{"report_id":"3474d74e-6b9b-4137-b5e3-5c40925cb5f8","version":6,"status":"done","tags":[],"date":"2024-12-23T04:14:28Z","url":{"schema":"http","addr":"be.block-sphere.com/","fqdn":"be.block-sphere.com","domain":"block-sphere.com","tld":"com"},"ip":{"addr":"104.21.34.134","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"be.block-sphere.com/app/#/","fqdn":"be.block-sphere.com","domain":"block-sphere.com","tld":"com"},"title":"BIT"},"submit":{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":""},"tags":null,"meta":null},"settings":{"access":"public","device_type":"","expires_at":"2027-03-03T04:14:28Z","useragent":"Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":null},"summary":[{"fqdn":"client.salesmartly.com","ip":{"addr":"143.204.55.46","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2021-07-22","domain_rank":0,"first_seen":"2024-06-25T09:52:15Z","last_seen":"2024-12-21T10:59:04.755073Z","alert_count":0,"request_count":1,"received_data":47809,"sent_data":518,"comment":"","tags":null,"fingerprints":null},{"fqdn":"at.alicdn.com","ip":{"addr":"47.246.44.249","port":443,"asn":24429,"as":"Zhejiang Taobao Network Co.,Ltd","country":"Sweden","country_code":"SE"},"domain_registered":"2008-06-25","domain_rank":11137,"first_seen":"2013-11-28T05:03:29Z","last_seen":"2024-12-18T22:53:58.410528Z","alert_count":0,"request_count":3,"received_data":335599,"sent_data":1392,"comment":"","tags":null,"fingerprints":null},{"fqdn":"plugin-code.salesmartly.com","ip":{"addr":"3.164.240.26","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"domain_registered":"2021-07-22","domain_rank":0,"first_seen":"2024-12-12T08:03:04.74606Z","last_seen":"2024-12-20T23:23:37.772996Z","alert_count":0,"request_count":8,"received_data":903645,"sent_data":3512,"comment":"","tags":null,"fingerprints":null},{"fqdn":"be.block-sphere.com","ip":{"addr":"172.67.161.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"domain_registered":"2024-12-10","domain_rank":0,"first_seen":"2024-12-23T04:14:28.874291Z","last_seen":"2024-12-23T04:14:28.874291Z","alert_count":40,"request_count":40,"received_data":6327618,"sent_data":33757,"comment":"","tags":null,"fingerprints":null},{"fqdn":"api.salesmartly.com","ip":{"addr":"3.164.240.80","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"domain_registered":"2021-07-22","domain_rank":961967,"first_seen":"2022-11-29T17:40:50Z","last_seen":"2024-12-21T10:59:04.826283Z","alert_count":0,"request_count":2,"received_data":12444,"sent_data":1268,"comment":"","tags":null,"fingerprints":null},{"fqdn":"msg.salesmartly.com","ip":{"addr":"3.164.240.36","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"domain_registered":"2021-07-22","domain_rank":0,"first_seen":"2022-11-29T17:40:54Z","last_seen":"2024-12-22T08:21:41.510145Z","alert_count":0,"request_count":3,"received_data":1911,"sent_data":2288,"comment":"","tags":null,"fingerprints":null},{"fqdn":"srz.salesmartly.com","ip":{"addr":"143.204.55.57","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2021-07-22","domain_rank":0,"first_seen":"2024-02-20T03:50:45Z","last_seen":"2024-12-21T10:59:05.121245Z","alert_count":0,"request_count":3,"received_data":10249,"sent_data":2098,"comment":"","tags":null,"fingerprints":null},{"fqdn":"api","ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":132044,"first_seen":"2017-06-07T06:41:06Z","last_seen":"2024-12-15T20:16:17.816738Z","alert_count":1,"request_count":1,"received_data":0,"sent_data":446,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":null}],"analyzer":[{"sensor_name":"infosec_yara","type":"yara","description":"Public InfoSec YARA rules","link":"","alerts":null},{"sensor_name":"openphish","type":"url","description":"OpenPhish","link":"","alerts":null},{"sensor_name":"phishtank","type":"url","description":"PhishTank","link":"","alerts":null},{"sensor_name":"quad9","type":"domain","description":"Quad9 DNS","link":"","alerts":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2024-12-23","alert":"Sinkholed","trigger":"block-sphere.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2024-12-23","alert":"Sinkholed","trigger":"block-sphere.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2024-12-23","alert":"Sinkholed","trigger":"block-sphere.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2024-12-23","alert":"Sinkholed","trigger":"block-sphere.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2024-12-23","alert":"Sinkholed","trigger":"block-sphere.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2024-12-23","alert":"Sinkholed","trigger":"block-sphere.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2024-12-23","alert":"Sinkholed","trigger":"block-sphere.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2024-12-23","alert":"Sinkholed","trigger":"block-sphere.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2024-12-23","alert":"Sinkholed","trigger":"block-sphere.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2024-12-23","alert":"Sinkholed","trigger":"block-sphere.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2024-12-23","alert":"Sinkholed","trigger":"block-sphere.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2024-12-23","alert":"Sinkholed","trigger":"block-sphere.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2024-12-23","alert":"Sinkholed","trigger":"block-sphere.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2024-12-23","alert":"Sinkholed","trigger":"block-sphere.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2024-12-23","alert":"Sinkholed","trigger":"block-sphere.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2024-12-23","alert":"Sinkholed","trigger":"block-sphere.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2024-12-23","alert":"Sinkholed","trigger":"block-sphere.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2024-12-23","alert":"Sinkholed","trigger":"block-sphere.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2024-12-23","alert":"Sinkholed","trigger":"block-sphere.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2024-12-23","alert":"Sinkholed","trigger":"block-sphere.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2024-12-23","alert":"Sinkholed","trigger":"block-sphere.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2024-12-23","alert":"Sinkholed","trigger":"block-sphere.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2024-12-23","alert":"Sinkholed","trigger":"block-sphere.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2024-12-23","alert":"Sinkholed","trigger":"block-sphere.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2024-12-23","alert":"Sinkholed","trigger":"block-sphere.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2024-12-23","alert":"Sinkholed","trigger":"block-sphere.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2024-12-23","alert":"Sinkholed","trigger":"block-sphere.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2024-12-23","alert":"Sinkholed","trigger":"block-sphere.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2024-12-23","alert":"Sinkholed","trigger":"block-sphere.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2024-12-23","alert":"Sinkholed","trigger":"block-sphere.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2024-12-23","alert":"Sinkholed","trigger":"block-sphere.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2024-12-23","alert":"Sinkholed","trigger":"block-sphere.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2024-12-23","alert":"Sinkholed","trigger":"block-sphere.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2024-12-23","alert":"Sinkholed","trigger":"block-sphere.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2024-12-23","alert":"Sinkholed","trigger":"block-sphere.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2024-12-23","alert":"Sinkholed","trigger":"block-sphere.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2024-12-23","alert":"Sinkholed","trigger":"block-sphere.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2024-12-23","alert":"Sinkholed","trigger":"block-sphere.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2024-12-23","alert":"Sinkholed","trigger":"api","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2024-12-23","alert":"Sinkholed","trigger":"block-sphere.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2024-12-23","alert":"Sinkholed","trigger":"block-sphere.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}]},{"sensor_name":"threatfox","type":"url","description":"ThreatFox","link":"","alerts":null}],"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"be.block-sphere.com/app/static/tradeview/datafeeds/udf/dist/bundle.js","fqdn":"be.block-sphere.com","domain":"block-sphere.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"fd3251e228d9edda60ce01ccb3046f77","sha1":"acea866435eea9c7a0564dd82435bab93c22a9db","sha256":"f016a5c57c09504aea2cca849831255353ad7e56e008fd49a45a23b114b1247d","sha512":"07db2933537e3a704befe64479130db26145597802b80cc9f9c3dcc437aff0823e896626240801ac121e06c25ec986b42580c7d240f900b160646d29c99429ad","ssdeep":"384:kpe0jAoNzmAHgWH4NRZsPA4iCA2PHDJMW:oBiWH4jZsDPA2PHyW","tlshash":"9452a6c97611312182936472e87f380ba139b515688a903c71c8e9de6efdb5dea17f3c","size":13539,"data":"","first_seen":"2023-03-07T14:46:31Z","last_seen":"2026-07-29T21:55:32.199307Z","times_seen":348,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"plugin-code.salesmartly.com/chat/widget/code/js/chunk-common.b9178a68.js","fqdn":"plugin-code.salesmartly.com","domain":"salesmartly.com","tld":"com"},"ip":{"addr":"3.164.240.26","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"d103c3ee6afaf5f3a765196e877e3ec9","sha1":"0ca20bc922c40c6b98591b9826f28221e230ac73","sha256":"8f9ce2207d7b7ac3a34de0aea783e87e45706e61b06d16e84efa70f968fba309","sha512":"02bfb852b52974c712c07e738acdc6883f1c1b8f2b40da91206078649c9ba36ae7a913a19003b522fb1310139fc4f07062a3834ead42a75d35916434b1fb53aa","ssdeep":"192:FjwivCwQIxiXX2fWt7EUBf7XNtQj0zT13vxbBEbcLjpoNzhhROd1d4JUYwrMaG/7:FjpNA3EURN2jGT13vJpgdyo8X+C3JtA","tlshash":"d99209ccb0d7f0450a5630a8c1af214be23a3c94b84e9552da66e0e67c3455eb277f8f","size":20351,"data":"","first_seen":"2024-12-20T00:08:14.914973Z","last_seen":"2024-12-24T02:33:38.663011Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"plugin-code.salesmartly.com/chat/widget/code/js/plugin.4c24afa6.js","fqdn":"plugin-code.salesmartly.com","domain":"salesmartly.com","tld":"com"},"ip":{"addr":"3.164.240.26","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"7f75b61bfce5d96440340ca57aa449cc","sha1":"bb05d30ae1ec0b6010905132b0afe106909538f1","sha256":"515b02abfd299b8ba2f8004673f4e7b7d8e75319a9a75f8a31fda29e773f1ca9","sha512":"00dd50254d58f870c03c834331cf0991fe751f0fca47871502c7fdfb47b56921ac2c5ecc7b649b6f35ea4e13745b28072cc9a4992388eed870e99b103c52bb6c","ssdeep":"3072:6w1JmCw4Sm5TYD2dbOakbXkFaG3HXiRZdVXdNb:GmZS0VkbHcHyl/R","tlshash":"5c646c49b185f86a07b361b2607b7004b37a2b0ce409e8a0f639e1f65fb4d596363f5d","size":323898,"data":"","first_seen":"2024-12-20T00:08:14.98527Z","last_seen":"2024-12-24T02:33:38.685504Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"plugin-code.salesmartly.com/js/project_196479_202843_1734151654.js","fqdn":"plugin-code.salesmartly.com","domain":"salesmartly.com","tld":"com"},"ip":{"addr":"3.164.240.26","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"114c6532f469962df303887e991a1b60","sha1":"8d04409985f8872bf6550cb0c691a75927c868c3","sha256":"b732587f6007ee8c03fb01b698ee0775b14172e24ef8ec4f9eb3aa7f22db3221","sha512":"a1be18152fbfe29974106d48856bb527f7d83368572cef3a4604b9eb021ead19dbb1809280c15282e158ba643ffe7f8cd275da18c274dec69dad75d8b3727814","ssdeep":"","tlshash":"6321cc471c2264797ed57b7b8bbb88b93989724070208810bc4dd46b27d49a50d6ede8","size":1183,"data":"","first_seen":"2024-12-23T04:14:32.69786Z","last_seen":"2025-09-28T05:40:03.132867Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"be.block-sphere.com/app/static/tradeview/datafeeds/udf/dist/polyfills.js","fqdn":"be.block-sphere.com","domain":"block-sphere.com","tld":"com"},"ip":{"addr":"172.67.161.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"a24c8424ecaa94595878ee39970c7b46","sha1":"651ecfd5fa247c45b1138bdb2629399882c50384","sha256":"67396f17c514b90f31cbe905241e290c820130be7f55edc770ce81587d37040e","sha512":"6a09a1c41bb241c93b864eda4c57ac14bf91c2b0d0a5323f03d24c31ba266c53af6b9b15580a914aebfca0c825ec6e19cc73e352398fde352c188c604addfe39","ssdeep":"192:8OC5bgmgmNL7m4rZUJYuxVujgU23Fq1O5UPQ0o/42p4UlD0pR8PKR1:XGeURrZi381Yw2yUlD0pRki1","tlshash":"2f126789f7e4f062039360b4917f580fb2b53855689e41b8f260d8eaacbd45c9627f7c","size":9647,"data":"","first_seen":"2023-03-07T14:46:31Z","last_seen":"2026-07-29T21:55:32.201435Z","times_seen":303,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"be.block-sphere.com/app/","fqdn":"be.block-sphere.com","domain":"block-sphere.com","tld":"com"},"ip":{"addr":"172.67.161.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"a017658a8dfa37fdd4d62c7d95af0506","sha1":"f08d0c7955817346fc37d64cf2e9b51ec9cbe542","sha256":"85bcd451d5b38a0936f25839157448f16a12ca7c1cf9147e921fe56300f00f77","sha512":"216e881562bb39d0892460e734a843659e7406ca3aed81b3b8cc9c7d99060368d29f7ad5b684fee7d5543503438633a2cd3543d0f3f7726dba5a6b3905ea8b61","ssdeep":"","tlshash":"faf02b1136f45871c470f4759e0a567919733f1d10777314385c438f63b3a15e188abe","size":562,"data":"","first_seen":"2024-09-19T22:14:59.590281Z","last_seen":"2024-12-23T04:14:32.701226Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"plugin-code.salesmartly.com/chat/widget/code/install.js","fqdn":"plugin-code.salesmartly.com","domain":"salesmartly.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"3c4d0a64fac346bdf3e881651ac2a327","sha1":"7f3e9d1bc5fbd409882c61dbbc87b2351cff4647","sha256":"28850c45bd016ec97627609272b283dfb3ca679007be0952436257704939d731","sha512":"b7f11ab6bb8b77776325e1480f417d435bab5a848c986dc8e98273c42f4bfef6fbf8f4b4d5ce1a89671b813f3d1a8e32a2950cdf3c985f7a8216dcb081bd101e","ssdeep":"384:K6z8IzqafPrIeLqODTlyTuNTE0RYyA/j0yxTyK8G8n4cb58hEx:Kg8ILVxyqNTVBurYn4cb5R","tlshash":"0e923b48312939b8435f56231dfab224707e1b842961d460b26dcb797b7cd865137ebc","size":19674,"data":"","first_seen":"2024-12-20T00:08:14.884703Z","last_seen":"2024-12-24T02:33:38.673814Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"plugin-code.salesmartly.com/chat/widget/code/js/chunk-vendors.08c7616e.js","fqdn":"plugin-code.salesmartly.com","domain":"salesmartly.com","tld":"com"},"ip":{"addr":"3.164.240.26","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"9a9a9eae4b195c01cfc1d939510bd04d","sha1":"d3ef6704f295c0fd6573f225db3f4db5e5f03caf","sha256":"90b6bbdd1be336517d3c777cfab49b2db1c805bb6869abfa9f844a9b270f213c","sha512":"9b0e9e498ac9434f2272b032e1d4445d6699eef91edd5a018edd66c53a2f55c055cec3f846a2d07a8c1aff2238bf9a1f8e2b6e050c6a71dcd4f88879c62259bf","ssdeep":"3072:n5cH+r4Cm4Daz/Zh1TXqt4QJdtVg+skriP3+E:nHab5T4btakrix","tlshash":"4214e8cdbb91f0a843a335a0806f510bb17b6a28f44e81d4e666d1d1ac7898f5277f3d","size":198991,"data":"","first_seen":"2024-12-15T08:35:27.644111Z","last_seen":"2025-01-13T21:47:23.728711Z","times_seen":30,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"plugin-code.salesmartly.com/chat/widget/code/js/vendor1_fd8e7641.js","fqdn":"plugin-code.salesmartly.com","domain":"salesmartly.com","tld":"com"},"ip":{"addr":"3.164.240.26","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"60e1c24467fa188514dac84a52cca417","sha1":"66166a881110b99728a8700ed246b0583758d9d9","sha256":"d13fa59865cd9ce916e46cae3593eeb17c011b5dd2880ca6a65846c2d4e5a9e2","sha512":"f5e56112407d6f63ff6dd872913d534a0e0d7b9081cfca3f9c394c32a9e67181c9d65bae95f2cfaec36bd874c5144ff6d78ed98b206eafd15e07431f29ebb43f","ssdeep":"3072:jUjNXUj64nf/eTO00ceCK7KtcE7tyzk8Pgzlgqx7rlnJ:42jBHCK7gj7t81S7/","tlshash":"222408c8b295b46143a760b4407f510bf13ab915680ec5a4f226f8da7cbc98e907bf7d","size":225259,"data":"","first_seen":"2023-09-17T14:42:29Z","last_seen":"2025-11-23T11:18:42.760058Z","times_seen":312,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"be.block-sphere.com/app/js/chunk-vendors.f400527f.js","fqdn":"be.block-sphere.com","domain":"block-sphere.com","tld":"com"},"ip":{"addr":"172.67.161.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"b10d468a4949e2c924d2996767f0e32f","sha1":"39bd47d8988e0b7f5486a49545d14ffaf4a2f760","sha256":"05782ee0c8fdff3f8fd7e83a1f35c0505f77ddb62be465f193061c64d1f8509c","sha512":"029bdc220d337baeb59e8991a9e94314f9542b653eb34c268e7d7e911983136438278740913b7647c853245d8d5ae95cdd0c1f6c0d3e86eed7d73140b8302a6a","ssdeep":"49152:B4bZ57MbxoGkEk12XsUH24T74z54tTK+gY0/pFB/xS3zj/X1:O1NUHfpopnkDjv1","tlshash":"9aa53a9d73c4b06643e321b5507f240ba3372958680ac458ba75d8daacbd95e233bf7c","size":2089238,"data":"","first_seen":"2023-05-21T12:40:28Z","last_seen":"2024-12-23T04:14:32.707799Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"be.block-sphere.com/app/jquery.js","fqdn":"be.block-sphere.com","domain":"block-sphere.com","tld":"com"},"ip":{"addr":"172.67.161.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"3b01a0f793e8811780858bb6919154ee","sha1":"65b42f5118627b51ea31bf2df017d443315b30f7","sha256":"94fb7ad5f871626cf431588ccda297d2d6cb9aca466de0bd902d4d15a120d100","sha512":"ded23391216b2cb519656e436a4f6b09393a83dde75453a02c6cc221f92363ca1d256482458049b24ac193d971452655d2c8581c61ddf57b18f2e70473272b22","ssdeep":"1536:NP10iSi65U/dXXeyhzeBuG+HYE0mdkuJO1z6Oy4sh3J1A72BjmN7TwpDKba98HrJ:o+414Jiz6fh6lTqya98HrJ","tlshash":"4d83d6d9b2c67062977734b851bf510bb17a98dab40c8c60f0a4d8e47eb4a8d517bf2c","size":84338,"data":"","first_seen":"2023-03-07T14:46:31Z","last_seen":"2026-07-29T21:55:32.217172Z","times_seen":242,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"be.block-sphere.com/app/clipboard.min.js","fqdn":"be.block-sphere.com","domain":"block-sphere.com","tld":"com"},"ip":{"addr":"172.67.161.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"1e3e33c5ac117cd77c61dd7f3c8e8a69","sha1":"1f8030e484c4630bdd20017c8a646e138aa24980","sha256":"03a7ffe45e4bea53a73bb08b4ffe77f612aef32fdc0bb44d73f0e94195ce20e2","sha512":"79ca0f59bf25ebceecf25d6d2318c8998392405eb83aab615b1a381a6c7c687214ad995fe43b6e1921dce509ad6454d5a9d707a963bb5b4b7ed27bc3eb9cfed6","ssdeep":"192:80i1RWTek1XVTkAkI/qHnHZ4Ly98Dom53C5GU7oKZoQhoslw/3JAQZu5CpVHa4L1:NivWTeBI/vCc3kHiQ7l83JJu54z9f","tlshash":"d532a64cb28071b196db60ae802f424fb270942570ae90d4b63ae8f16d7ceed5567f3c","size":11023,"data":"","first_seen":"2023-04-05T13:46:29Z","last_seen":"2026-07-29T21:55:32.198434Z","times_seen":141,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"be.block-sphere.com/app/layer/layer.js","fqdn":"be.block-sphere.com","domain":"block-sphere.com","tld":"com"},"ip":{"addr":"172.67.161.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"d0c975e34297f3e44e99c9d83555ffc1","sha1":"7e465bd79e65428cf07e5991196cff512ce44a4b","sha256":"691aad750624d84b17f2fbb73a4982860edd18837f3000c5b660ac82bf408e82","sha512":"1d9dcd7e1afe695e5716ea55f9a5a3e3aa45852722b4e1a2653ebd3f3a85c8b7a34b15264751f5ee26ea56ee49c8683a00d771197d8b32d9ea53d842d6db3b79","ssdeep":"384:41xCih92A3igrLXSt/SdMrXqE6tGLxzAOTElH0jjhtjfs8:41EiV3i+WtXItqF13k8","tlshash":"56a2b66a754034976323906ad11fba0b31f21d24d7078128f22bb4ae1dbcd95a2b7f5f","size":22104,"data":"","first_seen":"2023-04-05T06:05:22Z","last_seen":"2026-08-01T23:04:39.993216Z","times_seen":6100,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"be.block-sphere.com/app/static/tradeview/charting_library/charting_library.min.js","fqdn":"be.block-sphere.com","domain":"block-sphere.com","tld":"com"},"ip":{"addr":"172.67.161.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"c8cd63cddf0ab72e873d68a2d68ca336","sha1":"2d0b483c39ea41187d9fcb8200bb2819525dbd3b","sha256":"6571ad1a4bb68aacbd4c3a78fc0c26f9c1f1bb34a92164ea3fac2b4532acf88e","sha512":"f3956ab3268f27911de0789fa0858de98e26bcd2736544a6694a225aa61ab5b8ceff26774af62bad71294531d75e4faa198f44ee85a5731ffb26480940f4144d","ssdeep":"192:S4DF7XcEbRi1H0FEKyhWbviztF89xo/g81Qit+0idiiV8M5MSBj5JCWotPSXmYRB:fhoEbizXAoINoWoxSXmBEU3OHQI","tlshash":"18320054df6c2c3205c720fc8d7f288f513de276e895449e388491dc59ed44bbaaba39","size":11663,"data":"","first_seen":"2023-03-07T14:46:31Z","last_seen":"2026-07-29T21:55:32.200411Z","times_seen":261,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"at.alicdn.com/t/font_2302506_w05z3emunp.js","fqdn":"at.alicdn.com","domain":"alicdn.com","tld":"com"},"ip":{"addr":"47.246.44.249","port":443,"asn":24429,"as":"Zhejiang Taobao Network Co.,Ltd","country":"Sweden","country_code":"SE"},"introduction_type":"scriptElement","is_inline":false,"md5":"ba06a70435b4f1c32cedd7ac37243aef","sha1":"d3e80efd23a5db7c9a850f198e9b0666ebb9d1f7","sha256":"13b4a03145b92e09d39ff35b0df6592567a9a1e67526521ef09833637e6cbb9b","sha512":"1522691e752567e9f6f8f336f0444d25004598bac59bdae09bf6825d00ecf0dec980a91838b3f1b94d1bcc2d654977cb18b6f5073eff5460241426de2714f429","ssdeep":"3072:V2L6CAhxHXW4JowHa0rk2AbxuLloWvD4Lnr3zoeqW:/rkQD4Lnr3zoeqW","tlshash":"8854d7e5e36892fc5c0e43ddae39b474360f10fe35d1ce688168ce60a653ad9d94dc8a","size":290139,"data":"","first_seen":"2023-03-07T15:53:09Z","last_seen":"2026-05-24T23:21:11.14066Z","times_seen":99,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"be.block-sphere.com/app/js/app.ed7b0a03.js?v=1","fqdn":"be.block-sphere.com","domain":"block-sphere.com","tld":"com"},"ip":{"addr":"172.67.161.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"794e05b6a63ef440dd941628b1c6a3d2","sha1":"e7d3b939ac563ccff0045a13d96c51bed66ea47f","sha256":"c11be053bb3433a1b827d8db236b6434e95d858068115cc6c5a6a2f38041c38b","sha512":"9e15e07908b677ef7e3ec520571ba47b75ade6f566b5210fd1af494ca8197141e39d0aa3adb4dffe9b955b642e5a9f557214d37b08987182b6c869ebc68c6385","ssdeep":"12288:mn6AG7qbabudBw++6sDgdpxR1jPUPqDa9xQVLGNZOvvkeUhVFEVjtVlSMM:m6AG7qbabudBw++6sD6jPUsZVYMM","tlshash":"4485c40e95b924208593f178593f1946b235519f8e997c283f9c82982f1d43fa2f6bfc","size":1834043,"data":"","first_seen":"2024-12-23T04:14:32.713676Z","last_seen":"2024-12-23T04:14:32.713676Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"client.salesmartly.com/setting/sounds/ling.mp3","fqdn":"client.salesmartly.com","domain":"salesmartly.com","tld":"com"},"ip":{"addr":"143.204.55.46","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://be.block-sphere.com/app/","date":"2024-12-23T04:14:01.198Z","timestamp":1734927241198,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.salesmartly.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M02","organization":"Amazon"},"validity":{"start":"Tue, 21 May 2024 00:00:00 GMT","end":"Thu, 19 Jun 2025 23:59:59 GMT"},"fingerprint":{"sha1":"E3:F1:80:75:0D:19:F2:CB:7A:D6:61:69:BD:7B:62:4C:CB:27:2E:F1","sha256":"77:92:D1:6C:BB:B2:F8:17:08:A4:2A:83:96:42:FD:9A:DA:66:97:81:DF:14:1F:3C:50:9C:D7:F7:8E:F7:F1:CD"}}},"request":{"raw":"GET /setting/sounds/ling.mp3 HTTP/1.1\r\nHost: client.salesmartly.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: audio/webm,audio/ogg,audio/wav,audio/*;q=0.9,application/ogg;q=0.7,video/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://be.block-sphere.com/\r\nSec-Fetch-Dest: audio\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 206 Partial Content\r\ncontent-type: audio/mp3\r\ncontent-length: 47223\r\ndate: Wed, 11 Dec 2024 03:36:14 GMT\r\nlast-modified: Tue, 02 Jul 2024 06:29:42 GMT\r\netag: \"1065fe976ff9e98d69772fe0f0d7b808\"\r\nx-amz-server-side-encryption: AES256\r\ncache-control: public, max-age=15552000\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\ncontent-range: bytes 0-47222/47223\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 095562e8748e634f880ee3c4ada2b6d0.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-C1\r\nx-amz-cf-id: rteLVr_vDKgkvXkU2A2DJuQ9ULcWl9hDzRZea0k34XJTlbvcjV4Lfw==\r\nage: 1039068\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":null,"data":{"size":47223,"size_decoded":47223,"mime_type":"audio/mpeg","magic":"Audio file with ID3 version 2.3.0, contains: MPEG ADTS, layer III, v1, 192 kbps, 48 kHz, JntStereo","md5":"1065fe976ff9e98d69772fe0f0d7b808","sha1":"122193fafe8453db01635cf4502524eb93264fdc","sha256":"35fbb2ad61551e3a396591657a66b563222454418238c46005b89418556f9983","sha512":"7d0de1b98c66aaa939f56253d100f5efc36128c2b8420fc8c932f68873a643a1179411a9410125aa3ff5512f74dad1209f2e19c5a0734d4582c5b94280e242a7","ssdeep":"384:ju+iqqxhBRBJ2zjBQRB57Nsyf+/C6ufaPkm5NyxGo5Vtll9rFd1ft7FDehm:junhJdlac","tlshash":"00239434b6a108d0e14eaaffb0deb2121e771ec3cd56a84075ef78044fb1179255b8b6","first_seen":"2023-04-19T11:38:49Z","last_seen":"2026-08-02T06:20:46.704689Z","times_seen":3286,"resource_available":false,"data":null}},"time_used":113,"timings":{"blocked":54,"dns":43,"connect":1,"send":0,"wait":2,"receive":3,"ssl":8},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"at.alicdn.com/t/font_2302506_w05z3emunp.woff2?t=1632045325543","fqdn":"at.alicdn.com","domain":"alicdn.com","tld":"com"},"ip":{"addr":"47.246.44.249","port":443,"asn":24429,"as":"Zhejiang Taobao Network Co.,Ltd","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://be.block-sphere.com/app/","date":"2024-12-23T04:14:02.298Z","timestamp":1734927242298,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tbcdn.cn","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign Organization Validation CA - SHA256 - G3","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 19 Jun 2024 09:06:02 GMT","end":"Mon, 21 Jul 2025 09:06:01 GMT"},"fingerprint":{"sha1":"C8:28:74:DB:88:66:17:4F:5C:A5:AB:AD:F0:E1:14:74:AC:F8:FE:8F","sha256":"1F:79:7E:2E:52:1A:9D:9B:55:77:E6:DC:04:AA:1A:2B:D5:77:17:ED:E8:ED:AB:C3:F1:24:B4:CD:94:41:73:F8"}}},"request":{"raw":"GET /t/font_2302506_w05z3emunp.woff2?t=1632045325543 HTTP/1.1\r\nHost: at.alicdn.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://be.block-sphere.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://at.alicdn.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: Tengine\r\ncontent-type: font/woff2\r\ncontent-length: 34020\r\ndate: Sun, 15 Dec 2024 04:57:33 GMT\r\nx-oss-request-id: 675E61BDE84D243939088668\r\nvary: Origin\r\naccept-ranges: bytes\r\netag: \"72AE35B867791ADD2D9DA63BB2E1BBA7\"\r\nlast-modified: Fri, 24 Dec 2021 21:20:51 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 16850512027716292912\r\nx-oss-storage-class: Standard\r\ncache-control: max-age=63072000\r\ncontent-md5: cq41uGd5Gt0tnaY7suG7pw==\r\nx-oss-server-time: 24\r\nvia: ens-cache17.l2de3[0,14,200-0,H], ens-cache16.l2de3[16,0], ens-cache3.se2[0,0,200-0,H], ens-cache12.se2[2,0]\r\nage: 688589\r\nali-swift-global-savetime: 1734238653\r\nx-cache: HIT TCP_HIT dirn:10:287874133\r\nx-swift-savetime: Sat, 21 Dec 2024 15:06:34 GMT\r\nx-swift-cachetime: 30549059\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\neagleid: 2ff62ca017349272422582584e\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":34020,"size_decoded":34020,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 34020, version 1.0","md5":"72ae35b867791add2d9da63bb2e1bba7","sha1":"93db894e58001410bfe97d12060b082eae995f91","sha256":"38aa9c2d576288ff46540dadd2d9f094b690c8274a76c712d20c0f4f9a8ea065","sha512":"b3efaa3aa196e9d1601c3cc77f18c0b14cfa5e278c1e397e90258a1f6bb88fd6c911b301dcd1f628c42cbafdc4dab20190fbd91222db65aa375b1e45ced53758","ssdeep":"768:cZacU/UN7AhGew4trDckmIn2BCu/fKEUnEls1YcwPVNaqGaPvI:cZVqm7tEVoN7SITTPVND/PvI","tlshash":"ffe2f16f560257ffc52043a8e727053cc714cb72e76ef6e4a2706dae29106c1cc6992b","first_seen":"2023-05-26T22:25:45Z","last_seen":"2026-03-23T09:33:35.777835Z","times_seen":57,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":10,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"plugin-code.salesmartly.com/chat/widget/code/css/chunk-common.b9acec5e.css","fqdn":"plugin-code.salesmartly.com","domain":"salesmartly.com","tld":"com"},"ip":{"addr":"3.164.240.26","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://be.block-sphere.com/app/","date":"2024-12-23T04:14:01.219Z","timestamp":1734927241219,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.salesmartly.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M02","organization":"Amazon"},"validity":{"start":"Tue, 21 May 2024 00:00:00 GMT","end":"Thu, 19 Jun 2025 23:59:59 GMT"},"fingerprint":{"sha1":"E3:F1:80:75:0D:19:F2:CB:7A:D6:61:69:BD:7B:62:4C:CB:27:2E:F1","sha256":"77:92:D1:6C:BB:B2:F8:17:08:A4:2A:83:96:42:FD:9A:DA:66:97:81:DF:14:1F:3C:50:9C:D7:F7:8E:F7:F1:CD"}}},"request":{"raw":"GET /chat/widget/code/css/chunk-common.b9acec5e.css HTTP/1.1\r\nHost: plugin-code.salesmartly.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css\r\nserver: AliyunOSS\r\ndate: Tue, 17 Dec 2024 08:22:25 GMT\r\nx-oss-request-id: 676134C1E7A3CA3537351AC4\r\nlast-modified: Tue, 17 Dec 2024 08:10:32 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 1484439385920302557\r\nx-oss-storage-class: Standard\r\ncache-control: public, max-age=15552000\r\ncontent-md5: FvDqdLuxir0iVX1tt0Stww==\r\nx-oss-server-time: 5\r\ncontent-encoding: gzip\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 cfc62e0b84c9c493a10eb6aef6aad512.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P2\r\nx-amz-cf-id: 26k75qo9opbEVHhI3s_v21e9xiWi4sSYzNvFITBiFv5nX7do1Ole5A==\r\nage: 503496\r\nvary: Accept-Encoding,Origin, Origin\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":97010,"size_decoded":97010,"mime_type":"text/css","magic":"gzip compressed data, from Unix","md5":"198ca225338c5f01485704c3bd85a7b3","sha1":"7a29417ed5af7d499fd7fef533acd26ed7a04bb3","sha256":"a846a7459f9685539cf9c78c507d6ecaedcb5182c4595fe46f25021420f69dc1","sha512":"990c331015bc169d5c22f5209231f6100f44239396028a8ad99ad48014e5b5fb98ece57ea694722ef58659f1d1aab62e32812684d50e3f9ccc45e79a7ead5e07","ssdeep":"1536:Oqr0HD7CXt50F/74JMlLG6uwTopsJz7KfhwiTNpOvjpLfGSLBFq45LWpTOHAUBgw:xrBbi7PdUwGRhw0NiLf7LBFqCW4gAB","tlshash":"1093129cf8f43a2066f5c0c5caedcd66453c99df021e0609ba8b3de676c1ea11b53798","first_seen":"2024-12-23T04:14:32.594301Z","last_seen":"2024-12-23T04:14:32.594301Z","times_seen":1,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"be.block-sphere.com/api/custorm?_timespan=1734927242331","fqdn":"be.block-sphere.com","domain":"block-sphere.com","tld":"com"},"ip":{"addr":"172.67.161.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://be.block-sphere.com/app/","date":"2024-12-23T04:14:02.382Z","timestamp":1734927242382,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"block-sphere.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Dec 2024 11:23:11 GMT","end":"Mon, 10 Mar 2025 11:23:10 GMT"},"fingerprint":{"sha1":"DB:47:40:41:42:B8:EE:3F:CB:6B:C3:8D:CF:39:4B:AA:3C:B9:80:2B","sha256":"5D:17:11:73:BB:8D:C3:26:BF:A4:44:01:74:42:15:54:EC:6B:F2:39:28:8A:FC:BC:4D:CF:29:13:B5:86:CA:28"}}},"request":{"raw":"GET /api/custorm?_timespan=1734927242331 HTTP/1.1\r\nHost: be.block-sphere.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nlang: en\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://be.block-sphere.com/app/\r\nCookie: angela_session=eyJpdiI6InNHUE9uR3gzb1ZXdWlxTCt5cXptbWc9PSIsInZhbHVlIjoiZVAzQ0RkRGV4N3Nnc1FhRnRCK2hZRmt0UGJydDRxd0N0bUtYcmtoY09tZUNMRGhIZkEzVUVoTUxPdEIyOUFlZVd1VCsxYjdRUEVXY2hMWENwQVVnOUNHM3VUTGpkdUJWWUQrSXllZVQzaTdiY1Jud0pYSEZkeEh3S2t1WlFPajEiLCJtYWMiOiIzYmZjZjI5YTNjZmVjMjUxMzZkOGE0MjJlNWFjNTk1NDc0OTYzYWY1NjNiM2FmMDQwNWQ0NWM2Yzg3MWFmZGJjIn0%3D; lang=en\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 23 Dec 2024 04:14:02 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nvary: Accept-Encoding\r\ncache-control: no-cache, private\r\nset-cookie: angela_session=eyJpdiI6IkJBM1VvQUxNK0FINzArUDc1WlgxNFE9PSIsInZhbHVlIjoid2VvcitBY1A2TmhrZUhLamZiTzFsa25FK25vSHE4OE5YaGxrMmMrYW1IcUtoOHAzbUcxSXQ0Tm15SWp4Q0dnYnF5RXhGdUZIXC9qaUtvT0FEMDd0TmthK3NoamNkUDNYbGdBVnJlYm5JNmdIT1pHOEpQZUwxbm8xOUhranhJMW9ZIiwibWFjIjoiM2M2ODM3N2VkN2M0ZDc3NWYxMDlkZjljYzU3ZjYwNjQxNmQ1M2FiMWMyNWIwOTBiNzU3NzYyZTRhNGFjNzZiMCJ9; expires=Mon, 23-Dec-2024 06:13:57 GMT; Max-Age=7200; path=/; httponly\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=%2Fyio8SmWzflWh%2BAzXEr3aCacOTv%2BITL0kYxFoGpKAsTNBLiQkhLgAvHdtalFs5k%2FeeDQv061eGOLt0LNtJX9Srq76jhB9rsSlI57k64mkxZnZ8h20tvxVlksdZIypnQQN4aXcOeL\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 8f6585c0c81d56c5-OSL\r\ncontent-encoding: br\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=1419\u0026min_rtt=622\u0026rtt_var=683\u0026sent=1200\u0026recv=96\u0026lost=0\u0026retrans=0\u0026sent_bytes=1381504\u0026recv_bytes=21984\u0026delivery_rate=236906\u0026cwnd=160500\u0026unsent_bytes=0\u0026cid=57058721e9bee6fd\u0026ts=3125\u0026x=1\", cfExtPri, cfHdrFlush;dur=0\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":30962,"size_decoded":30962,"mime_type":"text/html; charset=UTF-8","magic":"data","md5":"fe816349dfe3fe13f775b60be2115935","sha1":"7b13709638c7692a98a7279cbaada207d86dbd8f","sha256":"2a31f4a05819e035166b0699238432a19fe942743bbd1cac262795a18073bde9","sha512":"cb5bb9bf3409f66635afd7cd8f2ad5192d317ca4f14dd5afc4e05797a354e41d1adf8a8639a780b5485b12982598fcbb95d36f64c130e2a3c9cfbe388aa69214","ssdeep":"768:hwvtDMU/+Nfq39kijFxCqix71zll4bgH/:/lV","tlshash":"8cd2b00d576649f4d9b472c0a8d27adc24aa274768c34ac9d39cee8c83cc7a6f305d67","first_seen":"2024-12-23T04:14:32.597285Z","last_seen":"2024-12-23T04:14:32.597285Z","times_seen":1,"resource_available":false,"data":null}},"time_used":226,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":226,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2024-12-23","alert":"Sinkholed","trigger":"block-sphere.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.salesmartly.com/sys/company/plugin/get-plugin-info?plugin_sign=b392cbb61b00c953b8712b7437a7146d\u0026plugin_id=gglw39\u0026over_time=\u0026env=chat\u0026_=1734927241444\u0026_lt=\u0026_u=","fqdn":"api.salesmartly.com","domain":"salesmartly.com","tld":"com"},"ip":{"addr":"3.164.240.80","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://be.block-sphere.com/app/","date":"2024-12-23T04:14:01.460Z","timestamp":1734927241460,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.salesmartly.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M02","organization":"Amazon"},"validity":{"start":"Mon, 02 Sep 2024 00:00:00 GMT","end":"Thu, 02 Oct 2025 23:59:59 GMT"},"fingerprint":{"sha1":"CB:87:D2:92:FE:AD:D2:26:C4:24:86:B5:6B:BE:B2:2B:5B:3A:B2:2F","sha256":"A5:9D:EB:CC:A0:AA:65:42:29:CB:43:8A:46:29:01:F1:6E:55:12:D8:F8:FD:DB:5A:89:78:9D:8F:61:18:AE:12"}}},"request":{"raw":"GET /sys/company/plugin/get-plugin-info?plugin_sign=b392cbb61b00c953b8712b7437a7146d\u0026plugin_id=gglw39\u0026over_time=\u0026env=chat\u0026_=1734927241444\u0026_lt=\u0026_u= HTTP/1.1\r\nHost: api.salesmartly.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://be.block-sphere.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://be.block-sphere.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/json; charset=UTF-8\r\ndate: Mon, 23 Dec 2024 04:14:01 GMT\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 86400\r\nx-powered-by: PHP/7.2.34\r\naccess-control-allow-origin: https://be.block-sphere.com\r\naccess-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept, Cpl, Agent-Cpl, Send-Cpl, Client-Type, Share-Access-Token, External-Token\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 d5ffe4a44770755efd4aa2fc68579118.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P2\r\nx-amz-cf-id: 8_gXaHhZA0gqzQE4vOI4zZKUtq0fqI-DfcjdZikrGekNFl4OQMVCIQ==\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":10937,"size_decoded":10937,"mime_type":"application/json; charset=UTF-8","magic":"data","md5":"191b2e81f852cb2087ff5ae176b8a2d2","sha1":"539e3dafbe12643316c1cc8da1127a3558ee406b","sha256":"cb58c21e3b748a0a398ece4135fcc3d318b610fd420d98f0603d65d59b82a423","sha512":"240ace40f660add1956e14247442c0e4e996137aa2af5b9b24a0bedea332e91c292c8ec51e457025e25a9fdbf9b957ee0afbe44ee72bcf113ec2164c3e531572","ssdeep":"192:gdZ3brtnRGnUtUL4iTmhm9VDdsC2mtjrCUFoHwR2AUPf0YZNvZs7eKZsrU:gP3bqBPH5sKtvPQwRGM2rKZ6U","tlshash":"ea328d7891678b67f6d7917c01ee5c21584f47b046a8ce08cf9cee1a96ec4e2d74281f","first_seen":"2024-12-23T04:14:32.600257Z","last_seen":"2024-12-23T04:14:32.600257Z","times_seen":1,"resource_available":false,"data":null}},"time_used":468,"timings":{"blocked":72,"dns":49,"connect":8,"send":0,"wait":323,"receive":0,"ssl":13},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"be.block-sphere.com/wss/socket.io/?EIO=3\u0026transport=websocket\u0026sid=728632e138dad94103399360","fqdn":"be.block-sphere.com","domain":"block-sphere.com","tld":"com"},"ip":{"addr":"172.67.161.132","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2024-12-23T04:14:03.344380737Z","timestamp":1734927243344,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"block-sphere.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Dec 2024 11:23:11 GMT","end":"Mon, 10 Mar 2025 11:23:10 GMT"},"fingerprint":{"sha1":"DB:47:40:41:42:B8:EE:3F:CB:6B:C3:8D:CF:39:4B:AA:3C:B9:80:2B","sha256":"5D:17:11:73:BB:8D:C3:26:BF:A4:44:01:74:42:15:54:EC:6B:F2:39:28:8A:FC:BC:4D:CF:29:13:B5:86:CA:28"}}},"request":{"raw":"GET /wss/socket.io/?EIO=3\u0026transport=websocket\u0026sid=728632e138dad94103399360 HTTP/1.1\r\nHost: be.block-sphere.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nSec-WebSocket-Version: 13\r\nOrigin: https://be.block-sphere.com\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: v/N9f8VMV52T2DiX0TwVQQ==\r\nDNT: 1\r\nConnection: keep-alive, Upgrade\r\nCookie: angela_session=eyJpdiI6IkJWekU4SmR3SXlYdzFGVnlWQzU3cVE9PSIsInZhbHVlIjoidFZyUGFRZXdPZ0RhSjJDTWdmUEkzT3VGQnVXTFAxbElIU2JNUHJiaFlsZjQ4QkljRlpPMHl5UG1ZeTBFRmJsekw5MzdCXC9cL2d3eFwvZmlZRHRIVW9lVkpPR2JBU0R1N01wZlpIRDhEMFZDVXUzeUtPQXBBaWZwXC9vektJMjRNcnIxIiwibWFjIjoiMjU0MThlOGIzZjZhYmFiMGU3NDVjY2U2ZjY4MzhjODJhZjRmOGZmZDMyYzY3YWY3NGFlYmE0YzZhN2IwZTg4ZiJ9; lang=en\r\nSec-Fetch-Dest: websocket\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/1.1 101 Switching Protocols\r\nDate: Mon, 23 Dec 2024 04:14:03 GMT\r\nContent-Length: 0\r\nConnection: upgrade\r\nUpgrade: websocket\r\nSec-WebSocket-Version: 13\r\nSec-WebSocket-Accept: 1ROzTbk/vaBif2k3uRM4FhQzxI0=\r\ncf-cache-status: DYNAMIC\r\nReport-To: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=vABJJRz96gIbJvL05ejinkQuBPdob6GbbqpICCK0oRYNaMeEWjm6Xn8iL%2FzYdTxzjeB50EDKfYS%2Bzn0DWACErufYMiFr6DqyYKX0r%2FdN5x0cSi0xBVM7TG9gVLYYOSiNVJbr29U7\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nNEL: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nServer: cloudflare\r\nCF-RAY: 8f6585c32b1e568a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=467\u0026min_rtt=450\u0026rtt_var=124\u0026sent=5\u0026recv=8\u0026lost=0\u0026retrans=0\u0026sent_bytes=3127\u0026recv_bytes=1589\u0026delivery_rate=8242884\u0026cwnd=252\u0026unsent_bytes=0\u0026cid=b3de205b93c0b405\u0026ts=619\u0026x=0\"\r\n","headers":null,"cookies":null,"status_code":"101","status_text":"Switching Protocols","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-02T06:58:21.972859Z","times_seen":17668698,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2024-12-23","alert":"Sinkholed","trigger":"block-sphere.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"be.block-sphere.com/app/img/rocket.41edddf9.png","fqdn":"be.block-sphere.com","domain":"block-sphere.com","tld":"com"},"ip":{"addr":"172.67.161.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://be.block-sphere.com/app/","date":"2024-12-23T04:14:02.268Z","timestamp":1734927242268,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"block-sphere.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Dec 2024 11:23:11 GMT","end":"Mon, 10 Mar 2025 11:23:10 GMT"},"fingerprint":{"sha1":"DB:47:40:41:42:B8:EE:3F:CB:6B:C3:8D:CF:39:4B:AA:3C:B9:80:2B","sha256":"5D:17:11:73:BB:8D:C3:26:BF:A4:44:01:74:42:15:54:EC:6B:F2:39:28:8A:FC:BC:4D:CF:29:13:B5:86:CA:28"}}},"request":{"raw":"GET /app/img/rocket.41edddf9.png HTTP/1.1\r\nHost: be.block-sphere.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://be.block-sphere.com/app/\r\nCookie: angela_session=eyJpdiI6InNHUE9uR3gzb1ZXdWlxTCt5cXptbWc9PSIsInZhbHVlIjoiZVAzQ0RkRGV4N3Nnc1FhRnRCK2hZRmt0UGJydDRxd0N0bUtYcmtoY09tZUNMRGhIZkEzVUVoTUxPdEIyOUFlZVd1VCsxYjdRUEVXY2hMWENwQVVnOUNHM3VUTGpkdUJWWUQrSXllZVQzaTdiY1Jud0pYSEZkeEh3S2t1WlFPajEiLCJtYWMiOiIzYmZjZjI5YTNjZmVjMjUxMzZkOGE0MjJlNWFjNTk1NDc0OTYzYWY1NjNiM2FmMDQwNWQ0NWM2Yzg3MWFmZGJjIn0%3D; lang=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 23 Dec 2024 04:14:02 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 09 Nov 2021 15:48:52 GMT\r\nvary: Accept-Encoding\r\netag: W/\"618a9864-c735\"\r\nexpires: Wed, 22 Jan 2025 04:13:57 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=1cCnT8BDBhO%2BSZdgZ2KessCwJKNvT%2FSbGw2jzt8aPGXhk92ntd%2BytK4Yn7VY2Aj4kJ4Ka9fcdllTo649flKuyVFner6C9gqjmzXvEjydN1z549U9GejcDhN%2FyyA%2FHwlb3JFcUnxc\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 8f6585c02fd956c5-OSL\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=1990\u0026min_rtt=622\u0026rtt_var=1054\u0026sent=1266\u0026recv=109\u0026lost=0\u0026retrans=0\u0026sent_bytes=1447977\u0026recv_bytes=24755\u0026delivery_rate=3165985\u0026cwnd=160500\u0026unsent_bytes=0\u0026cid=57058721e9bee6fd\u0026ts=3513\u0026x=1\", cfExtPri, cfHdrFlush;dur=0\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":51035,"size_decoded":50997,"mime_type":"image/png","magic":"PNG image data, 216 x 194, 8-bit/color RGBA, non-interlaced","md5":"41edddf9cfd3e4fb707abf5c7e15c110","sha1":"f9565a41c7b4378438b53c726f57d4734cd30eb6","sha256":"b0583a8a6ac61f0ebfb19c619ca8d17fa8dfb36911a44cdaf86a2da170273a65","sha512":"b34f4e63232d05e25d155b447a1794ad81fc30fd28192639f3869707913d277999dcc018284e43dae38c3577ba60f495dcce1762d8e15222f78387c807a0b04c","ssdeep":"768:XqIdmZ3txoFu8uny64NNuodI+KmD39E8WcBDoLBS+DsPfBufRExLassUoTZcqx:Xt8xtxoFJ646Z+du8Wc23QofCxmF9Td","tlshash":"dc330293da729ccc09a39d64ee35101deea8987a4d1983d32f24d2d0fde89dd6133726","first_seen":"2023-05-21T12:40:28Z","last_seen":"2026-03-23T09:33:35.79811Z","times_seen":46,"resource_available":false,"data":null}},"time_used":880,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":718,"receive":162,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2024-12-23","alert":"Sinkholed","trigger":"block-sphere.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"be.block-sphere.com/wss/socket.io/?EIO=3\u0026transport=polling\u0026t=PFnkDTl\u0026sid=728632e138dad94103399360","fqdn":"be.block-sphere.com","domain":"block-sphere.com","tld":"com"},"ip":{"addr":"172.67.161.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://be.block-sphere.com/app/","date":"2024-12-23T04:14:03.123Z","timestamp":1734927243123,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"block-sphere.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Dec 2024 11:23:11 GMT","end":"Mon, 10 Mar 2025 11:23:10 GMT"},"fingerprint":{"sha1":"DB:47:40:41:42:B8:EE:3F:CB:6B:C3:8D:CF:39:4B:AA:3C:B9:80:2B","sha256":"5D:17:11:73:BB:8D:C3:26:BF:A4:44:01:74:42:15:54:EC:6B:F2:39:28:8A:FC:BC:4D:CF:29:13:B5:86:CA:28"}}},"request":{"raw":"GET /wss/socket.io/?EIO=3\u0026transport=polling\u0026t=PFnkDTl\u0026sid=728632e138dad94103399360 HTTP/1.1\r\nHost: be.block-sphere.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://be.block-sphere.com/app/\r\nCookie: angela_session=eyJpdiI6IlBRYmlkNFNXdnAzTnZnOWZybWR5VGc9PSIsInZhbHVlIjoidWdXOElJUTdLMnF2QUFqWkNzN0tcLzRVcG56WGx6dWU1T1RXbUhCMHZ1UEJoeWVOOWJTRmpuQnp3cEdycG1HTFRXZjhPY1NcL1oxNGc4WkVOa01GUWdNRysxSTRJNkdmZTZZaUFGaUhtdmZaTExNRzJjTTR1VDVXQ3E4eW1zSVV5ViIsIm1hYyI6ImZiNWU2MDZiZDY3NmVjMTcxODdiZWM1MTdhZGMxMTIxNGU5NWE3MDc3ZGI3Y2RiNTU1MDY3OWM4YTg4MjhlODYifQ%3D%3D; lang=en\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 23 Dec 2024 04:14:03 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 268\r\nx-xss-protection: 0\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=KpNG83adlOvHGPcjlCcdt9FcEvEro0A2bHft8%2BK83DXSORnfLB0o1PzoatYMda5xH%2FmGksHuE0nnQA6B6Yy%2FNIicYQ1KDk9xpROb90GYInNxj4ueg%2BxJLJu8mU8zcoAf62mPTbud\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 8f6585c58a7356c5-OSL\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=1235\u0026min_rtt=622\u0026rtt_var=258\u0026sent=1665\u0026recv=142\u0026lost=0\u0026retrans=0\u0026sent_bytes=1902830\u0026recv_bytes=31764\u0026delivery_rate=3467442\u0026cwnd=160500\u0026unsent_bytes=0\u0026cid=57058721e9bee6fd\u0026ts=4130\u0026x=1\", cfExtPri, cfHdrFlush;dur=0\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":268,"size_decoded":268,"mime_type":"application/octet-stream","magic":"data","md5":"5ce8084a23d809a97da6cf4820d6a266","sha1":"4f22f0def79976d4f54d9a38c3478bf75bb4a1d5","sha256":"795900eabb493fe9bdb564454d43a5327220ed57606435080e609e6f7d63acac","sha512":"aada37f919bdb7a0ec9cdbf5e5b4f1429bcaa7205cf8fd7817c599ad60822d15824416a8ca405cf3d2432f68008ce0d43035fc6fe431efef1bc47081703a32fd","ssdeep":"","tlshash":"b0d02b1d570246f0cdd0a1d0b8e079cd581903166cc24b94c3cddfcc52cc229a101c56","first_seen":"2024-12-23T04:14:32.606899Z","last_seen":"2024-12-23T04:14:32.606899Z","times_seen":1,"resource_available":false,"data":null}},"time_used":477,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":477,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2024-12-23","alert":"Sinkholed","trigger":"block-sphere.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"msg.salesmartly.com/chat/chat-auto/user/trigger?login_token=a90816c3577cf0e8d1c1dca138394671\u0026chat_user_id=101d32bd0d62135f6013876cca54e975\u0026plugin_sign=6a09294cfad91aadb48bdfcbed47b1f4\u0026plugin_id=gglw39\u0026over_time=\u0026env=chat\u0026_=1734927243181\u0026_lt=a90816c3577cf0e8d1c1dca138394671\u0026_u=","fqdn":"msg.salesmartly.com","domain":"salesmartly.com","tld":"com"},"ip":{"addr":"3.164.240.36","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://be.block-sphere.com/app/","date":"2024-12-23T04:14:03.191Z","timestamp":1734927243191,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.salesmartly.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M02","organization":"Amazon"},"validity":{"start":"Mon, 02 Sep 2024 00:00:00 GMT","end":"Thu, 02 Oct 2025 23:59:59 GMT"},"fingerprint":{"sha1":"CB:87:D2:92:FE:AD:D2:26:C4:24:86:B5:6B:BE:B2:2B:5B:3A:B2:2F","sha256":"A5:9D:EB:CC:A0:AA:65:42:29:CB:43:8A:46:29:01:F1:6E:55:12:D8:F8:FD:DB:5A:89:78:9D:8F:61:18:AE:12"}}},"request":{"raw":"POST /chat/chat-auto/user/trigger?login_token=a90816c3577cf0e8d1c1dca138394671\u0026chat_user_id=101d32bd0d62135f6013876cca54e975\u0026plugin_sign=6a09294cfad91aadb48bdfcbed47b1f4\u0026plugin_id=gglw39\u0026over_time=\u0026env=chat\u0026_=1734927243181\u0026_lt=a90816c3577cf0e8d1c1dca138394671\u0026_u= HTTP/1.1\r\nHost: msg.salesmartly.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded\r\nContent-Length: 13\r\nOrigin: https://be.block-sphere.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://be.block-sphere.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/json\r\ncontent-length: 67\r\ndate: Mon, 23 Dec 2024 04:14:03 GMT\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: https://be.block-sphere.com\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: DNT,Keep-Alive,User-Agent,Cache-Control,Content-Type,Authorization,Origin,Cpl,Client-Type,X-Requested-With,Accept,External-Sign\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 e8c2cf9d03a9665aa8b199d35cadcba8.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P2\r\nx-amz-cf-id: Vgd5MoJMsLOycYvfPKfzaxp5mPNnCbbb8KpJcwIdq36mf1RsCGRjYg==\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":67,"size_decoded":49,"mime_type":"application/json","magic":"JSON text data","md5":"78d539ac5b6a06a8bd02b3ace8debb63","sha1":"8e22651d8d1e678777cfebdb96983cf7df6e751a","sha256":"d817b79090a73b71e09ad6e2daa2c137408a7cfb7916aef50da18a1b1b0229f0","sha512":"e821cc4e11e272ac7ff31855b135a17839c3032c8d1e2a89683b7e937ac1443f8c7732821bf10fe3f120b05c9c5325e74f6b7616a478e5ff9c98ea2519e92a96","ssdeep":"","tlshash":"5390021218281c560b06a48a74091b0591d4114049141621cd8c5158870945c6582521","first_seen":"2023-05-07T20:28:16Z","last_seen":"2026-08-01T22:39:37.129292Z","times_seen":415,"resource_available":false,"data":null}},"time_used":585,"timings":{"blocked":67,"dns":42,"connect":8,"send":0,"wait":450,"receive":1,"ssl":15},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"be.block-sphere.com/wss/socket.io/?EIO=3\u0026transport=polling\u0026t=PFnkDTR\u0026sid=728632e138dad94103399360","fqdn":"be.block-sphere.com","domain":"block-sphere.com","tld":"com"},"ip":{"addr":"172.67.161.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://be.block-sphere.com/app/","date":"2024-12-23T04:14:03.105Z","timestamp":1734927243105,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"block-sphere.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Dec 2024 11:23:11 GMT","end":"Mon, 10 Mar 2025 11:23:10 GMT"},"fingerprint":{"sha1":"DB:47:40:41:42:B8:EE:3F:CB:6B:C3:8D:CF:39:4B:AA:3C:B9:80:2B","sha256":"5D:17:11:73:BB:8D:C3:26:BF:A4:44:01:74:42:15:54:EC:6B:F2:39:28:8A:FC:BC:4D:CF:29:13:B5:86:CA:28"}}},"request":{"raw":"POST /wss/socket.io/?EIO=3\u0026transport=polling\u0026t=PFnkDTR\u0026sid=728632e138dad94103399360 HTTP/1.1\r\nHost: be.block-sphere.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-type: text/plain;charset=UTF-8\r\nContent-Length: 19\r\nOrigin: https://be.block-sphere.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://be.block-sphere.com/app/\r\nCookie: angela_session=eyJpdiI6IlBRYmlkNFNXdnAzTnZnOWZybWR5VGc9PSIsInZhbHVlIjoidWdXOElJUTdLMnF2QUFqWkNzN0tcLzRVcG56WGx6dWU1T1RXbUhCMHZ1UEJoeWVOOWJTRmpuQnp3cEdycG1HTFRXZjhPY1NcL1oxNGc4WkVOa01GUWdNRysxSTRJNkdmZTZZaUFGaUhtdmZaTExNRzJjTTR1VDVXQ3E4eW1zSVV5ViIsIm1hYyI6ImZiNWU2MDZiZDY3NmVjMTcxODdiZWM1MTdhZGMxMTIxNGU5NWE3MDc3ZGI3Y2RiNTU1MDY3OWM4YTg4MjhlODYifQ%3D%3D; lang=en\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 23 Dec 2024 04:14:03 GMT\r\ncontent-type: text/html\r\nx-xss-protection: 0\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://be.block-sphere.com\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=Vy%2B8Zq5ZITEpbFfI5wmG8G4JSu60S3XI57X9hhtqkb4J4CwtRhoF2AuyXUQ9PUIIlUnRS5KVaQ7QtVHg1kW67y3bp7v9vAxhV1m8%2FaXxuB6BVbNvGVedSw%2B5pcjofhzef4bkN76d\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 8f6585c56a6456c5-OSL\r\ncontent-encoding: br\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=1593\u0026min_rtt=622\u0026rtt_var=343\u0026sent=1548\u0026recv=132\u0026lost=0\u0026retrans=0\u0026sent_bytes=1767400\u0026recv_bytes=31312\u0026delivery_rate=15152273\u0026cwnd=160500\u0026unsent_bytes=0\u0026cid=57058721e9bee6fd\u0026ts=3836\u0026x=1\", cfExtPri, cfHdrFlush;dur=0\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":88,"size_decoded":2,"mime_type":"text/html","magic":"ASCII text, with no line terminators","md5":"444bcb3a3fcf8389296c49467f27e1d6","sha1":"7a85f4764bbd6daf1c3545efbbf0f279a6dc0beb","sha256":"2689367b205c16ce32ed4200942b8b8b1e262dfc70d9bc9fbc77c49699a4f1df","sha512":"9fbbbb5a0f329f9782e2356fa41d89cf9b3694327c1a934d6af2a9df2d7f936ce83717fb513196a4ce5548471708cd7134c2ae99b3c357bcabb2eafc7b9b7570","ssdeep":"","tlshash":"c710000000000000300000000000000000000000000000000000000000000c0000c000","first_seen":"2023-03-08T02:32:37Z","last_seen":"2026-08-02T06:49:14.849753Z","times_seen":444520,"resource_available":true,"data":null}},"time_used":201,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":201,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2024-12-23","alert":"Sinkholed","trigger":"block-sphere.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"plugin-code.salesmartly.com/chat/widget/code/css/plugin.9cf0323b.css","fqdn":"plugin-code.salesmartly.com","domain":"salesmartly.com","tld":"com"},"ip":{"addr":"3.164.240.26","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://be.block-sphere.com/app/","date":"2024-12-23T04:14:01.223Z","timestamp":1734927241223,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.salesmartly.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M02","organization":"Amazon"},"validity":{"start":"Tue, 21 May 2024 00:00:00 GMT","end":"Thu, 19 Jun 2025 23:59:59 GMT"},"fingerprint":{"sha1":"E3:F1:80:75:0D:19:F2:CB:7A:D6:61:69:BD:7B:62:4C:CB:27:2E:F1","sha256":"77:92:D1:6C:BB:B2:F8:17:08:A4:2A:83:96:42:FD:9A:DA:66:97:81:DF:14:1F:3C:50:9C:D7:F7:8E:F7:F1:CD"}}},"request":{"raw":"GET /chat/widget/code/css/plugin.9cf0323b.css HTTP/1.1\r\nHost: plugin-code.salesmartly.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css\r\nserver: AliyunOSS\r\ndate: Tue, 17 Dec 2024 08:22:25 GMT\r\nx-oss-request-id: 676134C1AA0DCC333406B0CC\r\nlast-modified: Tue, 17 Dec 2024 08:10:32 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 4913113601095990692\r\nx-oss-storage-class: Standard\r\ncache-control: public, max-age=15552000\r\ncontent-md5: r6UQp595bED8PQ48AfTRPg==\r\nx-oss-server-time: 8\r\ncontent-encoding: gzip\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 cfc62e0b84c9c493a10eb6aef6aad512.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P2\r\nx-amz-cf-id: LB_hADFV6Jv1dCZr1i2gOrxlQ7YH8o4CI4muwrrQNZx_UkG2IYXB-A==\r\nage: 503496\r\nvary: Accept-Encoding,Origin, Origin\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":23653,"size_decoded":23653,"mime_type":"text/css","magic":"gzip compressed data, from Unix","md5":"6d80f7c3455e19c3c41d7a005cc551f1","sha1":"3d589ef8abe0bec12bd3e7fb38134e4eba7a96d9","sha256":"c170be7a2fef6947506d1df2b6c7cc77b13f6a41877d11e03cd8ab499aaa9ff4","sha512":"fbc693d6eb3e447fa1ec64d8844c46fffa7725a328dbfbed9a5dbf8af4e1bb5ab430cbc9e2580a2dcd2a973dbd0b7917ab1209be0331c9927a9176581c13f7b3","ssdeep":"384:T/JQvTMKGXCCOtbZvKfIYgNLESKl5YuKuGcSi8hAFDTLwJPAGiscNCKrcO8q:T/JaTtePMdKf2LEgIGcGhAa2GDKwO8q","tlshash":"bab2d049ec4ab8a4fa1e4e3ac9e236457709af8358d6a8469421d5bcc61c072165ff8c","first_seen":"2024-12-23T04:14:32.612467Z","last_seen":"2024-12-23T04:14:32.612467Z","times_seen":1,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"srz.salesmartly.com/client/station/log?plugin_sign=5cb13519a14d5806429f35ad9a681ff3\u0026plugin_id=gglw39\u0026over_time=\u0026env=chat\u0026_=1734927243685\u0026_lt=a90816c3577cf0e8d1c1dca138394671\u0026_u=d57f9bcc7625a8d6f51e1c5ce3a4b33b","fqdn":"srz.salesmartly.com","domain":"salesmartly.com","tld":"com"},"ip":{"addr":"143.204.55.57","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://be.block-sphere.com/app/","date":"2024-12-23T04:14:03.690Z","timestamp":1734927243690,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.salesmartly.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M02","organization":"Amazon"},"validity":{"start":"Mon, 02 Sep 2024 00:00:00 GMT","end":"Thu, 02 Oct 2025 23:59:59 GMT"},"fingerprint":{"sha1":"CB:87:D2:92:FE:AD:D2:26:C4:24:86:B5:6B:BE:B2:2B:5B:3A:B2:2F","sha256":"A5:9D:EB:CC:A0:AA:65:42:29:CB:43:8A:46:29:01:F1:6E:55:12:D8:F8:FD:DB:5A:89:78:9D:8F:61:18:AE:12"}}},"request":{"raw":"POST /client/station/log?plugin_sign=5cb13519a14d5806429f35ad9a681ff3\u0026plugin_id=gglw39\u0026over_time=\u0026env=chat\u0026_=1734927243685\u0026_lt=a90816c3577cf0e8d1c1dca138394671\u0026_u=d57f9bcc7625a8d6f51e1c5ce3a4b33b HTTP/1.1\r\nHost: srz.salesmartly.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded\r\nContent-Length: 455\r\nOrigin: https://be.block-sphere.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://be.block-sphere.com/\r\nCookie: ss_uid=d57f9bcc7625a8d6f51e1c5ce3a4b33b\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/json; charset=UTF-8\r\ndate: Mon, 23 Dec 2024 04:14:04 GMT\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 86400\r\nx-powered-by: PHP/7.2.34\r\naccess-control-allow-origin: https://be.block-sphere.com\r\naccess-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept, Cpl, Agent-Cpl, Send-Cpl, Client-Type\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 6480520a5e02f3163410e3134bd77baa.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-C1\r\nx-amz-cf-id: mZKXOZEU7lY-FZk8sndGScLrb_Ohctefn4RO_kRh_N6it5z179IZOA==\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":8022,"size_decoded":8022,"mime_type":"application/json; charset=UTF-8","magic":"data","md5":"0f6e2984503605b4cfad3cccb064ae0c","sha1":"7d45d525a676c3ddec5a5b1a9670415855b6518c","sha256":"2188a344fb3e12bf6f08b5daccad3f8df734bbe890f181076062daf6ed675a70","sha512":"e3a9b375af8505db1e538aaae401fec1dbb00f739c47af0968468ffd5bafe29de8ab1b5267bd9d69cba2fe103e6ba66b9f5586a955d1a986f382b3b2fec0063f","ssdeep":"192:CEWXB1z5MvPaJjsCsCRNVvt5VRQ+h4+MUigUQcl/rD:CEWR4PwLVlM+MUOQED","tlshash":"cef1b003575e9a05f6b052b4b4cf42310f3a54aa8d4f5fef22d8a83dae240f1d484d0c","first_seen":"2024-12-23T04:14:32.616391Z","last_seen":"2024-12-23T04:14:32.616391Z","times_seen":1,"resource_available":false,"data":null}},"time_used":780,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":780,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"be.block-sphere.com/api/news/list?_timespan=1734927242331","fqdn":"be.block-sphere.com","domain":"block-sphere.com","tld":"com"},"ip":{"addr":"172.67.161.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://be.block-sphere.com/app/","date":"2024-12-23T04:14:02.393Z","timestamp":1734927242393,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"block-sphere.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Dec 2024 11:23:11 GMT","end":"Mon, 10 Mar 2025 11:23:10 GMT"},"fingerprint":{"sha1":"DB:47:40:41:42:B8:EE:3F:CB:6B:C3:8D:CF:39:4B:AA:3C:B9:80:2B","sha256":"5D:17:11:73:BB:8D:C3:26:BF:A4:44:01:74:42:15:54:EC:6B:F2:39:28:8A:FC:BC:4D:CF:29:13:B5:86:CA:28"}}},"request":{"raw":"POST /api/news/list?_timespan=1734927242331 HTTP/1.1\r\nHost: be.block-sphere.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded\r\nlang: en\r\nContent-Length: 15\r\nOrigin: https://be.block-sphere.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://be.block-sphere.com/app/\r\nCookie: angela_session=eyJpdiI6InNHUE9uR3gzb1ZXdWlxTCt5cXptbWc9PSIsInZhbHVlIjoiZVAzQ0RkRGV4N3Nnc1FhRnRCK2hZRmt0UGJydDRxd0N0bUtYcmtoY09tZUNMRGhIZkEzVUVoTUxPdEIyOUFlZVd1VCsxYjdRUEVXY2hMWENwQVVnOUNHM3VUTGpkdUJWWUQrSXllZVQzaTdiY1Jud0pYSEZkeEh3S2t1WlFPajEiLCJtYWMiOiIzYmZjZjI5YTNjZmVjMjUxMzZkOGE0MjJlNWFjNTk1NDc0OTYzYWY1NjNiM2FmMDQwNWQ0NWM2Yzg3MWFmZGJjIn0%3D; lang=en\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 23 Dec 2024 04:14:02 GMT\r\ncontent-type: application/json\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: POST,GET,OPTIONS,DELETE\r\naccess-control-allow-headers: x-requested-with,content-type,Authorization\r\ncache-control: no-cache, private\r\nset-cookie: angela_session=eyJpdiI6IlB4aUZJWGNOK3NEZHBxbnBGRXVQUUE9PSIsInZhbHVlIjoibFQ4d1B1N3dMQ3R2RFByWk1RSFM3TXc1bFhxbkNjOFFGZlJIa05pNFJPUThDNVdWalBoXC93N2ZLQmJnenFMYTNuS3psbm5WdnNMTWZqb1hWem1kb09yYzg3TGpGK0I0UkRaRDUwUXRYbGZVK1pOUWdVNitiNHBQXC9LRzNcL29BSTYiLCJtYWMiOiI4YTZlZTVlNWNlMTFhNThlNzVlNDkzNjRmOTIzMzZkODk3MTVjNGRmZmFkNzQzODVhODkzNTVkYzE4NTg2NzAwIn0%3D; expires=Mon, 23-Dec-2024 06:13:57 GMT; Max-Age=7200; path=/; httponly\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=reIHChcrv4Q4NtVRUdaVhmUDfoS1u4I8LU5RqWG5khz6VzU6ez%2BG66WNizITuz3ULHMdXLbNnSU8m8vxWGdCJ6gWh2q%2Bhi44rd0xvJeDhbKEGNVgH%2FrPl4LR%2FnvrQGuoZZK0MVXv\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 8f6585c0d82d56c5-OSL\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=1462\u0026min_rtt=622\u0026rtt_var=748\u0026sent=1208\u0026recv=100\u0026lost=0\u0026retrans=0\u0026sent_bytes=1387395\u0026recv_bytes=22712\u0026delivery_rate=108459\u0026cwnd=160500\u0026unsent_bytes=0\u0026cid=57058721e9bee6fd\u0026ts=3297\u0026x=1\", cfExtPri, cfHdrFlush;dur=0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":268,"size_decoded":268,"mime_type":"application/json","magic":"troff or preprocessor input, ASCII text, with very long lines (316), with no line terminators","md5":"7cf768e1bef3babe0819c982264f62d8","sha1":"093c64f8b0cd1ca8e6059355a8acfb3d1cfcb1f5","sha256":"064bbcc0d0d48b96144386c08073bff4ab04fc78b8d141f87556783714158633","sha512":"4ab36605ceebc068927216f5de8aecf66d1dd5020e0b87311d321eb4f9d49325a8567e8a590c4efd9595faacd38e547fb6eee32c0ab173f12f7c971e0131cb61","ssdeep":"","tlshash":"29e026f9ed10e9da804019ddf07d3e36f58380254c9221f967c0d024c2408b057b610c","first_seen":"2024-09-19T22:14:59.564169Z","last_seen":"2024-12-23T04:14:32.620474Z","times_seen":3,"resource_available":false,"data":null}},"time_used":396,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":394,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2024-12-23","alert":"Sinkholed","trigger":"block-sphere.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"be.block-sphere.com/app/js/app.ed7b0a03.js?v=1","fqdn":"be.block-sphere.com","domain":"block-sphere.com","tld":"com"},"ip":{"addr":"172.67.161.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://be.block-sphere.com/app/","date":"2024-12-23T04:14:00.157Z","timestamp":1734927240157,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"block-sphere.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Dec 2024 11:23:11 GMT","end":"Mon, 10 Mar 2025 11:23:10 GMT"},"fingerprint":{"sha1":"DB:47:40:41:42:B8:EE:3F:CB:6B:C3:8D:CF:39:4B:AA:3C:B9:80:2B","sha256":"5D:17:11:73:BB:8D:C3:26:BF:A4:44:01:74:42:15:54:EC:6B:F2:39:28:8A:FC:BC:4D:CF:29:13:B5:86:CA:28"}}},"request":{"raw":"GET /app/js/app.ed7b0a03.js?v=1 HTTP/1.1\r\nHost: be.block-sphere.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://be.block-sphere.com/app/\r\nCookie: angela_session=eyJpdiI6InNHUE9uR3gzb1ZXdWlxTCt5cXptbWc9PSIsInZhbHVlIjoiZVAzQ0RkRGV4N3Nnc1FhRnRCK2hZRmt0UGJydDRxd0N0bUtYcmtoY09tZUNMRGhIZkEzVUVoTUxPdEIyOUFlZVd1VCsxYjdRUEVXY2hMWENwQVVnOUNHM3VUTGpkdUJWWUQrSXllZVQzaTdiY1Jud0pYSEZkeEh3S2t1WlFPajEiLCJtYWMiOiIzYmZjZjI5YTNjZmVjMjUxMzZkOGE0MjJlNWFjNTk1NDc0OTYzYWY1NjNiM2FmMDQwNWQ0NWM2Yzg3MWFmZGJjIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 23 Dec 2024 04:14:00 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 11 Dec 2024 14:41:34 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6759a49e-1bfc3b\"\r\nexpires: Mon, 23 Dec 2024 16:13:55 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=934OLwOpAahN8dA1uiMK8tjSA2WuaHyC5RJwV%2FYryHr0eXsz%2FVnR6f4fHLfD932IhTXwu7%2BYFAuj3v%2FoPT4WTB%2BW38VxUmj6A2cWiqupaLI2cvlurKIml%2Fvny72KuhzvXWDaihlr\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 8f6585b2d8a456c5-OSL\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=2509\u0026min_rtt=622\u0026rtt_var=1912\u0026sent=93\u0026recv=26\u0026lost=0\u0026retrans=0\u0026sent_bytes=83784\u0026recv_bytes=7461\u0026delivery_rate=10846199\u0026cwnd=48000\u0026unsent_bytes=0\u0026cid=57058721e9bee6fd\u0026ts=1392\u0026x=1\", cfExtPri, cfHdrFlush;dur=0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1834043,"size_decoded":1834043,"mime_type":"application/javascript","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-02T06:58:21.972859Z","times_seen":17668698,"resource_available":true,"data":null}},"time_used":1292,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":723,"receive":569,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2024-12-23","alert":"Sinkholed","trigger":"block-sphere.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"be.block-sphere.com/app/img/pcmobile.c43bc852.png","fqdn":"be.block-sphere.com","domain":"block-sphere.com","tld":"com"},"ip":{"addr":"172.67.161.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://be.block-sphere.com/app/","date":"2024-12-23T04:14:02.279Z","timestamp":1734927242279,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"block-sphere.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Dec 2024 11:23:11 GMT","end":"Mon, 10 Mar 2025 11:23:10 GMT"},"fingerprint":{"sha1":"DB:47:40:41:42:B8:EE:3F:CB:6B:C3:8D:CF:39:4B:AA:3C:B9:80:2B","sha256":"5D:17:11:73:BB:8D:C3:26:BF:A4:44:01:74:42:15:54:EC:6B:F2:39:28:8A:FC:BC:4D:CF:29:13:B5:86:CA:28"}}},"request":{"raw":"GET /app/img/pcmobile.c43bc852.png HTTP/1.1\r\nHost: be.block-sphere.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://be.block-sphere.com/app/\r\nCookie: angela_session=eyJpdiI6InNHUE9uR3gzb1ZXdWlxTCt5cXptbWc9PSIsInZhbHVlIjoiZVAzQ0RkRGV4N3Nnc1FhRnRCK2hZRmt0UGJydDRxd0N0bUtYcmtoY09tZUNMRGhIZkEzVUVoTUxPdEIyOUFlZVd1VCsxYjdRUEVXY2hMWENwQVVnOUNHM3VUTGpkdUJWWUQrSXllZVQzaTdiY1Jud0pYSEZkeEh3S2t1WlFPajEiLCJtYWMiOiIzYmZjZjI5YTNjZmVjMjUxMzZkOGE0MjJlNWFjNTk1NDc0OTYzYWY1NjNiM2FmMDQwNWQ0NWM2Yzg3MWFmZGJjIn0%3D; lang=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 23 Dec 2024 04:14:03 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 09 Nov 2021 15:48:52 GMT\r\nvary: Accept-Encoding\r\netag: W/\"618a9864-33d97\"\r\nexpires: Wed, 22 Jan 2025 04:13:57 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=Eg2K1gMUthx2y5%2BXz8vjDXuw1yCu092A5mvqnGpwLlFlGBsv0ZH0sVkhd9TWMLohJgF45QctfC5AZ%2BVmnNacaG8DYWsrGCzRFlHUZ0iBSI31tNORQu2Q5pvQp8JEYzFwHNXXeNvC\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 8f6585c03fe456c5-OSL\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=1759\u0026min_rtt=622\u0026rtt_var=638\u0026sent=1326\u0026recv=121\u0026lost=0\u0026retrans=0\u0026sent_bytes=1508616\u0026recv_bytes=29651\u0026delivery_rate=694050\u0026cwnd=160500\u0026unsent_bytes=0\u0026cid=57058721e9bee6fd\u0026ts=3586\u0026x=1\", cfExtPri, cfHdrFlush;dur=0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":212375,"size_decoded":212375,"mime_type":"image/png","magic":"PNG image data, 744 x 452, 8-bit/color RGBA, non-interlaced","md5":"c43bc85293343236741cbf49ce8df874","sha1":"0bad5df0c4a197ee62ff4b815c524dd6d117e322","sha256":"3752f904122058c1996e731be7f3d4da2ea4768768b760e496b55d825e5ae4f3","sha512":"bcade7d52d6240d0dfaafb9f2ebd05e3f3fd60d7cacbe009ff89ae0e6b7276291ffee8fac554f18b27622c73f4c4c2806d0e65700df2e8441afdc7ef0f51bd39","ssdeep":"6144:jM03GoLXPKv3lN7uTXs8j/f8aWv4e+ZyjEmYGY:jMWdLXPKv3lpW/f8aWv4sEmhY","tlshash":"ae2422da0785d9c8f442f24dd916323fe11077a3735c09a826596fd8e2a3d8cd62afc6","first_seen":"2023-05-21T12:40:28Z","last_seen":"2026-03-23T09:33:35.808167Z","times_seen":45,"resource_available":false,"data":null}},"time_used":1341,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":778,"receive":563,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2024-12-23","alert":"Sinkholed","trigger":"block-sphere.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"be.block-sphere.com/app/img/binance.367be0a3.png","fqdn":"be.block-sphere.com","domain":"block-sphere.com","tld":"com"},"ip":{"addr":"172.67.161.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://be.block-sphere.com/app/","date":"2024-12-23T04:14:02.284Z","timestamp":1734927242284,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"block-sphere.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Dec 2024 11:23:11 GMT","end":"Mon, 10 Mar 2025 11:23:10 GMT"},"fingerprint":{"sha1":"DB:47:40:41:42:B8:EE:3F:CB:6B:C3:8D:CF:39:4B:AA:3C:B9:80:2B","sha256":"5D:17:11:73:BB:8D:C3:26:BF:A4:44:01:74:42:15:54:EC:6B:F2:39:28:8A:FC:BC:4D:CF:29:13:B5:86:CA:28"}}},"request":{"raw":"GET /app/img/binance.367be0a3.png HTTP/1.1\r\nHost: be.block-sphere.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://be.block-sphere.com/app/\r\nCookie: angela_session=eyJpdiI6InNHUE9uR3gzb1ZXdWlxTCt5cXptbWc9PSIsInZhbHVlIjoiZVAzQ0RkRGV4N3Nnc1FhRnRCK2hZRmt0UGJydDRxd0N0bUtYcmtoY09tZUNMRGhIZkEzVUVoTUxPdEIyOUFlZVd1VCsxYjdRUEVXY2hMWENwQVVnOUNHM3VUTGpkdUJWWUQrSXllZVQzaTdiY1Jud0pYSEZkeEh3S2t1WlFPajEiLCJtYWMiOiIzYmZjZjI5YTNjZmVjMjUxMzZkOGE0MjJlNWFjNTk1NDc0OTYzYWY1NjNiM2FmMDQwNWQ0NWM2Yzg3MWFmZGJjIn0%3D; lang=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 23 Dec 2024 04:14:02 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 09 Nov 2021 15:48:52 GMT\r\nvary: Accept-Encoding\r\netag: W/\"618a9864-12f0\"\r\nexpires: Wed, 22 Jan 2025 04:13:57 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=dLXDun3REBJl9nyI2uFXL86ff2SYjdAjmsEflHNVEyuTu2HUsCT9kZkGjpKMHMV%2FRX%2FP4U5%2B%2FKzDJrSjflpHodhP70lPh2mRwBQ%2BJVQnhr7zirjn4eEnmXQPg33RzW4QGQrt21y%2F\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 8f6585c04feb56c5-OSL\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=1837\u0026min_rtt=622\u0026rtt_var=1248\u0026sent=1217\u0026recv=102\u0026lost=0\u0026retrans=0\u0026sent_bytes=1394655\u0026recv_bytes=22804\u0026delivery_rate=134261\u0026cwnd=160500\u0026unsent_bytes=0\u0026cid=57058721e9bee6fd\u0026ts=3408\u0026x=1\", cfExtPri, cfHdrFlush;dur=0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":4848,"size_decoded":4848,"mime_type":"image/png","magic":"PNG image data, 100 x 21, 8-bit/color RGBA, non-interlaced","md5":"367be0a371497604729ac1524f7cb923","sha1":"29904d43e06dec13e8a0b865e7eaa24f0252619d","sha256":"ad3a642b1ac63c14d07a7afd43726b2f3d22688bcf65c5cb7af9e508398bede3","sha512":"4f32ab601a00118af179366b64095618f06d79dd5ab90d18f2f2716b07ae2533a6d98ef35314aca800d67432105528db0d1e88734fb828e435411c722b35b962","ssdeep":"96:ec8OqdVEHGuIBoWbzxEijCmhDBWvajjKNsQOCx/y9BgFVrAw:efNVEqlt1/KiQOCheSEw","tlshash":"aea18f69597ec11b90fd9541cdde1f0fae3253029fc14adad36a83e0064364361ddd43","first_seen":"2023-05-15T15:11:04Z","last_seen":"2026-03-23T09:33:35.771597Z","times_seen":24,"resource_available":false,"data":null}},"time_used":596,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":596,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2024-12-23","alert":"Sinkholed","trigger":"block-sphere.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"be.block-sphere.com/upload/1698330010516020.jpg","fqdn":"be.block-sphere.com","domain":"block-sphere.com","tld":"com"},"ip":{"addr":"172.67.161.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://be.block-sphere.com/app/","date":"2024-12-23T04:14:03.004Z","timestamp":1734927243004,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"block-sphere.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Dec 2024 11:23:11 GMT","end":"Mon, 10 Mar 2025 11:23:10 GMT"},"fingerprint":{"sha1":"DB:47:40:41:42:B8:EE:3F:CB:6B:C3:8D:CF:39:4B:AA:3C:B9:80:2B","sha256":"5D:17:11:73:BB:8D:C3:26:BF:A4:44:01:74:42:15:54:EC:6B:F2:39:28:8A:FC:BC:4D:CF:29:13:B5:86:CA:28"}}},"request":{"raw":"GET /upload/1698330010516020.jpg HTTP/1.1\r\nHost: be.block-sphere.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://be.block-sphere.com/app/\r\nCookie: angela_session=eyJpdiI6IlBRYmlkNFNXdnAzTnZnOWZybWR5VGc9PSIsInZhbHVlIjoidWdXOElJUTdLMnF2QUFqWkNzN0tcLzRVcG56WGx6dWU1T1RXbUhCMHZ1UEJoeWVOOWJTRmpuQnp3cEdycG1HTFRXZjhPY1NcL1oxNGc4WkVOa01GUWdNRysxSTRJNkdmZTZZaUFGaUhtdmZaTExNRzJjTTR1VDVXQ3E4eW1zSVV5ViIsIm1hYyI6ImZiNWU2MDZiZDY3NmVjMTcxODdiZWM1MTdhZGMxMTIxNGU5NWE3MDc3ZGI3Y2RiNTU1MDY3OWM4YTg4MjhlODYifQ%3D%3D; lang=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 23 Dec 2024 04:14:03 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Mon, 04 Nov 2024 08:47:48 GMT\r\nvary: Accept-Encoding\r\netag: W/\"67288a34-1ea25\"\r\nexpires: Wed, 22 Jan 2025 04:13:58 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=lYCDpbUSZQRgz8vHsurDtZMUz9BAYo54k0Np9vEUrXGESHG%2B2XSkO57zkhRK%2BdhrIR4dEWVXPx%2FZzXIBkCjmqpNm4Y6lsp%2FSs8r5R5yj9RPYUgbjn%2FNbxbeu%2By7xRYjK9p91HkUv\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 8f6585c4ba1156c5-OSL\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=1336\u0026min_rtt=622\u0026rtt_var=301\u0026sent=1796\u0026recv=149\u0026lost=0\u0026retrans=0\u0026sent_bytes=2055230\u0026recv_bytes=32084\u0026delivery_rate=10463119\u0026cwnd=160500\u0026unsent_bytes=0\u0026cid=57058721e9bee6fd\u0026ts=4315\u0026x=1\", cfExtPri, cfHdrFlush;dur=0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":125477,"size_decoded":125477,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 2400x2400, components 3","md5":"31768b9216f1806e5fbf4afc0660460e","sha1":"a482faac9d5e9bc1e0c0f8d1e88033e5ba140850","sha256":"7f49db0b8a409073f6c31f436d5f016a2fb73d2e7115a99258e5e02f3123f3fb","sha512":"f3b071eea120dcb222b1fc0b4f64d5c5d961ddff5f17f9d21550caef38809b7f1146c63d480dedda858b83a35b42a397a42c49b69beabde3cfd8853d0d032385","ssdeep":"3072:d2PTCFjzrTqXxJrMMxM6PezEwF9RqlOkKWht:MPTCFj7qjMMqzhfR5hs","tlshash":"abc30267c30415a9cd6593b4964ba3213b2f847ba5c1139a9307f1b822f4b5abf0e762","first_seen":"2023-11-15T15:08:39Z","last_seen":"2024-12-23T04:14:32.629876Z","times_seen":4,"resource_available":false,"data":null}},"time_used":1027,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":790,"receive":237,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2024-12-23","alert":"Sinkholed","trigger":"block-sphere.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"be.block-sphere.com/app/css/chunk-vendors.02c7c039.css","fqdn":"be.block-sphere.com","domain":"block-sphere.com","tld":"com"},"ip":{"addr":"172.67.161.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://be.block-sphere.com/app/","date":"2024-12-23T04:14:00.156Z","timestamp":1734927240156,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"block-sphere.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Dec 2024 11:23:11 GMT","end":"Mon, 10 Mar 2025 11:23:10 GMT"},"fingerprint":{"sha1":"DB:47:40:41:42:B8:EE:3F:CB:6B:C3:8D:CF:39:4B:AA:3C:B9:80:2B","sha256":"5D:17:11:73:BB:8D:C3:26:BF:A4:44:01:74:42:15:54:EC:6B:F2:39:28:8A:FC:BC:4D:CF:29:13:B5:86:CA:28"}}},"request":{"raw":"GET /app/css/chunk-vendors.02c7c039.css HTTP/1.1\r\nHost: be.block-sphere.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://be.block-sphere.com/app/\r\nCookie: angela_session=eyJpdiI6InNHUE9uR3gzb1ZXdWlxTCt5cXptbWc9PSIsInZhbHVlIjoiZVAzQ0RkRGV4N3Nnc1FhRnRCK2hZRmt0UGJydDRxd0N0bUtYcmtoY09tZUNMRGhIZkEzVUVoTUxPdEIyOUFlZVd1VCsxYjdRUEVXY2hMWENwQVVnOUNHM3VUTGpkdUJWWUQrSXllZVQzaTdiY1Jud0pYSEZkeEh3S2t1WlFPajEiLCJtYWMiOiIzYmZjZjI5YTNjZmVjMjUxMzZkOGE0MjJlNWFjNTk1NDc0OTYzYWY1NjNiM2FmMDQwNWQ0NWM2Yzg3MWFmZGJjIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 23 Dec 2024 04:14:00 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 14 Jan 2022 14:20:42 GMT\r\nvary: Accept-Encoding\r\netag: W/\"61e186ba-36e29\"\r\nexpires: Mon, 23 Dec 2024 16:13:55 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\npriority: u=2,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=zR6Bt2Gg6Wl6DlBkkAAxkSknESfFaC%2FL461JEkNbLiSpX6BVh3totCs81MTnAaA4U2LY3JLKRD2bayFYrc54PK%2FkoFUnZVrFodymYm0Xffh%2FrenKQ8SDTqeXkRQXuMZ%2BVKfu4FqB\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 8f6585b2d89f56c5-OSL\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=2377\u0026min_rtt=622\u0026rtt_var=1699\u0026sent=106\u0026recv=27\u0026lost=0\u0026retrans=0\u0026sent_bytes=98879\u0026recv_bytes=7507\u0026delivery_rate=7426554\u0026cwnd=48000\u0026unsent_bytes=0\u0026cid=57058721e9bee6fd\u0026ts=1409\u0026x=1\", cfExtPri, cfHdrFlush;dur=0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":224809,"size_decoded":224809,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"b47fe3afc9eb7dfbcb84a95a7a02d4bd","sha1":"058757d4e170924e2edf9f00581b4d65ec2222b6","sha256":"19a99de6d66a6d5a9e2eab3c12b12e307a9faaaf492e4704bfc4a40373025b7f","sha512":"d589a648e5876880af64982e7cb48e720b63986416a72ce88716dcc21d51b83cf25fdc977ebc95f84fbd1ad15318ea1e766d61846ae9bae4b87d53a1e1da6168","ssdeep":"1536:R6vASf65WCXkM28Y7SrW3YeWXA1u9w4HCe/l4mAgW9tME+64A8O6iZkJgYu8e2sr:R6v7f65WCXkVyX6qkwmXtQVTS/","tlshash":"9024b5109b172437622bdbad74c0ba896f24c363d8735b2bfd95780cc6e64991227e1f","first_seen":"2023-11-15T15:08:39Z","last_seen":"2026-07-27T10:54:16.508742Z","times_seen":8,"resource_available":false,"data":null}},"time_used":915,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":741,"receive":174,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2024-12-23","alert":"Sinkholed","trigger":"block-sphere.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"be.block-sphere.com/favicon.ico","fqdn":"be.block-sphere.com","domain":"block-sphere.com","tld":"com"},"ip":{"addr":"172.67.161.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://be.block-sphere.com/app/","date":"2024-12-23T04:14:02.111Z","timestamp":1734927242111,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"block-sphere.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Dec 2024 11:23:11 GMT","end":"Mon, 10 Mar 2025 11:23:10 GMT"},"fingerprint":{"sha1":"DB:47:40:41:42:B8:EE:3F:CB:6B:C3:8D:CF:39:4B:AA:3C:B9:80:2B","sha256":"5D:17:11:73:BB:8D:C3:26:BF:A4:44:01:74:42:15:54:EC:6B:F2:39:28:8A:FC:BC:4D:CF:29:13:B5:86:CA:28"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: be.block-sphere.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://be.block-sphere.com/app/\r\nCookie: angela_session=eyJpdiI6InNHUE9uR3gzb1ZXdWlxTCt5cXptbWc9PSIsInZhbHVlIjoiZVAzQ0RkRGV4N3Nnc1FhRnRCK2hZRmt0UGJydDRxd0N0bUtYcmtoY09tZUNMRGhIZkEzVUVoTUxPdEIyOUFlZVd1VCsxYjdRUEVXY2hMWENwQVVnOUNHM3VUTGpkdUJWWUQrSXllZVQzaTdiY1Jud0pYSEZkeEh3S2t1WlFPajEiLCJtYWMiOiIzYmZjZjI5YTNjZmVjMjUxMzZkOGE0MjJlNWFjNTk1NDc0OTYzYWY1NjNiM2FmMDQwNWQ0NWM2Yzg3MWFmZGJjIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\ndate: Mon, 23 Dec 2024 04:14:02 GMT\r\ncontent-type: text/html\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\npriority: u=6,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=LRk3SJKU3wKdWg6aIBR%2B9L%2FJ3chI3Gm3IChkqnXnIgKQZOpAE%2BkAcqPsK14iR9OHe0GXfanin8rQs0kvI7H08QiPQ1t7eIDAx%2BefDshEJv6BpM00jwhHFVpy2F0JCCTho5OWAnWc\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 8f6585bf2f6456c5-OSL\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=1316\u0026min_rtt=622\u0026rtt_var=269\u0026sent=1188\u0026recv=85\u0026lost=0\u0026retrans=0\u0026sent_bytes=1377301\u0026recv_bytes=15480\u0026delivery_rate=32097858\u0026cwnd=160500\u0026unsent_bytes=0\u0026cid=57058721e9bee6fd\u0026ts=2856\u0026x=1\", cfExtPri, cfHdrFlush;dur=0\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":null,"data":{"size":148,"size_decoded":148,"mime_type":"text/html","magic":"HTML document, ASCII text, with no line terminators","md5":"a505c0cb4ec1715c35ec0dc7c89f154a","sha1":"b97fd9907cd01531489972ba67137e19f30e4c06","sha256":"a7efd1f6629a4aa881a1681d5564ccf4f85b878eafa7bbae8f8a3c0a6d7dd9f0","sha512":"dab4178ccc6eb1060d39dbfe7ae51f2ea86015b3584348089b28ba228f5ec97afc84646410a244da0c5c3141d28eb3b885b3fcdd48065e9c4c40aa8659304b59","ssdeep":"","tlshash":"48c08c0c3c632144851319e003c33542c08b93bb789a4831348c8203a3cf2aa98e33d5","first_seen":"2024-07-29T22:13:39Z","last_seen":"2025-04-06T22:16:45.272983Z","times_seen":548,"resource_available":false,"data":null}},"time_used":216,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":216,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2024-12-23","alert":"Sinkholed","trigger":"block-sphere.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"plugin-code.salesmartly.com/chat/widget/code/fonts/iconfont.9d07870d.woff2","fqdn":"plugin-code.salesmartly.com","domain":"salesmartly.com","tld":"com"},"ip":{"addr":"3.164.240.26","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://be.block-sphere.com/app/","date":"2024-12-23T04:14:02.619Z","timestamp":1734927242619,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.salesmartly.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M02","organization":"Amazon"},"validity":{"start":"Tue, 21 May 2024 00:00:00 GMT","end":"Thu, 19 Jun 2025 23:59:59 GMT"},"fingerprint":{"sha1":"E3:F1:80:75:0D:19:F2:CB:7A:D6:61:69:BD:7B:62:4C:CB:27:2E:F1","sha256":"77:92:D1:6C:BB:B2:F8:17:08:A4:2A:83:96:42:FD:9A:DA:66:97:81:DF:14:1F:3C:50:9C:D7:F7:8E:F7:F1:CD"}}},"request":{"raw":"GET /chat/widget/code/fonts/iconfont.9d07870d.woff2 HTTP/1.1\r\nHost: plugin-code.salesmartly.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://be.block-sphere.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://plugin-code.salesmartly.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: font/woff2\r\ncontent-length: 7764\r\nserver: AliyunOSS\r\ndate: Mon, 23 Dec 2024 04:14:02 GMT\r\nx-oss-request-id: 6768E38A637FD233374452B0\r\naccept-ranges: bytes\r\netag: \"9D07870DF368D2FB088C3B081D007E77\"\r\nlast-modified: Tue, 17 Dec 2024 08:10:32 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 1823414170569578602\r\nx-oss-storage-class: Standard\r\ncache-control: public, max-age=15552000\r\ncontent-md5: nQeHDfNo0vsIjDsIHQB+dw==\r\nx-oss-server-time: 5\r\nvary: Origin\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 cfc62e0b84c9c493a10eb6aef6aad512.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P2\r\nx-amz-cf-id: KohceEdFgFNKy4lL6G6vIdGX3-6v98YUbuXTbRrw9CLU-HEYaocosw==\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":7764,"size_decoded":7764,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 7764, version 1.0","md5":"9d07870df368d2fb088c3b081d007e77","sha1":"a4b077fdd36f0c989a0f69f43d8f0a1dcd4593bc","sha256":"4bf9c9b01833156509704af70f20cfbf1cb80cc6e37e195dcee28d5ec7b4a97b","sha512":"98ed6e7812c9d936800da1917e5f31803c72b222b9f0db8eeba9e6a04b559778e3a0d02651644ac537c3b533ba6d350b2207c65b0e0d9065c431f216cc73a115","ssdeep":"192:Rhm9VDdsC2mtjrCUFoHwR2AUPf0YZNvZs7eKZsrU:2H5sKtvPQwRGM2rKZ6U","tlshash":"69f1bffd9be3135ffbd6a33c494b0824440f2a612b34ed0a4385be07b71a1e2d280e20","first_seen":"2024-12-20T00:08:14.911943Z","last_seen":"2025-03-12T01:13:10.260792Z","times_seen":42,"resource_available":false,"data":null}},"time_used":420,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":420,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"be.block-sphere.com/upload/1698330112336059.jpg","fqdn":"be.block-sphere.com","domain":"block-sphere.com","tld":"com"},"ip":{"addr":"172.67.161.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://be.block-sphere.com/app/","date":"2024-12-23T04:14:03.015Z","timestamp":1734927243015,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"block-sphere.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Dec 2024 11:23:11 GMT","end":"Mon, 10 Mar 2025 11:23:10 GMT"},"fingerprint":{"sha1":"DB:47:40:41:42:B8:EE:3F:CB:6B:C3:8D:CF:39:4B:AA:3C:B9:80:2B","sha256":"5D:17:11:73:BB:8D:C3:26:BF:A4:44:01:74:42:15:54:EC:6B:F2:39:28:8A:FC:BC:4D:CF:29:13:B5:86:CA:28"}}},"request":{"raw":"GET /upload/1698330112336059.jpg HTTP/1.1\r\nHost: be.block-sphere.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://be.block-sphere.com/app/\r\nCookie: angela_session=eyJpdiI6IlBRYmlkNFNXdnAzTnZnOWZybWR5VGc9PSIsInZhbHVlIjoidWdXOElJUTdLMnF2QUFqWkNzN0tcLzRVcG56WGx6dWU1T1RXbUhCMHZ1UEJoeWVOOWJTRmpuQnp3cEdycG1HTFRXZjhPY1NcL1oxNGc4WkVOa01GUWdNRysxSTRJNkdmZTZZaUFGaUhtdmZaTExNRzJjTTR1VDVXQ3E4eW1zSVV5ViIsIm1hYyI6ImZiNWU2MDZiZDY3NmVjMTcxODdiZWM1MTdhZGMxMTIxNGU5NWE3MDc3ZGI3Y2RiNTU1MDY3OWM4YTg4MjhlODYifQ%3D%3D; lang=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 23 Dec 2024 04:14:03 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Mon, 04 Nov 2024 08:47:45 GMT\r\nvary: Accept-Encoding\r\netag: W/\"67288a31-5db4\"\r\nexpires: Wed, 22 Jan 2025 04:13:58 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=r%2BmFxzfnzHMTp3PuQdCIz7ym%2BMq3fyheiy6RvMXZ2R3fMFDnnf6a%2BxY0BRECjh92yVqafL%2F5RmTxzOVZXTJDTc322tmJPUh%2BkYfvP86x1cMt0ocvtIe4dLcc0v%2FlvkzgrDz3oI%2Ba\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 8f6585c4ca2356c5-OSL\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=1324\u0026min_rtt=622\u0026rtt_var=251\u0026sent=1809\u0026recv=150\u0026lost=0\u0026retrans=0\u0026sent_bytes=2070346\u0026recv_bytes=32129\u0026delivery_rate=9460745\u0026cwnd=160500\u0026unsent_bytes=0\u0026cid=57058721e9bee6fd\u0026ts=4327\u0026x=1\", cfExtPri, cfHdrFlush;dur=0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":23988,"size_decoded":23988,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 960x804, components 3","md5":"bab1c6c5b3fa036c2e41440edf9b3a00","sha1":"f10d0f837e3f4c8fda9d0795cdef2b9bd990012a","sha256":"3d501e6f05d0aaa1f25097f93d54038497c074f7c10a975b606e0ad49317b42a","sha512":"97e07cddfcea9c4ff884940626a83c9ad9ab1659ec58ad279453421ece2a1532b4e990f52c481fe39cc08f1c8b0a9e6444f9934b2c946929692b402010678d04","ssdeep":"384:am/naXR1HbuGOaTMNPZTHfBS3hTk0tZoQUYftMX:aYavuCQNBTHQQJsti","tlshash":"e6b2d0a57b976124d8d822b441b60b939f5bfb06f2083bcbd6273b80a443f793f4a501","first_seen":"2023-11-15T15:08:39Z","last_seen":"2025-09-28T05:40:02.891462Z","times_seen":5,"resource_available":false,"data":null}},"time_used":789,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":788,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2024-12-23","alert":"Sinkholed","trigger":"block-sphere.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"be.block-sphere.com/app/jquery.js","fqdn":"be.block-sphere.com","domain":"block-sphere.com","tld":"com"},"ip":{"addr":"172.67.161.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://be.block-sphere.com/app/","date":"2024-12-23T04:14:00.141Z","timestamp":1734927240141,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"block-sphere.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Dec 2024 11:23:11 GMT","end":"Mon, 10 Mar 2025 11:23:10 GMT"},"fingerprint":{"sha1":"DB:47:40:41:42:B8:EE:3F:CB:6B:C3:8D:CF:39:4B:AA:3C:B9:80:2B","sha256":"5D:17:11:73:BB:8D:C3:26:BF:A4:44:01:74:42:15:54:EC:6B:F2:39:28:8A:FC:BC:4D:CF:29:13:B5:86:CA:28"}}},"request":{"raw":"GET /app/jquery.js HTTP/1.1\r\nHost: be.block-sphere.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://be.block-sphere.com/app/\r\nCookie: angela_session=eyJpdiI6InNHUE9uR3gzb1ZXdWlxTCt5cXptbWc9PSIsInZhbHVlIjoiZVAzQ0RkRGV4N3Nnc1FhRnRCK2hZRmt0UGJydDRxd0N0bUtYcmtoY09tZUNMRGhIZkEzVUVoTUxPdEIyOUFlZVd1VCsxYjdRUEVXY2hMWENwQVVnOUNHM3VUTGpkdUJWWUQrSXllZVQzaTdiY1Jud0pYSEZkeEh3S2t1WlFPajEiLCJtYWMiOiIzYmZjZjI5YTNjZmVjMjUxMzZkOGE0MjJlNWFjNTk1NDc0OTYzYWY1NjNiM2FmMDQwNWQ0NWM2Yzg3MWFmZGJjIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 23 Dec 2024 04:14:00 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 09 Nov 2021 15:48:52 GMT\r\nvary: Accept-Encoding\r\netag: W/\"618a9864-14972\"\r\nexpires: Mon, 23 Dec 2024 16:13:55 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\npriority: u=2,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=6D68DaqjTpUhRy%2FZjzRwqa4ZA74%2B%2FfJFWdv0%2FSx0kkc0B13mk0PDbqOv4O2reW8Ajc0sfamGnIYLGyAGskFsxNhL9B2Eh5Sai1YjhFHODImo1KK%2BdEdSzt%2Bh3Ayz6nw8cX6UJADm\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 8f6585b2c88856c5-OSL\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=2988\u0026min_rtt=622\u0026rtt_var=1903\u0026sent=64\u0026recv=24\u0026lost=0\u0026retrans=0\u0026sent_bytes=49032\u0026recv_bytes=7371\u0026delivery_rate=4981706\u0026cwnd=24000\u0026unsent_bytes=0\u0026cid=57058721e9bee6fd\u0026ts=1378\u0026x=1\", cfExtPri, cfHdrFlush;dur=0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":84338,"size_decoded":84338,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (32025)","md5":"3b01a0f793e8811780858bb6919154ee","sha1":"65b42f5118627b51ea31bf2df017d443315b30f7","sha256":"94fb7ad5f871626cf431588ccda297d2d6cb9aca466de0bd902d4d15a120d100","sha512":"ded23391216b2cb519656e436a4f6b09393a83dde75453a02c6cc221f92363ca1d256482458049b24ac193d971452655d2c8581c61ddf57b18f2e70473272b22","ssdeep":"1536:NP10iSi65U/dXXeyhzeBuG+HYE0mdkuJO1z6Oy4sh3J1A72BjmN7TwpDKba98HrJ:o+414Jiz6fh6lTqya98HrJ","tlshash":"4d83d6d9b2c67062977734b851bf510bb17a98dab40c8c60f0a4d8e47eb4a8d517bf2c","first_seen":"2023-03-07T14:46:31Z","last_seen":"2026-07-29T21:55:32.217172Z","times_seen":242,"resource_available":true,"data":null}},"time_used":725,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":723,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2024-12-23","alert":"Sinkholed","trigger":"block-sphere.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"be.block-sphere.com/app/img/mobile.8dbf73a9.png","fqdn":"be.block-sphere.com","domain":"block-sphere.com","tld":"com"},"ip":{"addr":"172.67.161.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://be.block-sphere.com/app/","date":"2024-12-23T04:14:02.266Z","timestamp":1734927242266,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"block-sphere.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Dec 2024 11:23:11 GMT","end":"Mon, 10 Mar 2025 11:23:10 GMT"},"fingerprint":{"sha1":"DB:47:40:41:42:B8:EE:3F:CB:6B:C3:8D:CF:39:4B:AA:3C:B9:80:2B","sha256":"5D:17:11:73:BB:8D:C3:26:BF:A4:44:01:74:42:15:54:EC:6B:F2:39:28:8A:FC:BC:4D:CF:29:13:B5:86:CA:28"}}},"request":{"raw":"GET /app/img/mobile.8dbf73a9.png HTTP/1.1\r\nHost: be.block-sphere.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://be.block-sphere.com/app/\r\nCookie: angela_session=eyJpdiI6InNHUE9uR3gzb1ZXdWlxTCt5cXptbWc9PSIsInZhbHVlIjoiZVAzQ0RkRGV4N3Nnc1FhRnRCK2hZRmt0UGJydDRxd0N0bUtYcmtoY09tZUNMRGhIZkEzVUVoTUxPdEIyOUFlZVd1VCsxYjdRUEVXY2hMWENwQVVnOUNHM3VUTGpkdUJWWUQrSXllZVQzaTdiY1Jud0pYSEZkeEh3S2t1WlFPajEiLCJtYWMiOiIzYmZjZjI5YTNjZmVjMjUxMzZkOGE0MjJlNWFjNTk1NDc0OTYzYWY1NjNiM2FmMDQwNWQ0NWM2Yzg3MWFmZGJjIn0%3D; lang=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 23 Dec 2024 04:14:03 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 09 Nov 2021 15:48:52 GMT\r\nvary: Accept-Encoding\r\netag: W/\"618a9864-a95c\"\r\nexpires: Wed, 22 Jan 2025 04:13:57 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=bZmFvGJv5tXcxt7AKbNfStN9RKlX8BKXYnoMKjmgKaZ9gGDOv%2BjGw9GoNgDftg%2FhJRe8dxrcqbM7z7BNQGbCmLgRVOTljCnf7WQ32CkEAKtQ6Rf9CfqKjJsuTFjZUqEpTtqc5pJY\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 8f6585c02fd756c5-OSL\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=1888\u0026min_rtt=622\u0026rtt_var=760\u0026sent=1296\u0026recv=115\u0026lost=0\u0026retrans=0\u0026sent_bytes=1478300\u0026recv_bytes=27204\u0026delivery_rate=2369974\u0026cwnd=160500\u0026unsent_bytes=0\u0026cid=57058721e9bee6fd\u0026ts=3537\u0026x=1\", cfExtPri, cfHdrFlush;dur=0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":43356,"size_decoded":43356,"mime_type":"image/png","magic":"PNG image data, 243 x 194, 8-bit/color RGBA, non-interlaced","md5":"8dbf73a95fc9d23317c5839503c23ebe","sha1":"fb4dd62703fe949bd2e2f1550ca6c88b59e748f7","sha256":"8772a77244f06b7253a1f6d86c25c0ed943d08160920ebcd4c2062fd72ed1f94","sha512":"ebaf10b0a1ba2b99f5acc9bcbade3376db4cffde096dbd60416fc71d4e76b5cb74eff362466ba4041236f2e27478db870c4dc6636635dd6d371af46fa904b03c","ssdeep":"768:YBI4DclAQwGXYJ/fa5K3nf2PieQipTr8tw8ySRzxMMyRo4ez1qA/LND:YXLPGoJaQit8tbyamo4exhLND","tlshash":"2813f2a365c3896ca037f82b51ccb6449b0c842f3b0b09956b6bf6541bf540ba63e3e0","first_seen":"2023-05-21T12:40:28Z","last_seen":"2026-03-23T09:33:35.76487Z","times_seen":47,"resource_available":false,"data":null}},"time_used":918,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":742,"receive":176,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2024-12-23","alert":"Sinkholed","trigger":"block-sphere.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"be.block-sphere.com/api/currency/quotation_new?_timespan=1734927242331","fqdn":"be.block-sphere.com","domain":"block-sphere.com","tld":"com"},"ip":{"addr":"172.67.161.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://be.block-sphere.com/app/","date":"2024-12-23T04:14:02.376Z","timestamp":1734927242376,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"block-sphere.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Dec 2024 11:23:11 GMT","end":"Mon, 10 Mar 2025 11:23:10 GMT"},"fingerprint":{"sha1":"DB:47:40:41:42:B8:EE:3F:CB:6B:C3:8D:CF:39:4B:AA:3C:B9:80:2B","sha256":"5D:17:11:73:BB:8D:C3:26:BF:A4:44:01:74:42:15:54:EC:6B:F2:39:28:8A:FC:BC:4D:CF:29:13:B5:86:CA:28"}}},"request":{"raw":"GET /api/currency/quotation_new?_timespan=1734927242331 HTTP/1.1\r\nHost: be.block-sphere.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAuthorization: null\r\nlang: en\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://be.block-sphere.com/app/\r\nCookie: angela_session=eyJpdiI6InNHUE9uR3gzb1ZXdWlxTCt5cXptbWc9PSIsInZhbHVlIjoiZVAzQ0RkRGV4N3Nnc1FhRnRCK2hZRmt0UGJydDRxd0N0bUtYcmtoY09tZUNMRGhIZkEzVUVoTUxPdEIyOUFlZVd1VCsxYjdRUEVXY2hMWENwQVVnOUNHM3VUTGpkdUJWWUQrSXllZVQzaTdiY1Jud0pYSEZkeEh3S2t1WlFPajEiLCJtYWMiOiIzYmZjZjI5YTNjZmVjMjUxMzZkOGE0MjJlNWFjNTk1NDc0OTYzYWY1NjNiM2FmMDQwNWQ0NWM2Yzg3MWFmZGJjIn0%3D; lang=en\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 23 Dec 2024 04:14:02 GMT\r\ncontent-type: application/json\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: POST,GET,OPTIONS,DELETE\r\naccess-control-allow-headers: x-requested-with,content-type,Authorization\r\ncache-control: no-cache, private\r\nset-cookie: angela_session=eyJpdiI6IlJ1NGRDZ0NPam9Gd0I5UGZuV2tjNFE9PSIsInZhbHVlIjoiOHFJd3RWdjYyTjFrV3h0RjZ1NURPakxubW9VTXJ4R0YzdHBVT3NTUVFTVjVcL1Z2SXJCWEhEeE1va0VLZXNQMVZDVVBZR3Bud1VFZnRmTFRYSUlQSFdybkxxTnl6c3pcL2hPV28wWU9rYTBOVFFNZ0ZwK25lMkp6S3BWZXlKYUdGKyIsIm1hYyI6ImRkYjhjODFhZmI4NjZjZjM2ODY3ODFjZTIxMzgxZDllMWViZmRmZDRkNTQ2NzQzYjZiY2MzNjE0ZDM3YjE4MTAifQ%3D%3D; expires=Mon, 23-Dec-2024 06:13:57 GMT; Max-Age=7200; path=/; httponly\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=25Nvo0cL7wYdHyMzzVAwh018egdeTLDUXsCApZu2o%2BScP0LoRFyIDT%2FgGvqdfO%2Fzt8p8Rz%2BGDHXEnUluhxgzwhGgGYlDUi9bQhkwiS9QkpgIpieabZFvW9fJ3I%2FvdMrEYzK%2Fzp8S\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 8f6585c0c81756c5-OSL\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=1462\u0026min_rtt=622\u0026rtt_var=748\u0026sent=1206\u0026recv=100\u0026lost=0\u0026retrans=0\u0026sent_bytes=1385056\u0026recv_bytes=22712\u0026delivery_rate=108459\u0026cwnd=160500\u0026unsent_bytes=0\u0026cid=57058721e9bee6fd\u0026ts=3296\u0026x=1\", cfExtPri, cfHdrFlush;dur=0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":7094,"size_decoded":7094,"mime_type":"application/json","magic":"troff or preprocessor input, ASCII text, with very long lines (8156), with no line terminators","md5":"1ad12417179196448789afe797133a65","sha1":"ea6a88bf730da20316db2603b85984e9f9d70306","sha256":"4042ce7cafb44a52a8080cfdb09f6c951d7729cc48ee268fdf03fe84ea75d014","sha512":"9024094814c34f20bb15990f787e522bab4a1f3abd6287fbb66ef981b552a442e255ea88789cc7cc8fb39199e6943bc19ac1ec7215100b9237d6b081e8f5c8e6","ssdeep":"96:vh0AL25hJ6/L5hgE+YhJ6sJN5hglwIYhg2K6bYhg/anUYhgLn5hhmkEYhuVB:vpsXEzXDb7/ExOLl0","tlshash":"3ff14699a019d968c6c15e4e6abe3f772256f00e9ccb758683ced68853c44707f8f8c2","first_seen":"2024-12-23T04:14:32.647119Z","last_seen":"2024-12-23T04:14:32.647119Z","times_seen":1,"resource_available":false,"data":null}},"time_used":403,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":403,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2024-12-23","alert":"Sinkholed","trigger":"block-sphere.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"be.block-sphere.com/api/news/list?_timespan=1734927242331","fqdn":"be.block-sphere.com","domain":"block-sphere.com","tld":"com"},"ip":{"addr":"172.67.161.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://be.block-sphere.com/app/","date":"2024-12-23T04:14:02.387Z","timestamp":1734927242387,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"block-sphere.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Dec 2024 11:23:11 GMT","end":"Mon, 10 Mar 2025 11:23:10 GMT"},"fingerprint":{"sha1":"DB:47:40:41:42:B8:EE:3F:CB:6B:C3:8D:CF:39:4B:AA:3C:B9:80:2B","sha256":"5D:17:11:73:BB:8D:C3:26:BF:A4:44:01:74:42:15:54:EC:6B:F2:39:28:8A:FC:BC:4D:CF:29:13:B5:86:CA:28"}}},"request":{"raw":"POST /api/news/list?_timespan=1734927242331 HTTP/1.1\r\nHost: be.block-sphere.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded\r\nlang: en\r\nContent-Length: 14\r\nOrigin: https://be.block-sphere.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://be.block-sphere.com/app/\r\nCookie: angela_session=eyJpdiI6InNHUE9uR3gzb1ZXdWlxTCt5cXptbWc9PSIsInZhbHVlIjoiZVAzQ0RkRGV4N3Nnc1FhRnRCK2hZRmt0UGJydDRxd0N0bUtYcmtoY09tZUNMRGhIZkEzVUVoTUxPdEIyOUFlZVd1VCsxYjdRUEVXY2hMWENwQVVnOUNHM3VUTGpkdUJWWUQrSXllZVQzaTdiY1Jud0pYSEZkeEh3S2t1WlFPajEiLCJtYWMiOiIzYmZjZjI5YTNjZmVjMjUxMzZkOGE0MjJlNWFjNTk1NDc0OTYzYWY1NjNiM2FmMDQwNWQ0NWM2Yzg3MWFmZGJjIn0%3D; lang=en\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 23 Dec 2024 04:14:02 GMT\r\ncontent-type: application/json\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: POST,GET,OPTIONS,DELETE\r\naccess-control-allow-headers: x-requested-with,content-type,Authorization\r\ncache-control: no-cache, private\r\nset-cookie: angela_session=eyJpdiI6ImNcL3BqVTBCdlVWWHk5RXI5cWw4Mk53PT0iLCJ2YWx1ZSI6IjgxK3BRNEo1VDdnYWhiOWpUSmJiaEw4SEFmZDlHUFFlNnhMME5iZm5SdVBTMElWbGIxUldraE1wdTJcLytrb0VkeGR1Y3dRQ2VISnAxbG1WeW80bGtGRUs0S1pNTkRHejJXYldPMGFvaE1la3BWbDZ4QUhTTWRwdHA3UDBNSTV4WiIsIm1hYyI6IjEyZjkyMThkNjIyNWY2NDhjODA0YzQ2Y2IxMzE4ZDEyMDg3NjMxYTcxOWQ4MDNkYjgyZjZjM2EyZmQyOTZiY2UifQ%3D%3D; expires=Mon, 23-Dec-2024 06:13:57 GMT; Max-Age=7200; path=/; httponly\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=IKnrZOxvAlpywqO7sFvc4Hc5oiM6RvdJ5XM24mcKsdMHW%2B6Ijdq9UHE8LOMJ5TRXQeH5WuZ%2Bi7AdE38vdPm%2BRokwmMGClClPgnGdeCDSX%2F9jNeshJr6x30x1EZMkIqPBgX27%2F6cD\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 8f6585c0c81f56c5-OSL\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=1492\u0026min_rtt=622\u0026rtt_var=713\u0026sent=1197\u0026recv=95\u0026lost=0\u0026retrans=0\u0026sent_bytes=1380188\u0026recv_bytes=21939\u0026delivery_rate=33425\u0026cwnd=160500\u0026unsent_bytes=0\u0026cid=57058721e9bee6fd\u0026ts=3118\u0026x=1\", cfExtPri, cfHdrFlush;dur=0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":240,"size_decoded":240,"mime_type":"application/json","magic":"troff or preprocessor input, ASCII text, with no line terminators","md5":"52da6262d59bebfab9602c7e344a7491","sha1":"03b8990e3163ffd80548c9ed8ec753ab599d9045","sha256":"7c81c0f8ab3298e54d2b7d881c913ca13ea4e283bcb08a761d4532b22403b416","sha512":"8113775d88dc0f54e1c7868ace8365724309f5f2317a6002dc8c8cb0591f58b029c62b3bc6896dea3447a7d59ad3360a1a1f1cbe25158642a24b3a930cead582","ssdeep":"","tlshash":"cdd02bf5ae14e899c1c44e1f71b86f372482c11181cb102137d0d094c3a18f0536b54f","first_seen":"2024-09-19T22:14:59.550149Z","last_seen":"2024-12-23T04:14:32.64966Z","times_seen":3,"resource_available":false,"data":null}},"time_used":219,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":219,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2024-12-23","alert":"Sinkholed","trigger":"block-sphere.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"wss","addr":"be.block-sphere.com/wss/socket.io/?EIO=3\u0026transport=websocket\u0026sid=728632e138dad94103399360","fqdn":"be.block-sphere.com","domain":"block-sphere.com","tld":"com"},"ip":{"addr":"172.67.161.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://be.block-sphere.com/app/","date":"2024-12-23T04:14:02.694Z","timestamp":1734927242694,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"block-sphere.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Dec 2024 11:23:11 GMT","end":"Mon, 10 Mar 2025 11:23:10 GMT"},"fingerprint":{"sha1":"DB:47:40:41:42:B8:EE:3F:CB:6B:C3:8D:CF:39:4B:AA:3C:B9:80:2B","sha256":"5D:17:11:73:BB:8D:C3:26:BF:A4:44:01:74:42:15:54:EC:6B:F2:39:28:8A:FC:BC:4D:CF:29:13:B5:86:CA:28"}}},"request":{"raw":"GET /wss/socket.io/?EIO=3\u0026transport=websocket\u0026sid=728632e138dad94103399360 HTTP/1.1\r\nHost: be.block-sphere.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nSec-WebSocket-Version: 13\r\nOrigin: https://be.block-sphere.com\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: v/N9f8VMV52T2DiX0TwVQQ==\r\nDNT: 1\r\nConnection: keep-alive, Upgrade\r\nCookie: angela_session=eyJpdiI6IkJWekU4SmR3SXlYdzFGVnlWQzU3cVE9PSIsInZhbHVlIjoidFZyUGFRZXdPZ0RhSjJDTWdmUEkzT3VGQnVXTFAxbElIU2JNUHJiaFlsZjQ4QkljRlpPMHl5UG1ZeTBFRmJsekw5MzdCXC9cL2d3eFwvZmlZRHRIVW9lVkpPR2JBU0R1N01wZlpIRDhEMFZDVXUzeUtPQXBBaWZwXC9vektJMjRNcnIxIiwibWFjIjoiMjU0MThlOGIzZjZhYmFiMGU3NDVjY2U2ZjY4MzhjODJhZjRmOGZmZDMyYzY3YWY3NGFlYmE0YzZhN2IwZTg4ZiJ9; lang=en\r\nSec-Fetch-Dest: websocket\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 101 Switching Protocols\r\nDate: Mon, 23 Dec 2024 04:14:03 GMT\r\nContent-Length: 0\r\nConnection: upgrade\r\nUpgrade: websocket\r\nSec-WebSocket-Version: 13\r\nSec-WebSocket-Accept: 1ROzTbk/vaBif2k3uRM4FhQzxI0=\r\ncf-cache-status: DYNAMIC\r\nReport-To: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=vABJJRz96gIbJvL05ejinkQuBPdob6GbbqpICCK0oRYNaMeEWjm6Xn8iL%2FzYdTxzjeB50EDKfYS%2Bzn0DWACErufYMiFr6DqyYKX0r%2FdN5x0cSi0xBVM7TG9gVLYYOSiNVJbr29U7\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nNEL: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nServer: cloudflare\r\nCF-RAY: 8f6585c32b1e568a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=467\u0026min_rtt=450\u0026rtt_var=124\u0026sent=5\u0026recv=8\u0026lost=0\u0026retrans=0\u0026sent_bytes=3127\u0026recv_bytes=1589\u0026delivery_rate=8242884\u0026cwnd=252\u0026unsent_bytes=0\u0026cid=b3de205b93c0b405\u0026ts=619\u0026x=0\"\r\n\r\n","headers":null,"cookies":null,"status_code":"101","status_text":"Switching Protocols","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-02T06:58:21.972859Z","times_seen":17668698,"resource_available":true,"data":null}},"time_used":676,"timings":{"blocked":0,"dns":27,"connect":26,"send":0,"wait":595,"receive":0,"ssl":53},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2024-12-23","alert":"Sinkholed","trigger":"block-sphere.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"be.block-sphere.com/upload/1698329934394980.png","fqdn":"be.block-sphere.com","domain":"block-sphere.com","tld":"com"},"ip":{"addr":"172.67.161.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://be.block-sphere.com/app/","date":"2024-12-23T04:14:02.973Z","timestamp":1734927242973,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"block-sphere.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Dec 2024 11:23:11 GMT","end":"Mon, 10 Mar 2025 11:23:10 GMT"},"fingerprint":{"sha1":"DB:47:40:41:42:B8:EE:3F:CB:6B:C3:8D:CF:39:4B:AA:3C:B9:80:2B","sha256":"5D:17:11:73:BB:8D:C3:26:BF:A4:44:01:74:42:15:54:EC:6B:F2:39:28:8A:FC:BC:4D:CF:29:13:B5:86:CA:28"}}},"request":{"raw":"GET /upload/1698329934394980.png HTTP/1.1\r\nHost: be.block-sphere.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://be.block-sphere.com/app/\r\nCookie: angela_session=eyJpdiI6IlBRYmlkNFNXdnAzTnZnOWZybWR5VGc9PSIsInZhbHVlIjoidWdXOElJUTdLMnF2QUFqWkNzN0tcLzRVcG56WGx6dWU1T1RXbUhCMHZ1UEJoeWVOOWJTRmpuQnp3cEdycG1HTFRXZjhPY1NcL1oxNGc4WkVOa01GUWdNRysxSTRJNkdmZTZZaUFGaUhtdmZaTExNRzJjTTR1VDVXQ3E4eW1zSVV5ViIsIm1hYyI6ImZiNWU2MDZiZDY3NmVjMTcxODdiZWM1MTdhZGMxMTIxNGU5NWE3MDc3ZGI3Y2RiNTU1MDY3OWM4YTg4MjhlODYifQ%3D%3D; lang=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 23 Dec 2024 04:14:03 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 04 Nov 2024 08:47:52 GMT\r\nvary: Accept-Encoding\r\netag: W/\"67288a38-7427\"\r\nexpires: Wed, 22 Jan 2025 04:13:57 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=9oIUyPlRPtchtHJr7PjgCS8L02kPWwJi8w7g9%2FudRfvd7k9CmwDiPo5hf%2BY7s0V4suXU07KIxSne35P0sSbNJUcDn6%2F6oa2fginB%2FcusU4A8FTP0S4KAwKBEagExm6SSvCBeqqye\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 8f6585c489f656c5-OSL\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=1237\u0026min_rtt=622\u0026rtt_var=253\u0026sent=1743\u0026recv=146\u0026lost=0\u0026retrans=0\u0026sent_bytes=1993542\u0026recv_bytes=31947\u0026delivery_rate=8184124\u0026cwnd=160500\u0026unsent_bytes=0\u0026cid=57058721e9bee6fd\u0026ts=4239\u0026x=1\", cfExtPri, cfHdrFlush;dur=0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":29735,"size_decoded":29735,"mime_type":"image/png","magic":"PNG image data, 603 x 600, 8-bit/color RGBA, non-interlaced","md5":"b1db708cf71a4aa2d6cc69a085f19d59","sha1":"0da3187ea3a7ef36bd9914dbb56a46416d6f7247","sha256":"56ad20b1311e40efb15c078922c0281e10c604bb8c10e282a6ce7d04050da6b4","sha512":"1ddc3a8d43d1b3b0ab3c855a3aa40e0f5cba66611189e2e51ae79fc8ff859be0140b5632ab5ee4e31cff9cec494e0e8a446fbe0a2d470a39aeeec441d0dca7f1","ssdeep":"768:8KNylh+PGM6Z/Id+6It17SeLEdfxusnpn+6U62e/98E9c7:8FYNIISt17SeLEpU0pn+Z6b/mic7","tlshash":"a2d2e14ab295844ea7921c0633be21985105403d3b33a2e3f5bbb6bdd8df05f8571aad","first_seen":"2023-11-15T15:08:39Z","last_seen":"2024-12-23T04:14:32.652156Z","times_seen":4,"resource_available":false,"data":null}},"time_used":741,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":740,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2024-12-23","alert":"Sinkholed","trigger":"block-sphere.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"srz.salesmartly.com/client/log/log?plugin_sign=a65e02a3324fa7d4e29245e8f09a5364\u0026plugin_id=gglw39\u0026over_time=\u0026env=chat\u0026_=1734927241451\u0026_lt=\u0026_u=","fqdn":"srz.salesmartly.com","domain":"salesmartly.com","tld":"com"},"ip":{"addr":"143.204.55.57","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://be.block-sphere.com/app/","date":"2024-12-23T04:14:01.463Z","timestamp":1734927241463,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.salesmartly.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M02","organization":"Amazon"},"validity":{"start":"Mon, 02 Sep 2024 00:00:00 GMT","end":"Thu, 02 Oct 2025 23:59:59 GMT"},"fingerprint":{"sha1":"CB:87:D2:92:FE:AD:D2:26:C4:24:86:B5:6B:BE:B2:2B:5B:3A:B2:2F","sha256":"A5:9D:EB:CC:A0:AA:65:42:29:CB:43:8A:46:29:01:F1:6E:55:12:D8:F8:FD:DB:5A:89:78:9D:8F:61:18:AE:12"}}},"request":{"raw":"POST /client/log/log?plugin_sign=a65e02a3324fa7d4e29245e8f09a5364\u0026plugin_id=gglw39\u0026over_time=\u0026env=chat\u0026_=1734927241451\u0026_lt=\u0026_u= HTTP/1.1\r\nHost: srz.salesmartly.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded\r\nContent-Length: 502\r\nOrigin: https://be.block-sphere.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://be.block-sphere.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/json; charset=UTF-8\r\ndate: Mon, 23 Dec 2024 04:14:01 GMT\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 86400\r\nx-powered-by: PHP/7.2.34\r\naccess-control-allow-origin: https://be.block-sphere.com\r\naccess-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept, Cpl, Agent-Cpl, Send-Cpl, Client-Type\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 6480520a5e02f3163410e3134bd77baa.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-C1\r\nx-amz-cf-id: mxh7dlquwu6h3CH4IB5ZklTZrD7kZEehSW6vyZV5QylZVCZ7QTXw1w==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":47,"size_decoded":47,"mime_type":"application/json; charset=UTF-8","magic":"troff or preprocessor input, ASCII text, with no line terminators","md5":"24c36f45a0e0c33c61400e3c9e928469","sha1":"feba60f8f0df71b197f07c8033c038e3d4c2d124","sha256":"8bb7420fb4090abbcf073efd8242bbb00c1f972abfbb51c37563a4ce3f45208b","sha512":"7187ebdd5d3aeff67ed4f0754dda7e3356f02cabc7dc440fab654a1bd4ffc9702137374ddd37107003919080ca6068d2484277b5053c5b1d12fc3c92dc5f2d19","ssdeep":"","tlshash":"6b90022ea90a40868e4c4d8e20e9b912b58d500005511b504da012558610835b353809","first_seen":"2023-04-19T11:38:49Z","last_seen":"2025-04-05T05:03:16.663626Z","times_seen":219,"resource_available":false,"data":null}},"time_used":519,"timings":{"blocked":68,"dns":58,"connect":1,"send":0,"wait":381,"receive":0,"ssl":9},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"be.block-sphere.com/app/js/chunk-vendors.f400527f.js","fqdn":"be.block-sphere.com","domain":"block-sphere.com","tld":"com"},"ip":{"addr":"172.67.161.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://be.block-sphere.com/app/","date":"2024-12-23T04:14:00.158Z","timestamp":1734927240158,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"block-sphere.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Dec 2024 11:23:11 GMT","end":"Mon, 10 Mar 2025 11:23:10 GMT"},"fingerprint":{"sha1":"DB:47:40:41:42:B8:EE:3F:CB:6B:C3:8D:CF:39:4B:AA:3C:B9:80:2B","sha256":"5D:17:11:73:BB:8D:C3:26:BF:A4:44:01:74:42:15:54:EC:6B:F2:39:28:8A:FC:BC:4D:CF:29:13:B5:86:CA:28"}}},"request":{"raw":"GET /app/js/chunk-vendors.f400527f.js HTTP/1.1\r\nHost: be.block-sphere.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://be.block-sphere.com/app/\r\nCookie: angela_session=eyJpdiI6InNHUE9uR3gzb1ZXdWlxTCt5cXptbWc9PSIsInZhbHVlIjoiZVAzQ0RkRGV4N3Nnc1FhRnRCK2hZRmt0UGJydDRxd0N0bUtYcmtoY09tZUNMRGhIZkEzVUVoTUxPdEIyOUFlZVd1VCsxYjdRUEVXY2hMWENwQVVnOUNHM3VUTGpkdUJWWUQrSXllZVQzaTdiY1Jud0pYSEZkeEh3S2t1WlFPajEiLCJtYWMiOiIzYmZjZjI5YTNjZmVjMjUxMzZkOGE0MjJlNWFjNTk1NDc0OTYzYWY1NjNiM2FmMDQwNWQ0NWM2Yzg3MWFmZGJjIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 23 Dec 2024 04:14:00 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 09 Nov 2021 15:48:52 GMT\r\nvary: Accept-Encoding\r\netag: W/\"618a9864-1fe116\"\r\nexpires: Mon, 23 Dec 2024 16:13:55 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=tZyeyPqb5F4CdKgBT6bO60G1weHR912FOSfznb9%2BPF%2BcE9bl8fykxZO2vZHWYzu8cyb8rl%2FYx93g1AKX14xyxI2ryHI3orjZZWkNrN6hZEZWdROErtWJbEzgYWUm23pcizTndaO7\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 8f6585b2d8ab56c5-OSL\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=3584\u0026min_rtt=1930\u0026rtt_var=1494\u0026sent=51\u0026recv=22\u0026lost=0\u0026retrans=0\u0026sent_bytes=33933\u0026recv_bytes=7285\u0026delivery_rate=1636694\u0026cwnd=12000\u0026unsent_bytes=0\u0026cid=57058721e9bee6fd\u0026ts=1332\u0026x=1\", cfExtPri, cfHdrFlush;dur=0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":2089238,"size_decoded":2089238,"mime_type":"application/javascript","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-02T06:58:21.972859Z","times_seen":17668698,"resource_available":true,"data":null}},"time_used":1361,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":662,"receive":699,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2024-12-23","alert":"Sinkholed","trigger":"block-sphere.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"be.block-sphere.com/app/layer/theme/default/layer.css?v=3.1.1","fqdn":"be.block-sphere.com","domain":"block-sphere.com","tld":"com"},"ip":{"addr":"172.67.161.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://be.block-sphere.com/app/","date":"2024-12-23T04:14:00.916Z","timestamp":1734927240916,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"block-sphere.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Dec 2024 11:23:11 GMT","end":"Mon, 10 Mar 2025 11:23:10 GMT"},"fingerprint":{"sha1":"DB:47:40:41:42:B8:EE:3F:CB:6B:C3:8D:CF:39:4B:AA:3C:B9:80:2B","sha256":"5D:17:11:73:BB:8D:C3:26:BF:A4:44:01:74:42:15:54:EC:6B:F2:39:28:8A:FC:BC:4D:CF:29:13:B5:86:CA:28"}}},"request":{"raw":"GET /app/layer/theme/default/layer.css?v=3.1.1 HTTP/1.1\r\nHost: be.block-sphere.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://be.block-sphere.com/app/\r\nCookie: angela_session=eyJpdiI6InNHUE9uR3gzb1ZXdWlxTCt5cXptbWc9PSIsInZhbHVlIjoiZVAzQ0RkRGV4N3Nnc1FhRnRCK2hZRmt0UGJydDRxd0N0bUtYcmtoY09tZUNMRGhIZkEzVUVoTUxPdEIyOUFlZVd1VCsxYjdRUEVXY2hMWENwQVVnOUNHM3VUTGpkdUJWWUQrSXllZVQzaTdiY1Jud0pYSEZkeEh3S2t1WlFPajEiLCJtYWMiOiIzYmZjZjI5YTNjZmVjMjUxMzZkOGE0MjJlNWFjNTk1NDc0OTYzYWY1NjNiM2FmMDQwNWQ0NWM2Yzg3MWFmZGJjIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 23 Dec 2024 04:14:01 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 09 Nov 2021 15:48:54 GMT\r\nvary: Accept-Encoding\r\netag: W/\"618a9866-381f\"\r\nexpires: Mon, 23 Dec 2024 16:13:55 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\npriority: u=2,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=jvy%2BZuhr36TcXTJHxebdlz%2B0NYwrY%2BMwfzhXW0WYRZGQVYAWyqIeMyNAZFM2VwQsc6nu%2B39mypsHxF0sF%2FMTQuXhJuujU%2FYW8%2B1u0Tr%2Fn1wm29fR%2F4lR53ClpiR1cxpHmSXRzhJD\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 8f6585b7bb8f56c5-OSL\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=1357\u0026min_rtt=622\u0026rtt_var=543\u0026sent=1054\u0026recv=67\u0026lost=0\u0026retrans=0\u0026sent_bytes=1228854\u0026recv_bytes=9854\u0026delivery_rate=2515143\u0026cwnd=160500\u0026unsent_bytes=0\u0026cid=57058721e9bee6fd\u0026ts=2010\u0026x=1\", cfExtPri, cfHdrFlush;dur=0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":14367,"size_decoded":14367,"mime_type":"text/css","magic":"ASCII text, with very long lines (14367), with no line terminators","md5":"3d2e0d91c5c0b96abb8dbdc2234aba77","sha1":"9d55e153b30fd7414fada5718e20918e9c7f65e7","sha256":"e3144d018a6a24f733c6fc2a2ee603fb583f0030585e9d4b71bec471b78e31fc","sha512":"42bf3eff281998d088ce012b9a5910f72951c91715595572bb968fbfc5fa2b1cddacef3ca683a1734eb41114b302b6a4dad8b7432c5877b3563a080a2547ae05","ssdeep":"96:mp+Ntha8qNEp+wRY1vUPXiK6nMLPD2OtLzXyPHL/LztJDzyv2OQ7KGx1jyd2/SWz:1WmLr2OtSrzzt42OQ7KGx1jCWR2b+RcU","tlshash":"2e5221e144811299b0278721d6dc7eba32f88d43e5630daef257381f874c6dba2b6647","first_seen":"2023-04-05T06:05:22Z","last_seen":"2026-08-02T00:06:12.688607Z","times_seen":6786,"resource_available":false,"data":null}},"time_used":564,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":564,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2024-12-23","alert":"Sinkholed","trigger":"block-sphere.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"be.block-sphere.com/app/img/cloud.07218725.png","fqdn":"be.block-sphere.com","domain":"block-sphere.com","tld":"com"},"ip":{"addr":"172.67.161.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://be.block-sphere.com/app/","date":"2024-12-23T04:14:02.274Z","timestamp":1734927242274,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"block-sphere.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Dec 2024 11:23:11 GMT","end":"Mon, 10 Mar 2025 11:23:10 GMT"},"fingerprint":{"sha1":"DB:47:40:41:42:B8:EE:3F:CB:6B:C3:8D:CF:39:4B:AA:3C:B9:80:2B","sha256":"5D:17:11:73:BB:8D:C3:26:BF:A4:44:01:74:42:15:54:EC:6B:F2:39:28:8A:FC:BC:4D:CF:29:13:B5:86:CA:28"}}},"request":{"raw":"GET /app/img/cloud.07218725.png HTTP/1.1\r\nHost: be.block-sphere.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://be.block-sphere.com/app/\r\nCookie: angela_session=eyJpdiI6InNHUE9uR3gzb1ZXdWlxTCt5cXptbWc9PSIsInZhbHVlIjoiZVAzQ0RkRGV4N3Nnc1FhRnRCK2hZRmt0UGJydDRxd0N0bUtYcmtoY09tZUNMRGhIZkEzVUVoTUxPdEIyOUFlZVd1VCsxYjdRUEVXY2hMWENwQVVnOUNHM3VUTGpkdUJWWUQrSXllZVQzaTdiY1Jud0pYSEZkeEh3S2t1WlFPajEiLCJtYWMiOiIzYmZjZjI5YTNjZmVjMjUxMzZkOGE0MjJlNWFjNTk1NDc0OTYzYWY1NjNiM2FmMDQwNWQ0NWM2Yzg3MWFmZGJjIn0%3D; lang=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 23 Dec 2024 04:14:03 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 09 Nov 2021 15:48:52 GMT\r\nvary: Accept-Encoding\r\netag: W/\"618a9864-db46\"\r\nexpires: Wed, 22 Jan 2025 04:13:57 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=TooOC9ZmgB%2B7U7hCiVGvA0QAvCUwI9vKlc2etRZIkhiwZ7a4WchCB8WDCI%2F1LbPSnjpO2esnGOe0okWY6B4b4TGUJCjzePKUuGUP6CvNeERjCMCX8u8CzLTTKqF9oyQ%2BTotaV0uC\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 8f6585c02fde56c5-OSL\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=1794\u0026min_rtt=622\u0026rtt_var=759\u0026sent=1313\u0026recv=120\u0026lost=0\u0026retrans=0\u0026sent_bytes=1493505\u0026recv_bytes=29605\u0026delivery_rate=1315101\u0026cwnd=160500\u0026unsent_bytes=0\u0026cid=57058721e9bee6fd\u0026ts=3560\u0026x=1\", cfExtPri, cfHdrFlush;dur=0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":56134,"size_decoded":56134,"mime_type":"image/png","magic":"PNG image data, 211 x 194, 8-bit/color RGBA, non-interlaced","md5":"07218725beaae9feb5845191b8df747b","sha1":"9622ce6cd67b5dd44e9fb0a31d6ca3e9f2e013a5","sha256":"0176d3f2ec80f0963ec7c62076f1d349695792c54b4979c4a7686a9c9a4a025d","sha512":"cbc8699df18f46cf564b2dd58644fa69aa5149fe988f894968c1fbaf5b98311361ff74889e34e810d1782070c77275a8dc34d0d8b0aa91be960250336862acf1","ssdeep":"1536:mod3wnNYn8+1cWpX9gh6772VcT2Sr0zcitjvv4x:33w8J1cWpX9Y67lr0zZjK","tlshash":"bb43f2e7a5a46020bb7e9a6462f356d64033bc0f92d1798b0bc677594ee820cf397743","first_seen":"2023-05-21T12:40:28Z","last_seen":"2026-03-23T09:33:35.79739Z","times_seen":47,"resource_available":false,"data":null}},"time_used":941,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":760,"receive":181,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2024-12-23","alert":"Sinkholed","trigger":"block-sphere.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"be.block-sphere.com/app/","fqdn":"be.block-sphere.com","domain":"block-sphere.com","tld":"com"},"ip":{"addr":"172.67.161.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2024-12-23T04:13:59.682Z","timestamp":1734927239682,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"block-sphere.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Dec 2024 11:23:11 GMT","end":"Mon, 10 Mar 2025 11:23:10 GMT"},"fingerprint":{"sha1":"DB:47:40:41:42:B8:EE:3F:CB:6B:C3:8D:CF:39:4B:AA:3C:B9:80:2B","sha256":"5D:17:11:73:BB:8D:C3:26:BF:A4:44:01:74:42:15:54:EC:6B:F2:39:28:8A:FC:BC:4D:CF:29:13:B5:86:CA:28"}}},"request":{"raw":"GET /app/ HTTP/1.1\r\nHost: be.block-sphere.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: angela_session=eyJpdiI6InNHUE9uR3gzb1ZXdWlxTCt5cXptbWc9PSIsInZhbHVlIjoiZVAzQ0RkRGV4N3Nnc1FhRnRCK2hZRmt0UGJydDRxd0N0bUtYcmtoY09tZUNMRGhIZkEzVUVoTUxPdEIyOUFlZVd1VCsxYjdRUEVXY2hMWENwQVVnOUNHM3VUTGpkdUJWWUQrSXllZVQzaTdiY1Jud0pYSEZkeEh3S2t1WlFPajEiLCJtYWMiOiIzYmZjZjI5YTNjZmVjMjUxMzZkOGE0MjJlNWFjNTk1NDc0OTYzYWY1NjNiM2FmMDQwNWQ0NWM2Yzg3MWFmZGJjIn0%3D\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 23 Dec 2024 04:13:59 GMT\r\ncontent-type: text/html\r\nlast-modified: Mon, 16 Dec 2024 05:55:34 GMT\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: DYNAMIC\r\npriority: u=1,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=dfc108P3YF9Eewob%2Fzir7TGgSSNHSceeKoZve3rp9%2FXYHBJWhycbuKUHhG3cRBWa7Aq4UYznUZuRPucfmh4FCzOLLWwXky28h9SFTVRxRyX%2Fw0YWk70l0h5BrezO5oVXT4t20JES\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 8f6585b00ec156c5-OSL\r\ncontent-encoding: br\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=4111\u0026min_rtt=3499\u0026rtt_var=1749\u0026sent=13\u0026recv=8\u0026lost=0\u0026retrans=0\u0026sent_bytes=4165\u0026recv_bytes=1507\u0026delivery_rate=169727\u0026cwnd=12000\u0026unsent_bytes=0\u0026cid=57058721e9bee6fd\u0026ts=413\u0026x=1\", cfExtPri, cfHdrFlush;dur=0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":2129,"size_decoded":2129,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (2231), with no line terminators","md5":"76c116b62689c745c25e6ab9fcf69254","sha1":"c03409fccc66d379e72140a4a16d3b9702d3d649","sha256":"98d805d1c19c67bafce2df803cab33ff04104b7116876dc5e0edc5a7ebc76fa4","sha512":"de7ae096bf55c94bb484933369829b0218323c56f05360b7f3e0d291852069d8dfe46bd67980179514f20d7f5566473adbfbef288db0928ed03f7e371b347ed2","ssdeep":"","tlshash":"82415105fe94e5ac5e62ada78f31f26e889afe4e4c31d41870dc852e83d2fc4054af15","first_seen":"2024-12-23T04:14:32.661267Z","last_seen":"2024-12-23T04:14:32.661267Z","times_seen":1,"resource_available":false,"data":null}},"time_used":201,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":201,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2024-12-23","alert":"Sinkholed","trigger":"block-sphere.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"be.block-sphere.com/upload/1698329988462632.png","fqdn":"be.block-sphere.com","domain":"block-sphere.com","tld":"com"},"ip":{"addr":"172.67.161.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://be.block-sphere.com/app/","date":"2024-12-23T04:14:02.999Z","timestamp":1734927242999,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"block-sphere.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Dec 2024 11:23:11 GMT","end":"Mon, 10 Mar 2025 11:23:10 GMT"},"fingerprint":{"sha1":"DB:47:40:41:42:B8:EE:3F:CB:6B:C3:8D:CF:39:4B:AA:3C:B9:80:2B","sha256":"5D:17:11:73:BB:8D:C3:26:BF:A4:44:01:74:42:15:54:EC:6B:F2:39:28:8A:FC:BC:4D:CF:29:13:B5:86:CA:28"}}},"request":{"raw":"GET /upload/1698329988462632.png HTTP/1.1\r\nHost: be.block-sphere.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://be.block-sphere.com/app/\r\nCookie: angela_session=eyJpdiI6IlBRYmlkNFNXdnAzTnZnOWZybWR5VGc9PSIsInZhbHVlIjoidWdXOElJUTdLMnF2QUFqWkNzN0tcLzRVcG56WGx6dWU1T1RXbUhCMHZ1UEJoeWVOOWJTRmpuQnp3cEdycG1HTFRXZjhPY1NcL1oxNGc4WkVOa01GUWdNRysxSTRJNkdmZTZZaUFGaUhtdmZaTExNRzJjTTR1VDVXQ3E4eW1zSVV5ViIsIm1hYyI6ImZiNWU2MDZiZDY3NmVjMTcxODdiZWM1MTdhZGMxMTIxNGU5NWE3MDc3ZGI3Y2RiNTU1MDY3OWM4YTg4MjhlODYifQ%3D%3D; lang=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 23 Dec 2024 04:14:03 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 04 Nov 2024 08:47:49 GMT\r\nvary: Accept-Encoding\r\netag: W/\"67288a35-17a9\"\r\nexpires: Wed, 22 Jan 2025 04:13:57 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=1DYjWL%2B%2FkyiYqsSs402q1PpC7YX5x%2B9iPElgRrOB2mDmvLp2wgMWylsvr8nRpgNPV1OKz%2BjpHUX6F%2BQ%2BPXHvNcwO63W3Kt1ldrbfLss3FZdBGIQlBGbQ3u27Kgf7P3GTqnfjCQmw\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 8f6585c4aa0c56c5-OSL\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=1309\u0026min_rtt=622\u0026rtt_var=352\u0026sent=1648\u0026recv=139\u0026lost=0\u0026retrans=0\u0026sent_bytes=1885705\u0026recv_bytes=31628\u0026delivery_rate=15328156\u0026cwnd=160500\u0026unsent_bytes=0\u0026cid=57058721e9bee6fd\u0026ts=4056\u0026x=1\", cfExtPri, cfHdrFlush;dur=0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":6057,"size_decoded":6057,"mime_type":"image/png","magic":"PNG image data, 200 x 200, 8-bit gray+alpha, non-interlaced","md5":"5625411d1dc68a1fa696988732a586b8","sha1":"f7ba68e34afc3ece9e98589e5febf6fbd8251f3c","sha256":"3352d58d5dc2f9e9e4cb35278b48c87ac5ca4d3aa3a4dc8460fcdbd71aa77b4f","sha512":"507e67b699f219db9063ffd4a8210f80b71f6b6833970c2ec246f1d67f4b585d09be0c7c478536a35ae0158ff7ae6b2cda5dd04d2c1156aa73bba20b90422b9a","ssdeep":"96:rSLeBKr7irBf8Wj29Lg7u4Yi5ooc9QmE671s6999fCeHiEOe0qGEpv7AZGIpUlkY:rSLeBMiVft29Lg7u4Yi5671/jLRv7AZo","tlshash":"b5c1aedc71e6ba23866a4c7203a259b13032fd36c94be6cd97d8cbc47c752858794a0c","first_seen":"2023-05-12T20:10:54Z","last_seen":"2026-05-19T06:31:41.547294Z","times_seen":54,"resource_available":false,"data":null}},"time_used":537,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":537,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2024-12-23","alert":"Sinkholed","trigger":"block-sphere.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"plugin-code.salesmartly.com/chat/widget/code/js/chunk-common.b9178a68.js","fqdn":"plugin-code.salesmartly.com","domain":"salesmartly.com","tld":"com"},"ip":{"addr":"3.164.240.26","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://be.block-sphere.com/app/","date":"2024-12-23T04:14:01.225Z","timestamp":1734927241225,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.salesmartly.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M02","organization":"Amazon"},"validity":{"start":"Tue, 21 May 2024 00:00:00 GMT","end":"Thu, 19 Jun 2025 23:59:59 GMT"},"fingerprint":{"sha1":"E3:F1:80:75:0D:19:F2:CB:7A:D6:61:69:BD:7B:62:4C:CB:27:2E:F1","sha256":"77:92:D1:6C:BB:B2:F8:17:08:A4:2A:83:96:42:FD:9A:DA:66:97:81:DF:14:1F:3C:50:9C:D7:F7:8E:F7:F1:CD"}}},"request":{"raw":"GET /chat/widget/code/js/chunk-common.b9178a68.js HTTP/1.1\r\nHost: plugin-code.salesmartly.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript\r\nserver: AliyunOSS\r\ndate: Tue, 17 Dec 2024 08:22:25 GMT\r\nx-oss-request-id: 676134C17732EB3331ACBE3F\r\nlast-modified: Tue, 17 Dec 2024 08:10:32 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 1058619125043260730\r\nx-oss-storage-class: Standard\r\ncache-control: public, max-age=15552000\r\ncontent-md5: 0QPD7mr69fOnZRluh34+yQ==\r\nx-oss-server-time: 5\r\ncontent-encoding: gzip\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 cfc62e0b84c9c493a10eb6aef6aad512.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P2\r\nx-amz-cf-id: thcTITg25SGQOrYJed5MpcVOe12-2HczQvmqp_6H0WQQ5BttDSyLkA==\r\nage: 503496\r\nvary: Accept-Encoding,Origin, Origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":20351,"size_decoded":20351,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (20351), with no line terminators","md5":"d103c3ee6afaf5f3a765196e877e3ec9","sha1":"0ca20bc922c40c6b98591b9826f28221e230ac73","sha256":"8f9ce2207d7b7ac3a34de0aea783e87e45706e61b06d16e84efa70f968fba309","sha512":"02bfb852b52974c712c07e738acdc6883f1c1b8f2b40da91206078649c9ba36ae7a913a19003b522fb1310139fc4f07062a3834ead42a75d35916434b1fb53aa","ssdeep":"192:FjwivCwQIxiXX2fWt7EUBf7XNtQj0zT13vxbBEbcLjpoNzhhROd1d4JUYwrMaG/7:FjpNA3EURN2jGT13vJpgdyo8X+C3JtA","tlshash":"d99209ccb0d7f0450a5630a8c1af214be23a3c94b84e9552da66e0e67c3455eb277f8f","first_seen":"2024-12-20T00:08:14.914973Z","last_seen":"2024-12-24T02:33:38.663011Z","times_seen":7,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"plugin-code.salesmartly.com/chat/widget/code/js/plugin.4c24afa6.js","fqdn":"plugin-code.salesmartly.com","domain":"salesmartly.com","tld":"com"},"ip":{"addr":"3.164.240.26","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://be.block-sphere.com/app/","date":"2024-12-23T04:14:01.333Z","timestamp":1734927241333,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.salesmartly.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M02","organization":"Amazon"},"validity":{"start":"Tue, 21 May 2024 00:00:00 GMT","end":"Thu, 19 Jun 2025 23:59:59 GMT"},"fingerprint":{"sha1":"E3:F1:80:75:0D:19:F2:CB:7A:D6:61:69:BD:7B:62:4C:CB:27:2E:F1","sha256":"77:92:D1:6C:BB:B2:F8:17:08:A4:2A:83:96:42:FD:9A:DA:66:97:81:DF:14:1F:3C:50:9C:D7:F7:8E:F7:F1:CD"}}},"request":{"raw":"GET /chat/widget/code/js/plugin.4c24afa6.js HTTP/1.1\r\nHost: plugin-code.salesmartly.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript\r\nserver: AliyunOSS\r\ndate: Tue, 17 Dec 2024 08:22:26 GMT\r\nx-oss-request-id: 676134C25A57B532385CA5C8\r\nlast-modified: Tue, 17 Dec 2024 08:10:32 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 17928191793971066515\r\nx-oss-storage-class: Standard\r\ncache-control: public, max-age=15552000\r\ncontent-md5: f3W2G/zl2WRANAyleqRJzA==\r\nx-oss-server-time: 18\r\ncontent-encoding: gzip\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 cfc62e0b84c9c493a10eb6aef6aad512.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P2\r\nx-amz-cf-id: NBw2FekBXGSN_vMwqdop9rHaWV8Ao4gtJZKqg9aDG7kfYtnXucid0w==\r\nage: 503495\r\nvary: Accept-Encoding,Origin, Origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":323898,"size_decoded":323898,"mime_type":"application/javascript","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-02T06:58:21.972859Z","times_seen":17668698,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"be.block-sphere.com/app/img/mobilephone.ad1bd7d1.png","fqdn":"be.block-sphere.com","domain":"block-sphere.com","tld":"com"},"ip":{"addr":"172.67.161.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://be.block-sphere.com/app/","date":"2024-12-23T04:14:02.275Z","timestamp":1734927242275,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"block-sphere.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Dec 2024 11:23:11 GMT","end":"Mon, 10 Mar 2025 11:23:10 GMT"},"fingerprint":{"sha1":"DB:47:40:41:42:B8:EE:3F:CB:6B:C3:8D:CF:39:4B:AA:3C:B9:80:2B","sha256":"5D:17:11:73:BB:8D:C3:26:BF:A4:44:01:74:42:15:54:EC:6B:F2:39:28:8A:FC:BC:4D:CF:29:13:B5:86:CA:28"}}},"request":{"raw":"GET /app/img/mobilephone.ad1bd7d1.png HTTP/1.1\r\nHost: be.block-sphere.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://be.block-sphere.com/app/\r\nCookie: angela_session=eyJpdiI6InNHUE9uR3gzb1ZXdWlxTCt5cXptbWc9PSIsInZhbHVlIjoiZVAzQ0RkRGV4N3Nnc1FhRnRCK2hZRmt0UGJydDRxd0N0bUtYcmtoY09tZUNMRGhIZkEzVUVoTUxPdEIyOUFlZVd1VCsxYjdRUEVXY2hMWENwQVVnOUNHM3VUTGpkdUJWWUQrSXllZVQzaTdiY1Jud0pYSEZkeEh3S2t1WlFPajEiLCJtYWMiOiIzYmZjZjI5YTNjZmVjMjUxMzZkOGE0MjJlNWFjNTk1NDc0OTYzYWY1NjNiM2FmMDQwNWQ0NWM2Yzg3MWFmZGJjIn0%3D; lang=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 23 Dec 2024 04:14:02 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 09 Nov 2021 15:48:52 GMT\r\nvary: Accept-Encoding\r\netag: W/\"618a9864-c0a5\"\r\nexpires: Wed, 22 Jan 2025 04:13:57 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=Y%2FpcDnRoGZ7W1U%2FGhc3bbj9AtqTjzx0JzYuW6EPrUUq%2F%2BpKNyJnNXIs3VyWDp4EMxA4CwV%2BfBNQ5F3YnGoZBODGyLhcr4MOOyvz5yNoth0oOE5f1T8l5lXspRqOMIrDDxBEMO8wA\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 8f6585c03fdf56c5-OSL\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=2103\u0026min_rtt=622\u0026rtt_var=1107\u0026sent=1252\u0026recv=107\u0026lost=0\u0026retrans=0\u0026sent_bytes=1432836\u0026recv_bytes=24120\u0026delivery_rate=787067\u0026cwnd=160500\u0026unsent_bytes=0\u0026cid=57058721e9bee6fd\u0026ts=3506\u0026x=1\", cfExtPri, cfHdrFlush;dur=0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":49317,"size_decoded":49317,"mime_type":"image/png","magic":"PNG image data, 463 x 523, 8-bit/color RGBA, non-interlaced","md5":"ad1bd7d1e173c9656177104c388d30ca","sha1":"47e0070fd570f3d36758c8f1836e7c8263d91ba0","sha256":"e479bfc357911dff83098eced50ca46cf84b18b59f9c640e488e35b1ebe39773","sha512":"eef26c58d8c09581dff35855c9c2679dabecc0400c4f702abe9ca94707210b97e6b342ea34295a2307257c64219e31d2826af77e117834cc47598981a4913226","ssdeep":"768:YeAMWtQsqSZEMA16ZkEyELE+/NrotN8WlOH/5y5hIKDSqt0sNQe31mc3NkJtWFpq:YeADQsqSpOfA+lOHM5hIKFmstFm1w4","tlshash":"0c2302d1e2eef56ac11cc684c630b77b59e002d8a517549599a2c883ef2b5783bf2d13","first_seen":"2023-05-15T15:11:04Z","last_seen":"2026-05-20T05:31:39.746017Z","times_seen":145,"resource_available":false,"data":null}},"time_used":863,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":705,"receive":158,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2024-12-23","alert":"Sinkholed","trigger":"block-sphere.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"be.block-sphere.com/api/front?_timespan=1734927242331","fqdn":"be.block-sphere.com","domain":"block-sphere.com","tld":"com"},"ip":{"addr":"172.67.161.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://be.block-sphere.com/app/","date":"2024-12-23T04:14:02.374Z","timestamp":1734927242374,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"block-sphere.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Dec 2024 11:23:11 GMT","end":"Mon, 10 Mar 2025 11:23:10 GMT"},"fingerprint":{"sha1":"DB:47:40:41:42:B8:EE:3F:CB:6B:C3:8D:CF:39:4B:AA:3C:B9:80:2B","sha256":"5D:17:11:73:BB:8D:C3:26:BF:A4:44:01:74:42:15:54:EC:6B:F2:39:28:8A:FC:BC:4D:CF:29:13:B5:86:CA:28"}}},"request":{"raw":"GET /api/front?_timespan=1734927242331 HTTP/1.1\r\nHost: be.block-sphere.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nlang: en\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://be.block-sphere.com/app/\r\nCookie: angela_session=eyJpdiI6InNHUE9uR3gzb1ZXdWlxTCt5cXptbWc9PSIsInZhbHVlIjoiZVAzQ0RkRGV4N3Nnc1FhRnRCK2hZRmt0UGJydDRxd0N0bUtYcmtoY09tZUNMRGhIZkEzVUVoTUxPdEIyOUFlZVd1VCsxYjdRUEVXY2hMWENwQVVnOUNHM3VUTGpkdUJWWUQrSXllZVQzaTdiY1Jud0pYSEZkeEh3S2t1WlFPajEiLCJtYWMiOiIzYmZjZjI5YTNjZmVjMjUxMzZkOGE0MjJlNWFjNTk1NDc0OTYzYWY1NjNiM2FmMDQwNWQ0NWM2Yzg3MWFmZGJjIn0%3D; lang=en\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 23 Dec 2024 04:14:02 GMT\r\ncontent-type: application/json\r\nvary: Accept-Encoding\r\ncache-control: no-cache, private\r\nset-cookie: angela_session=eyJpdiI6Ik5qc1k5dk9GUzZBWkNnK1pNM3RcL0FBPT0iLCJ2YWx1ZSI6IkcyVzFOVHRVQlwvTjk0V3BkUjA4U3RiMDJodHBqQmdEN2tLNndGWHdHN2tcL1ZQVm5wNXp1akRKWXZ2ZllyRlZtZUdVNll1NXlsNzZMT0lQVHR5djJIcWFHSityQVEyUG1yR3RQVUJXQzhBREZiTWhIR0dJWmVudlorcFVnaGNlZlkiLCJtYWMiOiIzMzdkZWFmZjJiZjM4YWIwNTc5ZTM0ZDUzM2Y5ZjRjMDI5NmI3NTBmODdlOWJiOTBiZTI1OGJmMDBhNjU3ZTAzIn0%3D; expires=Mon, 23-Dec-2024 06:13:57 GMT; Max-Age=7200; path=/; httponly\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=kBKNS59FwznyvCEFLIcBxK%2BvRTEMyRO7SHfDsmonyN9%2FkpI%2F6nTEAHEXHw34gf9dMDaaojcZv%2F7P1JkQNzVO6b0hixNbKwi6z0II3nHzX2gytkaq%2Fq0rRP7pa%2B6Wp76b70pmiMt4\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 8f6585c0c81656c5-OSL\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=1492\u0026min_rtt=622\u0026rtt_var=713\u0026sent=1196\u0026recv=95\u0026lost=0\u0026retrans=0\u0026sent_bytes=1378997\u0026recv_bytes=21939\u0026delivery_rate=33425\u0026cwnd=160500\u0026unsent_bytes=0\u0026cid=57058721e9bee6fd\u0026ts=3109\u0026x=1\", cfExtPri, cfHdrFlush;dur=0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":254,"size_decoded":254,"mime_type":"application/json","magic":"troff or preprocessor input, ASCII text, with no line terminators","md5":"8dfae6ffc3fcb2f3b79c3a65cea15081","sha1":"ceeeb8871b5a94380bcdc21647e83d45b7a32b69","sha256":"bb4c3c68bd0548d6b5180436eef627380e22068b09accea4cf7f321473dae2ef","sha512":"6c8e9ddfb2cf056786a94a5e92860355733a36068d1da6a40d16f29ce5e726e8bbd40e4cac80063f05094ac5845b82518da180d097be55c716bf9309c577626c","ssdeep":"","tlshash":"61d02b9fd569c917e4415c7e9f7a3e37548f840fd9003d068ba6518e69f28f070a810f","first_seen":"2023-04-05T13:46:30Z","last_seen":"2025-03-27T19:36:29.62422Z","times_seen":19,"resource_available":false,"data":null}},"time_used":216,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":216,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2024-12-23","alert":"Sinkholed","trigger":"block-sphere.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"be.block-sphere.com/upload/1698330095855918.png","fqdn":"be.block-sphere.com","domain":"block-sphere.com","tld":"com"},"ip":{"addr":"172.67.161.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://be.block-sphere.com/app/","date":"2024-12-23T04:14:03.013Z","timestamp":1734927243013,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"block-sphere.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Dec 2024 11:23:11 GMT","end":"Mon, 10 Mar 2025 11:23:10 GMT"},"fingerprint":{"sha1":"DB:47:40:41:42:B8:EE:3F:CB:6B:C3:8D:CF:39:4B:AA:3C:B9:80:2B","sha256":"5D:17:11:73:BB:8D:C3:26:BF:A4:44:01:74:42:15:54:EC:6B:F2:39:28:8A:FC:BC:4D:CF:29:13:B5:86:CA:28"}}},"request":{"raw":"GET /upload/1698330095855918.png HTTP/1.1\r\nHost: be.block-sphere.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://be.block-sphere.com/app/\r\nCookie: angela_session=eyJpdiI6IlBRYmlkNFNXdnAzTnZnOWZybWR5VGc9PSIsInZhbHVlIjoidWdXOElJUTdLMnF2QUFqWkNzN0tcLzRVcG56WGx6dWU1T1RXbUhCMHZ1UEJoeWVOOWJTRmpuQnp3cEdycG1HTFRXZjhPY1NcL1oxNGc4WkVOa01GUWdNRysxSTRJNkdmZTZZaUFGaUhtdmZaTExNRzJjTTR1VDVXQ3E4eW1zSVV5ViIsIm1hYyI6ImZiNWU2MDZiZDY3NmVjMTcxODdiZWM1MTdhZGMxMTIxNGU5NWE3MDc3ZGI3Y2RiNTU1MDY3OWM4YTg4MjhlODYifQ%3D%3D; lang=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 23 Dec 2024 04:14:03 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 04 Nov 2024 08:47:46 GMT\r\nvary: Accept-Encoding\r\netag: W/\"67288a32-3334\"\r\nexpires: Wed, 22 Jan 2025 04:13:58 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=qkU%2FPyOvQU%2BIkp6SI84ET5lTi1uWVvpZTLRvOB%2FOpQSPpgYFxGL%2Fc6S7Hb8Rnt4w2gsbO5bYEWhdArj8zwFsoIMjUY8QVqS5hap755C5Ht%2B0xhWZyTqf%2Bc1ducVpJ03gk8YJYnzv\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 8f6585c4ca2156c5-OSL\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=1365\u0026min_rtt=622\u0026rtt_var=445\u0026sent=1769\u0026recv=147\u0026lost=0\u0026retrans=0\u0026sent_bytes=2023911\u0026recv_bytes=31993\u0026delivery_rate=9760909\u0026cwnd=160500\u0026unsent_bytes=0\u0026cid=57058721e9bee6fd\u0026ts=4280\u0026x=1\", cfExtPri, cfHdrFlush;dur=0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":13108,"size_decoded":13108,"mime_type":"image/png","magic":"PNG image data, 320 x 320, 8-bit/color RGB, non-interlaced","md5":"d0f82f443db2101c86e9f238e8601896","sha1":"e09a9e9a953f10cbb01acbdc8bad8bb2d8f09d14","sha256":"8d05736e490a3dcc9b45779c25492980515c818f5bfa49431e17a4207d8507ad","sha512":"b9e330310c0b757ee6670952fc0472ab29fc5e3105a129fb520ad5186879fcb8fa89b8caecf606728649dad0b529e82927d5a01e61b31c989d5fe757b1b88187","ssdeep":"384:A+/df13Z+5R28R1NUCTls/OwJgBEsrD+2O:d/h9ZMR28Rjb0xgrU","tlshash":"38429fb1d2688de1790a41c2597e0c8ded0f49e3d2f463156f16de9f5e77e878058c48","first_seen":"2024-09-19T22:14:59.515536Z","last_seen":"2025-09-28T05:40:03.056971Z","times_seen":4,"resource_available":false,"data":null}},"time_used":742,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":742,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2024-12-23","alert":"Sinkholed","trigger":"block-sphere.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"be.block-sphere.com/app/css/app.221a8ea1.css","fqdn":"be.block-sphere.com","domain":"block-sphere.com","tld":"com"},"ip":{"addr":"172.67.161.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://be.block-sphere.com/app/","date":"2024-12-23T04:14:00.155Z","timestamp":1734927240155,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"block-sphere.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Dec 2024 11:23:11 GMT","end":"Mon, 10 Mar 2025 11:23:10 GMT"},"fingerprint":{"sha1":"DB:47:40:41:42:B8:EE:3F:CB:6B:C3:8D:CF:39:4B:AA:3C:B9:80:2B","sha256":"5D:17:11:73:BB:8D:C3:26:BF:A4:44:01:74:42:15:54:EC:6B:F2:39:28:8A:FC:BC:4D:CF:29:13:B5:86:CA:28"}}},"request":{"raw":"GET /app/css/app.221a8ea1.css HTTP/1.1\r\nHost: be.block-sphere.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://be.block-sphere.com/app/\r\nCookie: angela_session=eyJpdiI6InNHUE9uR3gzb1ZXdWlxTCt5cXptbWc9PSIsInZhbHVlIjoiZVAzQ0RkRGV4N3Nnc1FhRnRCK2hZRmt0UGJydDRxd0N0bUtYcmtoY09tZUNMRGhIZkEzVUVoTUxPdEIyOUFlZVd1VCsxYjdRUEVXY2hMWENwQVVnOUNHM3VUTGpkdUJWWUQrSXllZVQzaTdiY1Jud0pYSEZkeEh3S2t1WlFPajEiLCJtYWMiOiIzYmZjZjI5YTNjZmVjMjUxMzZkOGE0MjJlNWFjNTk1NDc0OTYzYWY1NjNiM2FmMDQwNWQ0NWM2Yzg3MWFmZGJjIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 23 Dec 2024 04:14:01 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 14 Jan 2022 14:17:18 GMT\r\nvary: Accept-Encoding\r\netag: W/\"61e185ee-2f111\"\r\nexpires: Mon, 23 Dec 2024 16:13:55 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\npriority: u=2,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=NXqBLbuiNGQkz1KtASLt8txtdVZRInmkTfDCBjbyfpFJvxLthgVxmpcAIcRe93BX45CnqQtBbXpwbKP24AWf7pjL2kDYol5VbAAYPf5%2FcXbhxvfUKjetjno0Mu5EMHLn14dbnSxj\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 8f6585b2d89c56c5-OSL\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=2906\u0026min_rtt=622\u0026rtt_var=2438\u0026sent=148\u0026recv=30\u0026lost=0\u0026retrans=0\u0026sent_bytes=147589\u0026recv_bytes=8180\u0026delivery_rate=654841\u0026cwnd=48000\u0026unsent_bytes=0\u0026cid=57058721e9bee6fd\u0026ts=1548\u0026x=1\", cfExtPri, cfHdrFlush;dur=0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":192785,"size_decoded":192785,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-02T06:58:21.972859Z","times_seen":17668698,"resource_available":true,"data":null}},"time_used":882,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":881,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2024-12-23","alert":"Sinkholed","trigger":"block-sphere.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"be.block-sphere.com/app/img/zhexian.7c810bcc.png","fqdn":"be.block-sphere.com","domain":"block-sphere.com","tld":"com"},"ip":{"addr":"172.67.161.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://be.block-sphere.com/app/","date":"2024-12-23T04:14:02.271Z","timestamp":1734927242271,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"block-sphere.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Dec 2024 11:23:11 GMT","end":"Mon, 10 Mar 2025 11:23:10 GMT"},"fingerprint":{"sha1":"DB:47:40:41:42:B8:EE:3F:CB:6B:C3:8D:CF:39:4B:AA:3C:B9:80:2B","sha256":"5D:17:11:73:BB:8D:C3:26:BF:A4:44:01:74:42:15:54:EC:6B:F2:39:28:8A:FC:BC:4D:CF:29:13:B5:86:CA:28"}}},"request":{"raw":"GET /app/img/zhexian.7c810bcc.png HTTP/1.1\r\nHost: be.block-sphere.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://be.block-sphere.com/app/\r\nCookie: angela_session=eyJpdiI6InNHUE9uR3gzb1ZXdWlxTCt5cXptbWc9PSIsInZhbHVlIjoiZVAzQ0RkRGV4N3Nnc1FhRnRCK2hZRmt0UGJydDRxd0N0bUtYcmtoY09tZUNMRGhIZkEzVUVoTUxPdEIyOUFlZVd1VCsxYjdRUEVXY2hMWENwQVVnOUNHM3VUTGpkdUJWWUQrSXllZVQzaTdiY1Jud0pYSEZkeEh3S2t1WlFPajEiLCJtYWMiOiIzYmZjZjI5YTNjZmVjMjUxMzZkOGE0MjJlNWFjNTk1NDc0OTYzYWY1NjNiM2FmMDQwNWQ0NWM2Yzg3MWFmZGJjIn0%3D; lang=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 23 Dec 2024 04:14:02 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 09 Nov 2021 15:48:52 GMT\r\nvary: Accept-Encoding\r\netag: W/\"618a9864-d809\"\r\nexpires: Wed, 22 Jan 2025 04:13:57 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=YzOPuCNRi59BC3Z1giRKAE1oaGuKncWA8j%2Fq32LPKo8yJLj6p17iaXd9RQi9P5CFlIZfiPSnF0rOhvQyBvmNO%2B19%2BH35GMEb9gEngQZ6A%2FiZa6BZk2eIhP4hhMjLuUGZa5yKvi5m\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 8f6585c02fdb56c5-OSL\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=1915\u0026min_rtt=622\u0026rtt_var=941\u0026sent=1281\u0026recv=112\u0026lost=0\u0026retrans=0\u0026sent_bytes=1463134\u0026recv_bytes=25980\u0026delivery_rate=2272079\u0026cwnd=160500\u0026unsent_bytes=0\u0026cid=57058721e9bee6fd\u0026ts=3522\u0026x=1\", cfExtPri, cfHdrFlush;dur=0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":55305,"size_decoded":55305,"mime_type":"image/png","magic":"PNG image data, 203 x 194, 8-bit/color RGBA, non-interlaced","md5":"7c810bcc935b6e71f628e4a149a121df","sha1":"7b9bf5609567966696acff0e159bb5b4092275b0","sha256":"b1fad0832fa13aa6dd3cebd80d26faa5f9aaf4c4f9f2ead32ea1146886a299e0","sha512":"715bd6ad76f16b6d091740107bd8c1367a83a0b4b4946c761472af543592d18231b6348a7dbf6f4a2dfd2b386e02d8a64eacfec47d5e755dc203a51fa863377c","ssdeep":"768:j7r6A1/jg7/SIePR7zY7u7iGLjxK7cF0Wa6DIKwo2BgjbV6ntVFIPdbIK2ivmzOP:bZ1/jg7/8nj07cFECmXS9IK2RzONgMn","tlshash":"6a4302d608de979b64844050a000466bfdac34c7f8cea45f9c757b46120ae71beffb1a","first_seen":"2023-05-21T12:40:28Z","last_seen":"2026-03-23T09:33:35.786343Z","times_seen":47,"resource_available":false,"data":null}},"time_used":884,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":724,"receive":160,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2024-12-23","alert":"Sinkholed","trigger":"block-sphere.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"be.block-sphere.com/api/news/list?_timespan=1734927242331","fqdn":"be.block-sphere.com","domain":"block-sphere.com","tld":"com"},"ip":{"addr":"172.67.161.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://be.block-sphere.com/app/","date":"2024-12-23T04:14:02.392Z","timestamp":1734927242392,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"block-sphere.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Dec 2024 11:23:11 GMT","end":"Mon, 10 Mar 2025 11:23:10 GMT"},"fingerprint":{"sha1":"DB:47:40:41:42:B8:EE:3F:CB:6B:C3:8D:CF:39:4B:AA:3C:B9:80:2B","sha256":"5D:17:11:73:BB:8D:C3:26:BF:A4:44:01:74:42:15:54:EC:6B:F2:39:28:8A:FC:BC:4D:CF:29:13:B5:86:CA:28"}}},"request":{"raw":"POST /api/news/list?_timespan=1734927242331 HTTP/1.1\r\nHost: be.block-sphere.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded\r\nlang: en\r\nContent-Length: 15\r\nOrigin: https://be.block-sphere.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://be.block-sphere.com/app/\r\nCookie: angela_session=eyJpdiI6InNHUE9uR3gzb1ZXdWlxTCt5cXptbWc9PSIsInZhbHVlIjoiZVAzQ0RkRGV4N3Nnc1FhRnRCK2hZRmt0UGJydDRxd0N0bUtYcmtoY09tZUNMRGhIZkEzVUVoTUxPdEIyOUFlZVd1VCsxYjdRUEVXY2hMWENwQVVnOUNHM3VUTGpkdUJWWUQrSXllZVQzaTdiY1Jud0pYSEZkeEh3S2t1WlFPajEiLCJtYWMiOiIzYmZjZjI5YTNjZmVjMjUxMzZkOGE0MjJlNWFjNTk1NDc0OTYzYWY1NjNiM2FmMDQwNWQ0NWM2Yzg3MWFmZGJjIn0%3D; lang=en\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 23 Dec 2024 04:14:02 GMT\r\ncontent-type: application/json\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: POST,GET,OPTIONS,DELETE\r\naccess-control-allow-headers: x-requested-with,content-type,Authorization\r\ncache-control: no-cache, private\r\nset-cookie: angela_session=eyJpdiI6IkhwaDNHMG5VNnlpVWRvZmFkN0ZOZkE9PSIsInZhbHVlIjoiY1wvdmdZbjRRU0c2ZXlQd3lFRXc0a3YyKzBaOWNlRkRlbmZEcENxRm52UGNDY0pZZ0wwR2lKKzVFelVEd1JvOHNoSlNMU0o4ZFNlRHZJcTJLRzhGOHJHR3VBMXkzUTRDam1ycVUrQnVNeFJ4K2VoSUwrb3hKK1o1VElxeXE3eGswIiwibWFjIjoiYTEwN2ZjYzY3NTkzY2MyZjgyNWIyNjBjYzk4MzQ0ODY3MTJkNGU1OTIzZmVmMTM3ZjEzMDcwMDMzNjJkM2YyNiJ9; expires=Mon, 23-Dec-2024 06:13:57 GMT; Max-Age=7200; path=/; httponly\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=lcfDxHCyxRHAjg%2FPvePGfRaheKJkZVkTL0KOCdiJoMu8TEI5OuhMutV4mtHOQht6Dpm9NweHzr2BMppQETmuGIBAvB7OdyUmYgeLC3kv5DASMNGJMhQKgmlZFrtbvNVVdbrZLBiZ\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 8f6585c0d82c56c5-OSL\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=1419\u0026min_rtt=622\u0026rtt_var=683\u0026sent=1202\u0026recv=96\u0026lost=0\u0026retrans=0\u0026sent_bytes=1382555\u0026recv_bytes=21984\u0026delivery_rate=236906\u0026cwnd=160500\u0026unsent_bytes=0\u0026cid=57058721e9bee6fd\u0026ts=3126\u0026x=1\", cfExtPri, cfHdrFlush;dur=0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":485,"size_decoded":485,"mime_type":"application/json","magic":"troff or preprocessor input, ASCII text, with very long lines (567), with no line terminators","md5":"ccd36eeee5050b59c951b33f749247e7","sha1":"3f36edbc15c32a4ea3f31a47d6598c77101ead6d","sha256":"8e257570e0a2dfa6f3ca844cb427374c99944baac0d931e0a335fc335329d074","sha512":"35f8ba2696b6ac5556e9591533e997fe622bce56705d59aae7df3b920df8bee97770c8926f17b8f1372795dffa73a065761532b371355b70a65c5a68f8b32669","ssdeep":"","tlshash":"95f0fcf9fd04e586c0411dede27d7f76f58790264c5752faab90e134c2914b057b644c","first_seen":"2024-10-20T23:44:47.541166Z","last_seen":"2024-12-23T04:14:32.674489Z","times_seen":2,"resource_available":false,"data":null}},"time_used":221,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":221,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2024-12-23","alert":"Sinkholed","trigger":"block-sphere.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"be.block-sphere.com/upload/1698329976552282.png","fqdn":"be.block-sphere.com","domain":"block-sphere.com","tld":"com"},"ip":{"addr":"172.67.161.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://be.block-sphere.com/app/","date":"2024-12-23T04:14:02.997Z","timestamp":1734927242997,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"block-sphere.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Dec 2024 11:23:11 GMT","end":"Mon, 10 Mar 2025 11:23:10 GMT"},"fingerprint":{"sha1":"DB:47:40:41:42:B8:EE:3F:CB:6B:C3:8D:CF:39:4B:AA:3C:B9:80:2B","sha256":"5D:17:11:73:BB:8D:C3:26:BF:A4:44:01:74:42:15:54:EC:6B:F2:39:28:8A:FC:BC:4D:CF:29:13:B5:86:CA:28"}}},"request":{"raw":"GET /upload/1698329976552282.png HTTP/1.1\r\nHost: be.block-sphere.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://be.block-sphere.com/app/\r\nCookie: angela_session=eyJpdiI6IlBRYmlkNFNXdnAzTnZnOWZybWR5VGc9PSIsInZhbHVlIjoidWdXOElJUTdLMnF2QUFqWkNzN0tcLzRVcG56WGx6dWU1T1RXbUhCMHZ1UEJoeWVOOWJTRmpuQnp3cEdycG1HTFRXZjhPY1NcL1oxNGc4WkVOa01GUWdNRysxSTRJNkdmZTZZaUFGaUhtdmZaTExNRzJjTTR1VDVXQ3E4eW1zSVV5ViIsIm1hYyI6ImZiNWU2MDZiZDY3NmVjMTcxODdiZWM1MTdhZGMxMTIxNGU5NWE3MDc3ZGI3Y2RiNTU1MDY3OWM4YTg4MjhlODYifQ%3D%3D; lang=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 23 Dec 2024 04:14:03 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 04 Nov 2024 08:47:50 GMT\r\nvary: Accept-Encoding\r\netag: W/\"67288a36-41ae\"\r\nexpires: Wed, 22 Jan 2025 04:13:58 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=H1LdCdVmAeW%2FS4%2FAvTADdSKXK0NO1mw6XI6IX4udra%2FddBWbzNX%2FKpb9In4roiIVXP3AEWGf8UYER9r8e6cRt91sipABr5w5EYrjexINZk5fvJ4ICVs0xjKGbTrYozujbEfY0RYR\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 8f6585c4aa0756c5-OSL\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=1354\u0026min_rtt=622\u0026rtt_var=355\u0026sent=1781\u0026recv=148\u0026lost=0\u0026retrans=0\u0026sent_bytes=2037335\u0026recv_bytes=32039\u0026delivery_rate=7145834\u0026cwnd=160500\u0026unsent_bytes=0\u0026cid=57058721e9bee6fd\u0026ts=4306\u0026x=1\", cfExtPri, cfHdrFlush;dur=0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":16814,"size_decoded":16814,"mime_type":"image/png","magic":"PNG image data, 200 x 200, 8-bit gray+alpha, non-interlaced","md5":"6efce9866eee1e39dbd7495ff430b35c","sha1":"51919b12ad4c459389b3d8f3e6d867b03fb722ad","sha256":"92edc9bd1e57a4fa0c56a1ac1f9a111f1cb05b02fe5d5a7a489a6af75fe6b4c6","sha512":"b6dbd9c2f79ad53b7eecd1b8deb1f8aacdb3440ea5f26a6b5af3cbacc1981697e8056a76de255e20c301417f111b905f2f1c4fbb21e6ca108b41353e0d7c02cf","ssdeep":"384:FJsMhjvsbtvkZRM8STqvU6EwKNPKjQJyadobsF0DvWChNvm2:zsmLsbtSRMscf1kQJZdobsFgWkNvm2","tlshash":"c172d1e3bda27ec75f068f3ea86b1ce97be28675491e11fd268c001129d05246bb5cd8","first_seen":"2023-05-12T20:10:54Z","last_seen":"2026-05-19T06:31:41.553686Z","times_seen":21,"resource_available":false,"data":null}},"time_used":790,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":790,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2024-12-23","alert":"Sinkholed","trigger":"block-sphere.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"msg.salesmartly.com/chat/chat-msg/unread-msg-list-v2?login_token=a90816c3577cf0e8d1c1dca138394671\u0026chat_user_id=101d32bd0d62135f6013876cca54e975\u0026direction_type=1\u0026plugin_id=gglw39\u0026over_time=\u0026env=chat\u0026_=1734927243182\u0026_lt=a90816c3577cf0e8d1c1dca138394671\u0026_u=","fqdn":"msg.salesmartly.com","domain":"salesmartly.com","tld":"com"},"ip":{"addr":"3.164.240.36","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://be.block-sphere.com/app/","date":"2024-12-23T04:14:03.534Z","timestamp":1734927243534,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.salesmartly.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M02","organization":"Amazon"},"validity":{"start":"Mon, 02 Sep 2024 00:00:00 GMT","end":"Thu, 02 Oct 2025 23:59:59 GMT"},"fingerprint":{"sha1":"CB:87:D2:92:FE:AD:D2:26:C4:24:86:B5:6B:BE:B2:2B:5B:3A:B2:2F","sha256":"A5:9D:EB:CC:A0:AA:65:42:29:CB:43:8A:46:29:01:F1:6E:55:12:D8:F8:FD:DB:5A:89:78:9D:8F:61:18:AE:12"}}},"request":{"raw":"GET /chat/chat-msg/unread-msg-list-v2?login_token=a90816c3577cf0e8d1c1dca138394671\u0026chat_user_id=101d32bd0d62135f6013876cca54e975\u0026direction_type=1\u0026plugin_id=gglw39\u0026over_time=\u0026env=chat\u0026_=1734927243182\u0026_lt=a90816c3577cf0e8d1c1dca138394671\u0026_u= HTTP/1.1\r\nHost: msg.salesmartly.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nexternal-sign: 146dd661ad4f849b8a2c491cecdddca4\r\nOrigin: https://be.block-sphere.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://be.block-sphere.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/json\r\ncontent-length: 82\r\ndate: Mon, 23 Dec 2024 04:14:03 GMT\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: https://be.block-sphere.com\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: DNT,Keep-Alive,User-Agent,Cache-Control,Content-Type,Authorization,Origin,Cpl,Client-Type,X-Requested-With,Accept,External-Sign\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 e8c2cf9d03a9665aa8b199d35cadcba8.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P2\r\nx-amz-cf-id: Tn9xqMp6nQvDKU8C0_f2Sa8bGZYmm1hysgm5LaoFEu-G8Kw095-iRg==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":66,"size_decoded":66,"mime_type":"application/json","magic":"troff or preprocessor input, ASCII text, with no line terminators","md5":"24faae2ad0b4201d9d4e17d32bb5c53b","sha1":"79dee29b46110e0ebe56b6262132a98f476d3396","sha256":"7276413f62b5de8b4826b1f8b241b353e5132d6d949d321cbf323265463803a0","sha512":"97a94c00742c947c5b7e075db8abf23e0d3db5bc94f00b0ef4f1f49edeb6ff0a5e868e9da52df56fdba416d6e44cab10e2efe21b863a38efeacf7422d12c45bb","ssdeep":"","tlshash":"3ea0120d780046460546720130bc7d22f0c90004415212150d90430c86008207542e00","first_seen":"2023-05-21T23:23:30Z","last_seen":"2025-04-04T11:37:00.886704Z","times_seen":67,"resource_available":false,"data":null}},"time_used":387,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":387,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"be.block-sphere.com/api/news/list?_timespan=1734927242331","fqdn":"be.block-sphere.com","domain":"block-sphere.com","tld":"com"},"ip":{"addr":"172.67.161.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://be.block-sphere.com/app/","date":"2024-12-23T04:14:02.389Z","timestamp":1734927242389,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"block-sphere.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Dec 2024 11:23:11 GMT","end":"Mon, 10 Mar 2025 11:23:10 GMT"},"fingerprint":{"sha1":"DB:47:40:41:42:B8:EE:3F:CB:6B:C3:8D:CF:39:4B:AA:3C:B9:80:2B","sha256":"5D:17:11:73:BB:8D:C3:26:BF:A4:44:01:74:42:15:54:EC:6B:F2:39:28:8A:FC:BC:4D:CF:29:13:B5:86:CA:28"}}},"request":{"raw":"POST /api/news/list?_timespan=1734927242331 HTTP/1.1\r\nHost: be.block-sphere.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded\r\nlang: en\r\nContent-Length: 14\r\nOrigin: https://be.block-sphere.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://be.block-sphere.com/app/\r\nCookie: angela_session=eyJpdiI6InNHUE9uR3gzb1ZXdWlxTCt5cXptbWc9PSIsInZhbHVlIjoiZVAzQ0RkRGV4N3Nnc1FhRnRCK2hZRmt0UGJydDRxd0N0bUtYcmtoY09tZUNMRGhIZkEzVUVoTUxPdEIyOUFlZVd1VCsxYjdRUEVXY2hMWENwQVVnOUNHM3VUTGpkdUJWWUQrSXllZVQzaTdiY1Jud0pYSEZkeEh3S2t1WlFPajEiLCJtYWMiOiIzYmZjZjI5YTNjZmVjMjUxMzZkOGE0MjJlNWFjNTk1NDc0OTYzYWY1NjNiM2FmMDQwNWQ0NWM2Yzg3MWFmZGJjIn0%3D; lang=en\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 23 Dec 2024 04:14:02 GMT\r\ncontent-type: application/json\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: POST,GET,OPTIONS,DELETE\r\naccess-control-allow-headers: x-requested-with,content-type,Authorization\r\ncache-control: no-cache, private\r\nset-cookie: angela_session=eyJpdiI6InA5OUN5RWpQQlN5TXh3MURRNWRQV2c9PSIsInZhbHVlIjoiZ2Zqb1lNYmQxbGt2TEpDNzZZZXM2ZWRTV2tcL1BtZHZmTSswbldcL2lMVWpSckhmZ3Exd1RMaDdld2tuTm5TWnhNdHR4SWpJUm1nZldIaXZtYUNkaWRWSU9nOUhwbGhWekZPRXFCMDd2Nnl4ZEtcL0VMaHRsUGlWc3hmR2Yxa3lCNVkiLCJtYWMiOiJjNGRkMmZlMTMzYjFlZjJmYjVhY2NjNGNkMDFjZTcxMzA5NTk2ODk5ZDJkOWIwMTk4NTI4Zjk4OWRiMjU0NzdlIn0%3D; expires=Mon, 23-Dec-2024 06:13:57 GMT; Max-Age=7200; path=/; httponly\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=PAVQTYsjHMUlj7IcJ55u3y4OB8xDw61a1RULKv8GXv6b2rsPa%2B0nt60RlLrbqyEKlWpFFqUr7gtBLRU4Q7DkxTLfeC6aJjMGnL7TNi8R4evjO1vzffYQLOZboFMQW9li3wkkXu4t\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 8f6585c0d82a56c5-OSL\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=1462\u0026min_rtt=622\u0026rtt_var=748\u0026sent=1208\u0026recv=100\u0026lost=0\u0026retrans=0\u0026sent_bytes=1387395\u0026recv_bytes=22712\u0026delivery_rate=108459\u0026cwnd=160500\u0026unsent_bytes=0\u0026cid=57058721e9bee6fd\u0026ts=3297\u0026x=1\", cfExtPri, cfHdrFlush;dur=0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":240,"size_decoded":240,"mime_type":"application/json","magic":"troff or preprocessor input, ASCII text, with no line terminators","md5":"52da6262d59bebfab9602c7e344a7491","sha1":"03b8990e3163ffd80548c9ed8ec753ab599d9045","sha256":"7c81c0f8ab3298e54d2b7d881c913ca13ea4e283bcb08a761d4532b22403b416","sha512":"8113775d88dc0f54e1c7868ace8365724309f5f2317a6002dc8c8cb0591f58b029c62b3bc6896dea3447a7d59ad3360a1a1f1cbe25158642a24b3a930cead582","ssdeep":"","tlshash":"cdd02bf5ae14e899c1c44e1f71b86f372482c11181cb102137d0d094c3a18f0536b54f","first_seen":"2024-09-19T22:14:59.550149Z","last_seen":"2024-12-23T04:14:32.64966Z","times_seen":3,"resource_available":false,"data":null}},"time_used":393,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":393,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2024-12-23","alert":"Sinkholed","trigger":"block-sphere.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"plugin-code.salesmartly.com/js/project_196479_202843_1734151654.js","fqdn":"plugin-code.salesmartly.com","domain":"salesmartly.com","tld":"com"},"ip":{"addr":"3.164.240.26","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://be.block-sphere.com/app/","date":"2024-12-23T04:14:00.161Z","timestamp":1734927240161,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.salesmartly.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M02","organization":"Amazon"},"validity":{"start":"Tue, 21 May 2024 00:00:00 GMT","end":"Thu, 19 Jun 2025 23:59:59 GMT"},"fingerprint":{"sha1":"E3:F1:80:75:0D:19:F2:CB:7A:D6:61:69:BD:7B:62:4C:CB:27:2E:F1","sha256":"77:92:D1:6C:BB:B2:F8:17:08:A4:2A:83:96:42:FD:9A:DA:66:97:81:DF:14:1F:3C:50:9C:D7:F7:8E:F7:F1:CD"}}},"request":{"raw":"GET /js/project_196479_202843_1734151654.js HTTP/1.1\r\nHost: plugin-code.salesmartly.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://be.block-sphere.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript\r\nserver: AliyunOSS\r\ndate: Tue, 17 Dec 2024 08:29:24 GMT\r\nx-oss-request-id: 6761366406F3A43238FA24A5\r\nlast-modified: Sat, 14 Dec 2024 04:47:34 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 7245482040551456095\r\nx-oss-storage-class: Standard\r\ncontent-md5: EUxlMvRpli3zA4h+mRobYA==\r\nx-oss-server-time: 5\r\ncontent-encoding: gzip\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 cfc62e0b84c9c493a10eb6aef6aad512.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P2\r\nx-amz-cf-id: z1ghWXGuAAMMpCabyDryEVJIpwfIalZyXUPLhiVp_xbfAsP8IWjgaQ==\r\nage: 503076\r\nvary: Accept-Encoding,Origin, Origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1183,"size_decoded":1183,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1205), with no line terminators","md5":"99d1bfcc43015c15c2b5de5a631e3a14","sha1":"dc09bc563f1b2c347139df6df0754c76699564f6","sha256":"77c44b989f97e3568e0b15ca478bebfb8d3d47db53d47fe46cbfe6b2fb711e82","sha512":"87d5b1d9fa59d0d361622003f076ea3ea8a652b86c05054d44b9bec13274c50f2ea23f19a5d818e3c40dfd2f92d3621a7a2fee7406c1285228dc48a30d5186c6","ssdeep":"","tlshash":"1c21cc471c2264797ed57b7b8bbb88b93989724070208810bc4dd46b27d49a50d6ede8","first_seen":"2024-12-23T04:14:32.6797Z","last_seen":"2024-12-23T04:14:32.6797Z","times_seen":1,"resource_available":false,"data":null}},"time_used":191,"timings":{"blocked":81,"dns":75,"connect":8,"send":0,"wait":9,"receive":0,"ssl":15},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"srz.salesmartly.com/client/station/log?plugin_sign=e96dba8c1eb1af403777a88e3a8b7884\u0026plugin_id=gglw39\u0026over_time=\u0026env=chat\u0026_=1734927242919\u0026_lt=\u0026_u=","fqdn":"srz.salesmartly.com","domain":"salesmartly.com","tld":"com"},"ip":{"addr":"143.204.55.57","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://be.block-sphere.com/app/","date":"2024-12-23T04:14:02.925Z","timestamp":1734927242925,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.salesmartly.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M02","organization":"Amazon"},"validity":{"start":"Mon, 02 Sep 2024 00:00:00 GMT","end":"Thu, 02 Oct 2025 23:59:59 GMT"},"fingerprint":{"sha1":"CB:87:D2:92:FE:AD:D2:26:C4:24:86:B5:6B:BE:B2:2B:5B:3A:B2:2F","sha256":"A5:9D:EB:CC:A0:AA:65:42:29:CB:43:8A:46:29:01:F1:6E:55:12:D8:F8:FD:DB:5A:89:78:9D:8F:61:18:AE:12"}}},"request":{"raw":"POST /client/station/log?plugin_sign=e96dba8c1eb1af403777a88e3a8b7884\u0026plugin_id=gglw39\u0026over_time=\u0026env=chat\u0026_=1734927242919\u0026_lt=\u0026_u= HTTP/1.1\r\nHost: srz.salesmartly.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded\r\nContent-Length: 349\r\nOrigin: https://be.block-sphere.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://be.block-sphere.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/json; charset=UTF-8\r\ndate: Mon, 23 Dec 2024 04:14:03 GMT\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 86400\r\nx-powered-by: PHP/7.2.34\r\nset-cookie: ss_uid=d57f9bcc7625a8d6f51e1c5ce3a4b33b; expires=Tue, 23-Dec-2025 04:14:03 GMT; Max-Age=31535999; path=/; domain=salesmartly.com; HttpOnly; SameSite=None; Secure\r\naccess-control-allow-origin: https://be.block-sphere.com\r\naccess-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept, Cpl, Agent-Cpl, Send-Cpl, Client-Type\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 6480520a5e02f3163410e3134bd77baa.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-C1\r\nx-amz-cf-id: lXdBLQVq9NFABzEPkYqZjkm9rAw3iFTQH76gT_qvpABQFlJfKoLyGw==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":87,"size_decoded":87,"mime_type":"application/json; charset=UTF-8","magic":"troff or preprocessor input, ASCII text, with no line terminators","md5":"f6eba8ca4778318bd782f26a263eb2cc","sha1":"be7dc60a8c49fdba6c6da30c9d982dd3ba29cdcd","sha256":"f206206c3238d46a4d9c5241da2b1529b3fe972556a01b260331bdba339c4ac7","sha512":"8a8cfac894c0e67788e17a125eeb7776479408512837a6955abc62d16125b60f3d3dcbc76b8ffeb67a1e1845dad49ece03e6bbea7182e47c3615b6166ee49126","ssdeep":"","tlshash":"b8b0125bad2844498d984c4d2078fd21798d944080511b9a0df013814b905b9f303e1f","first_seen":"2024-12-23T04:14:32.681746Z","last_seen":"2024-12-23T04:14:32.681746Z","times_seen":1,"resource_available":false,"data":null}},"time_used":572,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":572,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"be.block-sphere.com/app/static/tradeview/datafeeds/udf/dist/polyfills.js","fqdn":"be.block-sphere.com","domain":"block-sphere.com","tld":"com"},"ip":{"addr":"172.67.161.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://be.block-sphere.com/app/","date":"2024-12-23T04:14:00.151Z","timestamp":1734927240151,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"block-sphere.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Dec 2024 11:23:11 GMT","end":"Mon, 10 Mar 2025 11:23:10 GMT"},"fingerprint":{"sha1":"DB:47:40:41:42:B8:EE:3F:CB:6B:C3:8D:CF:39:4B:AA:3C:B9:80:2B","sha256":"5D:17:11:73:BB:8D:C3:26:BF:A4:44:01:74:42:15:54:EC:6B:F2:39:28:8A:FC:BC:4D:CF:29:13:B5:86:CA:28"}}},"request":{"raw":"GET /app/static/tradeview/datafeeds/udf/dist/polyfills.js HTTP/1.1\r\nHost: be.block-sphere.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://be.block-sphere.com/app/\r\nCookie: angela_session=eyJpdiI6InNHUE9uR3gzb1ZXdWlxTCt5cXptbWc9PSIsInZhbHVlIjoiZVAzQ0RkRGV4N3Nnc1FhRnRCK2hZRmt0UGJydDRxd0N0bUtYcmtoY09tZUNMRGhIZkEzVUVoTUxPdEIyOUFlZVd1VCsxYjdRUEVXY2hMWENwQVVnOUNHM3VUTGpkdUJWWUQrSXllZVQzaTdiY1Jud0pYSEZkeEh3S2t1WlFPajEiLCJtYWMiOiIzYmZjZjI5YTNjZmVjMjUxMzZkOGE0MjJlNWFjNTk1NDc0OTYzYWY1NjNiM2FmMDQwNWQ0NWM2Yzg3MWFmZGJjIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 23 Dec 2024 04:14:00 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 09 Nov 2021 15:48:54 GMT\r\nvary: Accept-Encoding\r\netag: W/\"618a9866-25af\"\r\nexpires: Mon, 23 Dec 2024 16:13:55 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\npriority: u=2,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=%2FxMqNA84wCTk%2FdtbjlDTvdRdsJtkGlrVWUl9xIM5X2YOFfF2p6j9bfZys%2F8c2CJ9NNlXc1yvOGR1awJSu5kzKyZ2533a%2Fdl17xkPP%2BVJrYduxifYpTWu1yjJgPxo3OBoZox15fjT\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 8f6585b2d89156c5-OSL\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=3839\u0026min_rtt=1930\u0026rtt_var=1857\u0026sent=25\u0026recv=19\u0026lost=0\u0026retrans=0\u0026sent_bytes=5953\u0026recv_bytes=7153\u0026delivery_rate=3929\u0026cwnd=12000\u0026unsent_bytes=0\u0026cid=57058721e9bee6fd\u0026ts=1205\u0026x=1\", cfExtPri, cfHdrFlush;dur=0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":9647,"size_decoded":9647,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (9834), with no line terminators","md5":"c3eea3207de4cc26a85515418eadd5ad","sha1":"eb3c9daca7fde16feae82f39ab4ec537c784a2da","sha256":"bdd4b1a3fe3f685ce379acfb821176dbd5fcbf33b896050125e64a86a0976156","sha512":"d66b9159da391eac93e6265cae031de56b1763b1f9af476259133509581ce449cf89b5a994b98e51de8643679663a9d3d65c37887e242949d924db0ce9497bef","ssdeep":"192:cOC5bgmgmNL7m4rZUJYuxVujgU23Fq1O5UPQ0o/42p4UlD0pR8PKRt:3GeURrZi381Yw2yUlD0pRkit","tlshash":"e8126789f7e4f062039360b4917f580fb2b53855689e41b8f260d8eaacbd45c9627f7c","first_seen":"2023-04-05T13:46:30Z","last_seen":"2025-03-29T12:13:36.213679Z","times_seen":48,"resource_available":false,"data":null}},"time_used":543,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":543,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2024-12-23","alert":"Sinkholed","trigger":"block-sphere.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"at.alicdn.com/t/font_2302506_w05z3emunp.js","fqdn":"at.alicdn.com","domain":"alicdn.com","tld":"com"},"ip":{"addr":"47.246.44.249","port":443,"asn":24429,"as":"Zhejiang Taobao Network Co.,Ltd","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://be.block-sphere.com/app/","date":"2024-12-23T04:14:00.152Z","timestamp":1734927240152,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tbcdn.cn","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign Organization Validation CA - SHA256 - G3","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 19 Jun 2024 09:06:02 GMT","end":"Mon, 21 Jul 2025 09:06:01 GMT"},"fingerprint":{"sha1":"C8:28:74:DB:88:66:17:4F:5C:A5:AB:AD:F0:E1:14:74:AC:F8:FE:8F","sha256":"1F:79:7E:2E:52:1A:9D:9B:55:77:E6:DC:04:AA:1A:2B:D5:77:17:ED:E8:ED:AB:C3:F1:24:B4:CD:94:41:73:F8"}}},"request":{"raw":"GET /t/font_2302506_w05z3emunp.js HTTP/1.1\r\nHost: at.alicdn.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://be.block-sphere.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: Tengine\r\ncontent-type: application/javascript\r\ndate: Mon, 07 Oct 2024 15:57:32 GMT\r\nvary: Accept-Encoding, Accept-Encoding, Accept-Encoding, Origin\r\nx-oss-request-id: 670404EB1286C53937DC64EC\r\netag: W/\"BA06A70435B4F1C32CEDD7AC37243AEF\"\r\nlast-modified: Fri, 24 Dec 2021 21:20:51 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 10307597204619369372\r\nx-oss-storage-class: Standard\r\ncache-control: max-age=63072000\r\ncontent-md5: uganBDW08cMs7desNyQ67w==\r\nx-oss-server-time: 77\r\nvia: ens-cache8.l2de3[0,0,200-0,H], ens-cache9.l2de3[2,0], ens-cache4.se2[0,0,200-0,H], ens-cache12.se2[1,0]\r\nage: 6610588\r\nali-swift-global-savetime: 1728316652\r\nx-cache: HIT TCP_MEM_HIT dirn:-2:-2\r\nx-swift-savetime: Fri, 29 Nov 2024 16:52:34 GMT\r\nx-swift-cachetime: 58489498\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\neagleid: 2ff62ca017349272401741651e\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":290139,"size_decoded":290139,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"ba06a70435b4f1c32cedd7ac37243aef","sha1":"d3e80efd23a5db7c9a850f198e9b0666ebb9d1f7","sha256":"13b4a03145b92e09d39ff35b0df6592567a9a1e67526521ef09833637e6cbb9b","sha512":"1522691e752567e9f6f8f336f0444d25004598bac59bdae09bf6825d00ecf0dec980a91838b3f1b94d1bcc2d654977cb18b6f5073eff5460241426de2714f429","ssdeep":"3072:V2L6CAhxHXW4JowHa0rk2AbxuLloWvD4Lnr3zoeqW:/rkQD4Lnr3zoeqW","tlshash":"8854d7e5e36892fc5c0e43ddae39b474360f10fe35d1ce688168ce60a653ad9d94dc8a","first_seen":"2023-03-07T15:53:09Z","last_seen":"2026-05-24T23:21:11.14066Z","times_seen":99,"resource_available":true,"data":null}},"time_used":149,"timings":{"blocked":61,"dns":36,"connect":7,"send":0,"wait":9,"receive":0,"ssl":33},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"be.block-sphere.com/wss/socket.io/?EIO=3\u0026transport=polling\u0026t=PFnkDN3\u0026sid=728632e138dad94103399360","fqdn":"be.block-sphere.com","domain":"block-sphere.com","tld":"com"},"ip":{"addr":"172.67.161.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://be.block-sphere.com/app/","date":"2024-12-23T04:14:02.697Z","timestamp":1734927242697,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"block-sphere.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Dec 2024 11:23:11 GMT","end":"Mon, 10 Mar 2025 11:23:10 GMT"},"fingerprint":{"sha1":"DB:47:40:41:42:B8:EE:3F:CB:6B:C3:8D:CF:39:4B:AA:3C:B9:80:2B","sha256":"5D:17:11:73:BB:8D:C3:26:BF:A4:44:01:74:42:15:54:EC:6B:F2:39:28:8A:FC:BC:4D:CF:29:13:B5:86:CA:28"}}},"request":{"raw":"GET /wss/socket.io/?EIO=3\u0026transport=polling\u0026t=PFnkDN3\u0026sid=728632e138dad94103399360 HTTP/1.1\r\nHost: be.block-sphere.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://be.block-sphere.com/app/\r\nCookie: angela_session=eyJpdiI6IkJWekU4SmR3SXlYdzFGVnlWQzU3cVE9PSIsInZhbHVlIjoidFZyUGFRZXdPZ0RhSjJDTWdmUEkzT3VGQnVXTFAxbElIU2JNUHJiaFlsZjQ4QkljRlpPMHl5UG1ZeTBFRmJsekw5MzdCXC9cL2d3eFwvZmlZRHRIVW9lVkpPR2JBU0R1N01wZlpIRDhEMFZDVXUzeUtPQXBBaWZwXC9vektJMjRNcnIxIiwibWFjIjoiMjU0MThlOGIzZjZhYmFiMGU3NDVjY2U2ZjY4MzhjODJhZjRmOGZmZDMyYzY3YWY3NGFlYmE0YzZhN2IwZTg4ZiJ9; lang=en\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 23 Dec 2024 04:14:02 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 30959\r\nx-xss-protection: 0\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=%2BYGbZvBYM0yJNl21Lll%2F2Og9UP4BOGQmIcoGYpA5HXECfaRv1OZMoWD0WjsAjOkKTNaJ1qQiInLYCrbE2MhYi5IhR5KnpQaJEEbCl61xdMdZGDT%2BtHFG8Ty9qS8t5TeVtWGzLm7i\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 8f6585c2d92a56c5-OSL\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=2084\u0026min_rtt=622\u0026rtt_var=1431\u0026sent=1222\u0026recv=103\u0026lost=0\u0026retrans=0\u0026sent_bytes=1400368\u0026recv_bytes=22849\u0026delivery_rate=1331097\u0026cwnd=160500\u0026unsent_bytes=0\u0026cid=57058721e9bee6fd\u0026ts=3432\u0026x=1\", cfExtPri, cfHdrFlush;dur=0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":30959,"size_decoded":30959,"mime_type":"application/octet-stream","magic":"data","md5":"3b63f280538a1d3036d535bbeb4cda15","sha1":"c66e3f458496eed5f2869b0d08c6086b0f48ca40","sha256":"9f531520efbccdfa6bff841b3eb779cbb63b49180dcc582d1c0111afc32edb20","sha512":"d59564397552e6d6884cca20274c26f68f5f827540fa38c73b052c1be21c571ea1326ed5deef2ec418dc367bd645155bb734bc664032437dbff7a0d391ff07b3","ssdeep":"768:PwvtDMU/+Nfq39kijFxCqix71zll4bgH/:tlV","tlshash":"7ed2b00d576649f4d9b472c0a8d27adc24aa274768c34ac9d39cee8c83cc3a6f305d67","first_seen":"2024-12-23T04:14:32.686228Z","last_seen":"2024-12-23T04:14:32.686228Z","times_seen":1,"resource_available":false,"data":null}},"time_used":267,"timings":{"blocked":2,"dns":0,"connect":0,"send":0,"wait":205,"receive":60,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2024-12-23","alert":"Sinkholed","trigger":"block-sphere.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.salesmartly.com/chat/msg-user/create-user?plugin_sign=677991138003c679c82cbb25363ccc47\u0026plugin_id=gglw39\u0026over_time=\u0026env=chat\u0026_=1734927242603\u0026_lt=\u0026_u=","fqdn":"api.salesmartly.com","domain":"salesmartly.com","tld":"com"},"ip":{"addr":"3.164.240.80","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://be.block-sphere.com/app/","date":"2024-12-23T04:14:02.621Z","timestamp":1734927242621,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.salesmartly.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M02","organization":"Amazon"},"validity":{"start":"Mon, 02 Sep 2024 00:00:00 GMT","end":"Thu, 02 Oct 2025 23:59:59 GMT"},"fingerprint":{"sha1":"CB:87:D2:92:FE:AD:D2:26:C4:24:86:B5:6B:BE:B2:2B:5B:3A:B2:2F","sha256":"A5:9D:EB:CC:A0:AA:65:42:29:CB:43:8A:46:29:01:F1:6E:55:12:D8:F8:FD:DB:5A:89:78:9D:8F:61:18:AE:12"}}},"request":{"raw":"POST /chat/msg-user/create-user?plugin_sign=677991138003c679c82cbb25363ccc47\u0026plugin_id=gglw39\u0026over_time=\u0026env=chat\u0026_=1734927242603\u0026_lt=\u0026_u= HTTP/1.1\r\nHost: api.salesmartly.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded\r\nContent-Length: 322\r\nOrigin: https://be.block-sphere.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://be.block-sphere.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/json; charset=UTF-8\r\ndate: Mon, 23 Dec 2024 04:14:03 GMT\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 86400\r\nx-powered-by: PHP/7.2.34\r\naccess-control-allow-origin: https://be.block-sphere.com\r\naccess-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept, Cpl, Agent-Cpl, Send-Cpl, Client-Type, Share-Access-Token, External-Token\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 d5ffe4a44770755efd4aa2fc68579118.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P2\r\nx-amz-cf-id: or5jeZ9Ivdh2rQFx607fpAvTRv-vnZZmhdVSpPbm0_nZ0cA-EN_U8g==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":157,"size_decoded":157,"mime_type":"application/json; charset=UTF-8","magic":"troff or preprocessor input, ASCII text, with no line terminators","md5":"cb7ac696097e1c055b8d273a9d88fe96","sha1":"ece19b2358a6d6d90aef9b35570bf6e8f5588fc5","sha256":"175b8b1ffc3b38d1580124ef109caeeb83a8519e8057dc48df281064569ca9fd","sha512":"fa85c8d0c51101596b202cf394da50c079eeafbbc81eed24542368230de409c3e37c0628fafbb4ec2882dbf48b3207171d5c04ef0a146ce6b1c68c490791708f","ssdeep":"","tlshash":"8ac0c0b6654bc0f8c8c80fc8107c9e3236d8f04d446469100cb1183aca804b433d3401","first_seen":"2024-12-23T04:14:32.687825Z","last_seen":"2024-12-23T04:14:32.687825Z","times_seen":1,"resource_available":false,"data":null}},"time_used":554,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":554,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"plugin-code.salesmartly.com/chat/widget/code/js/chunk-vendors.08c7616e.js","fqdn":"plugin-code.salesmartly.com","domain":"salesmartly.com","tld":"com"},"ip":{"addr":"3.164.240.26","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://be.block-sphere.com/app/","date":"2024-12-23T04:14:01.226Z","timestamp":1734927241226,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.salesmartly.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M02","organization":"Amazon"},"validity":{"start":"Tue, 21 May 2024 00:00:00 GMT","end":"Thu, 19 Jun 2025 23:59:59 GMT"},"fingerprint":{"sha1":"E3:F1:80:75:0D:19:F2:CB:7A:D6:61:69:BD:7B:62:4C:CB:27:2E:F1","sha256":"77:92:D1:6C:BB:B2:F8:17:08:A4:2A:83:96:42:FD:9A:DA:66:97:81:DF:14:1F:3C:50:9C:D7:F7:8E:F7:F1:CD"}}},"request":{"raw":"GET /chat/widget/code/js/chunk-vendors.08c7616e.js HTTP/1.1\r\nHost: plugin-code.salesmartly.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript\r\nserver: AliyunOSS\r\ndate: Tue, 17 Dec 2024 08:22:34 GMT\r\nx-oss-request-id: 676134CA6B4B1331335B34CF\r\nlast-modified: Tue, 17 Dec 2024 08:10:32 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 5197982523068632941\r\nx-oss-storage-class: Standard\r\ncache-control: public, max-age=15552000\r\ncontent-md5: mpqerksZXAHPwdk5UQvQTQ==\r\nx-oss-server-time: 10\r\ncontent-encoding: gzip\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 cfc62e0b84c9c493a10eb6aef6aad512.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P2\r\nx-amz-cf-id: rkWzNCP1LGmRjD6Wg7afxD1MJLmGFY4m9rgoBYiS2OmnwcDmD4x4zA==\r\nage: 503487\r\nvary: Accept-Encoding,Origin, Origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":198991,"size_decoded":198991,"mime_type":"application/javascript","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-02T06:58:21.972859Z","times_seen":17668698,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"be.block-sphere.com/upload/1698329431760788.png","fqdn":"be.block-sphere.com","domain":"block-sphere.com","tld":"com"},"ip":{"addr":"172.67.161.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://be.block-sphere.com/app/","date":"2024-12-23T04:14:02.934Z","timestamp":1734927242934,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"block-sphere.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Dec 2024 11:23:11 GMT","end":"Mon, 10 Mar 2025 11:23:10 GMT"},"fingerprint":{"sha1":"DB:47:40:41:42:B8:EE:3F:CB:6B:C3:8D:CF:39:4B:AA:3C:B9:80:2B","sha256":"5D:17:11:73:BB:8D:C3:26:BF:A4:44:01:74:42:15:54:EC:6B:F2:39:28:8A:FC:BC:4D:CF:29:13:B5:86:CA:28"}}},"request":{"raw":"GET /upload/1698329431760788.png HTTP/1.1\r\nHost: be.block-sphere.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://be.block-sphere.com/app/\r\nCookie: angela_session=eyJpdiI6IlBRYmlkNFNXdnAzTnZnOWZybWR5VGc9PSIsInZhbHVlIjoidWdXOElJUTdLMnF2QUFqWkNzN0tcLzRVcG56WGx6dWU1T1RXbUhCMHZ1UEJoeWVOOWJTRmpuQnp3cEdycG1HTFRXZjhPY1NcL1oxNGc4WkVOa01GUWdNRysxSTRJNkdmZTZZaUFGaUhtdmZaTExNRzJjTTR1VDVXQ3E4eW1zSVV5ViIsIm1hYyI6ImZiNWU2MDZiZDY3NmVjMTcxODdiZWM1MTdhZGMxMTIxNGU5NWE3MDc3ZGI3Y2RiNTU1MDY3OWM4YTg4MjhlODYifQ%3D%3D; lang=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 23 Dec 2024 04:14:03 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 04 Nov 2024 08:48:46 GMT\r\nvary: Accept-Encoding\r\netag: W/\"67288a6e-f8823\"\r\nexpires: Wed, 22 Jan 2025 04:13:57 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=wUhCsvg5y1FB5yQwBsqQSRMTt9GJGJ38MZ8V0iuPX9f6lqOvJjZwKuJw%2BffY1312OLIio4xZ4kR%2F6ZE6dDB7qyscyKX9pgDc%2FvU0jkS3IcMTMjDiEmITyRi%2FAdCEXyKUGER5a1oX\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 8f6585c459d656c5-OSL\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=1281\u0026min_rtt=622\u0026rtt_var=309\u0026sent=1714\u0026recv=144\u0026lost=0\u0026retrans=0\u0026sent_bytes=1960337\u0026recv_bytes=31856\u0026delivery_rate=19943470\u0026cwnd=160500\u0026unsent_bytes=0\u0026cid=57058721e9bee6fd\u0026ts=4186\u0026x=1\", cfExtPri, cfHdrFlush;dur=0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1017891,"size_decoded":1017891,"mime_type":"image/png","magic":"PNG image data, 1920 x 600, 8-bit/color RGBA, non-interlaced","md5":"d54029e8701b1163a414b5f111b6ab2c","sha1":"7db25e6ea02979f3677f0dd3ff6817e8f66fe522","sha256":"bea180bca3f74e6a34a79416d36e6bbc84e6adf2a1baaedc36550cbea56befa1","sha512":"32b994571bba3d875ecb3824fb5e14b879331ef19161de9dde0e19762b1e21525bf7bd0091ab1d9c50fd02d4efdbec4ad7018b984f5e01e8334be524e72521d1","ssdeep":"24576:NUb4Iit3tVx5FeeKUrD9qEEVTC48nvtI+k3HBCKJO:a3S7xjeenDIV+dvt8HBRc","tlshash":"6e253322198c81febba077213a5dea1411ee54805eb5b285f0d78e76387b481bc73ed7","first_seen":"2023-06-18T21:57:19Z","last_seen":"2025-09-28T05:40:02.818808Z","times_seen":6,"resource_available":false,"data":null}},"time_used":1613,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":723,"receive":890,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2024-12-23","alert":"Sinkholed","trigger":"block-sphere.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"be.block-sphere.com/app/static/imgs/1s.png","fqdn":"be.block-sphere.com","domain":"block-sphere.com","tld":"com"},"ip":{"addr":"172.67.161.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://be.block-sphere.com/app/","date":"2024-12-23T04:14:03.019Z","timestamp":1734927243019,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"block-sphere.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Dec 2024 11:23:11 GMT","end":"Mon, 10 Mar 2025 11:23:10 GMT"},"fingerprint":{"sha1":"DB:47:40:41:42:B8:EE:3F:CB:6B:C3:8D:CF:39:4B:AA:3C:B9:80:2B","sha256":"5D:17:11:73:BB:8D:C3:26:BF:A4:44:01:74:42:15:54:EC:6B:F2:39:28:8A:FC:BC:4D:CF:29:13:B5:86:CA:28"}}},"request":{"raw":"GET /app/static/imgs/1s.png HTTP/1.1\r\nHost: be.block-sphere.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://be.block-sphere.com/app/\r\nCookie: angela_session=eyJpdiI6IlBRYmlkNFNXdnAzTnZnOWZybWR5VGc9PSIsInZhbHVlIjoidWdXOElJUTdLMnF2QUFqWkNzN0tcLzRVcG56WGx6dWU1T1RXbUhCMHZ1UEJoeWVOOWJTRmpuQnp3cEdycG1HTFRXZjhPY1NcL1oxNGc4WkVOa01GUWdNRysxSTRJNkdmZTZZaUFGaUhtdmZaTExNRzJjTTR1VDVXQ3E4eW1zSVV5ViIsIm1hYyI6ImZiNWU2MDZiZDY3NmVjMTcxODdiZWM1MTdhZGMxMTIxNGU5NWE3MDc3ZGI3Y2RiNTU1MDY3OWM4YTg4MjhlODYifQ%3D%3D; lang=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 23 Dec 2024 04:14:03 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 09 Nov 2021 15:48:54 GMT\r\nvary: Accept-Encoding\r\netag: W/\"618a9866-1084\"\r\nexpires: Wed, 22 Jan 2025 04:13:58 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=uQZv2TYRdqwAFHkgLCdn8ZjxqmnPt8%2F3T2%2FnHKYuEcWzolyiOFz9YcrYTCe%2Bxvymif%2Fm7WdJBHu%2FIAHazMR1my6aOa0EhmKqQT%2BLKsNnt7tQsp1c3bYrVag9GsUsqo%2BCcwAEm6K9\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 8f6585c4da2756c5-OSL\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=1256\u0026min_rtt=622\u0026rtt_var=286\u0026sent=1659\u0026recv=141\u0026lost=0\u0026retrans=0\u0026sent_bytes=1897710\u0026recv_bytes=31718\u0026delivery_rate=3234832\u0026cwnd=160500\u0026unsent_bytes=0\u0026cid=57058721e9bee6fd\u0026ts=4127\u0026x=1\", cfExtPri, cfHdrFlush;dur=0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":4228,"size_decoded":4228,"mime_type":"image/png","magic":"PNG image data, 300 x 57, 8-bit/color RGBA, non-interlaced","md5":"1573e76af1458ec210971f23ac34c849","sha1":"6bef85b22c72931059dedda2b7a20fbff9b8149c","sha256":"f62dbe7377fcd6caac3e757527e4583ef4ceb0eaaaa8b4fd1f22d2975a2a487a","sha512":"1d1820d21e363d3487798e5e48257da8536a9cff920cc01979e5011c411ef0c722a555648a38703937a55966ece249551339744b834b8fba83edbc334d4316f1","ssdeep":"96:/v84sUluVexO1jozpjJsNmMH1zFh48V4Itfcw5bk5SlAnA:3/lwV4O29tszHV4e4IJcw5bk5SlOA","tlshash":"06916e64ee5a39b80b57b9c2e7bbace23d0f534610b561536116b06cea0930de397ce1","first_seen":"2023-05-21T12:40:28Z","last_seen":"2026-03-23T09:33:35.79652Z","times_seen":17,"resource_available":false,"data":null}},"time_used":579,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":579,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2024-12-23","alert":"Sinkholed","trigger":"block-sphere.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"msg.salesmartly.com/chat/chat-msg/unread-msg-list-v2?login_token=a90816c3577cf0e8d1c1dca138394671\u0026chat_user_id=101d32bd0d62135f6013876cca54e975\u0026direction_type=1\u0026plugin_id=gglw39\u0026over_time=\u0026env=chat\u0026_=1734927243182\u0026_lt=a90816c3577cf0e8d1c1dca138394671\u0026_u=","fqdn":"msg.salesmartly.com","domain":"salesmartly.com","tld":"com"},"ip":{"addr":"3.164.240.36","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://be.block-sphere.com/app/","date":"2024-12-23T04:14:03.198Z","timestamp":1734927243198,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.salesmartly.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M02","organization":"Amazon"},"validity":{"start":"Mon, 02 Sep 2024 00:00:00 GMT","end":"Thu, 02 Oct 2025 23:59:59 GMT"},"fingerprint":{"sha1":"CB:87:D2:92:FE:AD:D2:26:C4:24:86:B5:6B:BE:B2:2B:5B:3A:B2:2F","sha256":"A5:9D:EB:CC:A0:AA:65:42:29:CB:43:8A:46:29:01:F1:6E:55:12:D8:F8:FD:DB:5A:89:78:9D:8F:61:18:AE:12"}}},"request":{"raw":"OPTIONS /chat/chat-msg/unread-msg-list-v2?login_token=a90816c3577cf0e8d1c1dca138394671\u0026chat_user_id=101d32bd0d62135f6013876cca54e975\u0026direction_type=1\u0026plugin_id=gglw39\u0026over_time=\u0026env=chat\u0026_=1734927243182\u0026_lt=a90816c3577cf0e8d1c1dca138394671\u0026_u= HTTP/1.1\r\nHost: msg.salesmartly.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: external-sign\r\nReferer: https://be.block-sphere.com/\r\nOrigin: https://be.block-sphere.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/html\r\ncontent-length: 0\r\ndate: Mon, 23 Dec 2024 04:14:03 GMT\r\naccess-control-allow-headers: DNT,Keep-Alive,User-Agent,Cache-Control,Content-Type,Authorization,Origin,Cpl,Client-Type,X-Requested-With,Accept,External-Sign\r\naccess-control-allow-origin: https://be.block-sphere.com\r\naccess-control-allow-credentials: true\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 ef1a163d3b3baf700954cad038895428.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P2\r\nx-amz-cf-id: hcjcFeupVFNcE8yw8T7XcyLXFT5Jfy9hs9cWPPwP_3vt5Y1BaBx81g==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-02T06:58:21.972859Z","times_seen":17668698,"resource_available":true,"data":null}},"time_used":399,"timings":{"blocked":66,"dns":35,"connect":10,"send":0,"wait":267,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"at.alicdn.com/t/font_2302506_w05z3emunp.css","fqdn":"at.alicdn.com","domain":"alicdn.com","tld":"com"},"ip":{"addr":"47.246.44.249","port":443,"asn":24429,"as":"Zhejiang Taobao Network Co.,Ltd","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://be.block-sphere.com/app/","date":"2024-12-23T04:14:00.153Z","timestamp":1734927240153,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tbcdn.cn","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign Organization Validation CA - SHA256 - G3","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 19 Jun 2024 09:06:02 GMT","end":"Mon, 21 Jul 2025 09:06:01 GMT"},"fingerprint":{"sha1":"C8:28:74:DB:88:66:17:4F:5C:A5:AB:AD:F0:E1:14:74:AC:F8:FE:8F","sha256":"1F:79:7E:2E:52:1A:9D:9B:55:77:E6:DC:04:AA:1A:2B:D5:77:17:ED:E8:ED:AB:C3:F1:24:B4:CD:94:41:73:F8"}}},"request":{"raw":"GET /t/font_2302506_w05z3emunp.css HTTP/1.1\r\nHost: at.alicdn.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://be.block-sphere.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: Tengine\r\ncontent-type: text/css\r\ndate: Tue, 25 Jun 2024 06:15:32 GMT\r\nvary: Accept-Encoding, Accept-Encoding, Accept-Encoding, Origin\r\nx-oss-request-id: 667A60849628C3323531C184\r\netag: W/\"B704742102085392627F655431A5FC72\"\r\nlast-modified: Fri, 24 Dec 2021 21:20:51 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 344601181178729147\r\nx-oss-storage-class: Standard\r\ncache-control: max-age=63072000\r\ncontent-md5: twR0IQIIU5Jif2VUMaX8cg==\r\nx-oss-server-time: 33\r\nvia: cache19.l2de2[269,269,200-0,M], cache9.l2de2[270,0], ens-cache9.se2[0,1,200-0,H], ens-cache12.se2[3,0]\r\nage: 15631108\r\nali-swift-global-savetime: 1719296132\r\nx-cache: HIT TCP_HIT dirn:8:212411146\r\nx-swift-savetime: Tue, 25 Jun 2024 06:15:32 GMT\r\nx-swift-cachetime: 63072000\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\neagleid: 2ff62ca017349272401841656e\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":8734,"size_decoded":8734,"mime_type":"text/css","magic":"ASCII text, with very long lines (9971), with no line terminators","md5":"4a059aab5822ff91fac910b8278a11cb","sha1":"7d03783b134b6a83dde1fda536b78442fc17fe04","sha256":"c535755da2cec9325e594a0573b962471b77d3471e950aa71d2a8b6ee59f3fc2","sha512":"7f5370632b2962c937a24b81f63c4955f291f40bef2a7903c7386be5760b88feed5b6e1bba196c1bf56b63ad60be757db1333d257fff1090d335c800cc0f2b63","ssdeep":"96:uU/Ux3UX1SgyWFnUhpycHEWoawC4SMoqxAHMZ:TMCX1SgyaUPyc0CfWxi4","tlshash":"2122b0e39d5bc494a371cce177d76f24ea696320ac425d0af31718ac5ff9288d1826ec","first_seen":"2023-04-16T01:49:57Z","last_seen":"2025-03-29T12:13:36.175029Z","times_seen":26,"resource_available":false,"data":null}},"time_used":181,"timings":{"blocked":68,"dns":35,"connect":21,"send":0,"wait":27,"receive":0,"ssl":27},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"be.block-sphere.com/app/layer/layer.js","fqdn":"be.block-sphere.com","domain":"block-sphere.com","tld":"com"},"ip":{"addr":"172.67.161.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://be.block-sphere.com/app/","date":"2024-12-23T04:14:00.146Z","timestamp":1734927240146,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"block-sphere.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Dec 2024 11:23:11 GMT","end":"Mon, 10 Mar 2025 11:23:10 GMT"},"fingerprint":{"sha1":"DB:47:40:41:42:B8:EE:3F:CB:6B:C3:8D:CF:39:4B:AA:3C:B9:80:2B","sha256":"5D:17:11:73:BB:8D:C3:26:BF:A4:44:01:74:42:15:54:EC:6B:F2:39:28:8A:FC:BC:4D:CF:29:13:B5:86:CA:28"}}},"request":{"raw":"GET /app/layer/layer.js HTTP/1.1\r\nHost: be.block-sphere.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://be.block-sphere.com/app/\r\nCookie: angela_session=eyJpdiI6InNHUE9uR3gzb1ZXdWlxTCt5cXptbWc9PSIsInZhbHVlIjoiZVAzQ0RkRGV4N3Nnc1FhRnRCK2hZRmt0UGJydDRxd0N0bUtYcmtoY09tZUNMRGhIZkEzVUVoTUxPdEIyOUFlZVd1VCsxYjdRUEVXY2hMWENwQVVnOUNHM3VUTGpkdUJWWUQrSXllZVQzaTdiY1Jud0pYSEZkeEh3S2t1WlFPajEiLCJtYWMiOiIzYmZjZjI5YTNjZmVjMjUxMzZkOGE0MjJlNWFjNTk1NDc0OTYzYWY1NjNiM2FmMDQwNWQ0NWM2Yzg3MWFmZGJjIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 23 Dec 2024 04:14:00 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 09 Nov 2021 15:48:52 GMT\r\nvary: Accept-Encoding\r\netag: W/\"618a9864-5664\"\r\nexpires: Mon, 23 Dec 2024 16:13:55 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\npriority: u=2,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=UdNRzf59wFO947bL%2BMxCNbsbbYRnLsHOPrSzRcDXeXnBo88xEqceXej0GdkLBkNcctQe0bvQKY0Rf2c9zeQxx7D1sb4tGaFsiUyLR6t28TcXSkZXRGl9hzOI6M%2FTDwHjNFcumBs3\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 8f6585b2c88b56c5-OSL\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=3650\u0026min_rtt=1930\u0026rtt_var=1770\u0026sent=34\u0026recv=20\u0026lost=0\u0026retrans=0\u0026sent_bytes=14919\u0026recv_bytes=7197\u0026delivery_rate=16266\u0026cwnd=12000\u0026unsent_bytes=0\u0026cid=57058721e9bee6fd\u0026ts=1214\u0026x=1\", cfExtPri, cfHdrFlush;dur=0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":22116,"size_decoded":22116,"mime_type":"application/javascript","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-02T06:58:21.972859Z","times_seen":17668698,"resource_available":true,"data":null}},"time_used":555,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":554,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2024-12-23","alert":"Sinkholed","trigger":"block-sphere.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"be.block-sphere.com/app/static/tradeview/charting_library/charting_library.min.js","fqdn":"be.block-sphere.com","domain":"block-sphere.com","tld":"com"},"ip":{"addr":"172.67.161.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://be.block-sphere.com/app/","date":"2024-12-23T04:14:00.149Z","timestamp":1734927240149,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"block-sphere.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Dec 2024 11:23:11 GMT","end":"Mon, 10 Mar 2025 11:23:10 GMT"},"fingerprint":{"sha1":"DB:47:40:41:42:B8:EE:3F:CB:6B:C3:8D:CF:39:4B:AA:3C:B9:80:2B","sha256":"5D:17:11:73:BB:8D:C3:26:BF:A4:44:01:74:42:15:54:EC:6B:F2:39:28:8A:FC:BC:4D:CF:29:13:B5:86:CA:28"}}},"request":{"raw":"GET /app/static/tradeview/charting_library/charting_library.min.js HTTP/1.1\r\nHost: be.block-sphere.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://be.block-sphere.com/app/\r\nCookie: angela_session=eyJpdiI6InNHUE9uR3gzb1ZXdWlxTCt5cXptbWc9PSIsInZhbHVlIjoiZVAzQ0RkRGV4N3Nnc1FhRnRCK2hZRmt0UGJydDRxd0N0bUtYcmtoY09tZUNMRGhIZkEzVUVoTUxPdEIyOUFlZVd1VCsxYjdRUEVXY2hMWENwQVVnOUNHM3VUTGpkdUJWWUQrSXllZVQzaTdiY1Jud0pYSEZkeEh3S2t1WlFPajEiLCJtYWMiOiIzYmZjZjI5YTNjZmVjMjUxMzZkOGE0MjJlNWFjNTk1NDc0OTYzYWY1NjNiM2FmMDQwNWQ0NWM2Yzg3MWFmZGJjIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 23 Dec 2024 04:14:00 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 09 Nov 2021 15:48:54 GMT\r\nvary: Accept-Encoding\r\netag: W/\"618a9866-2d8f\"\r\nexpires: Mon, 23 Dec 2024 16:13:55 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\npriority: u=2,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=NzTWXffizJys%2BLq%2FRbX4zdi0ESHrHeFb9hRuXCnTzDKergDPw%2FLI2LZ2OO0W5XIuddFGVRRp0V%2B50be6dPZxST6Ng9Y2OFjYHXHktLN8ogwoQuFYfUCAeaVrj08vTOQrBF8mFl9u\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 8f6585b2d88f56c5-OSL\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=3470\u0026min_rtt=1930\u0026rtt_var=1687\u0026sent=42\u0026recv=21\u0026lost=0\u0026retrans=0\u0026sent_bytes=24245\u0026recv_bytes=7241\u0026delivery_rate=4217915\u0026cwnd=12000\u0026unsent_bytes=0\u0026cid=57058721e9bee6fd\u0026ts=1220\u0026x=1\", cfExtPri, cfHdrFlush;dur=0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":11663,"size_decoded":11663,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (2132)","md5":"c8cd63cddf0ab72e873d68a2d68ca336","sha1":"2d0b483c39ea41187d9fcb8200bb2819525dbd3b","sha256":"6571ad1a4bb68aacbd4c3a78fc0c26f9c1f1bb34a92164ea3fac2b4532acf88e","sha512":"f3956ab3268f27911de0789fa0858de98e26bcd2736544a6694a225aa61ab5b8ceff26774af62bad71294531d75e4faa198f44ee85a5731ffb26480940f4144d","ssdeep":"192:S4DF7XcEbRi1H0FEKyhWbviztF89xo/g81Qit+0idiiV8M5MSBj5JCWotPSXmYRB:fhoEbizXAoINoWoxSXmBEU3OHQI","tlshash":"18320054df6c2c3205c720fc8d7f288f513de276e895449e388491dc59ed44bbaaba39","first_seen":"2023-03-07T14:46:31Z","last_seen":"2026-07-29T21:55:32.200411Z","times_seen":261,"resource_available":true,"data":null}},"time_used":562,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":561,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2024-12-23","alert":"Sinkholed","trigger":"block-sphere.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api/qrcode?text=https:///mobile/download.html","fqdn":"api","domain":"api","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://be.block-sphere.com/app/","date":"2024-12-23T04:14:02.247Z","timestamp":1734927242247,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /qrcode?text=https:///mobile/download.html HTTP/1.1\r\nHost: api\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://be.block-sphere.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-02T06:58:21.972859Z","times_seen":17668698,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2024-12-23","alert":"Sinkholed","trigger":"api","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"be.block-sphere.com/app/clipboard.min.js","fqdn":"be.block-sphere.com","domain":"block-sphere.com","tld":"com"},"ip":{"addr":"172.67.161.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://be.block-sphere.com/app/","date":"2024-12-23T04:14:00.144Z","timestamp":1734927240144,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"block-sphere.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Dec 2024 11:23:11 GMT","end":"Mon, 10 Mar 2025 11:23:10 GMT"},"fingerprint":{"sha1":"DB:47:40:41:42:B8:EE:3F:CB:6B:C3:8D:CF:39:4B:AA:3C:B9:80:2B","sha256":"5D:17:11:73:BB:8D:C3:26:BF:A4:44:01:74:42:15:54:EC:6B:F2:39:28:8A:FC:BC:4D:CF:29:13:B5:86:CA:28"}}},"request":{"raw":"GET /app/clipboard.min.js HTTP/1.1\r\nHost: be.block-sphere.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://be.block-sphere.com/app/\r\nCookie: angela_session=eyJpdiI6InNHUE9uR3gzb1ZXdWlxTCt5cXptbWc9PSIsInZhbHVlIjoiZVAzQ0RkRGV4N3Nnc1FhRnRCK2hZRmt0UGJydDRxd0N0bUtYcmtoY09tZUNMRGhIZkEzVUVoTUxPdEIyOUFlZVd1VCsxYjdRUEVXY2hMWENwQVVnOUNHM3VUTGpkdUJWWUQrSXllZVQzaTdiY1Jud0pYSEZkeEh3S2t1WlFPajEiLCJtYWMiOiIzYmZjZjI5YTNjZmVjMjUxMzZkOGE0MjJlNWFjNTk1NDc0OTYzYWY1NjNiM2FmMDQwNWQ0NWM2Yzg3MWFmZGJjIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 23 Dec 2024 04:14:00 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 09 Nov 2021 15:48:52 GMT\r\nvary: Accept-Encoding\r\netag: W/\"618a9864-2b10\"\r\nexpires: Mon, 23 Dec 2024 16:13:55 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\npriority: u=2,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=dr9ynfW2y31JefqYL%2BQu0FlSqddcLcVRTq16%2BWpQwJPxy4gMfAkGWtkBEoGtulh%2FvsMnQ9iU5%2FEc6mz1omu7C%2Fs0XHFEQ%2FDFhTU8AzLMdb29KFSGMVO37P3kQC%2FA5lSVzUBpfKkh\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 8f6585b2c88956c5-OSL\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=3839\u0026min_rtt=1930\u0026rtt_var=1857\u0026sent=26\u0026recv=19\u0026lost=0\u0026retrans=0\u0026sent_bytes=6676\u0026recv_bytes=7153\u0026delivery_rate=3929\u0026cwnd=12000\u0026unsent_bytes=0\u0026cid=57058721e9bee6fd\u0026ts=1205\u0026x=1\", cfExtPri, cfHdrFlush;dur=0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":11024,"size_decoded":11024,"mime_type":"application/javascript","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-02T06:58:21.972859Z","times_seen":17668698,"resource_available":true,"data":null}},"time_used":548,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":548,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2024-12-23","alert":"Sinkholed","trigger":"block-sphere.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"be.block-sphere.com/api/currency/quotation_new?_timespan=1734927242331","fqdn":"be.block-sphere.com","domain":"block-sphere.com","tld":"com"},"ip":{"addr":"172.67.161.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://be.block-sphere.com/app/","date":"2024-12-23T04:14:02.391Z","timestamp":1734927242391,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"block-sphere.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Dec 2024 11:23:11 GMT","end":"Mon, 10 Mar 2025 11:23:10 GMT"},"fingerprint":{"sha1":"DB:47:40:41:42:B8:EE:3F:CB:6B:C3:8D:CF:39:4B:AA:3C:B9:80:2B","sha256":"5D:17:11:73:BB:8D:C3:26:BF:A4:44:01:74:42:15:54:EC:6B:F2:39:28:8A:FC:BC:4D:CF:29:13:B5:86:CA:28"}}},"request":{"raw":"GET /api/currency/quotation_new?_timespan=1734927242331 HTTP/1.1\r\nHost: be.block-sphere.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nlang: en\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://be.block-sphere.com/app/\r\nCookie: angela_session=eyJpdiI6InNHUE9uR3gzb1ZXdWlxTCt5cXptbWc9PSIsInZhbHVlIjoiZVAzQ0RkRGV4N3Nnc1FhRnRCK2hZRmt0UGJydDRxd0N0bUtYcmtoY09tZUNMRGhIZkEzVUVoTUxPdEIyOUFlZVd1VCsxYjdRUEVXY2hMWENwQVVnOUNHM3VUTGpkdUJWWUQrSXllZVQzaTdiY1Jud0pYSEZkeEh3S2t1WlFPajEiLCJtYWMiOiIzYmZjZjI5YTNjZmVjMjUxMzZkOGE0MjJlNWFjNTk1NDc0OTYzYWY1NjNiM2FmMDQwNWQ0NWM2Yzg3MWFmZGJjIn0%3D; lang=en\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 23 Dec 2024 04:14:02 GMT\r\ncontent-type: application/json\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: POST,GET,OPTIONS,DELETE\r\naccess-control-allow-headers: x-requested-with,content-type,Authorization\r\ncache-control: no-cache, private\r\nset-cookie: angela_session=eyJpdiI6IkJ5TWFlbjFTeitPZHM5azdoaGhGK3c9PSIsInZhbHVlIjoicXliRWFqbWhYajVJRmlMMWhoZk0zYnNWc2NHNXlQR0dNVkYzKys3QTdxeGlYM0NYRUlRbEkxeWM1NDlqVUd3dkpVTWd0dWRjb3hXdDlINnBNSG9UaVo5REtuUThNcjFPd1wvNW9OeExUU05mQUF5cHZ0bnU3TDZxczdCeEswc1QyIiwibWFjIjoiNzA3NThiY2JiYmY1ZjU3YmUyOGFjMjUxYzg2ZmIxYmViMTJiZWEyNzg5NDA4ZWI4ZDJiZGM0MjM2NzUwNGJhZSJ9; expires=Mon, 23-Dec-2024 06:13:57 GMT; Max-Age=7200; path=/; httponly\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=mQ1D9GV14bbpP9J0V5x1ceJhxr7VHwj%2FlpcfEM9w%2FxBHRGRaNAqgdbT2EVNYW%2Flntpz6nQl6aYdr26nb5DZEsAEx1ZE8kJzmgR3OFn4iopMIRnr%2F6w5wWWB1%2FGmvs7ZhzzFIm5Lu\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 8f6585c0d82b56c5-OSL\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=1462\u0026min_rtt=622\u0026rtt_var=748\u0026sent=1213\u0026recv=100\u0026lost=0\u0026retrans=0\u0026sent_bytes=1389997\u0026recv_bytes=22712\u0026delivery_rate=108459\u0026cwnd=160500\u0026unsent_bytes=0\u0026cid=57058721e9bee6fd\u0026ts=3298\u0026x=1\", cfExtPri, cfHdrFlush;dur=0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":7094,"size_decoded":7094,"mime_type":"application/json","magic":"troff or preprocessor input, ASCII text, with very long lines (8156), with no line terminators","md5":"1ad12417179196448789afe797133a65","sha1":"ea6a88bf730da20316db2603b85984e9f9d70306","sha256":"4042ce7cafb44a52a8080cfdb09f6c951d7729cc48ee268fdf03fe84ea75d014","sha512":"9024094814c34f20bb15990f787e522bab4a1f3abd6287fbb66ef981b552a442e255ea88789cc7cc8fb39199e6943bc19ac1ec7215100b9237d6b081e8f5c8e6","ssdeep":"96:vh0AL25hJ6/L5hgE+YhJ6sJN5hglwIYhg2K6bYhg/anUYhgLn5hhmkEYhuVB:vpsXEzXDb7/ExOLl0","tlshash":"3ff14699a019d968c6c15e4e6abe3f772256f00e9ccb758683ced68853c44707f8f8c2","first_seen":"2024-12-23T04:14:32.647119Z","last_seen":"2024-12-23T04:14:32.647119Z","times_seen":1,"resource_available":false,"data":null}},"time_used":398,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":398,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2024-12-23","alert":"Sinkholed","trigger":"block-sphere.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"plugin-code.salesmartly.com/chat/widget/code/js/vendor1_fd8e7641.js","fqdn":"plugin-code.salesmartly.com","domain":"salesmartly.com","tld":"com"},"ip":{"addr":"3.164.240.26","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://be.block-sphere.com/app/","date":"2024-12-23T04:14:01.228Z","timestamp":1734927241228,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.salesmartly.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M02","organization":"Amazon"},"validity":{"start":"Tue, 21 May 2024 00:00:00 GMT","end":"Thu, 19 Jun 2025 23:59:59 GMT"},"fingerprint":{"sha1":"E3:F1:80:75:0D:19:F2:CB:7A:D6:61:69:BD:7B:62:4C:CB:27:2E:F1","sha256":"77:92:D1:6C:BB:B2:F8:17:08:A4:2A:83:96:42:FD:9A:DA:66:97:81:DF:14:1F:3C:50:9C:D7:F7:8E:F7:F1:CD"}}},"request":{"raw":"GET /chat/widget/code/js/vendor1_fd8e7641.js HTTP/1.1\r\nHost: plugin-code.salesmartly.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript\r\nserver: AliyunOSS\r\ndate: Tue, 17 Dec 2024 08:22:34 GMT\r\nx-oss-request-id: 676134CA3D643B3237CC2C44\r\nlast-modified: Tue, 17 Dec 2024 08:10:32 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 9671956606219813729\r\nx-oss-storage-class: Standard\r\ncache-control: public, max-age=15552000\r\ncontent-md5: YOHCRGf6GIUU2shKUsykFw==\r\nx-oss-server-time: 2\r\ncontent-encoding: gzip\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 cfc62e0b84c9c493a10eb6aef6aad512.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P2\r\nx-amz-cf-id: KoN7uFOpc9Yvre_ncUEDikZvMWe0ak6tgsOO_roxHA-zEfYe6YU5Jg==\r\nage: 503487\r\nvary: Accept-Encoding,Origin, Origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":225259,"size_decoded":225259,"mime_type":"application/javascript","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-02T06:58:21.972859Z","times_seen":17668698,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}