EE:2E:D1:FB"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: affiduciary.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 10 Aug 2026 01:42:11 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nX-Powered-By: PHP/8.2.32\r\nCache-Control: private, must-revalidate\r\npragma: no-cache\r\nexpires: -1\r\nSet-Cookie: XSRF-TOKEN=eyJpdiI6Img3VjgvSG16V0N1ZmFOUWVSNDl0R2c9PSIsInZhbHVlIjoiRlpQOEFoNFRwci9TakdBZ3NWRThUblljOWZVSnNtcjZmdm1yVmY1YnNVL29QQmFnajVDMlh2aGF1Z3B2Sm1YLzdKL29zMmpJcFVWa21oZzMxbEhoUmFMUnlhcEQ2WitpYWoxSC9KQ2VNS244dEZRaDBHRG9WbEJHZkFhRThNRFQiLCJtYWMiOiI0OTgzNDk2ODI5NTEzMzllNDUzODgzN2RlZTk1YTg5OTMxOWVmMDBhYWY5M2MxZjUwYTNiOWU5ODE2Yzc5NjA3IiwidGFnIjoiIn0%3D; expires=Mon, 10-Aug-2026 03:42:11 GMT; Max-Age=7200; path=/; samesite=lax\naffiduciary_session=eyJpdiI6ImdBMktxSFlhN0ROL1d3NE1HaVVqNEE9PSIsInZhbHVlIjoiZUwrMW44M0ZnZHN6TVJPTmg3M1l2Y1kwNVF5OE0rbjBraEtVekdvSmpIR2xuUW51NFhVRzRSaTJIcUdMaldibFdyTmU5L09jUkRESVpYY0VCb0QvZEZxNEhGM3VUcERiamZIdC9uZ3F3TzdTNUNBQTVmekdlb2c2UUZHWmcwQzciLCJtYWMiOiJjYWUwYzNlNWU2MDJkMGQzNmZmM2RlZDE4YjFkZjRmN2FmMWVmODgzNzMxYjcwYzkzNDdlZWVmYjBlYWRmNjE3IiwidGFnIjoiIn0%3D; expires=Mon, 10-Aug-2026 03:42:11 GMT; Max-Age=7200; path=/; httponly; samesite=lax\r\nStrict-Transport-Security: max-age=63072000; includeSubDomains; preload\r\nContent-Security-Policy: upgrade-insecure-requests\r\nVary: Accept-Encoding, User-Agent,Accept-Encoding\r\nContent-Encoding: br\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"Popper","description":"Popper is a positioning engine, its purpose is to calculate the position of an element to make it possible to position it near a given reference element.","website":"https://popper.js.org","common_platform_enumeration":"","icon":"Popper.svg","categories":["Miscellaneous"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"PHP:8.2.32","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"WOW","description":"Reveal CSS animation as you scroll down a page.","website":"https://www.delac.io/WOW","common_platform_enumeration":"","icon":"","categories":["JavaScript frameworks","Web frameworks","JavaScript graphics"]},{"name":"FancyBox","description":"FancyBox is a tool for displaying images, html content and multi-media in a Mac-style 'lightbox' that floats overtop of web page.","website":"https://fancyapps.com/fancybox","common_platform_enumeration":"","icon":"FancyBox.svg","categories":["JavaScript libraries"]}],"data":{"size":52895,"size_decoded":8802,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"8308d1382e9fac4bdf668e015508fa3f","sha1":"caa7a293f4713cf28c3745be4a53fe42c03364e6","sha256":"3ac622bab9e4c22b991106cb3434caf031560e01abdf12888173885827681917","sha512":"cea5566336fb97e8221d7639fef77ff056b184ba63f2caa12af8ea4253d4a26daf5a4056af5cbb8320d9a1e231deef4b495df54b0004f64d6369dde0ed013d56","ssdeep":"1536:huepL6HJHaX7DX3YYwljWpQjFMGUFLglgVGqpS:HXaljWpQjFMGUFLglgVGqI","tlshash":"bb33fe22d4f15067417380e8be727a6b9f82e407ca4ac946b6ed0bd85fd2dcadc4760d","first_seen":"2026-08-10T01:17:46.45914Z","last_seen":"2026-08-10T01:43:08.45539Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1543,"timings":{"blocked":-1,"dns":337,"connect":160,"send":0,"wait":880,"receive":0,"ssl":165},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"affiduciary.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"affiduciary.com/home/css/elements-css/banner.css","fqdn":"affiduciary.com","domain":"affiduciary.com","tld":"com"},"ip":{"addr":"84.75.144.0","port":443,"asn":6730,"as":"Sunrise GmbH","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://affiduciary.com/","date":"2026-08-10T01:42:11.588Z","timestamp":1786326131588,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.affiduciary.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 18 Jul 2026 22:13:22 GMT","end":"Fri, 16 Oct 2026 22:13:21 GMT"},"fingerprint":{"sha1":"32:43:A0:00:CF:FD:A9:87:65:2E:DD:F9:02:A4:05:36:9F:CB:8F:92","sha256":"1C:59:C8:76:96:00:CF:9A:AC:CF:35:1C:3E:BB:59:D9:02:79:09:FF:C2:68:CC:63:53:B2:D6:D6:EE:2E:D1:FB"}}},"request":{"raw":"GET /home/css/elements-css/banner.css HTTP/1.1\r\nHost: affiduciary.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://affiduciary.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6Img3VjgvSG16V0N1ZmFOUWVSNDl0R2c9PSIsInZhbHVlIjoiRlpQOEFoNFRwci9TakdBZ3NWRThUblljOWZVSnNtcjZmdm1yVmY1YnNVL29QQmFnajVDMlh2aGF1Z3B2Sm1YLzdKL29zMmpJcFVWa21oZzMxbEhoUmFMUnlhcEQ2WitpYWoxSC9KQ2VNS244dEZRaDBHRG9WbEJHZkFhRThNRFQiLCJtYWMiOiI0OTgzNDk2ODI5NTEzMzllNDUzODgzN2RlZTk1YTg5OTMxOWVmMDBhYWY5M2MxZjUwYTNiOWU5ODE2Yzc5NjA3IiwidGFnIjoiIn0%3D; affiduciary_session=eyJpdiI6ImdBMktxSFlhN0ROL1d3NE1HaVVqNEE9PSIsInZhbHVlIjoiZUwrMW44M0ZnZHN6TVJPTmg3M1l2Y1kwNVF5OE0rbjBraEtVekdvSmpIR2xuUW51NFhVRzRSaTJIcUdMaldibFdyTmU5L09jUkRESVpYY0VCb0QvZEZxNEhGM3VUcERiamZIdC9uZ3F3TzdTNUNBQTVmekdlb2c2UUZHWmcwQzciLCJtYWMiOiJjYWUwYzNlNWU2MDJkMGQzNmZmM2RlZDE4YjFkZjRmN2FmMWVmODgzNzMxYjcwYzkzNDdlZWVmYjBlYWRmNjE3IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 10 Aug 2026 01:42:12 GMT\r\nContent-Type: text/css\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nStrict-Transport-Security: max-age=63072000; includeSubDomains; preload\r\nContent-Security-Policy: upgrade-insecure-requests\r\nVary: Accept-Encoding, User-Agent,Accept-Encoding\r\nLast-Modified: Sun, 16 Mar 2025 15:58:09 GMT\r\nContent-Encoding: br\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":9255,"size_decoded":1557,"mime_type":"text/css","magic":"ASCII text","md5":"06812fd37b84f83d7fb570f05fa17bd6","sha1":"1ec62abf4a6116cd4999dba13c618523da87bb40","sha256":"963a74392f32189980d94884583700ae3caaee60f9ed9f13a8d07c308fc6ea25","sha512":"fa59cd03b6597b20ed981a1bc4191049e069815e04d7c89ed0c489f3da1b37f85cbbde5e4ea3a9c9102d9585f3ba79cf1d4223573d5dcf6ccaf11d56d4fd4c85","ssdeep":"192:QQC9YU2Q9qo9V4QC9YU2Q9qXQC9YU2Q9qhQC9YUxF67oQC9YU2Q9qKzGQ:k2Q9qo9e2Q9qt2Q9qzxF67s2Q9qKzGQ","tlshash":"7c12cea969651014302bc35c4fc7ab585f3cb462e926c85df7e3251f8e8d6cc20a6f5e","first_seen":"2025-10-23T11:35:38.8763Z","last_seen":"2026-08-10T01:43:08.46209Z","times_seen":11,"resource_available":false,"data":null}},"time_used":595,"timings":{"blocked":432,"dns":0,"connect":0,"send":0,"wait":163,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"affiduciary.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"affiduciary.com/home/css/responsive.css","fqdn":"affiduciary.com","domain":"affiduciary.com","tld":"com"},"ip":{"addr":"84.75.144.0","port":443,"asn":6730,"as":"Sunrise GmbH","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://affiduciary.com/","date":"2026-08-10T01:42:11.607Z","timestamp":1786326131607,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.affiduciary.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 18 Jul 2026 22:13:22 GMT","end":"Fri, 16 Oct 2026 22:13:21 GMT"},"fingerprint":{"sha1":"32:43:A0:00:CF:FD:A9:87:65:2E:DD:F9:02:A4:05:36:9F:CB:8F:92","sha256":"1C:59:C8:76:96:00:CF:9A:AC:CF:35:1C:3E:BB:59:D9:02:79:09:FF:C2:68:CC:63:53:B2:D6:D6:EE:2E:D1:FB"}}},"request":{"raw":"GET /home/css/responsive.css HTTP/1.1\r\nHost: affiduciary.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://affiduciary.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6Img3VjgvSG16V0N1ZmFOUWVSNDl0R2c9PSIsInZhbHVlIjoiRlpQOEFoNFRwci9TakdBZ3NWRThUblljOWZVSnNtcjZmdm1yVmY1YnNVL29QQmFnajVDMlh2aGF1Z3B2Sm1YLzdKL29zMmpJcFVWa21oZzMxbEhoUmFMUnlhcEQ2WitpYWoxSC9KQ2VNS244dEZRaDBHRG9WbEJHZkFhRThNRFQiLCJtYWMiOiI0OTgzNDk2ODI5NTEzMzllNDUzODgzN2RlZTk1YTg5OTMxOWVmMDBhYWY5M2MxZjUwYTNiOWU5ODE2Yzc5NjA3IiwidGFnIjoiIn0%3D; affiduciary_session=eyJpdiI6ImdBMktxSFlhN0ROL1d3NE1HaVVqNEE9PSIsInZhbHVlIjoiZUwrMW44M0ZnZHN6TVJPTmg3M1l2Y1kwNVF5OE0rbjBraEtVekdvSmpIR2xuUW51NFhVRzRSaTJIcUdMaldibFdyTmU5L09jUkRESVpYY0VCb0QvZEZxNEhGM3VUcERiamZIdC9uZ3F3TzdTNUNBQTVmekdlb2c2UUZHWmcwQzciLCJtYWMiOiJjYWUwYzNlNWU2MDJkMGQzNmZmM2RlZDE4YjFkZjRmN2FmMWVmODgzNzMxYjcwYzkzNDdlZWVmYjBlYWRmNjE3IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 10 Aug 2026 01:42:12 GMT\r\nContent-Type: text/css\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nStrict-Transport-Security: max-age=63072000; includeSubDomains; preload\r\nContent-Security-Policy: upgrade-insecure-requests\r\nVary: Accept-Encoding, User-Agent,Accept-Encoding\r\nLast-Modified: Sun, 16 Mar 2025 15:58:09 GMT\r\nContent-Encoding: br\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":15694,"size_decoded":2884,"mime_type":"text/css","magic":"ASCII text","md5":"5764cd46ac44b10b63728376a637a4cc","sha1":"3972df2b4a7b9037b2483b5675d2c4ea1fe930e7","sha256":"43341f56ff9b00cbb4a5e5f5dbcf37591bcd0f91e2f9273f5f712d79fdb470a5","sha512":"7ea4e752b4d3a274b9ece050c5210d3c0d86331e3119ddac22642a9bdbbfd731a1ad5c434c9cdb69f5ad96ef3a04e170eff1075b158cad98eb37e8ae39ab8850","ssdeep":"192:6HFr//ZYB55n7T7pFzFyew7b3Qhki8ibfj/+9w86BXSZauka7EHbyWPTPl:TtHJ8Gak","tlshash":"6f629bceb9b110592946b5319cff62502177e463da4cdbd2b9e29068cf9c2e08dd2f4e","first_seen":"2025-10-23T11:35:38.882745Z","last_seen":"2026-08-10T01:43:08.462596Z","times_seen":13,"resource_available":false,"data":null}},"time_used":893,"timings":{"blocked":732,"dns":0,"connect":0,"send":0,"wait":161,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"affiduciary.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"affiduciary.com/home/js/owl.js","fqdn":"affiduciary.com","domain":"affiduciary.com","tld":"com"},"ip":{"addr":"84.75.144.0","port":443,"asn":6730,"as":"Sunrise GmbH","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://affiduciary.com/","date":"2026-08-10T01:42:11.615Z","timestamp":1786326131615,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.affiduciary.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 18 Jul 2026 22:13:22 GMT","end":"Fri, 16 Oct 2026 22:13:21 GMT"},"fingerprint":{"sha1":"32:43:A0:00:CF:FD:A9:87:65:2E:DD:F9:02:A4:05:36:9F:CB:8F:92","sha256":"1C:59:C8:76:96:00:CF:9A:AC:CF:35:1C:3E:BB:59:D9:02:79:09:FF:C2:68:CC:63:53:B2:D6:D6:EE:2E:D1:FB"}}},"request":{"raw":"GET /home/js/owl.js HTTP/1.1\r\nHost: affiduciary.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://affiduciary.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6Img3VjgvSG16V0N1ZmFOUWVSNDl0R2c9PSIsInZhbHVlIjoiRlpQOEFoNFRwci9TakdBZ3NWRThUblljOWZVSnNtcjZmdm1yVmY1YnNVL29QQmFnajVDMlh2aGF1Z3B2Sm1YLzdKL29zMmpJcFVWa21oZzMxbEhoUmFMUnlhcEQ2WitpYWoxSC9KQ2VNS244dEZRaDBHRG9WbEJHZkFhRThNRFQiLCJtYWMiOiI0OTgzNDk2ODI5NTEzMzllNDUzODgzN2RlZTk1YTg5OTMxOWVmMDBhYWY5M2MxZjUwYTNiOWU5ODE2Yzc5NjA3IiwidGFnIjoiIn0%3D; affiduciary_session=eyJpdiI6ImdBMktxSFlhN0ROL1d3NE1HaVVqNEE9PSIsInZhbHVlIjoiZUwrMW44M0ZnZHN6TVJPTmg3M1l2Y1kwNVF5OE0rbjBraEtVekdvSmpIR2xuUW51NFhVRzRSaTJIcUdMaldibFdyTmU5L09jUkRESVpYY0VCb0QvZEZxNEhGM3VUcERiamZIdC9uZ3F3TzdTNUNBQTVmekdlb2c2UUZHWmcwQzciLCJtYWMiOiJjYWUwYzNlNWU2MDJkMGQzNmZmM2RlZDE4YjFkZjRmN2FmMWVmODgzNzMxYjcwYzkzNDdlZWVmYjBlYWRmNjE3IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 10 Aug 2026 01:42:12 GMT\r\nContent-Type: text/javascript\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nStrict-Transport-Security: max-age=63072000; includeSubDomains; preload\r\nContent-Security-Policy: upgrade-insecure-requests\r\nVary: Accept-Encoding, User-Agent,Accept-Encoding\r\nLast-Modified: Sun, 16 Mar 2025 15:58:09 GMT\r\nContent-Encoding: br\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":89992,"size_decoded":19734,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (360)","md5":"ccdf893e7d8b26933af0c336bcc3943e","sha1":"ac575ba3377f95ef22bad865ec35b0b3dcb0dfe0","sha256":"db9d6cf3c1c4b047c62f646e7d9991c06a212931c362bf53f9a2406b30f09466","sha512":"818db99c2eb775d1342dc2cf871509185c5ad86a08c80e452f29b8509a870c43078e9f11113e999ff487a35b25b6ddd6b95b6a7f2c4408fdfcfdd69473f59510","ssdeep":"1536:owLoreUC7AuLMjvNlP8GNMBJ6IcIhKJQIOybQOoiYM9OJ0QQKOv:oUMNlPBqJTuOGQOotEhKOv","tlshash":"bf9393c5f36c261b422631785eae23ce723d402ad911186f7ca8e9dc29d546c436eff9","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-08-10T01:45:19.78004Z","times_seen":12737,"resource_available":true,"data":null}},"time_used":1044,"timings":{"blocked":881,"dns":0,"connect":0,"send":0,"wait":163,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"affiduciary.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"widget-v3.smartsuppcdn.com/manifest.json","fqdn":"widget-v3.smartsuppcdn.com","domain":"smartsuppcdn.com","tld":"com"},"ip":{"addr":"185.76.9.12","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://affiduciary.com/","date":"2026-08-10T01:42:16.711Z","timestamp":1786326136711,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1857279285.rsc.cdn77.org","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 04 Jun 2026 14:34:45 GMT","end":"Wed, 02 Sep 2026 14:34:44 GMT"},"fingerprint":{"sha1":"92:5D:A0:17:13:91:72:7B:B6:8C:6A:7D:A9:55:7F:C8:A9:47:11:99","sha256":"0E:FC:E3:4D:AD:32:B2:11:05:DC:E3:CD:CC:9E:10:DC:C5:2D:9E:1C:D7:C1:9C:00:92:15:43:C5:B7:0B:3A:D6"}}},"request":{"raw":"GET /manifest.json HTTP/1.1\r\nHost: widget-v3.smartsuppcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: text/plain\r\nOrigin: https://affiduciary.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://affiduciary.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Mon, 10 Aug 2026 01:42:20 GMT\r\ncontent-type: application/json\r\naccess-control-allow-origin: *\r\ncache-control: max-age=300, public, s-maxage=60\r\netag: W/\"6a7093a4-891\"\r\nexpires: Mon, 03 Aug 2026 13:20:01 GMT\r\nlast-modified: Mon, 03 Aug 2026 13:12:04 GMT\r\nx-77-nzt: kx/lF0uGJMWrG68i16j3wIvGh5mUdQSfrVwlkOLlbTr4Rf/rcWMfVF7UZ03UtXH0HOmuKz0\r\nx-77-nzt-ray: e2f75420ba2bfb1ca12c796ab63df900\r\nage: 0\r\nx-77-cache: HIT\r\nx-77-age: 25\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nserver: CDN77-Turbo\r\nx-77-pop: stockholmSE\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":2193,"size_decoded":1044,"mime_type":"application/json","magic":"JSON text data","md5":"9f40d3a11c02b8dc0a1627186b6f2cd4","sha1":"705146cfc3126ce2d8ec54d6a5743c79aa0a91e4","sha256":"9f5c54c74d4c6345396c9b2e3a04393f90570c1eb949b2c9bf09a251e65487f1","sha512":"a2a090de8960f7292b52268ef5e5212d6a74b19840794d91c6e222f17e7f0a6b125d577fda4d95701f350b0c8d5c49025f0bf220c8f349ef58996693aad11b1a","ssdeep":"","tlshash":"fb413793c0f80d9317cc652b789585415d90c3c7ac893e0d76ae8a6f6f4cda914e677c","first_seen":"2026-08-03T19:54:11.717069Z","last_seen":"2026-08-10T01:51:44.869156Z","times_seen":243,"resource_available":false,"data":null}},"time_used":3311,"timings":{"blocked":-1,"dns":35,"connect":9,"send":0,"wait":8,"receive":0,"ssl":3259},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"affiduciary.com/home/css/elpath.css","fqdn":"affiduciary.com","domain":"affiduciary.com","tld":"com"},"ip":{"addr":"84.75.144.0","port":443,"asn":6730,"as":"Sunrise GmbH","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://affiduciary.com/","date":"2026-08-10T01:42:11.585Z","timestamp":1786326131585,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.affiduciary.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 18 Jul 2026 22:13:22 GMT","end":"Fri, 16 Oct 2026 22:13:21 GMT"},"fingerprint":{"sha1":"32:43:A0:00:CF:FD:A9:87:65:2E:DD:F9:02:A4:05:36:9F:CB:8F:92","sha256":"1C:59:C8:76:96:00:CF:9A:AC:CF:35:1C:3E:BB:59:D9:02:79:09:FF:C2:68:CC:63:53:B2:D6:D6:EE:2E:D1:FB"}}},"request":{"raw":"GET /home/css/elpath.css HTTP/1.1\r\nHost: affiduciary.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://affiduciary.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6Img3VjgvSG16V0N1ZmFOUWVSNDl0R2c9PSIsInZhbHVlIjoiRlpQOEFoNFRwci9TakdBZ3NWRThUblljOWZVSnNtcjZmdm1yVmY1YnNVL29QQmFnajVDMlh2aGF1Z3B2Sm1YLzdKL29zMmpJcFVWa21oZzMxbEhoUmFMUnlhcEQ2WitpYWoxSC9KQ2VNS244dEZRaDBHRG9WbEJHZkFhRThNRFQiLCJtYWMiOiI0OTgzNDk2ODI5NTEzMzllNDUzODgzN2RlZTk1YTg5OTMxOWVmMDBhYWY5M2MxZjUwYTNiOWU5ODE2Yzc5NjA3IiwidGFnIjoiIn0%3D; affiduciary_session=eyJpdiI6ImdBMktxSFlhN0ROL1d3NE1HaVVqNEE9PSIsInZhbHVlIjoiZUwrMW44M0ZnZHN6TVJPTmg3M1l2Y1kwNVF5OE0rbjBraEtVekdvSmpIR2xuUW51NFhVRzRSaTJIcUdMaldibFdyTmU5L09jUkRESVpYY0VCb0QvZEZxNEhGM3VUcERiamZIdC9uZ3F3TzdTNUNBQTVmekdlb2c2UUZHWmcwQzciLCJtYWMiOiJjYWUwYzNlNWU2MDJkMGQzNmZmM2RlZDE4YjFkZjRmN2FmMWVmODgzNzMxYjcwYzkzNDdlZWVmYjBlYWRmNjE3IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 10 Aug 2026 01:42:12 GMT\r\nContent-Type: text/css\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nStrict-Transport-Security: max-age=63072000; includeSubDomains; preload\r\nContent-Security-Policy: upgrade-insecure-requests\r\nVary: Accept-Encoding, User-Agent,Accept-Encoding\r\nLast-Modified: Sun, 16 Mar 2025 15:58:09 GMT\r\nContent-Encoding: br\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":54066,"size_decoded":6596,"mime_type":"text/css","magic":"ASCII text","md5":"995bde3f6ba1b0c07eb708a0a4fb696d","sha1":"a07e9cb8c9a0ca37f4ded3ef94424359fcc399bf","sha256":"697fd1145d99277e2e763a1be0e3fb309d8bd5a2116803681d9bb4d3e8663ea7","sha512":"8a7689776c9bec7addccc0e8cc395ddf3975d95897d275e45e5de561faa4c78bb882219a062123d1ea547a9a538e59ed6639a9cbf8a59fc3ace573123d254768","ssdeep":"1536:ha4hqgSKWv47Z8VzG5Qbc4BNCH+9UUE3hTnm6o6c:ha4hqgZ447Z8VzG5Qb1BNCH+9UUE3hTs","tlshash":"1433f263aff21c48a25ba0e5dafd2665b35d0443418ebd96be80348dcfc45a8c673d4e","first_seen":"2025-04-23T06:54:26.684503Z","last_seen":"2026-08-10T01:43:08.464209Z","times_seen":42,"resource_available":false,"data":null}},"time_used":576,"timings":{"blocked":414,"dns":0,"connect":0,"send":0,"wait":162,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"affiduciary.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"affiduciary.com/home/css/elements-css/about.css","fqdn":"affiduciary.com","domain":"affiduciary.com","tld":"com"},"ip":{"addr":"84.75.144.0","port":443,"asn":6730,"as":"Sunrise GmbH","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://affiduciary.com/","date":"2026-08-10T01:42:11.594Z","timestamp":1786326131594,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.affiduciary.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 18 Jul 2026 22:13:22 GMT","end":"Fri, 16 Oct 2026 22:13:21 GMT"},"fingerprint":{"sha1":"32:43:A0:00:CF:FD:A9:87:65:2E:DD:F9:02:A4:05:36:9F:CB:8F:92","sha256":"1C:59:C8:76:96:00:CF:9A:AC:CF:35:1C:3E:BB:59:D9:02:79:09:FF:C2:68:CC:63:53:B2:D6:D6:EE:2E:D1:FB"}}},"request":{"raw":"GET /home/css/elements-css/about.css HTTP/1.1\r\nHost: affiduciary.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://affiduciary.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6Img3VjgvSG16V0N1ZmFOUWVSNDl0R2c9PSIsInZhbHVlIjoiRlpQOEFoNFRwci9TakdBZ3NWRThUblljOWZVSnNtcjZmdm1yVmY1YnNVL29QQmFnajVDMlh2aGF1Z3B2Sm1YLzdKL29zMmpJcFVWa21oZzMxbEhoUmFMUnlhcEQ2WitpYWoxSC9KQ2VNS244dEZRaDBHRG9WbEJHZkFhRThNRFQiLCJtYWMiOiI0OTgzNDk2ODI5NTEzMzllNDUzODgzN2RlZTk1YTg5OTMxOWVmMDBhYWY5M2MxZjUwYTNiOWU5ODE2Yzc5NjA3IiwidGFnIjoiIn0%3D; affiduciary_session=eyJpdiI6ImdBMktxSFlhN0ROL1d3NE1HaVVqNEE9PSIsInZhbHVlIjoiZUwrMW44M0ZnZHN6TVJPTmg3M1l2Y1kwNVF5OE0rbjBraEtVekdvSmpIR2xuUW51NFhVRzRSaTJIcUdMaldibFdyTmU5L09jUkRESVpYY0VCb0QvZEZxNEhGM3VUcERiamZIdC9uZ3F3TzdTNUNBQTVmekdlb2c2UUZHWmcwQzciLCJtYWMiOiJjYWUwYzNlNWU2MDJkMGQzNmZmM2RlZDE4YjFkZjRmN2FmMWVmODgzNzMxYjcwYzkzNDdlZWVmYjBlYWRmNjE3IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 10 Aug 2026 01:42:12 GMT\r\nContent-Type: text/css\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nStrict-Transport-Security: max-age=63072000; includeSubDomains; preload\r\nContent-Security-Policy: upgrade-insecure-requests\r\nVary: Accept-Encoding, User-Agent,Accept-Encoding\r\nLast-Modified: Sun, 16 Mar 2025 15:58:09 GMT\r\nContent-Encoding: br\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6326,"size_decoded":1633,"mime_type":"text/css","magic":"ASCII text","md5":"d05cf38ce27ba31a62af2756ecf4481c","sha1":"638b4eb58bc277b774dce80ebad98df9a84ababf","sha256":"cb48963e832d5d8f8053ad9605f08673c397538d05d9bef0eb5cf6bb72ac39a7","sha512":"2b3391ec66fe615fe6f18e64348bdf88d77b7ad0af0b6a529a647b4043fffda8492471ec1a95ada3419a999c6c9b7d2400bed0cce34ec011ee5ed3d4cbd20b52","ssdeep":"96:LweVP1+JBDJHGg5WJEHrd1WpMPrNXcVVE75J/6Sxrkfq175cBHzMjZ:hVGBDJHGXJELWpImsBx2w7YziZ","tlshash":"25d1f1a6547b1a869337f5947d5e5b856b2a01b2de4f8eaaf053b00d83cd4d400b3e0f","first_seen":"2025-10-23T11:35:38.693558Z","last_seen":"2026-08-10T01:43:08.465061Z","times_seen":13,"resource_available":false,"data":null}},"time_used":615,"timings":{"blocked":445,"dns":0,"connect":0,"send":0,"wait":170,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"affiduciary.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"affiduciary.com/home/js/validation.js","fqdn":"affiduciary.com","domain":"affiduciary.com","tld":"com"},"ip":{"addr":"84.75.144.0","port":443,"asn":6730,"as":"Sunrise GmbH","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://affiduciary.com/","date":"2026-08-10T01:42:11.619Z","timestamp":1786326131619,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.affiduciary.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 18 Jul 2026 22:13:22 GMT","end":"Fri, 16 Oct 2026 22:13:21 GMT"},"fingerprint":{"sha1":"32:43:A0:00:CF:FD:A9:87:65:2E:DD:F9:02:A4:05:36:9F:CB:8F:92","sha256":"1C:59:C8:76:96:00:CF:9A:AC:CF:35:1C:3E:BB:59:D9:02:79:09:FF:C2:68:CC:63:53:B2:D6:D6:EE:2E:D1:FB"}}},"request":{"raw":"GET /home/js/validation.js HTTP/1.1\r\nHost: affiduciary.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://affiduciary.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6Img3VjgvSG16V0N1ZmFOUWVSNDl0R2c9PSIsInZhbHVlIjoiRlpQOEFoNFRwci9TakdBZ3NWRThUblljOWZVSnNtcjZmdm1yVmY1YnNVL29QQmFnajVDMlh2aGF1Z3B2Sm1YLzdKL29zMmpJcFVWa21oZzMxbEhoUmFMUnlhcEQ2WitpYWoxSC9KQ2VNS244dEZRaDBHRG9WbEJHZkFhRThNRFQiLCJtYWMiOiI0OTgzNDk2ODI5NTEzMzllNDUzODgzN2RlZTk1YTg5OTMxOWVmMDBhYWY5M2MxZjUwYTNiOWU5ODE2Yzc5NjA3IiwidGFnIjoiIn0%3D; affiduciary_session=eyJpdiI6ImdBMktxSFlhN0ROL1d3NE1HaVVqNEE9PSIsInZhbHVlIjoiZUwrMW44M0ZnZHN6TVJPTmg3M1l2Y1kwNVF5OE0rbjBraEtVekdvSmpIR2xuUW51NFhVRzRSaTJIcUdMaldibFdyTmU5L09jUkRESVpYY0VCb0QvZEZxNEhGM3VUcERiamZIdC9uZ3F3TzdTNUNBQTVmekdlb2c2UUZHWmcwQzciLCJtYWMiOiJjYWUwYzNlNWU2MDJkMGQzNmZmM2RlZDE4YjFkZjRmN2FmMWVmODgzNzMxYjcwYzkzNDdlZWVmYjBlYWRmNjE3IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 10 Aug 2026 01:42:12 GMT\r\nContent-Type: text/javascript\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nStrict-Transport-Security: max-age=63072000; includeSubDomains; preload\r\nContent-Security-Policy: upgrade-insecure-requests\r\nVary: Accept-Encoding, User-Agent,Accept-Encoding\r\nLast-Modified: Sun, 16 Mar 2025 15:58:09 GMT\r\nContent-Encoding: br\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":36157,"size_decoded":12145,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (20948)","md5":"62a2ff47d8ea93f9eb32d18497502d4b","sha1":"35709e0cd4a77507d7d04963b7cc3785a89651f1","sha256":"81317fa1d0f757e2f2264758b9e7cbf11dd33200c5cd983f1e2c138dfe939728","sha512":"1a3e777c3fdac6a13c3fb4e1a37d8e85c924bb301e6f3886bedabd2822ec958fe63234d2aca75768ab7d7676e71df422e22185c7773f90314c48160636448b84","ssdeep":"768:Q+Jx6U2lHUdS2QQ54R7/1Eny+WwhqxVcvgz/PyUEvPe0+vPziVqdPuj4kcOE0mBN:rfdS2QQ54R7/1Eny+vyiYLXEiHziYdPR","tlshash":"51f21a8937c170664fa630f4945f5607a172ad65900ce478b6b8d8e17ef8ec860b7f78","first_seen":"2023-04-09T01:25:20Z","last_seen":"2026-08-10T01:45:19.724396Z","times_seen":1187,"resource_available":true,"data":null}},"time_used":1070,"timings":{"blocked":906,"dns":0,"connect":0,"send":0,"wait":164,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"affiduciary.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"affiduciary.com/home/serv/cigar.jpg","fqdn":"affiduciary.com","domain":"affiduciary.com","tld":"com"},"ip":{"addr":"84.75.144.0","port":443,"asn":6730,"as":"Sunrise GmbH","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://affiduciary.com/","date":"2026-08-10T01:42:11.650Z","timestamp":1786326131650,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.affiduciary.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 18 Jul 2026 22:13:22 GMT","end":"Fri, 16 Oct 2026 22:13:21 GMT"},"fingerprint":{"sha1":"32:43:A0:00:CF:FD:A9:87:65:2E:DD:F9:02:A4:05:36:9F:CB:8F:92","sha256":"1C:59:C8:76:96:00:CF:9A:AC:CF:35:1C:3E:BB:59:D9:02:79:09:FF:C2:68:CC:63:53:B2:D6:D6:EE:2E:D1:FB"}}},"request":{"raw":"GET /home/serv/cigar.jpg HTTP/1.1\r\nHost: affiduciary.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://affiduciary.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6Img3VjgvSG16V0N1ZmFOUWVSNDl0R2c9PSIsInZhbHVlIjoiRlpQOEFoNFRwci9TakdBZ3NWRThUblljOWZVSnNtcjZmdm1yVmY1YnNVL29QQmFnajVDMlh2aGF1Z3B2Sm1YLzdKL29zMmpJcFVWa21oZzMxbEhoUmFMUnlhcEQ2WitpYWoxSC9KQ2VNS244dEZRaDBHRG9WbEJHZkFhRThNRFQiLCJtYWMiOiI0OTgzNDk2ODI5NTEzMzllNDUzODgzN2RlZTk1YTg5OTMxOWVmMDBhYWY5M2MxZjUwYTNiOWU5ODE2Yzc5NjA3IiwidGFnIjoiIn0%3D; affiduciary_session=eyJpdiI6ImdBMktxSFlhN0ROL1d3NE1HaVVqNEE9PSIsInZhbHVlIjoiZUwrMW44M0ZnZHN6TVJPTmg3M1l2Y1kwNVF5OE0rbjBraEtVekdvSmpIR2xuUW51NFhVRzRSaTJIcUdMaldibFdyTmU5L09jUkRESVpYY0VCb0QvZEZxNEhGM3VUcERiamZIdC9uZ3F3TzdTNUNBQTVmekdlb2c2UUZHWmcwQzciLCJtYWMiOiJjYWUwYzNlNWU2MDJkMGQzNmZmM2RlZDE4YjFkZjRmN2FmMWVmODgzNzMxYjcwYzkzNDdlZWVmYjBlYWRmNjE3IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 10 Aug 2026 01:42:13 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 131781\r\nConnection: keep-alive\r\nStrict-Transport-Security: max-age=63072000; includeSubDomains; preload\r\nContent-Security-Policy: upgrade-insecure-requests\r\nVary: User-Agent\r\nLast-Modified: Sun, 16 Mar 2025 15:58:09 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":131781,"size_decoded":132137,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 900x506, components 3","md5":"6ed9eb02056ef404c1cb03e6fd7ff3c3","sha1":"1a17226df272bbc4a1c13a89bca0d1944ba970fb","sha256":"2e3e0d7325c940cb6d61d7ad562f102a44372964413d07250968e3c5b0f0d0fb","sha512":"8bc7d2c1164b6e3f2901757980283b3d2f0c584529ef1158f5d4fe68dfe6cfd567c0e44a267990d62b55cd484ba51162a9c5ebd731aedb9052f5d8bfa3099af7","ssdeep":"3072:BrlWS1VfAuodzO0IXogaDxtDU64GXCMkPO2:9lWmvX0IXoNVUnKCBPO2","tlshash":"b5d312332201a0be2a739717479dfa23a29c36182364a5868506771f3f7c72976c5ee4","first_seen":"2025-10-23T11:35:38.894099Z","last_seen":"2026-08-10T01:43:08.466419Z","times_seen":3,"resource_available":false,"data":null}},"time_used":1994,"timings":{"blocked":1518,"dns":0,"connect":0,"send":0,"wait":159,"receive":317,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"affiduciary.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"affiduciary.com/home/serv/5.jpg","fqdn":"affiduciary.com","domain":"affiduciary.com","tld":"com"},"ip":{"addr":"84.75.144.0","port":443,"asn":6730,"as":"Sunrise GmbH","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://affiduciary.com/","date":"2026-08-10T01:42:11.653Z","timestamp":1786326131653,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.affiduciary.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 18 Jul 2026 22:13:22 GMT","end":"Fri, 16 Oct 2026 22:13:21 GMT"},"fingerprint":{"sha1":"32:43:A0:00:CF:FD:A9:87:65:2E:DD:F9:02:A4:05:36:9F:CB:8F:92","sha256":"1C:59:C8:76:96:00:CF:9A:AC:CF:35:1C:3E:BB:59:D9:02:79:09:FF:C2:68:CC:63:53:B2:D6:D6:EE:2E:D1:FB"}}},"request":{"raw":"GET /home/serv/5.jpg HTTP/1.1\r\nHost: affiduciary.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://affiduciary.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6Img3VjgvSG16V0N1ZmFOUWVSNDl0R2c9PSIsInZhbHVlIjoiRlpQOEFoNFRwci9TakdBZ3NWRThUblljOWZVSnNtcjZmdm1yVmY1YnNVL29QQmFnajVDMlh2aGF1Z3B2Sm1YLzdKL29zMmpJcFVWa21oZzMxbEhoUmFMUnlhcEQ2WitpYWoxSC9KQ2VNS244dEZRaDBHRG9WbEJHZkFhRThNRFQiLCJtYWMiOiI0OTgzNDk2ODI5NTEzMzllNDUzODgzN2RlZTk1YTg5OTMxOWVmMDBhYWY5M2MxZjUwYTNiOWU5ODE2Yzc5NjA3IiwidGFnIjoiIn0%3D; affiduciary_session=eyJpdiI6ImdBMktxSFlhN0ROL1d3NE1HaVVqNEE9PSIsInZhbHVlIjoiZUwrMW44M0ZnZHN6TVJPTmg3M1l2Y1kwNVF5OE0rbjBraEtVekdvSmpIR2xuUW51NFhVRzRSaTJIcUdMaldibFdyTmU5L09jUkRESVpYY0VCb0QvZEZxNEhGM3VUcERiamZIdC9uZ3F3TzdTNUNBQTVmekdlb2c2UUZHWmcwQzciLCJtYWMiOiJjYWUwYzNlNWU2MDJkMGQzNmZmM2RlZDE4YjFkZjRmN2FmMWVmODgzNzMxYjcwYzkzNDdlZWVmYjBlYWRmNjE3IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 10 Aug 2026 01:42:13 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 82990\r\nConnection: keep-alive\r\nStrict-Transport-Security: max-age=63072000; includeSubDomains; preload\r\nContent-Security-Policy: upgrade-insecure-requests\r\nVary: User-Agent\r\nLast-Modified: Sun, 16 Mar 2025 15:58:09 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":82990,"size_decoded":83345,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 910x622, components 3","md5":"df7fcb2bda19ffd4958828200b9641aa","sha1":"ff8b500a2e6790a31b48e3a9b31c9dead3bee127","sha256":"b9568322cf9a5d5f3a9b6617ee46a365aeb6c58ac4be60f2c68656d0bc8cd029","sha512":"c3819c93ff14f25ca6d0bfc1726cefd40e7dc002932e00211a49c668b9fb68da22c950d445751056fc2097b9811a656b99521989972694f26118c4260a120f78","ssdeep":"1536:K2AsmVEl3vliisirYWMXWY3H9JlGXPv1w0tIMQTV8+yT2hAJn:K2AsmVEl3vAis7tDfKn60jA89Tzh","tlshash":"27830174f3e352cde4cb4134e5ce6749154a23e052a68c83fb5a2e5d332b6ac12918f9","first_seen":"2023-11-04T11:29:26Z","last_seen":"2026-08-10T01:43:08.46694Z","times_seen":130,"resource_available":false,"data":null}},"time_used":1862,"timings":{"blocked":1696,"dns":0,"connect":0,"send":0,"wait":165,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"affiduciary.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"affiduciary.com/#","fqdn":"affiduciary.com","domain":"affiduciary.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://affiduciary.com/","date":"2026-08-10T01:42:16.751Z","timestamp":1786326136751,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.affiduciary.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 18 Jul 2026 22:13:22 GMT","end":"Fri, 16 Oct 2026 22:13:21 GMT"},"fingerprint":{"sha1":"32:43:A0:00:CF:FD:A9:87:65:2E:DD:F9:02:A4:05:36:9F:CB:8F:92","sha256":"1C:59:C8:76:96:00:CF:9A:AC:CF:35:1C:3E:BB:59:D9:02:79:09:FF:C2:68:CC:63:53:B2:D6:D6:EE:2E:D1:FB"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: affiduciary.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://affiduciary.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6InplUlhwV1YybjRnQ1NEV1dVZ3piZFE9PSIsInZhbHVlIjoiUnRwVmtSVlBndjdQWG56b0JEOTQ2Q0pFTzVXSUtVd0didjNkS3NERmw5RDQzK1JXME82VDlEemEydDJ3Rm9XY2hnMUt6anBJV25nbXpkS29KTkZSblRLQUNOSFdzR2N0bnlrMnVCQkhDc3pQTE9KSEFzeitkTTlNZEsvbjg4N1QiLCJtYWMiOiJmZGIyMDQ5YjhjODFiNTdhZWM5Y2E1ODVmYmI0MTZiYTlkOTEwMmIwMThmMTdhNTI4ZmM0ZjZlMmE3ODUwMGEwIiwidGFnIjoiIn0%3D; affiduciary_session=eyJpdiI6IkNjWHNxOHFnN29jTXI3TkU3Qy9TRXc9PSIsInZhbHVlIjoiSEZEVnRZdWNMdk4rZkJoOVhoUCt1TFo0dUtXaVJDRktqVnZVaTNCK0pOSS9pZWs5NlZQZzBVRTZpckorRnE4UjdOYkNSbEVwaWhzZkx2amp0enlMY200TmJUd2R5VlNybGI0eEpSWFM0amdoREtaaEtyUmlLY1dPY2NwWngxYkciLCJtYWMiOiI0MWI5Yzk5YmU2YTBhZmQ1ZjdiNmExNjhiNTgyMDhmNDZlYzFjNzE1NDEwYmZmMjUwNDUyN2E1MjEzODBiMjVkIiwidGFnIjoiIn0%3D\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-10T04:49:07.925952Z","times_seen":17811481,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"affiduciary.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"translate.googleapis.com/translate_static/img/te_bk.gif","fqdn":"translate.googleapis.com","domain":"translate.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.74","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://affiduciary.com/","date":"2026-08-10T01:42:16.999Z","timestamp":1786326136999,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Jul 2026 18:07:43 GMT","end":"Mon, 12 Oct 2026 18:07:42 GMT"},"fingerprint":{"sha1":"3C:2E:4A:58:D0:DB:8D:00:50:7D:0E:E6:87:DE:CA:95:B3:BA:1B:89","sha256":"C2:4F:05:DF:4B:24:E4:A9:E4:2A:30:66:F4:78:E7:75:AC:AE:71:43:E7:DA:3E:24:4B:A3:AA:9A:39:4E:E2:E1"}}},"request":{"raw":"GET /translate_static/img/te_bk.gif HTTP/1.1\r\nHost: translate.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://affiduciary.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"static-on-bigtable\"\r\nreport-to: {\"group\":\"static-on-bigtable\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/static-on-bigtable\"}]}\r\ncontent-length: 848\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 06 Aug 2026 10:11:20 GMT\r\nexpires: Fri, 06 Aug 2027 10:11:20 GMT\r\ncache-control: public, max-age=31536000\r\nage: 315057\r\nlast-modified: Sun, 25 Jun 2023 02:58:00 GMT\r\ncontent-type: image/gif\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":848,"size_decoded":1507,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 59","md5":"daf9b48977041ac85a62dc9b7c16b38d","sha1":"049dcb061470572d06fd83b287ebd1d96e6bb870","sha256":"cb1fd0e051209c32622e91cdeda967e50d80a184b185ac6a656a807986e8eb75","sha512":"99f5f27990b6b5559c751a92c04037f5d42e848a966893484af66d3f66828c29a2dddc8788d7dd4cd835e8ab6d834e74fb3eaa4e2cd72d55b2813d7aab990af2","ssdeep":"","tlshash":"1c018c0cc8700a19e3422fb0ca5b6e0429675b465d88b20fb6aa22c27d04ba48049b1c","first_seen":"2023-04-05T23:29:53Z","last_seen":"2026-08-10T02:31:29.700081Z","times_seen":11484,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"affiduciary.com/home/js/jquery.nice-select.min.js","fqdn":"affiduciary.com","domain":"affiduciary.com","tld":"com"},"ip":{"addr":"84.75.144.0","port":443,"asn":6730,"as":"Sunrise GmbH","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://affiduciary.com/","date":"2026-08-10T01:42:11.626Z","timestamp":1786326131626,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.affiduciary.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 18 Jul 2026 22:13:22 GMT","end":"Fri, 16 Oct 2026 22:13:21 GMT"},"fingerprint":{"sha1":"32:43:A0:00:CF:FD:A9:87:65:2E:DD:F9:02:A4:05:36:9F:CB:8F:92","sha256":"1C:59:C8:76:96:00:CF:9A:AC:CF:35:1C:3E:BB:59:D9:02:79:09:FF:C2:68:CC:63:53:B2:D6:D6:EE:2E:D1:FB"}}},"request":{"raw":"GET /home/js/jquery.nice-select.min.js HTTP/1.1\r\nHost: affiduciary.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://affiduciary.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6Img3VjgvSG16V0N1ZmFOUWVSNDl0R2c9PSIsInZhbHVlIjoiRlpQOEFoNFRwci9TakdBZ3NWRThUblljOWZVSnNtcjZmdm1yVmY1YnNVL29QQmFnajVDMlh2aGF1Z3B2Sm1YLzdKL29zMmpJcFVWa21oZzMxbEhoUmFMUnlhcEQ2WitpYWoxSC9KQ2VNS244dEZRaDBHRG9WbEJHZkFhRThNRFQiLCJtYWMiOiI0OTgzNDk2ODI5NTEzMzllNDUzODgzN2RlZTk1YTg5OTMxOWVmMDBhYWY5M2MxZjUwYTNiOWU5ODE2Yzc5NjA3IiwidGFnIjoiIn0%3D; affiduciary_session=eyJpdiI6ImdBMktxSFlhN0ROL1d3NE1HaVVqNEE9PSIsInZhbHVlIjoiZUwrMW44M0ZnZHN6TVJPTmg3M1l2Y1kwNVF5OE0rbjBraEtVekdvSmpIR2xuUW51NFhVRzRSaTJIcUdMaldibFdyTmU5L09jUkRESVpYY0VCb0QvZEZxNEhGM3VUcERiamZIdC9uZ3F3TzdTNUNBQTVmekdlb2c2UUZHWmcwQzciLCJtYWMiOiJjYWUwYzNlNWU2MDJkMGQzNmZmM2RlZDE4YjFkZjRmN2FmMWVmODgzNzMxYjcwYzkzNDdlZWVmYjBlYWRmNjE3IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 10 Aug 2026 01:42:12 GMT\r\nContent-Type: text/javascript\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nStrict-Transport-Security: max-age=63072000; includeSubDomains; preload\r\nContent-Security-Policy: upgrade-insecure-requests\r\nVary: Accept-Encoding, User-Agent,Accept-Encoding\r\nLast-Modified: Sun, 16 Mar 2025 15:58:09 GMT\r\nContent-Encoding: br\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2942,"size_decoded":1328,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (2822)","md5":"d13462ec489f9f0c309a811f85feb3d6","sha1":"d9545f8b139eae5b387de1a60a84abe949c7e88f","sha256":"66bdef0724e5306421bcc7e0910e41b5645228119ad9096ca4a6099e48d94e6a","sha512":"36a61db3cb2eea38afcb5fd62e85bcc75b593110fbff565f8561bf8dc4502cecd5d64d6b20e0c2a4c8280676abe505ec84a24657bbe2d0b5cb3573e816c33966","ssdeep":"","tlshash":"a4511114b10512f648ff25d37911b147a075493dc42ac14be97e86b21efec02aab6d5f","first_seen":"2023-03-07T01:31:39Z","last_seen":"2026-08-10T03:48:44.846796Z","times_seen":10552,"resource_available":true,"data":null}},"time_used":1233,"timings":{"blocked":1070,"dns":0,"connect":0,"send":0,"wait":163,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"affiduciary.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"affiduciary.com/home/js/parallax-scroll.js","fqdn":"affiduciary.com","domain":"affiduciary.com","tld":"com"},"ip":{"addr":"84.75.144.0","port":443,"asn":6730,"as":"Sunrise GmbH","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://affiduciary.com/","date":"2026-08-10T01:42:11.627Z","timestamp":1786326131627,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.affiduciary.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 18 Jul 2026 22:13:22 GMT","end":"Fri, 16 Oct 2026 22:13:21 GMT"},"fingerprint":{"sha1":"32:43:A0:00:CF:FD:A9:87:65:2E:DD:F9:02:A4:05:36:9F:CB:8F:92","sha256":"1C:59:C8:76:96:00:CF:9A:AC:CF:35:1C:3E:BB:59:D9:02:79:09:FF:C2:68:CC:63:53:B2:D6:D6:EE:2E:D1:FB"}}},"request":{"raw":"GET /home/js/parallax-scroll.js HTTP/1.1\r\nHost: affiduciary.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://affiduciary.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6Img3VjgvSG16V0N1ZmFOUWVSNDl0R2c9PSIsInZhbHVlIjoiRlpQOEFoNFRwci9TakdBZ3NWRThUblljOWZVSnNtcjZmdm1yVmY1YnNVL29QQmFnajVDMlh2aGF1Z3B2Sm1YLzdKL29zMmpJcFVWa21oZzMxbEhoUmFMUnlhcEQ2WitpYWoxSC9KQ2VNS244dEZRaDBHRG9WbEJHZkFhRThNRFQiLCJtYWMiOiI0OTgzNDk2ODI5NTEzMzllNDUzODgzN2RlZTk1YTg5OTMxOWVmMDBhYWY5M2MxZjUwYTNiOWU5ODE2Yzc5NjA3IiwidGFnIjoiIn0%3D; affiduciary_session=eyJpdiI6ImdBMktxSFlhN0ROL1d3NE1HaVVqNEE9PSIsInZhbHVlIjoiZUwrMW44M0ZnZHN6TVJPTmg3M1l2Y1kwNVF5OE0rbjBraEtVekdvSmpIR2xuUW51NFhVRzRSaTJIcUdMaldibFdyTmU5L09jUkRESVpYY0VCb0QvZEZxNEhGM3VUcERiamZIdC9uZ3F3TzdTNUNBQTVmekdlb2c2UUZHWmcwQzciLCJtYWMiOiJjYWUwYzNlNWU2MDJkMGQzNmZmM2RlZDE4YjFkZjRmN2FmMWVmODgzNzMxYjcwYzkzNDdlZWVmYjBlYWRmNjE3IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 10 Aug 2026 01:42:12 GMT\r\nContent-Type: text/javascript\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nStrict-Transport-Security: max-age=63072000; includeSubDomains; preload\r\nContent-Security-Policy: upgrade-insecure-requests\r\nVary: Accept-Encoding, User-Agent,Accept-Encoding\r\nLast-Modified: Sun, 16 Mar 2025 15:58:09 GMT\r\nContent-Encoding: br\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":9117,"size_decoded":2236,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text","md5":"810d193a9aa270c89eef7d853eafc40d","sha1":"b83e1b50960f26ad33e8ce0d1477e8bd3553c305","sha256":"b9e4bc2c6fdd59d3d68e1a4c20d3a80014e1a4879970a4d59d1d6bba1830e565","sha512":"a1a1259358b0858de0dc69837d052ed870f882ff1f12536d0fbe57166b44f768f44dc0d1a5ccb2afeefb2f4b6f7ce20dea71bf9a77eba06b8fa032dbc614ead0","ssdeep":"192:/tb/ji8aJhFCCw6eOki/XJliQyliyVS+ZgW67P0WUPskQKe66:t/jF2hm6eOkiftEvliP0/2t","tlshash":"52122108e493042ae4f77135cf7e03aa7729b6179159d9257b0d8a8d4f80934a3d8ff6","first_seen":"2023-03-09T16:51:00Z","last_seen":"2026-08-10T01:43:08.468488Z","times_seen":121,"resource_available":true,"data":null}},"time_used":1263,"timings":{"blocked":1096,"dns":0,"connect":0,"send":0,"wait":167,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"affiduciary.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"affiduciary.com/home/images/shape/shape-22.png","fqdn":"affiduciary.com","domain":"affiduciary.com","tld":"com"},"ip":{"addr":"84.75.144.0","port":443,"asn":6730,"as":"Sunrise GmbH","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://affiduciary.com/","date":"2026-08-10T01:42:12.590Z","timestamp":1786326132590,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.affiduciary.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 18 Jul 2026 22:13:22 GMT","end":"Fri, 16 Oct 2026 22:13:21 GMT"},"fingerprint":{"sha1":"32:43:A0:00:CF:FD:A9:87:65:2E:DD:F9:02:A4:05:36:9F:CB:8F:92","sha256":"1C:59:C8:76:96:00:CF:9A:AC:CF:35:1C:3E:BB:59:D9:02:79:09:FF:C2:68:CC:63:53:B2:D6:D6:EE:2E:D1:FB"}}},"request":{"raw":"GET /home/images/shape/shape-22.png HTTP/1.1\r\nHost: affiduciary.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://affiduciary.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6Img3VjgvSG16V0N1ZmFOUWVSNDl0R2c9PSIsInZhbHVlIjoiRlpQOEFoNFRwci9TakdBZ3NWRThUblljOWZVSnNtcjZmdm1yVmY1YnNVL29QQmFnajVDMlh2aGF1Z3B2Sm1YLzdKL29zMmpJcFVWa21oZzMxbEhoUmFMUnlhcEQ2WitpYWoxSC9KQ2VNS244dEZRaDBHRG9WbEJHZkFhRThNRFQiLCJtYWMiOiI0OTgzNDk2ODI5NTEzMzllNDUzODgzN2RlZTk1YTg5OTMxOWVmMDBhYWY5M2MxZjUwYTNiOWU5ODE2Yzc5NjA3IiwidGFnIjoiIn0%3D; affiduciary_session=eyJpdiI6ImdBMktxSFlhN0ROL1d3NE1HaVVqNEE9PSIsInZhbHVlIjoiZUwrMW44M0ZnZHN6TVJPTmg3M1l2Y1kwNVF5OE0rbjBraEtVekdvSmpIR2xuUW51NFhVRzRSaTJIcUdMaldibFdyTmU5L09jUkRESVpYY0VCb0QvZEZxNEhGM3VUcERiamZIdC9uZ3F3TzdTNUNBQTVmekdlb2c2UUZHWmcwQzciLCJtYWMiOiJjYWUwYzNlNWU2MDJkMGQzNmZmM2RlZDE4YjFkZjRmN2FmMWVmODgzNzMxYjcwYzkzNDdlZWVmYjBlYWRmNjE3IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 10 Aug 2026 01:42:13 GMT\r\nContent-Type: image/png\r\nContent-Length: 19179\r\nConnection: keep-alive\r\nStrict-Transport-Security: max-age=63072000; includeSubDomains; preload\r\nContent-Security-Policy: upgrade-insecure-requests\r\nVary: User-Agent\r\nLast-Modified: Sun, 16 Mar 2025 15:58:09 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":19179,"size_decoded":19533,"mime_type":"image/png","magic":"PNG image data, 620 x 510, 8-bit/color RGBA, non-interlaced","md5":"b57c1ab9c158f34f09ad0eff5de478fa","sha1":"30fd9f40d2f6b9698483afadd3ab99e8bd3760b4","sha256":"281c93cd4926f27ec5727ed8b32bda7992d5e12cee640bc32e246fec368b0946","sha512":"1c3e3046e87a861eac095322b1f621001330d421e64cd584e7bd66b8f0c4a6ebd828cf349298369194ca6235df6390175a27d679e739996ced2101b53aee017b","ssdeep":"384:Bgln0XGUU6E/xQ7aDq8pneYsOoHEwK7MZGO5nSqHvUvJlGAzEH8bLY+zC+BGl:QuGUU6EpQGDPeroHG0vJppb2qY","tlshash":"fe82d0ca17990a05208dc7eeed6393d11a74b16f305360f7ecf426445ce0e8eb92725b","first_seen":"2025-03-04T00:44:45.00432Z","last_seen":"2026-08-10T01:43:08.469036Z","times_seen":16,"resource_available":false,"data":null}},"time_used":520,"timings":{"blocked":349,"dns":0,"connect":0,"send":0,"wait":171,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"affiduciary.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/images/branding/googlelogo/1x/googlelogo_color_42x16dp.png","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://affiduciary.com/","date":"2026-08-10T01:42:16.573Z","timestamp":1786326136573,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Jul 2026 18:07:39 GMT","end":"Mon, 12 Oct 2026 18:07:38 GMT"},"fingerprint":{"sha1":"12:E8:CE:14:FC:4E:1E:0D:A3:9B:2E:5D:D0:88:79:79:71:C9:F8:6A","sha256":"58:07:B9:A1:6C:54:97:F9:9D:6A:66:E2:49:57:FB:86:86:8D:12:97:8F:4A:C9:74:A1:9D:69:4E:1F:A6:CC:9D"}}},"request":{"raw":"GET /images/branding/googlelogo/1x/googlelogo_color_42x16dp.png HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://affiduciary.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"static-on-bigtable\"\r\nreport-to: {\"group\":\"static-on-bigtable\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/static-on-bigtable\"}]}\r\ncontent-length: 910\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 05 Aug 2026 13:10:18 GMT\r\nexpires: Thu, 05 Aug 2027 13:10:18 GMT\r\ncache-control: public, max-age=31536000\r\nage: 390718\r\nlast-modified: Thu, 02 Nov 2023 22:48:00 GMT\r\ncontent-type: image/png\r\nvary: Origin\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":910,"size_decoded":1583,"mime_type":"image/png","magic":"PNG image data, 42 x 16, 8-bit/color RGBA, non-interlaced","md5":"efa6bb2bfe459bc6f4bdafa3db0383f6","sha1":"52d15ce52fe50643e542c17812de43f4ed1b6ee0","sha256":"6318394f737c66f0e2ccfcd88e3935c6667633a1b95fa29fba2b75431d55eef2","sha512":"e23c04d8997f5c2f92070e09261b7ee50d9df8753f45cf66f604f0874ffa8d99e947c97c528ec02a2c3fbe8e43d840b343a7d0225532980d5da95031216415b7","ssdeep":"","tlshash":"491184a73cd1dc6854a47a87aa91b864ec250f1b91a220981237b42277313444fdc8f7","first_seen":"2023-04-05T07:39:29Z","last_seen":"2026-08-10T02:12:53.903476Z","times_seen":56816,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"affiduciary.com/home/css/elements-css/testimonial.css","fqdn":"affiduciary.com","domain":"affiduciary.com","tld":"com"},"ip":{"addr":"84.75.144.0","port":443,"asn":6730,"as":"Sunrise GmbH","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://affiduciary.com/","date":"2026-08-10T01:42:11.599Z","timestamp":1786326131599,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.affiduciary.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 18 Jul 2026 22:13:22 GMT","end":"Fri, 16 Oct 2026 22:13:21 GMT"},"fingerprint":{"sha1":"32:43:A0:00:CF:FD:A9:87:65:2E:DD:F9:02:A4:05:36:9F:CB:8F:92","sha256":"1C:59:C8:76:96:00:CF:9A:AC:CF:35:1C:3E:BB:59:D9:02:79:09:FF:C2:68:CC:63:53:B2:D6:D6:EE:2E:D1:FB"}}},"request":{"raw":"GET /home/css/elements-css/testimonial.css HTTP/1.1\r\nHost: affiduciary.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://affiduciary.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6Img3VjgvSG16V0N1ZmFOUWVSNDl0R2c9PSIsInZhbHVlIjoiRlpQOEFoNFRwci9TakdBZ3NWRThUblljOWZVSnNtcjZmdm1yVmY1YnNVL29QQmFnajVDMlh2aGF1Z3B2Sm1YLzdKL29zMmpJcFVWa21oZzMxbEhoUmFMUnlhcEQ2WitpYWoxSC9KQ2VNS244dEZRaDBHRG9WbEJHZkFhRThNRFQiLCJtYWMiOiI0OTgzNDk2ODI5NTEzMzllNDUzODgzN2RlZTk1YTg5OTMxOWVmMDBhYWY5M2MxZjUwYTNiOWU5ODE2Yzc5NjA3IiwidGFnIjoiIn0%3D; affiduciary_session=eyJpdiI6ImdBMktxSFlhN0ROL1d3NE1HaVVqNEE9PSIsInZhbHVlIjoiZUwrMW44M0ZnZHN6TVJPTmg3M1l2Y1kwNVF5OE0rbjBraEtVekdvSmpIR2xuUW51NFhVRzRSaTJIcUdMaldibFdyTmU5L09jUkRESVpYY0VCb0QvZEZxNEhGM3VUcERiamZIdC9uZ3F3TzdTNUNBQTVmekdlb2c2UUZHWmcwQzciLCJtYWMiOiJjYWUwYzNlNWU2MDJkMGQzNmZmM2RlZDE4YjFkZjRmN2FmMWVmODgzNzMxYjcwYzkzNDdlZWVmYjBlYWRmNjE3IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 10 Aug 2026 01:42:12 GMT\r\nContent-Type: text/css\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nStrict-Transport-Security: max-age=63072000; includeSubDomains; preload\r\nContent-Security-Policy: upgrade-insecure-requests\r\nVary: Accept-Encoding, User-Agent,Accept-Encoding\r\nLast-Modified: Sun, 16 Mar 2025 15:58:09 GMT\r\nContent-Encoding: br\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3640,"size_decoded":1106,"mime_type":"text/css","magic":"ASCII text","md5":"aa95def083f08d3ab8126b69db08cc10","sha1":"7928e20f061fecc9b25237d08b80442490f03611","sha256":"251031178be2c982ae427df6cda952e1a5be593e2d3f91e594b24aff359c3d7a","sha512":"cf0c4b04287db77829b63804c3abbfb9a51576c1f1649cd3cdfc90f0039be454d439d3e93c132bce17a4a1545e3ee40c318b9d3ea98900445cb3347df5269ee2","ssdeep":"","tlshash":"4271cd9e553d088a530ff274ad52d741023cc8aaed2f0eaad4a2f41dd25d87029a3f4f","first_seen":"2025-10-23T11:35:39.019294Z","last_seen":"2026-08-10T01:43:08.470451Z","times_seen":13,"resource_available":false,"data":null}},"time_used":736,"timings":{"blocked":576,"dns":0,"connect":0,"send":0,"wait":160,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"affiduciary.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"affiduciary.com/home/css/elements-css/page-title.css","fqdn":"affiduciary.com","domain":"affiduciary.com","tld":"com"},"ip":{"addr":"84.75.144.0","port":443,"asn":6730,"as":"Sunrise GmbH","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://affiduciary.com/","date":"2026-08-10T01:42:11.609Z","timestamp":1786326131609,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.affiduciary.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 18 Jul 2026 22:13:22 GMT","end":"Fri, 16 Oct 2026 22:13:21 GMT"},"fingerprint":{"sha1":"32:43:A0:00:CF:FD:A9:87:65:2E:DD:F9:02:A4:05:36:9F:CB:8F:92","sha256":"1C:59:C8:76:96:00:CF:9A:AC:CF:35:1C:3E:BB:59:D9:02:79:09:FF:C2:68:CC:63:53:B2:D6:D6:EE:2E:D1:FB"}}},"request":{"raw":"GET /home/css/elements-css/page-title.css HTTP/1.1\r\nHost: affiduciary.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://affiduciary.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6Img3VjgvSG16V0N1ZmFOUWVSNDl0R2c9PSIsInZhbHVlIjoiRlpQOEFoNFRwci9TakdBZ3NWRThUblljOWZVSnNtcjZmdm1yVmY1YnNVL29QQmFnajVDMlh2aGF1Z3B2Sm1YLzdKL29zMmpJcFVWa21oZzMxbEhoUmFMUnlhcEQ2WitpYWoxSC9KQ2VNS244dEZRaDBHRG9WbEJHZkFhRThNRFQiLCJtYWMiOiI0OTgzNDk2ODI5NTEzMzllNDUzODgzN2RlZTk1YTg5OTMxOWVmMDBhYWY5M2MxZjUwYTNiOWU5ODE2Yzc5NjA3IiwidGFnIjoiIn0%3D; affiduciary_session=eyJpdiI6ImdBMktxSFlhN0ROL1d3NE1HaVVqNEE9PSIsInZhbHVlIjoiZUwrMW44M0ZnZHN6TVJPTmg3M1l2Y1kwNVF5OE0rbjBraEtVekdvSmpIR2xuUW51NFhVRzRSaTJIcUdMaldibFdyTmU5L09jUkRESVpYY0VCb0QvZEZxNEhGM3VUcERiamZIdC9uZ3F3TzdTNUNBQTVmekdlb2c2UUZHWmcwQzciLCJtYWMiOiJjYWUwYzNlNWU2MDJkMGQzNmZmM2RlZDE4YjFkZjRmN2FmMWVmODgzNzMxYjcwYzkzNDdlZWVmYjBlYWRmNjE3IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 10 Aug 2026 01:42:12 GMT\r\nContent-Type: text/css\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nStrict-Transport-Security: max-age=63072000; includeSubDomains; preload\r\nContent-Security-Policy: upgrade-insecure-requests\r\nVary: Accept-Encoding, User-Agent,Accept-Encoding\r\nLast-Modified: Sun, 16 Mar 2025 15:58:09 GMT\r\nContent-Encoding: br\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1197,"size_decoded":753,"mime_type":"text/css","magic":"ASCII text","md5":"13387504636b8ffdba0fdbeb40e0a96f","sha1":"a466fbb47322bed349e690f07246b807fcdb1008","sha256":"6e0e9de5398afdc3bc984ba691b7acd2fb97e9c484c5fe2965061c667f9ae6d8","sha512":"d3bbe1be63c391f814cee9fac5f86178ad727f8a3009696d5bbd14f5abd8beb953df4cded867fc39f165f90c297f5e314162dda01387ccbc9643fb0e6b24f9ec","ssdeep":"","tlshash":"ee21616b91266140ba1ad3f97ad05fd9173d0506fc8e0f6774917d38d6890b40163e4a","first_seen":"2025-10-23T11:35:38.890337Z","last_seen":"2026-08-10T01:43:08.470968Z","times_seen":8,"resource_available":false,"data":null}},"time_used":917,"timings":{"blocked":753,"dns":0,"connect":0,"send":0,"wait":164,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"affiduciary.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"affiduciary.com/home/serv/ira.png","fqdn":"affiduciary.com","domain":"affiduciary.com","tld":"com"},"ip":{"addr":"84.75.144.0","port":443,"asn":6730,"as":"Sunrise GmbH","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://affiduciary.com/","date":"2026-08-10T01:42:11.655Z","timestamp":1786326131655,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.affiduciary.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 18 Jul 2026 22:13:22 GMT","end":"Fri, 16 Oct 2026 22:13:21 GMT"},"fingerprint":{"sha1":"32:43:A0:00:CF:FD:A9:87:65:2E:DD:F9:02:A4:05:36:9F:CB:8F:92","sha256":"1C:59:C8:76:96:00:CF:9A:AC:CF:35:1C:3E:BB:59:D9:02:79:09:FF:C2:68:CC:63:53:B2:D6:D6:EE:2E:D1:FB"}}},"request":{"raw":"GET /home/serv/ira.png HTTP/1.1\r\nHost: affiduciary.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://affiduciary.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6Img3VjgvSG16V0N1ZmFOUWVSNDl0R2c9PSIsInZhbHVlIjoiRlpQOEFoNFRwci9TakdBZ3NWRThUblljOWZVSnNtcjZmdm1yVmY1YnNVL29QQmFnajVDMlh2aGF1Z3B2Sm1YLzdKL29zMmpJcFVWa21oZzMxbEhoUmFMUnlhcEQ2WitpYWoxSC9KQ2VNS244dEZRaDBHRG9WbEJHZkFhRThNRFQiLCJtYWMiOiI0OTgzNDk2ODI5NTEzMzllNDUzODgzN2RlZTk1YTg5OTMxOWVmMDBhYWY5M2MxZjUwYTNiOWU5ODE2Yzc5NjA3IiwidGFnIjoiIn0%3D; affiduciary_session=eyJpdiI6ImdBMktxSFlhN0ROL1d3NE1HaVVqNEE9PSIsInZhbHVlIjoiZUwrMW44M0ZnZHN6TVJPTmg3M1l2Y1kwNVF5OE0rbjBraEtVekdvSmpIR2xuUW51NFhVRzRSaTJIcUdMaldibFdyTmU5L09jUkRESVpYY0VCb0QvZEZxNEhGM3VUcERiamZIdC9uZ3F3TzdTNUNBQTVmekdlb2c2UUZHWmcwQzciLCJtYWMiOiJjYWUwYzNlNWU2MDJkMGQzNmZmM2RlZDE4YjFkZjRmN2FmMWVmODgzNzMxYjcwYzkzNDdlZWVmYjBlYWRmNjE3IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 10 Aug 2026 01:42:13 GMT\r\nContent-Type: image/png\r\nContent-Length: 55831\r\nConnection: keep-alive\r\nStrict-Transport-Security: max-age=63072000; includeSubDomains; preload\r\nContent-Security-Policy: upgrade-insecure-requests\r\nVary: User-Agent\r\nLast-Modified: Sun, 16 Mar 2025 15:58:09 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":55831,"size_decoded":56185,"mime_type":"image/png","magic":"PNG image data, 818 x 518, 8-bit/color RGBA, non-interlaced","md5":"77ff27dd3fa86b387b7f3bc622b4927b","sha1":"a0be0a97c573c0fef6ab15c67a19b7048b06630c","sha256":"fcaab0fa80e302f74ce68fbfdd1e5e727c5dbe52aaee5b99ae81cd381b6c6e32","sha512":"5fb8fe044fc4853fdedf16c0423f81bbf84381c2533ea07ec439563af6f49ca94a1d6959dc7a0e83236d61c535b3e09a33e165ddb6b151d69956c6e2605239fa","ssdeep":"1536:puTSfnLU877u/9h55U46FSDrJQvs4R2W6wsL:pDLU877E9h5t0SnN44W6X","tlshash":"1f43f25dfbaad1f0dc5280b8f52a8f871e93d047c565ae07c036f04a7895e90dbec465","first_seen":"2025-10-23T11:35:38.811167Z","last_seen":"2026-08-10T01:43:08.47154Z","times_seen":3,"resource_available":false,"data":null}},"time_used":2026,"timings":{"blocked":1861,"dns":0,"connect":0,"send":0,"wait":164,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"affiduciary.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"translate-pa.googleapis.com/v1/supportedLanguages?client=te\u0026display_language=no\u0026key=AIzaSyBWDj0QJvVIx8XOhRegXX5_SrRWxhT5Hs4\u0026callback=callback","fqdn":"translate-pa.googleapis.com","domain":"translate-pa.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"172.217.116.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"moz-nullprincipal:{d73fe33c-d152-43d6-8dd7-bcbf8a64d1b5}?https://affiduciary.com","date":"2026-08-10T01:42:16.650Z","timestamp":1786326136650,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Jul 2026 18:07:35 GMT","end":"Mon, 12 Oct 2026 18:07:34 GMT"},"fingerprint":{"sha1":"08:B7:74:FE:04:FE:EA:92:57:A6:BB:56:D1:74:4D:6D:60:A5:CA:A8","sha256":"4C:F0:21:E5:38:07:CF:7D:BD:9F:08:7B:FF:91:15:9D:54:28:ED:D3:6A:B8:F3:42:E2:BF:EE:F9:93:B7:6D:39"}}},"request":{"raw":"GET /v1/supportedLanguages?client=te\u0026display_language=no\u0026key=AIzaSyBWDj0QJvVIx8XOhRegXX5_SrRWxhT5Hs4\u0026callback=callback HTTP/1.1\r\nHost: translate-pa.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://affiduciary.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\np3p: CP=\"This is not a P3P policy! See g.co/p3phelp for more info.\"\r\ncross-origin-resource-policy: cross-origin\r\ncontent-type: text/javascript; charset=UTF-8\r\nvary: Origin, X-Origin, Referer\r\ncontent-encoding: gzip\r\ndate: Mon, 10 Aug 2026 01:42:16 GMT\r\nserver: ESF\r\ncontent-length: 2635\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nset-cookie: NID=533=oMnKRRRRVT_fCIWj3lcyN-mWWjcdjHGF4Y4LT0zJ_PUnVOg4k7j33xFzg0DYN0rjj9fKgqAppIuEn1TZZOF7S6uX5rvNocN9jfzhQc-r-IlNaJG0VD5LFrkK9GO6fc870yNdb5bHsgrX0maF1xKzTXyWIsYbmJNUfTXF00pLnpQcNNyy2PGndvxOztGKrKu1EwWtuqhSgjXLzwXQdj7MQpARdDElRiP9gg; expires=Tue, 09-Feb-2027 01:42:16 GMT; path=/; domain=.translate-pa.googleapis.com; HttpOnly\r\nexpires: Mon, 10 Aug 2026 01:42:16 GMT\r\ncache-control: private\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":31482,"size_decoded":3504,"mime_type":"text/javascript; charset=UTF-8","magic":"Unicode text, UTF-8 text","md5":"91115de97ad1a90076e130223cdd90ad","sha1":"f3ad22e4fa892dfbff0d083bc0465fc3a2240317","sha256":"816e9881b1955d8beff3011d93481dad4c4de71bbd80b50ac267e7e45d4c3bad","sha512":"fbca69c3431240ab374b9ccfb06d76074059cdfe2f153743b292020271a8a3a36885189594a97fd74b43249b1f6359af62dfd0731e7b50e024f37faebdccf620","ssdeep":"192:Z6STcB9aqiD0+52DdKXrWryLxizUSTcB9aqdD0+52DdKXrWryLxG:JTcbaU3KXiMxidTcbah3KXiMxG","tlshash":"d0e267bae8b50d9b6a5e65b416fa2a03306041db4edc3c053b1c1e4c6fdec1e6c7169e","first_seen":"2025-09-02T05:12:23.753308Z","last_seen":"2026-08-10T04:13:50.832378Z","times_seen":9682,"resource_available":true,"data":null}},"time_used":60,"timings":{"blocked":0,"dns":2,"connect":9,"send":0,"wait":26,"receive":0,"ssl":23},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"translate.googleapis.com/element/log?format=json\u0026hasfast=true\u0026authuser=0","fqdn":"translate.googleapis.com","domain":"translate.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.74","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://affiduciary.com/","date":"2026-08-10T01:42:26.573Z","timestamp":1786326146573,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Jul 2026 18:07:43 GMT","end":"Mon, 12 Oct 2026 18:07:42 GMT"},"fingerprint":{"sha1":"3C:2E:4A:58:D0:DB:8D:00:50:7D:0E:E6:87:DE:CA:95:B3:BA:1B:89","sha256":"C2:4F:05:DF:4B:24:E4:A9:E4:2A:30:66:F4:78:E7:75:AC:AE:71:43:E7:DA:3E:24:4B:A3:AA:9A:39:4E:E2:E1"}}},"request":{"raw":"OPTIONS /element/log?format=json\u0026hasfast=true\u0026authuser=0 HTTP/1.1\r\nHost: translate.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-encoding,content-type,x-goog-authuser\r\nReferer: https://affiduciary.com/\r\nOrigin: https://affiduciary.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 \r\naccess-control-allow-origin: https://affiduciary.com\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-max-age: 86400\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: X-Playlog-Web,authorization,content-encoding,content-type,x-goog-authuser,origin\r\ncontent-type: text/plain; charset=UTF-8\r\ndate: Mon, 10 Aug 2026 01:42:26 GMT\r\nserver: Playlog\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":523,"mime_type":"text/plain; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-10T04:49:07.925952Z","times_seen":17811481,"resource_available":true,"data":null}},"time_used":31,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"affiduciary.com/home/css/elements-css/projects.css","fqdn":"affiduciary.com","domain":"affiduciary.com","tld":"com"},"ip":{"addr":"84.75.144.0","port":443,"asn":6730,"as":"Sunrise GmbH","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://affiduciary.com/","date":"2026-08-10T01:42:11.603Z","timestamp":1786326131603,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.affiduciary.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 18 Jul 2026 22:13:22 GMT","end":"Fri, 16 Oct 2026 22:13:21 GMT"},"fingerprint":{"sha1":"32:43:A0:00:CF:FD:A9:87:65:2E:DD:F9:02:A4:05:36:9F:CB:8F:92","sha256":"1C:59:C8:76:96:00:CF:9A:AC:CF:35:1C:3E:BB:59:D9:02:79:09:FF:C2:68:CC:63:53:B2:D6:D6:EE:2E:D1:FB"}}},"request":{"raw":"GET /home/css/elements-css/projects.css HTTP/1.1\r\nHost: affiduciary.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://affiduciary.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6Img3VjgvSG16V0N1ZmFOUWVSNDl0R2c9PSIsInZhbHVlIjoiRlpQOEFoNFRwci9TakdBZ3NWRThUblljOWZVSnNtcjZmdm1yVmY1YnNVL29QQmFnajVDMlh2aGF1Z3B2Sm1YLzdKL29zMmpJcFVWa21oZzMxbEhoUmFMUnlhcEQ2WitpYWoxSC9KQ2VNS244dEZRaDBHRG9WbEJHZkFhRThNRFQiLCJtYWMiOiI0OTgzNDk2ODI5NTEzMzllNDUzODgzN2RlZTk1YTg5OTMxOWVmMDBhYWY5M2MxZjUwYTNiOWU5ODE2Yzc5NjA3IiwidGFnIjoiIn0%3D; affiduciary_session=eyJpdiI6ImdBMktxSFlhN0ROL1d3NE1HaVVqNEE9PSIsInZhbHVlIjoiZUwrMW44M0ZnZHN6TVJPTmg3M1l2Y1kwNVF5OE0rbjBraEtVekdvSmpIR2xuUW51NFhVRzRSaTJIcUdMaldibFdyTmU5L09jUkRESVpYY0VCb0QvZEZxNEhGM3VUcERiamZIdC9uZ3F3TzdTNUNBQTVmekdlb2c2UUZHWmcwQzciLCJtYWMiOiJjYWUwYzNlNWU2MDJkMGQzNmZmM2RlZDE4YjFkZjRmN2FmMWVmODgzNzMxYjcwYzkzNDdlZWVmYjBlYWRmNjE3IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 10 Aug 2026 01:42:12 GMT\r\nContent-Type: text/css\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nStrict-Transport-Security: max-age=63072000; includeSubDomains; preload\r\nContent-Security-Policy: upgrade-insecure-requests\r\nVary: Accept-Encoding, User-Agent,Accept-Encoding\r\nLast-Modified: Sun, 16 Mar 2025 15:58:09 GMT\r\nContent-Encoding: br\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6879,"size_decoded":1578,"mime_type":"text/css","magic":"ASCII text","md5":"ca7d8b3ef516c811f5d4680c9670c7c0","sha1":"46989f9879317b5859de41566e0b10f6babb1d89","sha256":"1f5c9fa33aef238db0703f12ee38a7c704cd07a6d6860ea4262b0d6410d014e9","sha512":"468b0463c7fe2583ab651b8131c5853ec76da9c727de35d2c6d25c38b2100c50ccc7c137373360d5ebc60e51270d3a12eada8d764e0cc2fb13f4edaba050ac45","ssdeep":"96:QkMXRrl2UJpUsNTnj4ILpuj2bj0xQd6Ezb5wSTRrTrfUpFbv:0B0","tlshash":"5ee103a5a534d988f39be2943d946b45b21f10a5ee1f0df9e2a2e028c34c15c15b3f8f","first_seen":"2025-10-23T11:35:39.002984Z","last_seen":"2026-08-10T01:43:08.472933Z","times_seen":13,"resource_available":false,"data":null}},"time_used":785,"timings":{"blocked":614,"dns":0,"connect":0,"send":0,"wait":171,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"affiduciary.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"affiduciary.com/home/images/cigar.jpeg","fqdn":"affiduciary.com","domain":"affiduciary.com","tld":"com"},"ip":{"addr":"84.75.144.0","port":443,"asn":6730,"as":"Sunrise GmbH","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://affiduciary.com/","date":"2026-08-10T01:42:11.648Z","timestamp":1786326131648,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.affiduciary.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 18 Jul 2026 22:13:22 GMT","end":"Fri, 16 Oct 2026 22:13:21 GMT"},"fingerprint":{"sha1":"32:43:A0:00:CF:FD:A9:87:65:2E:DD:F9:02:A4:05:36:9F:CB:8F:92","sha256":"1C:59:C8:76:96:00:CF:9A:AC:CF:35:1C:3E:BB:59:D9:02:79:09:FF:C2:68:CC:63:53:B2:D6:D6:EE:2E:D1:FB"}}},"request":{"raw":"GET /home/images/cigar.jpeg HTTP/1.1\r\nHost: affiduciary.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://affiduciary.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6Img3VjgvSG16V0N1ZmFOUWVSNDl0R2c9PSIsInZhbHVlIjoiRlpQOEFoNFRwci9TakdBZ3NWRThUblljOWZVSnNtcjZmdm1yVmY1YnNVL29QQmFnajVDMlh2aGF1Z3B2Sm1YLzdKL29zMmpJcFVWa21oZzMxbEhoUmFMUnlhcEQ2WitpYWoxSC9KQ2VNS244dEZRaDBHRG9WbEJHZkFhRThNRFQiLCJtYWMiOiI0OTgzNDk2ODI5NTEzMzllNDUzODgzN2RlZTk1YTg5OTMxOWVmMDBhYWY5M2MxZjUwYTNiOWU5ODE2Yzc5NjA3IiwidGFnIjoiIn0%3D; affiduciary_session=eyJpdiI6ImdBMktxSFlhN0ROL1d3NE1HaVVqNEE9PSIsInZhbHVlIjoiZUwrMW44M0ZnZHN6TVJPTmg3M1l2Y1kwNVF5OE0rbjBraEtVekdvSmpIR2xuUW51NFhVRzRSaTJIcUdMaldibFdyTmU5L09jUkRESVpYY0VCb0QvZEZxNEhGM3VUcERiamZIdC9uZ3F3TzdTNUNBQTVmekdlb2c2UUZHWmcwQzciLCJtYWMiOiJjYWUwYzNlNWU2MDJkMGQzNmZmM2RlZDE4YjFkZjRmN2FmMWVmODgzNzMxYjcwYzkzNDdlZWVmYjBlYWRmNjE3IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 10 Aug 2026 01:42:13 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 19581\r\nConnection: keep-alive\r\nStrict-Transport-Security: max-age=63072000; includeSubDomains; preload\r\nContent-Security-Policy: upgrade-insecure-requests\r\nVary: User-Agent\r\nLast-Modified: Sun, 16 Mar 2025 15:58:09 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":19581,"size_decoded":19936,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 473x473, components 3","md5":"78c7594407fb858d663ed223af3d3d3d","sha1":"43ae80f95616e0d656708e073106a116805b4cf7","sha256":"173e8e4f71f26a490e7d03b133a83f67b7a169fc8bcd4a4059f21d8ac44ebb3e","sha512":"4ff78e362cdd10440aeb50a1b0e0e04a13ccf69be94feef460a6e4132e0f902b124bd8f0387516fa9e241318407e8a53b49932d14a4032032b864a4e9ec93ff9","ssdeep":"384:RvqP6s206A3VtEzquIVSLT1qdN5w8k7noxCLEjB514yfmqdwTWmWjrJ9:RG6r0OzSgLcA7yBjiomybjrf","tlshash":"8a92cfa8ab0dfb42f2200bb81d4c9a1ed978cd21dd5300a7d9e0057ab99c4796cd92f6","first_seen":"2025-10-23T11:35:38.915012Z","last_seen":"2026-08-10T01:43:08.473427Z","times_seen":3,"resource_available":false,"data":null}},"time_used":2215,"timings":{"blocked":2052,"dns":0,"connect":0,"send":0,"wait":163,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"affiduciary.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"affiduciary.com/home/serv/3.jpg","fqdn":"affiduciary.com","domain":"affiduciary.com","tld":"com"},"ip":{"addr":"84.75.144.0","port":443,"asn":6730,"as":"Sunrise GmbH","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://affiduciary.com/","date":"2026-08-10T01:42:11.651Z","timestamp":1786326131651,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.affiduciary.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 18 Jul 2026 22:13:22 GMT","end":"Fri, 16 Oct 2026 22:13:21 GMT"},"fingerprint":{"sha1":"32:43:A0:00:CF:FD:A9:87:65:2E:DD:F9:02:A4:05:36:9F:CB:8F:92","sha256":"1C:59:C8:76:96:00:CF:9A:AC:CF:35:1C:3E:BB:59:D9:02:79:09:FF:C2:68:CC:63:53:B2:D6:D6:EE:2E:D1:FB"}}},"request":{"raw":"GET /home/serv/3.jpg HTTP/1.1\r\nHost: affiduciary.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://affiduciary.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6Img3VjgvSG16V0N1ZmFOUWVSNDl0R2c9PSIsInZhbHVlIjoiRlpQOEFoNFRwci9TakdBZ3NWRThUblljOWZVSnNtcjZmdm1yVmY1YnNVL29QQmFnajVDMlh2aGF1Z3B2Sm1YLzdKL29zMmpJcFVWa21oZzMxbEhoUmFMUnlhcEQ2WitpYWoxSC9KQ2VNS244dEZRaDBHRG9WbEJHZkFhRThNRFQiLCJtYWMiOiI0OTgzNDk2ODI5NTEzMzllNDUzODgzN2RlZTk1YTg5OTMxOWVmMDBhYWY5M2MxZjUwYTNiOWU5ODE2Yzc5NjA3IiwidGFnIjoiIn0%3D; affiduciary_session=eyJpdiI6ImdBMktxSFlhN0ROL1d3NE1HaVVqNEE9PSIsInZhbHVlIjoiZUwrMW44M0ZnZHN6TVJPTmg3M1l2Y1kwNVF5OE0rbjBraEtVekdvSmpIR2xuUW51NFhVRzRSaTJIcUdMaldibFdyTmU5L09jUkRESVpYY0VCb0QvZEZxNEhGM3VUcERiamZIdC9uZ3F3TzdTNUNBQTVmekdlb2c2UUZHWmcwQzciLCJtYWMiOiJjYWUwYzNlNWU2MDJkMGQzNmZmM2RlZDE4YjFkZjRmN2FmMWVmODgzNzMxYjcwYzkzNDdlZWVmYjBlYWRmNjE3IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 10 Aug 2026 01:42:13 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 131523\r\nConnection: keep-alive\r\nStrict-Transport-Security: max-age=63072000; includeSubDomains; preload\r\nContent-Security-Policy: upgrade-insecure-requests\r\nVary: User-Agent\r\nLast-Modified: Sun, 16 Mar 2025 15:58:09 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":131523,"size_decoded":131879,"mime_type":"image/jpeg","magic":"JPEG image data, baseline, precision 8, 1200x598, components 3","md5":"2a45af32841e4446e9ca91f767f0d271","sha1":"710e5a312910ec54e8c76fe08b06d3f9bc194d2f","sha256":"bdc0493204784ec2695769bc14a05668521aa90074118e9bfd9ad2b3f1c12873","sha512":"b4abaafb0a8d734d0def46661b31eed042ee812033d6b6d4670d00e932c477304074515f32c6e906f25ca6dc17a2819be2cc79edee8f7e1f09feb4c28d853d7d","ssdeep":"3072:TN9jSQJjgTDYGd1Lv8Z+p4MDc080DeIFiRaO1EtzFbNa/xTrFTM:THHJsT3nIZUwB0D2R518zFbNixm","tlshash":"9dd3021b1c6d4b83b11a97d0bf170e3c3f0a6b1da8c875fc02464ecc6ee4a625e69579","first_seen":"2023-07-03T05:42:34Z","last_seen":"2026-08-10T01:43:08.473998Z","times_seen":171,"resource_available":false,"data":null}},"time_used":1983,"timings":{"blocked":1502,"dns":0,"connect":0,"send":0,"wait":161,"receive":320,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"affiduciary.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"affiduciary.com/home/serv/401k.jpg","fqdn":"affiduciary.com","domain":"affiduciary.com","tld":"com"},"ip":{"addr":"84.75.144.0","port":443,"asn":6730,"as":"Sunrise GmbH","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://affiduciary.com/","date":"2026-08-10T01:42:11.654Z","timestamp":1786326131654,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.affiduciary.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 18 Jul 2026 22:13:22 GMT","end":"Fri, 16 Oct 2026 22:13:21 GMT"},"fingerprint":{"sha1":"32:43:A0:00:CF:FD:A9:87:65:2E:DD:F9:02:A4:05:36:9F:CB:8F:92","sha256":"1C:59:C8:76:96:00:CF:9A:AC:CF:35:1C:3E:BB:59:D9:02:79:09:FF:C2:68:CC:63:53:B2:D6:D6:EE:2E:D1:FB"}}},"request":{"raw":"GET /home/serv/401k.jpg HTTP/1.1\r\nHost: affiduciary.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://affiduciary.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6Img3VjgvSG16V0N1ZmFOUWVSNDl0R2c9PSIsInZhbHVlIjoiRlpQOEFoNFRwci9TakdBZ3NWRThUblljOWZVSnNtcjZmdm1yVmY1YnNVL29QQmFnajVDMlh2aGF1Z3B2Sm1YLzdKL29zMmpJcFVWa21oZzMxbEhoUmFMUnlhcEQ2WitpYWoxSC9KQ2VNS244dEZRaDBHRG9WbEJHZkFhRThNRFQiLCJtYWMiOiI0OTgzNDk2ODI5NTEzMzllNDUzODgzN2RlZTk1YTg5OTMxOWVmMDBhYWY5M2MxZjUwYTNiOWU5ODE2Yzc5NjA3IiwidGFnIjoiIn0%3D; affiduciary_session=eyJpdiI6ImdBMktxSFlhN0ROL1d3NE1HaVVqNEE9PSIsInZhbHVlIjoiZUwrMW44M0ZnZHN6TVJPTmg3M1l2Y1kwNVF5OE0rbjBraEtVekdvSmpIR2xuUW51NFhVRzRSaTJIcUdMaldibFdyTmU5L09jUkRESVpYY0VCb0QvZEZxNEhGM3VUcERiamZIdC9uZ3F3TzdTNUNBQTVmekdlb2c2UUZHWmcwQzciLCJtYWMiOiJjYWUwYzNlNWU2MDJkMGQzNmZmM2RlZDE4YjFkZjRmN2FmMWVmODgzNzMxYjcwYzkzNDdlZWVmYjBlYWRmNjE3IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 10 Aug 2026 01:42:13 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 15373\r\nConnection: keep-alive\r\nStrict-Transport-Security: max-age=63072000; includeSubDomains; preload\r\nContent-Security-Policy: upgrade-insecure-requests\r\nVary: User-Agent\r\nLast-Modified: Sun, 16 Mar 2025 15:58:09 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":15373,"size_decoded":15728,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, baseline, precision 8, 640x420, components 3","md5":"891107698b6d6ef5a05b433387f8f388","sha1":"47dbfd9a61b8282ecdec8608d039129147b49edb","sha256":"ac1a6c0ee2df499651e9a7187bc65cb104703d65a428a33ab6c8cba4751ab468","sha512":"f11a152d62a422b34b9d4bbca12c750ba2a8c4d14ac2df877b648680d0d1b2c488852c89cc39efd64613604bb3734769c6cade8d91ff7ab29f29764056f9a91e","ssdeep":"384:vc5mUUgsZRdzGm7536vOKcMNW0Zrb1nSLrYfR2rya6pM:vc0UUg+RlGIsCMNZPSL0RAyW","tlshash":"fa62c0bf2b560ecbc9b61f7995a7ef052143c235d022aa1f43283332d0d1b93932a555","first_seen":"2025-10-23T11:35:38.971057Z","last_seen":"2026-08-10T01:43:08.474529Z","times_seen":3,"resource_available":false,"data":null}},"time_used":1863,"timings":{"blocked":1703,"dns":0,"connect":0,"send":0,"wait":160,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"affiduciary.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"affiduciary.com/home/fonts/icomoon9a84.ttf?tin97q","fqdn":"affiduciary.com","domain":"affiduciary.com","tld":"com"},"ip":{"addr":"84.75.144.0","port":443,"asn":6730,"as":"Sunrise GmbH","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://affiduciary.com/","date":"2026-08-10T01:42:12.637Z","timestamp":1786326132637,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.affiduciary.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 18 Jul 2026 22:13:22 GMT","end":"Fri, 16 Oct 2026 22:13:21 GMT"},"fingerprint":{"sha1":"32:43:A0:00:CF:FD:A9:87:65:2E:DD:F9:02:A4:05:36:9F:CB:8F:92","sha256":"1C:59:C8:76:96:00:CF:9A:AC:CF:35:1C:3E:BB:59:D9:02:79:09:FF:C2:68:CC:63:53:B2:D6:D6:EE:2E:D1:FB"}}},"request":{"raw":"GET /home/fonts/icomoon9a84.ttf?tin97q HTTP/1.1\r\nHost: affiduciary.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://affiduciary.com/home/css/flaticon.css\r\nCookie: XSRF-TOKEN=eyJpdiI6Img3VjgvSG16V0N1ZmFOUWVSNDl0R2c9PSIsInZhbHVlIjoiRlpQOEFoNFRwci9TakdBZ3NWRThUblljOWZVSnNtcjZmdm1yVmY1YnNVL29QQmFnajVDMlh2aGF1Z3B2Sm1YLzdKL29zMmpJcFVWa21oZzMxbEhoUmFMUnlhcEQ2WitpYWoxSC9KQ2VNS244dEZRaDBHRG9WbEJHZkFhRThNRFQiLCJtYWMiOiI0OTgzNDk2ODI5NTEzMzllNDUzODgzN2RlZTk1YTg5OTMxOWVmMDBhYWY5M2MxZjUwYTNiOWU5ODE2Yzc5NjA3IiwidGFnIjoiIn0%3D; affiduciary_session=eyJpdiI6ImdBMktxSFlhN0ROL1d3NE1HaVVqNEE9PSIsInZhbHVlIjoiZUwrMW44M0ZnZHN6TVJPTmg3M1l2Y1kwNVF5OE0rbjBraEtVekdvSmpIR2xuUW51NFhVRzRSaTJIcUdMaldibFdyTmU5L09jUkRESVpYY0VCb0QvZEZxNEhGM3VUcERiamZIdC9uZ3F3TzdTNUNBQTVmekdlb2c2UUZHWmcwQzciLCJtYWMiOiJjYWUwYzNlNWU2MDJkMGQzNmZmM2RlZDE4YjFkZjRmN2FmMWVmODgzNzMxYjcwYzkzNDdlZWVmYjBlYWRmNjE3IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 10 Aug 2026 01:42:12 GMT\r\nContent-Type: font/ttf\r\nContent-Length: 14636\r\nConnection: keep-alive\r\nStrict-Transport-Security: max-age=63072000; includeSubDomains; preload\r\nContent-Security-Policy: upgrade-insecure-requests\r\nVary: User-Agent,Accept-Encoding\r\nLast-Modified: Sun, 16 Mar 2025 15:58:09 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":14636,"size_decoded":15005,"mime_type":"font/ttf","magic":"TrueType Font data, 11 tables, 1st \"OS/2\", 14 names, Macintosh, type 1 string, icomoon    ","md5":"d057ae270eb7465bf5d222561f92e847","sha1":"0c396e7e3a5b3482755fdbbada0809c246d39c09","sha256":"d1c7a5c848e747cb4da8723ba7fc1b521ecd517984a9365b08700ace69449e26","sha512":"5755a748d0e5ddfb06be1b40ec4910739154e1e0ddc711c160c72a5c8cf6dfe8b437f66a6e122559196175c3826af1655a34f83f856951bd2497c53a360693a9","ssdeep":"384:G23Oee5oCPPO1zzqI1DoyUFKN6HDzNfWO/aeNd5:N3k5oCPP81Da+2Nfmep","tlshash":"47622a2bd767ef9fe465d67d1c5647201ee4b821d22ee386a28a1d40e01c9ec4e783cd","first_seen":"2024-08-19T19:47:46.935103Z","last_seen":"2026-08-10T01:43:08.47511Z","times_seen":28,"resource_available":false,"data":null}},"time_used":381,"timings":{"blocked":220,"dns":0,"connect":0,"send":0,"wait":161,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"affiduciary.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"affiduciary.com/home/css/elements-css/feature.css","fqdn":"affiduciary.com","domain":"affiduciary.com","tld":"com"},"ip":{"addr":"84.75.144.0","port":443,"asn":6730,"as":"Sunrise GmbH","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://affiduciary.com/","date":"2026-08-10T01:42:11.592Z","timestamp":1786326131592,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.affiduciary.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 18 Jul 2026 22:13:22 GMT","end":"Fri, 16 Oct 2026 22:13:21 GMT"},"fingerprint":{"sha1":"32:43:A0:00:CF:FD:A9:87:65:2E:DD:F9:02:A4:05:36:9F:CB:8F:92","sha256":"1C:59:C8:76:96:00:CF:9A:AC:CF:35:1C:3E:BB:59:D9:02:79:09:FF:C2:68:CC:63:53:B2:D6:D6:EE:2E:D1:FB"}}},"request":{"raw":"GET /home/css/elements-css/feature.css HTTP/1.1\r\nHost: affiduciary.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://affiduciary.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6Img3VjgvSG16V0N1ZmFOUWVSNDl0R2c9PSIsInZhbHVlIjoiRlpQOEFoNFRwci9TakdBZ3NWRThUblljOWZVSnNtcjZmdm1yVmY1YnNVL29QQmFnajVDMlh2aGF1Z3B2Sm1YLzdKL29zMmpJcFVWa21oZzMxbEhoUmFMUnlhcEQ2WitpYWoxSC9KQ2VNS244dEZRaDBHRG9WbEJHZkFhRThNRFQiLCJtYWMiOiI0OTgzNDk2ODI5NTEzMzllNDUzODgzN2RlZTk1YTg5OTMxOWVmMDBhYWY5M2MxZjUwYTNiOWU5ODE2Yzc5NjA3IiwidGFnIjoiIn0%3D; affiduciary_session=eyJpdiI6ImdBMktxSFlhN0ROL1d3NE1HaVVqNEE9PSIsInZhbHVlIjoiZUwrMW44M0ZnZHN6TVJPTmg3M1l2Y1kwNVF5OE0rbjBraEtVekdvSmpIR2xuUW51NFhVRzRSaTJIcUdMaldibFdyTmU5L09jUkRESVpYY0VCb0QvZEZxNEhGM3VUcERiamZIdC9uZ3F3TzdTNUNBQTVmekdlb2c2UUZHWmcwQzciLCJtYWMiOiJjYWUwYzNlNWU2MDJkMGQzNmZmM2RlZDE4YjFkZjRmN2FmMWVmODgzNzMxYjcwYzkzNDdlZWVmYjBlYWRmNjE3IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 10 Aug 2026 01:42:12 GMT\r\nContent-Type: text/css\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nStrict-Transport-Security: max-age=63072000; includeSubDomains; preload\r\nContent-Security-Policy: upgrade-insecure-requests\r\nVary: Accept-Encoding, User-Agent,Accept-Encoding\r\nLast-Modified: Sun, 16 Mar 2025 15:58:09 GMT\r\nContent-Encoding: br\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5697,"size_decoded":1294,"mime_type":"text/css","magic":"ASCII text","md5":"8f1cf974871bd328391a8c04431d2003","sha1":"e2996072e7dfcd71b5134248c9f7aecf9f172463","sha256":"5952e39165c4b86b4834668b2aa78a95f370107b24ab9013902e9249db039351","sha512":"dc1be3ef1333582a0ed41f8379821c3cab2617d449c01d7da5e2b9c7cb09031151aa9d0e87aecfb800f95c0db85111457523b132338d2cf9ad506eb7efc389da","ssdeep":"96:knMSJMrKrxWFISKmdYZPTITErn3/KF7Qkhu:0vdZ","tlshash":"59c1cfdd94241a88675bf6792da057416b1e40c3de1f0ea9f163fa2893ce084196bf8f","first_seen":"2025-10-23T11:35:38.887846Z","last_seen":"2026-08-10T01:43:08.475608Z","times_seen":13,"resource_available":false,"data":null}},"time_used":609,"timings":{"blocked":442,"dns":0,"connect":0,"send":0,"wait":167,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"affiduciary.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"affiduciary.com/home/js/wow.js","fqdn":"affiduciary.com","domain":"affiduciary.com","tld":"com"},"ip":{"addr":"84.75.144.0","port":443,"asn":6730,"as":"Sunrise GmbH","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://affiduciary.com/","date":"2026-08-10T01:42:11.617Z","timestamp":1786326131617,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.affiduciary.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 18 Jul 2026 22:13:22 GMT","end":"Fri, 16 Oct 2026 22:13:21 GMT"},"fingerprint":{"sha1":"32:43:A0:00:CF:FD:A9:87:65:2E:DD:F9:02:A4:05:36:9F:CB:8F:92","sha256":"1C:59:C8:76:96:00:CF:9A:AC:CF:35:1C:3E:BB:59:D9:02:79:09:FF:C2:68:CC:63:53:B2:D6:D6:EE:2E:D1:FB"}}},"request":{"raw":"GET /home/js/wow.js HTTP/1.1\r\nHost: affiduciary.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://affiduciary.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6Img3VjgvSG16V0N1ZmFOUWVSNDl0R2c9PSIsInZhbHVlIjoiRlpQOEFoNFRwci9TakdBZ3NWRThUblljOWZVSnNtcjZmdm1yVmY1YnNVL29QQmFnajVDMlh2aGF1Z3B2Sm1YLzdKL29zMmpJcFVWa21oZzMxbEhoUmFMUnlhcEQ2WitpYWoxSC9KQ2VNS244dEZRaDBHRG9WbEJHZkFhRThNRFQiLCJtYWMiOiI0OTgzNDk2ODI5NTEzMzllNDUzODgzN2RlZTk1YTg5OTMxOWVmMDBhYWY5M2MxZjUwYTNiOWU5ODE2Yzc5NjA3IiwidGFnIjoiIn0%3D; affiduciary_session=eyJpdiI6ImdBMktxSFlhN0ROL1d3NE1HaVVqNEE9PSIsInZhbHVlIjoiZUwrMW44M0ZnZHN6TVJPTmg3M1l2Y1kwNVF5OE0rbjBraEtVekdvSmpIR2xuUW51NFhVRzRSaTJIcUdMaldibFdyTmU5L09jUkRESVpYY0VCb0QvZEZxNEhGM3VUcERiamZIdC9uZ3F3TzdTNUNBQTVmekdlb2c2UUZHWmcwQzciLCJtYWMiOiJjYWUwYzNlNWU2MDJkMGQzNmZmM2RlZDE4YjFkZjRmN2FmMWVmODgzNzMxYjcwYzkzNDdlZWVmYjBlYWRmNjE3IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 10 Aug 2026 01:42:12 GMT\r\nContent-Type: text/javascript\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nStrict-Transport-Security: max-age=63072000; includeSubDomains; preload\r\nContent-Security-Policy: upgrade-insecure-requests\r\nVary: Accept-Encoding, User-Agent,Accept-Encoding\r\nLast-Modified: Sun, 16 Mar 2025 15:58:09 GMT\r\nContent-Encoding: br\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6299,"size_decoded":2434,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (6269)","md5":"105fb3799fcf14f1ea8fcff23f2686dc","sha1":"00a8a01378a8259b38cba29dc69ddf761450053f","sha256":"704ae255ab62df5481884eb0db69b552c686e7094b21581b1cbc86a9b6c3800b","sha512":"ebdee19d8c8ab3f2d751c753ccad4a0631c1a1520821682dbcc8d9555a42d48ef9d67e333c2b9854e3452f783e5b37ecac686e287fa0f9d2ce6ce42168e87ba7","ssdeep":"96:gGqKWTAKHF/suCdaOVEE1FnePgJqg4SImYad6Q:N30suCYOVEE7ne4JqgpIwdh","tlshash":"e1d175c9b7467036d79ba1f6873f0145a23a19acb008047cb7e984e57d348699237f3c","first_seen":"2023-03-07T01:38:15Z","last_seen":"2026-08-10T01:43:08.476289Z","times_seen":3961,"resource_available":true,"data":null}},"time_used":1044,"timings":{"blocked":882,"dns":0,"connect":0,"send":0,"wait":162,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"affiduciary.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"affiduciary.com/home/images/shape/shape-28.png","fqdn":"affiduciary.com","domain":"affiduciary.com","tld":"com"},"ip":{"addr":"84.75.144.0","port":443,"asn":6730,"as":"Sunrise GmbH","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://affiduciary.com/","date":"2026-08-10T01:42:12.599Z","timestamp":1786326132599,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.affiduciary.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 18 Jul 2026 22:13:22 GMT","end":"Fri, 16 Oct 2026 22:13:21 GMT"},"fingerprint":{"sha1":"32:43:A0:00:CF:FD:A9:87:65:2E:DD:F9:02:A4:05:36:9F:CB:8F:92","sha256":"1C:59:C8:76:96:00:CF:9A:AC:CF:35:1C:3E:BB:59:D9:02:79:09:FF:C2:68:CC:63:53:B2:D6:D6:EE:2E:D1:FB"}}},"request":{"raw":"GET /home/images/shape/shape-28.png HTTP/1.1\r\nHost: affiduciary.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://affiduciary.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6Img3VjgvSG16V0N1ZmFOUWVSNDl0R2c9PSIsInZhbHVlIjoiRlpQOEFoNFRwci9TakdBZ3NWRThUblljOWZVSnNtcjZmdm1yVmY1YnNVL29QQmFnajVDMlh2aGF1Z3B2Sm1YLzdKL29zMmpJcFVWa21oZzMxbEhoUmFMUnlhcEQ2WitpYWoxSC9KQ2VNS244dEZRaDBHRG9WbEJHZkFhRThNRFQiLCJtYWMiOiI0OTgzNDk2ODI5NTEzMzllNDUzODgzN2RlZTk1YTg5OTMxOWVmMDBhYWY5M2MxZjUwYTNiOWU5ODE2Yzc5NjA3IiwidGFnIjoiIn0%3D; affiduciary_session=eyJpdiI6ImdBMktxSFlhN0ROL1d3NE1HaVVqNEE9PSIsInZhbHVlIjoiZUwrMW44M0ZnZHN6TVJPTmg3M1l2Y1kwNVF5OE0rbjBraEtVekdvSmpIR2xuUW51NFhVRzRSaTJIcUdMaldibFdyTmU5L09jUkRESVpYY0VCb0QvZEZxNEhGM3VUcERiamZIdC9uZ3F3TzdTNUNBQTVmekdlb2c2UUZHWmcwQzciLCJtYWMiOiJjYWUwYzNlNWU2MDJkMGQzNmZmM2RlZDE4YjFkZjRmN2FmMWVmODgzNzMxYjcwYzkzNDdlZWVmYjBlYWRmNjE3IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 10 Aug 2026 01:42:13 GMT\r\nContent-Type: image/png\r\nContent-Length: 17208\r\nConnection: keep-alive\r\nStrict-Transport-Security: max-age=63072000; includeSubDomains; preload\r\nContent-Security-Policy: upgrade-insecure-requests\r\nVary: User-Agent\r\nLast-Modified: Sun, 16 Mar 2025 15:58:09 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":17208,"size_decoded":17562,"mime_type":"image/png","magic":"PNG image data, 626 x 617, 8-bit/color RGBA, non-interlaced","md5":"166c325df6f121954200bfda5529171f","sha1":"2d201170d5e3f70f932d80121fb9340e61824fd3","sha256":"6ac6970ff7468d59388376ea1064fe137d3dc1ff9bc7dfeb7cb0c7d2ea588226","sha512":"1f680575c76b33d6d974efea9cdf4e8a88d1cc71c53ed065997f6e7dc6e5619cc3c8435770e4ccff55b9231f75867d3d0f19f4275067b46ef678c9c02d3b77ec","ssdeep":"384:7jj+YthLjU9TgtmP/a2fPu7478IJgCXHufL5O12jlbZMTC:Hj+uLIumnfm7dIPXH2L5O12jlbyTC","tlshash":"c072aedc7ab5d9316bc64c93e77b1d395ce801b30716d700d824eaa2067278e978383d","first_seen":"2024-08-19T19:47:46.934176Z","last_seen":"2026-08-10T01:43:08.477304Z","times_seen":19,"resource_available":false,"data":null}},"time_used":1228,"timings":{"blocked":1068,"dns":0,"connect":0,"send":0,"wait":160,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"affiduciary.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"affiduciary.com/home/fonts/fa-regular-400.woff2","fqdn":"affiduciary.com","domain":"affiduciary.com","tld":"com"},"ip":{"addr":"84.75.144.0","port":443,"asn":6730,"as":"Sunrise GmbH","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://affiduciary.com/","date":"2026-08-10T01:42:12.641Z","timestamp":1786326132641,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.affiduciary.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 18 Jul 2026 22:13:22 GMT","end":"Fri, 16 Oct 2026 22:13:21 GMT"},"fingerprint":{"sha1":"32:43:A0:00:CF:FD:A9:87:65:2E:DD:F9:02:A4:05:36:9F:CB:8F:92","sha256":"1C:59:C8:76:96:00:CF:9A:AC:CF:35:1C:3E:BB:59:D9:02:79:09:FF:C2:68:CC:63:53:B2:D6:D6:EE:2E:D1:FB"}}},"request":{"raw":"GET /home/fonts/fa-regular-400.woff2 HTTP/1.1\r\nHost: affiduciary.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://affiduciary.com/home/css/font-awesome-all.css\r\nCookie: XSRF-TOKEN=eyJpdiI6Img3VjgvSG16V0N1ZmFOUWVSNDl0R2c9PSIsInZhbHVlIjoiRlpQOEFoNFRwci9TakdBZ3NWRThUblljOWZVSnNtcjZmdm1yVmY1YnNVL29QQmFnajVDMlh2aGF1Z3B2Sm1YLzdKL29zMmpJcFVWa21oZzMxbEhoUmFMUnlhcEQ2WitpYWoxSC9KQ2VNS244dEZRaDBHRG9WbEJHZkFhRThNRFQiLCJtYWMiOiI0OTgzNDk2ODI5NTEzMzllNDUzODgzN2RlZTk1YTg5OTMxOWVmMDBhYWY5M2MxZjUwYTNiOWU5ODE2Yzc5NjA3IiwidGFnIjoiIn0%3D; affiduciary_session=eyJpdiI6ImdBMktxSFlhN0ROL1d3NE1HaVVqNEE9PSIsInZhbHVlIjoiZUwrMW44M0ZnZHN6TVJPTmg3M1l2Y1kwNVF5OE0rbjBraEtVekdvSmpIR2xuUW51NFhVRzRSaTJIcUdMaldibFdyTmU5L09jUkRESVpYY0VCb0QvZEZxNEhGM3VUcERiamZIdC9uZ3F3TzdTNUNBQTVmekdlb2c2UUZHWmcwQzciLCJtYWMiOiJjYWUwYzNlNWU2MDJkMGQzNmZmM2RlZDE4YjFkZjRmN2FmMWVmODgzNzMxYjcwYzkzNDdlZWVmYjBlYWRmNjE3IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 10 Aug 2026 01:42:12 GMT\r\nContent-Type: font/woff2\r\nContent-Length: 145152\r\nConnection: keep-alive\r\nStrict-Transport-Security: max-age=63072000; includeSubDomains; preload\r\nContent-Security-Policy: upgrade-insecure-requests\r\nVary: User-Agent,Accept-Encoding\r\nLast-Modified: Sun, 16 Mar 2025 15:58:09 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":145152,"size_decoded":145524,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 145152, version 329.-17826","md5":"935ae23ba86e111411100dca037d2f0a","sha1":"d0454a905c24df15d3b53e046a01ab70fc8ce21f","sha256":"6f15cf39100feae2e2bf4c38f08b2d89701c3f04a2ad84a1d6f89bc70f21cf6e","sha512":"1d60a4536b0cea648e2a8a9eb6fbeec245559afde6c0de7f4157092c8b4ccf400051f8d8dd666a2316a817f8da7922a4cb66c361c9bef4d777acbad0aefb9ebf","ssdeep":"3072:Fmn0ddlwhYKiDxeD1CBVa2NsdzMzNehmLI/7SUAF1gEF:80ddGhYKidek+klemgpAXlF","tlshash":"4fe312576fd795a672fcf3105b7aa330473389ab12151f71a0e2bb546ed880f4a33458","first_seen":"2023-05-04T06:37:39Z","last_seen":"2026-08-10T01:43:08.477811Z","times_seen":1846,"resource_available":false,"data":null}},"time_used":734,"timings":{"blocked":243,"dns":0,"connect":0,"send":0,"wait":164,"receive":327,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"affiduciary.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.smartsuppchat.com/loader.js?","fqdn":"www.smartsuppchat.com","domain":"smartsuppchat.com","tld":"com"},"ip":{"addr":"185.76.9.11","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://affiduciary.com/","date":"2026-08-10T01:42:13.103Z","timestamp":1786326133103,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1161431244.rsc.cdn77.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 04 Jun 2026 14:34:49 GMT","end":"Wed, 02 Sep 2026 14:34:48 GMT"},"fingerprint":{"sha1":"77:06:42:CE:73:9F:CA:05:A3:6E:99:99:F2:3F:B7:EE:E4:60:E9:29","sha256":"E7:6E:68:C5:CD:6C:F6:14:84:A0:18:1A:D7:94:77:7A:28:F6:67:8E:90:58:94:AE:3A:65:6A:B7:95:0F:5D:1B"}}},"request":{"raw":"GET /loader.js? HTTP/1.1\r\nHost: www.smartsuppchat.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://affiduciary.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Mon, 10 Aug 2026 01:42:16 GMT\r\ncontent-type: application/javascript\r\ncache-control: max-age=300, public, s-maxage=60\r\netag: W/\"6a2663cd-4668\"\r\nexpires: Mon, 08 Jun 2026 06:46:12 GMT\r\nlast-modified: Mon, 08 Jun 2026 06:40:13 GMT\r\nx-77-nzt: kxAeBdgyZdtZpbnDsUt3GEkBbg/N/857iGkiT0t1Jhl5NEWtqtlO3HDKM37DPG/vJm9x0fk\r\nx-77-nzt-ray: e2f754206334a1059d2c796a766df21b\r\nx-77-cache: HIT\r\nx-77-age: 32\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nserver: CDN77-Turbo\r\nx-77-pop: stockholmSE\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":18024,"size_decoded":6042,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (17951)","md5":"218d24439d4e2c0990f35338a7ac220c","sha1":"5a7b913584c1244bf61beab9dc644204d130101c","sha256":"efb497f7159de26ea5e0521d675d909dc063e36d0d23c2ad96fa9109b73ee263","sha512":"17af39bfdc350c9d1f8dd74652641d0c028881ecb3935d2d9fdb763d24136665d135d00219aabac57693112e2314d4fa91b802ba2662a1580aa35c5e0b6e624b","ssdeep":"384:2/xzy2A3wyxNeBWbEgl/EuVaBWbE0rIcvqSI/aQ/UpG:2/xzy2A3wXscuVaAxka05","tlshash":"4182b7cc7691b16543ab61b4843f620ff1376929740d8865b965eae13cb8c8ed037fb8","first_seen":"2026-03-30T19:01:55.527327Z","last_seen":"2026-08-10T01:51:44.865453Z","times_seen":8256,"resource_available":true,"data":null}},"time_used":3372,"timings":{"blocked":0,"dns":93,"connect":8,"send":0,"wait":11,"receive":0,"ssl":3260},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bootstrap.smartsuppchat.com/widget/b6d89fce0acc5614898baa8e44e23b1e127d7e1f.json","fqdn":"bootstrap.smartsuppchat.com","domain":"smartsuppchat.com","tld":"com"},"ip":{"addr":"3.77.221.71","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://affiduciary.com/","date":"2026-08-10T01:42:16.587Z","timestamp":1786326136587,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.smartsuppchat.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 02 Dec 2025 00:00:00 GMT","end":"Wed, 30 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"DC:47:26:FC:2D:4B:14:19:23:BC:B7:70:14:DA:60:A6:21:B0:1E:81","sha256":"0D:5E:FD:70:25:9E:DE:DD:47:CF:0C:58:1C:08:A2:A1:05:AC:A6:7E:0C:43:6F:50:E7:49:E0:A1:60:D0:0E:0F"}}},"request":{"raw":"GET /widget/b6d89fce0acc5614898baa8e44e23b1e127d7e1f.json HTTP/1.1\r\nHost: bootstrap.smartsuppchat.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: text/plain\r\nOrigin: https://affiduciary.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://affiduciary.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Mon, 10 Aug 2026 01:42:16 GMT\r\ncontent-type: application/json; charset=utf-8\r\nx-version: 6cb79abf75047496934c7756b55ec6f26e7d2373\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\ncache-control: private, max-age=0, must-revalidate\r\nx-hit: redis\r\netag: \"4c7-B/6NfaaDpZne/g/uc5qfSnm44ZA\"\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":1223,"size_decoded":879,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"1623b3b9e850c9c1491c70aef8d248c2","sha1":"07fe8d7da683a599defe0fee739a9f4a79b8e190","sha256":"b5b4d35c58c664f860fdab342e28e4f7337c31f56e8da3582e65972af84deb9e","sha512":"bcfb7323cde3f50f57c38880ba4f962f1f35f106a93074f2f3da73256fe2b54698c6065b11f1bc93d6f74811f6d2543fc6f5aa7afea2e5df1ff45b4f25fcc6d2","ssdeep":"","tlshash":"5321766d4a6822fd5245c7d6c5047a036bacdcb371003e7eea0d0a0e70db2e6223646b","first_seen":"2026-06-06T06:44:39.646667Z","last_seen":"2026-08-10T01:49:01.251177Z","times_seen":2409,"resource_available":false,"data":null}},"time_used":89,"timings":{"blocked":0,"dns":3,"connect":25,"send":0,"wait":29,"receive":0,"ssl":32},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"translate.googleapis.com/translate_static/img/te_ctrl3.gif","fqdn":"translate.googleapis.com","domain":"translate.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.74","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://affiduciary.com/","date":"2026-08-10T01:42:17.000Z","timestamp":1786326137000,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Jul 2026 18:07:43 GMT","end":"Mon, 12 Oct 2026 18:07:42 GMT"},"fingerprint":{"sha1":"3C:2E:4A:58:D0:DB:8D:00:50:7D:0E:E6:87:DE:CA:95:B3:BA:1B:89","sha256":"C2:4F:05:DF:4B:24:E4:A9:E4:2A:30:66:F4:78:E7:75:AC:AE:71:43:E7:DA:3E:24:4B:A3:AA:9A:39:4E:E2:E1"}}},"request":{"raw":"GET /translate_static/img/te_ctrl3.gif HTTP/1.1\r\nHost: translate.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://affiduciary.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"static-on-bigtable\"\r\nreport-to: {\"group\":\"static-on-bigtable\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/static-on-bigtable\"}]}\r\ncontent-length: 1412\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 06 Aug 2026 02:34:28 GMT\r\nexpires: Fri, 06 Aug 2027 02:34:28 GMT\r\ncache-control: public, max-age=31536000\r\nage: 342469\r\nlast-modified: Thu, 03 Oct 2019 10:15:00 GMT\r\ncontent-type: image/gif\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":1412,"size_decoded":2072,"mime_type":"image/gif","magic":"GIF image data, version 89a, 84 x 19","md5":"9afe50090c0bc612953d081295eab5b1","sha1":"71a4da2a622879c29176ecfa5afe1bbe3e8cfa40","sha256":"d228d0256370863119c043f1e5ca8f3930f6999bd9f250434b6d8935f45dc171","sha512":"d7290b951cec51994f3480c32b70de0faeca433b5d99209b044e1d4c12327768de8c344b6bded806d993251e0ee6f98f0dd64f4480e999fbc06abfe3dd8056fa","ssdeep":"","tlshash":"042182b5cc99114a5be1bd27a334899da8b12c56c38d74595436bdb43470f098422812","first_seen":"2023-04-05T08:27:37Z","last_seen":"2026-08-10T02:31:29.700627Z","times_seen":16929,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"affiduciary.com/home/images/affiduciary.png","fqdn":"affiduciary.com","domain":"affiduciary.com","tld":"com"},"ip":{"addr":"84.75.144.0","port":443,"asn":6730,"as":"Sunrise GmbH","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://affiduciary.com/","date":"2026-08-10T01:42:11.644Z","timestamp":1786326131644,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.affiduciary.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 18 Jul 2026 22:13:22 GMT","end":"Fri, 16 Oct 2026 22:13:21 GMT"},"fingerprint":{"sha1":"32:43:A0:00:CF:FD:A9:87:65:2E:DD:F9:02:A4:05:36:9F:CB:8F:92","sha256":"1C:59:C8:76:96:00:CF:9A:AC:CF:35:1C:3E:BB:59:D9:02:79:09:FF:C2:68:CC:63:53:B2:D6:D6:EE:2E:D1:FB"}}},"request":{"raw":"GET /home/images/affiduciary.png HTTP/1.1\r\nHost: affiduciary.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://affiduciary.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6Img3VjgvSG16V0N1ZmFOUWVSNDl0R2c9PSIsInZhbHVlIjoiRlpQOEFoNFRwci9TakdBZ3NWRThUblljOWZVSnNtcjZmdm1yVmY1YnNVL29QQmFnajVDMlh2aGF1Z3B2Sm1YLzdKL29zMmpJcFVWa21oZzMxbEhoUmFMUnlhcEQ2WitpYWoxSC9KQ2VNS244dEZRaDBHRG9WbEJHZkFhRThNRFQiLCJtYWMiOiI0OTgzNDk2ODI5NTEzMzllNDUzODgzN2RlZTk1YTg5OTMxOWVmMDBhYWY5M2MxZjUwYTNiOWU5ODE2Yzc5NjA3IiwidGFnIjoiIn0%3D; affiduciary_session=eyJpdiI6ImdBMktxSFlhN0ROL1d3NE1HaVVqNEE9PSIsInZhbHVlIjoiZUwrMW44M0ZnZHN6TVJPTmg3M1l2Y1kwNVF5OE0rbjBraEtVekdvSmpIR2xuUW51NFhVRzRSaTJIcUdMaldibFdyTmU5L09jUkRESVpYY0VCb0QvZEZxNEhGM3VUcERiamZIdC9uZ3F3TzdTNUNBQTVmekdlb2c2UUZHWmcwQzciLCJtYWMiOiJjYWUwYzNlNWU2MDJkMGQzNmZmM2RlZDE4YjFkZjRmN2FmMWVmODgzNzMxYjcwYzkzNDdlZWVmYjBlYWRmNjE3IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 10 Aug 2026 01:42:13 GMT\r\nContent-Type: image/png\r\nContent-Length: 4737\r\nConnection: keep-alive\r\nStrict-Transport-Security: max-age=63072000; includeSubDomains; preload\r\nContent-Security-Policy: upgrade-insecure-requests\r\nVary: User-Agent\r\nLast-Modified: Sun, 16 Mar 2025 15:58:09 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4737,"size_decoded":5090,"mime_type":"image/png","magic":"PNG image data, 175 x 39, 8-bit colormap, non-interlaced","md5":"4bcd702f0afd89abc60a58f506615545","sha1":"ee1c66cdbfc526376b1ce1bcded1a51d160c7fbd","sha256":"97e9f414a5840a163ef5845f6d761a86340e32a8f63dfb938d735c732d974467","sha512":"53effa0501328a8ce822d11235e57137500538b59374e04458ab53327dcbf1b7e24dee4b6093cef67a2017d4729955f51f43ef2f5660e20866cac52d2b1c4906","ssdeep":"96:Krg7N3Lnyrj77GV87voY15evx/KVkMgDJzXiGcsRkMSZmr:X7Nmra20yUvp3DxS/1M7r","tlshash":"4fa17d3607760c6bc8161722b383145f8b3d6c872cd009b44862d2cae68b578fa9b6de","first_seen":"2025-10-23T11:35:38.892383Z","last_seen":"2026-08-10T01:43:08.443125Z","times_seen":3,"resource_available":false,"data":null}},"time_used":1528,"timings":{"blocked":1365,"dns":0,"connect":0,"send":0,"wait":163,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"affiduciary.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"affiduciary.com/home/images/background/project-bg.jpg","fqdn":"affiduciary.com","domain":"affiduciary.com","tld":"com"},"ip":{"addr":"84.75.144.0","port":443,"asn":6730,"as":"Sunrise GmbH","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://affiduciary.com/","date":"2026-08-10T01:42:12.596Z","timestamp":1786326132596,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.affiduciary.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 18 Jul 2026 22:13:22 GMT","end":"Fri, 16 Oct 2026 22:13:21 GMT"},"fingerprint":{"sha1":"32:43:A0:00:CF:FD:A9:87:65:2E:DD:F9:02:A4:05:36:9F:CB:8F:92","sha256":"1C:59:C8:76:96:00:CF:9A:AC:CF:35:1C:3E:BB:59:D9:02:79:09:FF:C2:68:CC:63:53:B2:D6:D6:EE:2E:D1:FB"}}},"request":{"raw":"GET /home/images/background/project-bg.jpg HTTP/1.1\r\nHost: affiduciary.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://affiduciary.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6Img3VjgvSG16V0N1ZmFOUWVSNDl0R2c9PSIsInZhbHVlIjoiRlpQOEFoNFRwci9TakdBZ3NWRThUblljOWZVSnNtcjZmdm1yVmY1YnNVL29QQmFnajVDMlh2aGF1Z3B2Sm1YLzdKL29zMmpJcFVWa21oZzMxbEhoUmFMUnlhcEQ2WitpYWoxSC9KQ2VNS244dEZRaDBHRG9WbEJHZkFhRThNRFQiLCJtYWMiOiI0OTgzNDk2ODI5NTEzMzllNDUzODgzN2RlZTk1YTg5OTMxOWVmMDBhYWY5M2MxZjUwYTNiOWU5ODE2Yzc5NjA3IiwidGFnIjoiIn0%3D; affiduciary_session=eyJpdiI6ImdBMktxSFlhN0ROL1d3NE1HaVVqNEE9PSIsInZhbHVlIjoiZUwrMW44M0ZnZHN6TVJPTmg3M1l2Y1kwNVF5OE0rbjBraEtVekdvSmpIR2xuUW51NFhVRzRSaTJIcUdMaldibFdyTmU5L09jUkRESVpYY0VCb0QvZEZxNEhGM3VUcERiamZIdC9uZ3F3TzdTNUNBQTVmekdlb2c2UUZHWmcwQzciLCJtYWMiOiJjYWUwYzNlNWU2MDJkMGQzNmZmM2RlZDE4YjFkZjRmN2FmMWVmODgzNzMxYjcwYzkzNDdlZWVmYjBlYWRmNjE3IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 10 Aug 2026 01:42:13 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 162081\r\nConnection: keep-alive\r\nStrict-Transport-Security: max-age=63072000; includeSubDomains; preload\r\nContent-Security-Policy: upgrade-insecure-requests\r\nVary: User-Agent\r\nLast-Modified: Sun, 16 Mar 2025 15:58:09 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":162081,"size_decoded":162437,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1920x600, components 3","md5":"c301cf6e3f3bd7736e7b0fb892574e95","sha1":"bd16f3538530b9b3153f4ff83cb6b405986b784d","sha256":"ec24c5c26de28cfdb747979dcc74916230c345bac7dbe76ad2efb201a30c8961","sha512":"34ad353151852cbc04da958dae6618052df0fe252330043fb87c36918fa1831c1dc89cf692c011e6b861bce7155fbcccd00b241bc9b14b64363c95fc46169a7d","ssdeep":"3072:Dj/poGv++rWEoGdRXlrknlVTVnjZQjEwESMM3EqO://3+8nr8RjP4EqO","tlshash":"63f31225719b31280a8b19b0de7c0be243d12df9f4375817acb3a89b6d012bee59317d","first_seen":"2025-10-23T11:35:38.909495Z","last_seen":"2026-08-10T01:43:08.479932Z","times_seen":8,"resource_available":false,"data":null}},"time_used":1160,"timings":{"blocked":991,"dns":0,"connect":0,"send":0,"wait":168,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"affiduciary.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"affiduciary.com/home/js/jquery.js","fqdn":"affiduciary.com","domain":"affiduciary.com","tld":"com"},"ip":{"addr":"84.75.144.0","port":443,"asn":6730,"as":"Sunrise GmbH","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://affiduciary.com/","date":"2026-08-10T01:42:11.611Z","timestamp":1786326131611,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.affiduciary.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 18 Jul 2026 22:13:22 GMT","end":"Fri, 16 Oct 2026 22:13:21 GMT"},"fingerprint":{"sha1":"32:43:A0:00:CF:FD:A9:87:65:2E:DD:F9:02:A4:05:36:9F:CB:8F:92","sha256":"1C:59:C8:76:96:00:CF:9A:AC:CF:35:1C:3E:BB:59:D9:02:79:09:FF:C2:68:CC:63:53:B2:D6:D6:EE:2E:D1:FB"}}},"request":{"raw":"GET /home/js/jquery.js HTTP/1.1\r\nHost: affiduciary.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://affiduciary.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6Img3VjgvSG16V0N1ZmFOUWVSNDl0R2c9PSIsInZhbHVlIjoiRlpQOEFoNFRwci9TakdBZ3NWRThUblljOWZVSnNtcjZmdm1yVmY1YnNVL29QQmFnajVDMlh2aGF1Z3B2Sm1YLzdKL29zMmpJcFVWa21oZzMxbEhoUmFMUnlhcEQ2WitpYWoxSC9KQ2VNS244dEZRaDBHRG9WbEJHZkFhRThNRFQiLCJtYWMiOiI0OTgzNDk2ODI5NTEzMzllNDUzODgzN2RlZTk1YTg5OTMxOWVmMDBhYWY5M2MxZjUwYTNiOWU5ODE2Yzc5NjA3IiwidGFnIjoiIn0%3D; affiduciary_session=eyJpdiI6ImdBMktxSFlhN0ROL1d3NE1HaVVqNEE9PSIsInZhbHVlIjoiZUwrMW44M0ZnZHN6TVJPTmg3M1l2Y1kwNVF5OE0rbjBraEtVekdvSmpIR2xuUW51NFhVRzRSaTJIcUdMaldibFdyTmU5L09jUkRESVpYY0VCb0QvZEZxNEhGM3VUcERiamZIdC9uZ3F3TzdTNUNBQTVmekdlb2c2UUZHWmcwQzciLCJtYWMiOiJjYWUwYzNlNWU2MDJkMGQzNmZmM2RlZDE4YjFkZjRmN2FmMWVmODgzNzMxYjcwYzkzNDdlZWVmYjBlYWRmNjE3IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 10 Aug 2026 01:42:12 GMT\r\nContent-Type: text/javascript\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nStrict-Transport-Security: max-age=63072000; includeSubDomains; preload\r\nContent-Security-Policy: upgrade-insecure-requests\r\nVary: Accept-Encoding, User-Agent,Accept-Encoding\r\nLast-Modified: Sun, 16 Mar 2025 15:58:09 GMT\r\nContent-Encoding: br\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":97163,"size_decoded":33249,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (32077)","md5":"4f252523d4af0b478c810c2547a63e19","sha1":"5a9dcfbef655a2668e78baebeaa8dc6f41d8dabb","sha256":"668b046d12db350ccba6728890476b3efee53b2f42dbb84743e5e9f1ae0cc404","sha512":"8c6b0c1fcde829ef5ab02a643959019d4ac30d3a7cc25f9a7640760fefff26d9713b84ab2e825d85b3b2b08150265a10143f82e05975accb10645efa26357479","ssdeep":"1536:GYE1JVoiB9JqZdXXe2pD3PgoIiulrUdTJSFk/zkZ4HjL5o8srOaS9TwD6b7/Jp9i:t4J+R3jL5TCOauTwD6FdnCVQNea98HrV","tlshash":"8893d7d9b6d6706287b734a851bf410bb17aa8eab40c4c60f058c8e47e74e9d507bf2d","first_seen":"2023-03-07T01:02:06Z","last_seen":"2026-08-10T03:23:03.160019Z","times_seen":84415,"resource_available":true,"data":null}},"time_used":1097,"timings":{"blocked":760,"dns":0,"connect":0,"send":0,"wait":337,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"affiduciary.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}