{"report_id":"42cd0d92-3221-4b6b-b012-14babc471527","version":0,"status":"done","tags":[],"date":"2026-09-08T19:08:30Z","url":{"schema":"http","addr":"puksy.com/","fqdn":"puksy.com","domain":"puksy.com","tld":"com"},"ip":{"addr":"185.7.33.81","port":0,"asn":199968,"as":"Iws Networks LLC","country":"Sweden","country_code":"SE"},"final":{"url":{"schema":"https","addr":"puksy.com/","fqdn":"puksy.com","domain":"puksy.com","tld":"com"},"title":"Roblox Free Robux 2026 - Claim Robux","dom":{"size":19162,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (4781)","md5":"d228d6518e704b7740b938cf489c51ef","sha1":"38af12fc58c817edee43a1c62426f80c105ac5f6","sha256":"21a05c32e93f5aeaadac66ba20f3ad8c83e2f684c2578b66b3473416ef7238a3","sha512":"9b7ff2a9cb96b5dfa4c2e91dff7da717abdc74b4b372424bb4eb3c072067b4f295b2dbab7097d3ae6919617d694313f24db83e00c86c0349908f4792e5703052","ssdeep":"384:5/mO6CodINYzNLmoyChaO6Dd7oeWOT3T7/m7iSLxC:5/mO6VXleW47euSw","tlshash":"4f82f62786f2053a16670595bfabbb0c1da542038319fc98f97cd39c2fd586ac9671cc","dom_hash":"domhash44f4694af6b8c2cdff0c0bce252d762e","first_seen":"2026-09-08T19:08:38.948393Z","last_seen":"2026-09-08T19:08:38.948393Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"puksy.com/","fqdn":"puksy.com","domain":"puksy.com","tld":"com"},"ip":{"addr":"185.7.33.81","port":0,"asn":199968,"as":"Iws Networks LLC","country":"Sweden","country_code":"SE"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-10-13T19:08:30Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":4}},"detection":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"puksy.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-08","alert":"Phishing Block","trigger":"puksy.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"puksy.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"puksy.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"www.googletagmanager.com","ip":{"addr":"142.250.178.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2011-11-11","domain_rank":283,"first_seen":"2012-10-04T01:07:32Z","last_seen":"2026-09-06T22:44:31.282543Z","alert_count":0,"request_count":2,"received_data":1054058,"sent_data":944,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"puksy.com","ip":{"addr":"185.7.33.81","port":443,"asn":199968,"as":"Iws Networks LLC","country":"Sweden","country_code":"SE"},"domain_registered":"2026-06-09","domain_rank":0,"first_seen":"2026-09-08T19:08:33.07997Z","last_seen":"2026-09-08T19:08:33.07997Z","alert_count":32,"request_count":8,"received_data":1070167,"sent_data":3910,"comment":"","tags":null,"fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-09-06T22:43:29.090385Z","alert_count":0,"request_count":5,"received_data":208865,"sent_data":2826,"comment":"","tags":null,"fingerprints":null},{"fqdn":"mtict.sjscdn.com","ip":{"addr":"104.21.75.75","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-05-06","domain_rank":0,"first_seen":"2026-09-08T19:08:33.078643Z","last_seen":"2026-09-08T19:08:33.078643Z","alert_count":0,"request_count":2,"received_data":40013,"sent_data":1006,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"www.gstatic.com","ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":146047,"first_seen":"2012-05-29T15:36:17Z","last_seen":"2026-09-06T23:33:22.473656Z","alert_count":0,"request_count":2,"received_data":69011,"sent_data":966,"comment":"","tags":null,"fingerprints":null},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-09-06T22:43:29.329928Z","alert_count":0,"request_count":1,"received_data":14175,"sent_data":547,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"www.google.no","ip":{"addr":"216.58.207.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2001-02-26","domain_rank":92680,"first_seen":"2012-06-26T23:22:08Z","last_seen":"2026-09-06T23:58:30.75429Z","alert_count":0,"request_count":1,"received_data":578,"sent_data":803,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"puksy.com/js/shared.js","fqdn":"puksy.com","domain":"puksy.com","tld":"com"},"ip":{"addr":"185.7.33.81","port":443,"asn":199968,"as":"Iws Networks LLC","country":"Sweden","country_code":"SE"},"introduction_type":"scriptElement","is_inline":false,"md5":"6fccb475decab62138add42cf6364de8","sha1":"2d9ecc4e4d16932d8f9d07376389f2153fddb19e","sha256":"9c21e043ad6aaaef71267e6ab8050312e6c63dac850bc47a4441d7140e187f22","sha512":"b589c9c84a6e0b1fe1e420e2bbe5d029da44e5c41b35d83c2e234f7d2a36c704528a9e09b94e7a252bf6c6ed73c125b142c650930209d0b05338190e9bb39ec2","ssdeep":"","tlshash":"83511e4e7ca73829147bf53a3abfa409f56885030446ea52789c52684fb4b6403befdc","size":2580,"data":"","first_seen":"2026-06-06T14:49:33.049802Z","last_seen":"2026-09-08T21:11:41.418342Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/firebasejs/10.3.1/firebase-app-compat.js","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"9900403b65514fad7df39a4e788a6e45","sha1":"75f9ba061ef4e72bb23528c700f2a11c56d637e9","sha256":"a202b2051ea9810cd9ba592b3f9418a89e2062f5c185e29e288080b28eb64fe5","sha512":"6c24f5dba5409574433e7438b7be890202132302f22cc79eb4446f29e02afd054dae6e79fce02c66444c76ba8f857658c4de4b8379e5cbae54c847bdd54a3fc6","ssdeep":"768:dASlCDOW3GZSQaujrg/AfjpNBLJ8EElOZbwrgmJHNS55/:VW3tujrlESkNu/","tlshash":"74d20a587be3f4270bb940da00762403f36d5a08594d846cf22cedebaa9584b90bff75","size":28949,"data":"","first_seen":"2023-09-16T15:58:25Z","last_seen":"2026-09-08T21:11:41.412903Z","times_seen":7896,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/firebasejs/10.3.1/firebase-messaging-compat.js","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"0541b823dfaf39162ef84cf075c9951b","sha1":"e0934726455558cc1a59823efada9651e33aafaa","sha256":"21f1d62f222007068c793f0947d98f4ccb7c1595adb68efeb783390fdd8b5522","sha512":"41dcfb4e2d91a5f8b7cc482e25a8a4ed5bcd1202d7c34b9ab0b258d1599bd669479a101024af30f6a90eb09e3c7817a6565d5f9978c6fb31897ef63e5d5bd3a5","ssdeep":"768:s/XYybWGO7ksZus7aKXhFTSjDH3WQZZfuaNNHRzxHs67ZoL3udKoW3gbUFuOt:5GO55/CXS3udKoWyQ/","tlshash":"a903faca7af3b53356d714eb987b2002a13a8a0c584e9020b7eed5c57d6e40adb77f14","size":38286,"data":"","first_seen":"2023-05-26T20:56:20Z","last_seen":"2026-09-08T21:11:41.417853Z","times_seen":9704,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"puksy.com/","fqdn":"puksy.com","domain":"puksy.com","tld":"com"},"ip":{"addr":"185.7.33.81","port":443,"asn":199968,"as":"Iws Networks LLC","country":"Sweden","country_code":"SE"},"introduction_type":"scriptElement","is_inline":true,"md5":"6be6ce4425de6084058dbea7a3d1eea3","sha1":"e095bf7eedb02bb61ad4fd3ecd8bdfe9e1b28070","sha256":"63f92158ab1f2874b6aefb14b345b398a4f20aac8380cfa2edfc8c8fb5665be0","sha512":"27327cdcb6761dd636b2cf1b99940889d65892a226d3e38c4be7342c32b2694e68d45af047be56d510234f5913569b92a6ea2dc5551424b19a834ed6413b7f23","ssdeep":"","tlshash":"a6c09b8c311f5c7155e72790cb7fb604f4417218a5d5aa714d1e63455e20e17d754854","size":149,"data":"","first_seen":"2026-09-08T19:08:38.997124Z","last_seen":"2026-09-08T21:11:41.423349Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"puksy.com/","fqdn":"puksy.com","domain":"puksy.com","tld":"com"},"ip":{"addr":"185.7.33.81","port":443,"asn":199968,"as":"Iws Networks LLC","country":"Sweden","country_code":"SE"},"introduction_type":"scriptElement","is_inline":true,"md5":"f8e0fa463a308c9cdc6517473222e947","sha1":"e5f808f04d428f688c6c5922dad140b65b03c01b","sha256":"5d70fb951dcd2b14ea1901c502b51c2a3212396d8b99496e54729dde8ae0240b","sha512":"8007921cbad0e6980a52863fb4ade1c15d5bcb0007d956280648c99210c49f7fcefec9d65c21a6640bc6482438d43eb3546b229c5813de3911cf6c5546306440","ssdeep":"","tlshash":"67c08c89320f0cb082f726c0cb3fba00f4413218b6d9aa354c1b6244ae20e17ab44864","size":172,"data":"","first_seen":"2026-09-08T19:08:38.999571Z","last_seen":"2026-09-08T21:11:41.424231Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"puksy.com/","fqdn":"puksy.com","domain":"puksy.com","tld":"com"},"ip":{"addr":"185.7.33.81","port":443,"asn":199968,"as":"Iws Networks LLC","country":"Sweden","country_code":"SE"},"introduction_type":"scriptElement","is_inline":true,"md5":"a98926272bb62b710a00d673a9e724f3","sha1":"fd8e3d0ef0d72217e189be1b16d177ccd9371013","sha256":"e85912b140cc29f951cf8aadf4407b1143492393bc028aad8da83f4e4fad84e8","sha512":"d031b45c3c2bb5ae943814f660a5ef319c4d968ecaf42c728352ec97a5f7293d637d66b15d9f09260cf4cd7231a8db705bc06ca282c7ac45474dd88082b8996e","ssdeep":"96:yym2YKCopILH5bkZs0dGfybCDVZ9Dmno30Kj:Jm2YzoILH5D0dGfysVDDmnokKj","tlshash":"4aa1cd1f66f32729b86731361f9b3308552290332e35fd4df91ec3188fa60a69576a8c","size":5013,"data":"","first_seen":"2026-09-08T19:08:39.001554Z","last_seen":"2026-09-08T21:11:41.425053Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"puksy.com/","fqdn":"puksy.com","domain":"puksy.com","tld":"com"},"ip":{"addr":"185.7.33.81","port":443,"asn":199968,"as":"Iws Networks LLC","country":"Sweden","country_code":"SE"},"introduction_type":"scriptElement","is_inline":true,"md5":"b93e6c5f4bf25224452fbc9714b071ee","sha1":"044dc791c4e670c9a34807df852a4906bad1cafa","sha256":"5f4a77361c4c64266cdb0484cbf6ef1a6ef1d6394d3ea9047fdf8628e3e2db96","sha512":"7ffb8c92a63a6095287182b1460d6b38708d431d94a6f989314689116b08e10143764d11df86c0a124ecb70ff1b04a7c11e55eb82c19f58377427cd29da3f7d7","ssdeep":"48:iyaEqtnE2NNOPK+GLCW64ga2XNCnVt2kRsrF31MI3j+U2LOLjVkSWhnhxXun83SG:JqxOSXLxVRnVnmrPEAVkSbp6ZNMHMKwD","tlshash":"0ba18556c30c492f0b570acdfdaf9f5d4ed92604131c2ea8ec7da92c625821de56c0ee","size":4809,"data":"","first_seen":"2026-09-08T19:08:39.005351Z","last_seen":"2026-09-08T21:11:41.427237Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"puksy.com/js/main.js","fqdn":"puksy.com","domain":"puksy.com","tld":"com"},"ip":{"addr":"185.7.33.81","port":443,"asn":199968,"as":"Iws Networks LLC","country":"Sweden","country_code":"SE"},"introduction_type":"scriptElement","is_inline":false,"md5":"2f221b05aefab97270d6654f9d14f2af","sha1":"de782205eee5e72bbca97aded3504a522d6a7c49","sha256":"ef855c0d92d7a33d923456796770040b9a1fbddc5a15ea13343d89e5918985af","sha512":"1c4f84f855988e9ee72db8a35b42040a99bf3713464d2c2385f38d47ea22f37f0c6e1e11f966830f72a1df8845b5a9332beacc0b44595d463c05d7e1adedc221","ssdeep":"192:ELs5yBxKmBa4jgEUyd6d5TgKONE18XMm+/Eu/V0IuGh57:k/bBHGveS1uOVnJh","tlshash":"ea22542bf9e710a919b7303b2bff020828b611175906de14793c52886fd5e5869b6bfc","size":10719,"data":"","first_seen":"2026-09-08T19:08:38.955731Z","last_seen":"2026-09-08T21:11:41.420584Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mtict.sjscdn.com/ps/ps.js?id=hquQ6gElLk610qlqNEQAxA","fqdn":"mtict.sjscdn.com","domain":"sjscdn.com","tld":"com"},"ip":{"addr":"104.21.75.75","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"dcd36b06533de06c6cfc317acd3b0a83","sha1":"1270e0ea81f8dcbd67be7136253434871bcf299c","sha256":"7cadae5ea964fc7607f22127ab27ceab3cbe8c76886b8d9c90de38590f598394","sha512":"d4d441243a5dc7bcbcc6fa7da6252fab0a2a06035263e4b64d8a5678bb2332b3c008af0e0673f32a0e3ae61d3529a17d0882a473bda8879bd958ff3f4b100ae1","ssdeep":"768:wyNhe8X4X/D1DMIGtaJDA1gIpuECmVTsHwqLobz24oRR6DWXRC/zDAi7E:XBMO1HAXm+MuqE","tlshash":"5903fb80b5809970138246b7737e6b9df8161f6ebdce484de10a79916bd721acbf2334","size":37961,"data":"","first_seen":"2026-09-08T19:08:38.976888Z","last_seen":"2026-09-08T19:08:38.976888Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-0SPKJGQ494","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"5df4313a52dcbee3f32b06cf9dd812f0","sha1":"17a93e7d97199c4a8ce5dafcadc702aef9d45a66","sha256":"c206dfbeb673e6b98a09bba3a5fccbb6da73ba6eb555968233c364e15165c761","sha512":"67905b1d4db28437e88d164a8f4e25b6f01bdcfbf801e36021261560db50f4d8449e6410565c27355e1f318d9e9d4fd2ac94d88d87c2ce6eda228151a07e28f5","ssdeep":"6144:EyL/1jihusz/QZBrRQ6OuhxizcHR/EEQv3sk70y5CY1vrztHv9L:EgAoZMcS0y5xvvFZ","tlshash":"29b408ce73c674229396f178903f01cba57b28a2b45cc89af289dce42d3459a5167f7c","size":526435,"data":"","first_seen":"2026-09-08T19:08:38.952576Z","last_seen":"2026-09-08T21:11:41.413912Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mtict.sjscdn.com/ps/config.js?id=hquQ6gElLk610qlqNEQAxA","fqdn":"mtict.sjscdn.com","domain":"sjscdn.com","tld":"com"},"ip":{"addr":"104.21.75.75","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"eae6ec126c87767ad26c82c7e1da75d1","sha1":"2a7fd5fefa6e64a5c24257f85567659b42fcaae0","sha256":"fd3fbf290d3e137153d82251b3c8fdd0c0b7caeebaf3e520c74fb11f6b94151c","sha512":"ff2a3e3ec95190bc695f0a8ee518282b60603b83370701050b16f838bf64e259fda905dc6fa244ba452f3e4526983800c6fb679b029cfd5656c64780c9e5a5a6","ssdeep":"","tlshash":"21e0d8fb288396010bb508aff7a27c50e94293572847d0db3875d25c5fa1009e657e34","size":360,"data":"","first_seen":"2026-06-23T18:14:15.005046Z","last_seen":"2026-09-08T21:11:41.422547Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-0SPKJGQ494","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://puksy.com/","date":"2026-09-08T19:07:58.393Z","timestamp":1788894478393,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:37:41 GMT","end":"Mon, 02 Nov 2026 08:37:40 GMT"},"fingerprint":{"sha1":"DC:E6:38:9B:82:DB:20:21:19:E7:95:FC:30:E0:F0:F4:BC:CA:9A:1C","sha256":"2C:0E:42:66:EE:BA:84:59:3C:53:EB:87:C0:84:DD:32:F4:42:73:26:47:8C:4E:56:F9:5B:47:6C:AF:BA:C2:F9"}}},"request":{"raw":"GET /gtag/js?id=G-0SPKJGQ494 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://puksy.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: zstd\r\nvary: Accept-Encoding\r\ndate: Tue, 08 Sep 2026 19:07:58 GMT\r\nexpires: Tue, 08 Sep 2026 19:07:58 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 175455\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":526435,"size_decoded":176059,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (6698)","md5":"5df4313a52dcbee3f32b06cf9dd812f0","sha1":"17a93e7d97199c4a8ce5dafcadc702aef9d45a66","sha256":"c206dfbeb673e6b98a09bba3a5fccbb6da73ba6eb555968233c364e15165c761","sha512":"67905b1d4db28437e88d164a8f4e25b6f01bdcfbf801e36021261560db50f4d8449e6410565c27355e1f318d9e9d4fd2ac94d88d87c2ce6eda228151a07e28f5","ssdeep":"6144:EyL/1jihusz/QZBrRQ6OuhxizcHR/EEQv3sk70y5CY1vrztHv9L:EgAoZMcS0y5xvvFZ","tlshash":"29b408ce73c674229396f178903f01cba57b28a2b45cc89af289dce42d3459a5167f7c","first_seen":"2026-09-08T19:08:38.952576Z","last_seen":"2026-09-08T21:11:41.413912Z","times_seen":2,"resource_available":true,"data":null}},"time_used":146,"timings":{"blocked":-1,"dns":2,"connect":15,"send":0,"wait":48,"receive":48,"ssl":33},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"puksy.com/js/main.js","fqdn":"puksy.com","domain":"puksy.com","tld":"com"},"ip":{"addr":"185.7.33.81","port":443,"asn":199968,"as":"Iws Networks LLC","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://puksy.com/","date":"2026-09-08T19:07:58.398Z","timestamp":1788894478398,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.puksy.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 09 Aug 2026 14:01:09 GMT","end":"Sat, 07 Nov 2026 14:01:08 GMT"},"fingerprint":{"sha1":"38:24:D2:C8:DE:DA:35:A0:55:8C:46:19:B7:76:01:E8:A2:6B:53:81","sha256":"B3:D1:F6:9D:B0:A7:55:51:96:6F:B4:C2:E2:F3:08:50:57:6F:A8:C7:AD:DE:F8:AC:2C:2F:D0:33:F9:CC:10:C0"}}},"request":{"raw":"GET /js/main.js HTTP/1.1\r\nHost: puksy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://puksy.com/\r\nCookie: lang=en\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/javascript\r\nlast-modified: Tue, 11 Aug 2026 13:07:02 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 3203\r\ndate: Tue, 08 Sep 2026 19:07:58 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":10742,"size_decoded":3440,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"2f221b05aefab97270d6654f9d14f2af","sha1":"de782205eee5e72bbca97aded3504a522d6a7c49","sha256":"ef855c0d92d7a33d923456796770040b9a1fbddc5a15ea13343d89e5918985af","sha512":"1c4f84f855988e9ee72db8a35b42040a99bf3713464d2c2385f38d47ea22f37f0c6e1e11f966830f72a1df8845b5a9332beacc0b44595d463c05d7e1adedc221","ssdeep":"192:ELs5yBxKmBa4jgEUyd6d5TgKONE18XMm+/Eu/V0IuGh57:k/bBHGveS1uOVnJh","tlshash":"ea22542bf9e710a919b7303b2bff020828b611175906de14793c52886fd5e5869b6bfc","first_seen":"2026-09-08T19:08:38.955731Z","last_seen":"2026-09-08T21:11:41.420584Z","times_seen":2,"resource_available":true,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"puksy.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-08","alert":"Phishing Block","trigger":"puksy.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"puksy.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"puksy.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-0SPKJGQ494","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://puksy.com/","date":"2026-09-08T19:07:58.547Z","timestamp":1788894478547,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:37:41 GMT","end":"Mon, 02 Nov 2026 08:37:40 GMT"},"fingerprint":{"sha1":"DC:E6:38:9B:82:DB:20:21:19:E7:95:FC:30:E0:F0:F4:BC:CA:9A:1C","sha256":"2C:0E:42:66:EE:BA:84:59:3C:53:EB:87:C0:84:DD:32:F4:42:73:26:47:8C:4E:56:F9:5B:47:6C:AF:BA:C2:F9"}}},"request":{"raw":"GET /gtag/js?id=G-0SPKJGQ494 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://puksy.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: zstd\r\nvary: Accept-Encoding\r\ndate: Tue, 08 Sep 2026 19:07:58 GMT\r\nexpires: Tue, 08 Sep 2026 19:07:58 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 175455\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":526435,"size_decoded":176039,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (6698)","md5":"5df4313a52dcbee3f32b06cf9dd812f0","sha1":"17a93e7d97199c4a8ce5dafcadc702aef9d45a66","sha256":"c206dfbeb673e6b98a09bba3a5fccbb6da73ba6eb555968233c364e15165c761","sha512":"67905b1d4db28437e88d164a8f4e25b6f01bdcfbf801e36021261560db50f4d8449e6410565c27355e1f318d9e9d4fd2ac94d88d87c2ce6eda228151a07e28f5","ssdeep":"6144:EyL/1jihusz/QZBrRQ6OuhxizcHR/EEQv3sk70y5CY1vrztHv9L:EgAoZMcS0y5xvvFZ","tlshash":"29b408ce73c674229396f178903f01cba57b28a2b45cc89af289dce42d3459a5167f7c","first_seen":"2026-09-08T19:08:38.952576Z","last_seen":"2026-09-08T21:11:41.413912Z","times_seen":2,"resource_available":true,"data":null}},"time_used":85,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":48,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://puksy.com/","date":"2026-09-08T19:07:58.590Z","timestamp":1788894478590,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:10 GMT","end":"Mon, 02 Nov 2026 08:39:09 GMT"},"fingerprint":{"sha1":"AB:CB:A4:4C:A5:65:CD:AE:7D:49:56:A1:8A:F1:7C:FB:63:84:AE:13","sha256":"61:13:42:1F:BA:E8:AE:1B:A2:FC:89:02:B5:BE:EF:3C:35:FC:AE:06:22:3C:B0:DF:74:48:AD:42:E0:4A:30:A5"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://puksy.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 02 Sep 2026 10:31:27 GMT\r\nexpires: Thu, 02 Sep 2027 10:31:27 GMT\r\ncache-control: public, max-age=31536000\r\nage: 549391\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48532,"size_decoded":49345,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-09-08T22:46:07.701329Z","times_seen":279189,"resource_available":false,"data":null}},"time_used":95,"timings":{"blocked":-1,"dns":0,"connect":30,"send":0,"wait":23,"receive":42,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/lilitaone/v17/i7dPIFZ9Zz-WBtRtedDbYEF8RQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://puksy.com/","date":"2026-09-08T19:07:58.593Z","timestamp":1788894478593,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:10 GMT","end":"Mon, 02 Nov 2026 08:39:09 GMT"},"fingerprint":{"sha1":"AB:CB:A4:4C:A5:65:CD:AE:7D:49:56:A1:8A:F1:7C:FB:63:84:AE:13","sha256":"61:13:42:1F:BA:E8:AE:1B:A2:FC:89:02:B5:BE:EF:3C:35:FC:AE:06:22:3C:B0:DF:74:48:AD:42:E0:4A:30:A5"}}},"request":{"raw":"GET /s/lilitaone/v17/i7dPIFZ9Zz-WBtRtedDbYEF8RQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://puksy.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 10672\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sun, 06 Sep 2026 15:03:05 GMT\r\nexpires: Mon, 06 Sep 2027 15:03:05 GMT\r\ncache-control: public, max-age=31536000\r\nage: 187493\r\nlast-modified: Tue, 09 Sep 2025 17:08:13 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":10672,"size_decoded":11485,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 10672, version 1.0","md5":"9a95c766f3e10049fcb4e726719e531d","sha1":"3b71f6c24c7e1301971abb9a80a74b118188fda4","sha256":"d2575d4fa3632580aafcbcdf6978b3b57e144b90cf5bd9c2c98194f28b869704","sha512":"ba654fa2765cf9877139ca0cdd7de4124b970109cacba2dc6e91cca2adf6fda9d93e80342264a2e6d97f7cda20e17acf88784586ddf9eae84e695721ddcef6e0","ssdeep":"192:gAYkEaKmmdv+uBQGC7JlO/0U9xcdDrnBpyIUi57SK73GEXpFnhIzXEDsikkfjTOU:gc5Wv5BfC7Js0UvS3BpyJi023GEXnnhL","tlshash":"6a22c084f2754c74331abf776002df777a7a43016e278e83b68499c13a016bca48b79c","first_seen":"2023-05-09T15:00:14Z","last_seen":"2026-09-08T21:11:41.419166Z","times_seen":666,"resource_available":false,"data":null}},"time_used":47,"timings":{"blocked":25,"dns":0,"connect":0,"send":0,"wait":19,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://puksy.com/","date":"2026-09-08T19:07:58.595Z","timestamp":1788894478595,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:10 GMT","end":"Mon, 02 Nov 2026 08:39:09 GMT"},"fingerprint":{"sha1":"AB:CB:A4:4C:A5:65:CD:AE:7D:49:56:A1:8A:F1:7C:FB:63:84:AE:13","sha256":"61:13:42:1F:BA:E8:AE:1B:A2:FC:89:02:B5:BE:EF:3C:35:FC:AE:06:22:3C:B0:DF:74:48:AD:42:E0:4A:30:A5"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://puksy.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 02 Sep 2026 10:31:27 GMT\r\nexpires: Thu, 02 Sep 2027 10:31:27 GMT\r\ncache-control: public, max-age=31536000\r\nage: 549391\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48532,"size_decoded":49345,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-09-08T22:46:07.701329Z","times_seen":279189,"resource_available":false,"data":null}},"time_used":91,"timings":{"blocked":25,"dns":0,"connect":0,"send":0,"wait":35,"receive":31,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"puksy.com/images/Back3.webp","fqdn":"puksy.com","domain":"puksy.com","tld":"com"},"ip":{"addr":"185.7.33.81","port":443,"asn":199968,"as":"Iws Networks LLC","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://puksy.com/","date":"2026-09-08T19:07:58.608Z","timestamp":1788894478608,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.puksy.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 09 Aug 2026 14:01:09 GMT","end":"Sat, 07 Nov 2026 14:01:08 GMT"},"fingerprint":{"sha1":"38:24:D2:C8:DE:DA:35:A0:55:8C:46:19:B7:76:01:E8:A2:6B:53:81","sha256":"B3:D1:F6:9D:B0:A7:55:51:96:6F:B4:C2:E2:F3:08:50:57:6F:A8:C7:AD:DE:F8:AC:2C:2F:D0:33:F9:CC:10:C0"}}},"request":{"raw":"GET /images/Back3.webp HTTP/1.1\r\nHost: puksy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://puksy.com/\r\nCookie: lang=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Tue, 15 Sep 2026 19:07:58 GMT\r\ncontent-type: image/webp\r\nlast-modified: Thu, 04 Jun 2026 13:42:14 GMT\r\naccept-ranges: bytes\r\ncontent-length: 87388\r\ndate: Tue, 08 Sep 2026 19:07:58 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":87388,"size_decoded":87655,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"8090b5bb84269385fe420d981dec5be1","sha1":"6cfb3f78a707f789b30d6dd4578ddb04f58ae337","sha256":"79f66f3a901fe1a5fb1612c208633f38b332f18ee400b4acc50a79d093cb64f8","sha512":"8026d423ddfdefb86ebe95a742e2f099b7a7349668848a31ec837c63cf06e700678ba3f3c8dac515c93f98e38f9fd6bbc0b4b2a31a9e9878a1e2f309c3d9af08","ssdeep":"1536:6uMH8oUNiiStzXeOZnfOMahYUzB0yQmY9B/JwbvKRUOx4zt1/MQp418VyEM0XVtn:pMcoCdmzXe6GJhzB0zn/JwWzxwt1Rq1E","tlshash":"a98312079cb130ec460bd6bfdfeb364003fb69b68e84795778a512f220358d29d95e1a","first_seen":"2026-09-08T19:08:38.962222Z","last_seen":"2026-09-08T21:11:41.411642Z","times_seen":2,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":15,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"puksy.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-08","alert":"Phishing Block","trigger":"puksy.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"puksy.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"puksy.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"puksy.com/css/main.css","fqdn":"puksy.com","domain":"puksy.com","tld":"com"},"ip":{"addr":"185.7.33.81","port":443,"asn":199968,"as":"Iws Networks LLC","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://puksy.com/","date":"2026-09-08T19:07:58.392Z","timestamp":1788894478392,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.puksy.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 09 Aug 2026 14:01:09 GMT","end":"Sat, 07 Nov 2026 14:01:08 GMT"},"fingerprint":{"sha1":"38:24:D2:C8:DE:DA:35:A0:55:8C:46:19:B7:76:01:E8:A2:6B:53:81","sha256":"B3:D1:F6:9D:B0:A7:55:51:96:6F:B4:C2:E2:F3:08:50:57:6F:A8:C7:AD:DE:F8:AC:2C:2F:D0:33:F9:CC:10:C0"}}},"request":{"raw":"GET /css/main.css HTTP/1.1\r\nHost: puksy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://puksy.com/\r\nCookie: lang=en\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Tue, 15 Sep 2026 19:07:58 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 04 Jun 2026 13:57:56 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 3817\r\ndate: Tue, 08 Sep 2026 19:07:58 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":14947,"size_decoded":4304,"mime_type":"text/css","magic":"assembler source, ASCII text","md5":"d305e8c2edbca34a35f89d1d21ac4fa0","sha1":"114ade5b78a62ceee92e0035f6a1a55178e4fdf6","sha256":"5e6daf5f543b328ea2dd79d3928f65e5e6dd1104e92593efd9a130d63a30bcb0","sha512":"32ed9f16bb5269f9bf5b20bc4b6c734fbcb6d64ef85a30cfa24362e1ac234e4ba254c237121bc91d279a755dfd9adb259d888b39ab65c93accedfeab90071d15","ssdeep":"192:U+/I3funqFNVtblly3ABqGc+1rrPjKgQ7/8MZ64h7vQ2D2unMKwjaXndi59MbjBe:klbawxE8MagXnJ7uVhYnX3TAAfet","tlshash":"8d6251a2a6131549b06392147fd7875f32bc9003e21bda7d7bd51198cfc93ecd265b88","first_seen":"2026-06-06T14:49:33.057391Z","last_seen":"2026-09-08T21:11:41.408546Z","times_seen":3,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-08","alert":"Phishing Block","trigger":"puksy.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"puksy.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"puksy.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"puksy.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"puksy.com/images/brawl_stars_logo.png","fqdn":"puksy.com","domain":"puksy.com","tld":"com"},"ip":{"addr":"185.7.33.81","port":443,"asn":199968,"as":"Iws Networks LLC","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://puksy.com/","date":"2026-09-08T19:07:58.404Z","timestamp":1788894478404,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.puksy.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 09 Aug 2026 14:01:09 GMT","end":"Sat, 07 Nov 2026 14:01:08 GMT"},"fingerprint":{"sha1":"38:24:D2:C8:DE:DA:35:A0:55:8C:46:19:B7:76:01:E8:A2:6B:53:81","sha256":"B3:D1:F6:9D:B0:A7:55:51:96:6F:B4:C2:E2:F3:08:50:57:6F:A8:C7:AD:DE:F8:AC:2C:2F:D0:33:F9:CC:10:C0"}}},"request":{"raw":"GET /images/brawl_stars_logo.png HTTP/1.1\r\nHost: puksy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://puksy.com/\r\nCookie: lang=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Tue, 15 Sep 2026 19:07:58 GMT\r\ncontent-type: image/png\r\nlast-modified: Sun, 31 May 2026 12:57:48 GMT\r\naccept-ranges: bytes\r\ncontent-length: 908380\r\ndate: Tue, 08 Sep 2026 19:07:58 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":908380,"size_decoded":908647,"mime_type":"image/png","magic":"PNG image data, 2828 x 2828, 8-bit/color RGBA, non-interlaced","md5":"c4f7648bf93bd464f63abba27e6665ec","sha1":"cdf2f0cacd3b0491e65aa97eadfd9020e2eeae29","sha256":"0b6ed39e8e4696830a187cae82e79a5826692298dc22f9c23f5e07935ddcf931","sha512":"5aa4bdcdf9681ad73c5df5489de46160bace5d2ab19ef8048e491b8319d831792899ba9c7fc2108283aac17a18430d651e3a19c3fd79be8b489ab66f84dc6683","ssdeep":"24576:Y2M8g0H45dwd9uN6UafbLOrwJzU7qw4Xm26nTvJF:Y18g0Y5dE9uN6JfPtU+FcF","tlshash":"1115120cd4f1e586eec3543b29b81f6b1b3b516b45f959acd2a1b82c4e49e3c1b0069f","first_seen":"2026-06-06T14:49:33.045349Z","last_seen":"2026-09-08T21:11:41.415035Z","times_seen":3,"resource_available":false,"data":null}},"time_used":101,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":86,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"puksy.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-08","alert":"Phishing Block","trigger":"puksy.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"puksy.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"puksy.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"puksy.com/images/icon_player_level.png","fqdn":"puksy.com","domain":"puksy.com","tld":"com"},"ip":{"addr":"185.7.33.81","port":443,"asn":199968,"as":"Iws Networks LLC","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://puksy.com/","date":"2026-09-08T19:07:58.406Z","timestamp":1788894478406,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.puksy.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 09 Aug 2026 14:01:09 GMT","end":"Sat, 07 Nov 2026 14:01:08 GMT"},"fingerprint":{"sha1":"38:24:D2:C8:DE:DA:35:A0:55:8C:46:19:B7:76:01:E8:A2:6B:53:81","sha256":"B3:D1:F6:9D:B0:A7:55:51:96:6F:B4:C2:E2:F3:08:50:57:6F:A8:C7:AD:DE:F8:AC:2C:2F:D0:33:F9:CC:10:C0"}}},"request":{"raw":"GET /images/icon_player_level.png HTTP/1.1\r\nHost: puksy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://puksy.com/\r\nCookie: lang=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Tue, 15 Sep 2026 19:07:58 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 04 Jun 2026 13:47:42 GMT\r\naccept-ranges: bytes\r\ncontent-length: 10030\r\ndate: Tue, 08 Sep 2026 19:07:58 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":10030,"size_decoded":10296,"mime_type":"image/png","magic":"PNG image data, 60 x 68, 8-bit/color RGBA, non-interlaced","md5":"955f530c585786d2b916cd56df9c92d1","sha1":"978bbf3b0f3f82790a4c32f3347c57925230ca3b","sha256":"42b47055827e3594aea82cd59d04d246131297cbda82f11fa0e5fd0ab8cf46a6","sha512":"8483830bdf95617bcdbf2dade9b5f8db8f657193bcbdeee8ae4af283a888b6144b1dfb8af554eba1d5cd13f425564d2e28394862a09a6a1fc8a9d0c634cd2e24","ssdeep":"192:f9Lx5IRuC+jRal5b6OvK2JsqpV/x7aGjZUAwJJp6n2RcZz:f9Lx5bj7oK/qpJtaGjZetQiK","tlshash":"0b229e2fd4504a99efdf6235c8ddea94d9c7a1009a83128d44a1dd078f10cfdde7d685","first_seen":"2026-06-06T14:49:33.027021Z","last_seen":"2026-09-08T21:11:41.416288Z","times_seen":3,"resource_available":false,"data":null}},"time_used":42,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":40,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-08","alert":"Phishing Block","trigger":"puksy.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"puksy.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"puksy.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"puksy.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://puksy.com/","date":"2026-09-08T19:07:58.592Z","timestamp":1788894478592,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:10 GMT","end":"Mon, 02 Nov 2026 08:39:09 GMT"},"fingerprint":{"sha1":"AB:CB:A4:4C:A5:65:CD:AE:7D:49:56:A1:8A:F1:7C:FB:63:84:AE:13","sha256":"61:13:42:1F:BA:E8:AE:1B:A2:FC:89:02:B5:BE:EF:3C:35:FC:AE:06:22:3C:B0:DF:74:48:AD:42:E0:4A:30:A5"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://puksy.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 02 Sep 2026 10:31:27 GMT\r\nexpires: Thu, 02 Sep 2027 10:31:27 GMT\r\ncache-control: public, max-age=31536000\r\nage: 549391\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48532,"size_decoded":49345,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-09-08T22:46:07.701329Z","times_seen":279189,"resource_available":false,"data":null}},"time_used":94,"timings":{"blocked":26,"dns":0,"connect":0,"send":0,"wait":43,"receive":25,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"puksy.com/","fqdn":"puksy.com","domain":"puksy.com","tld":"com"},"ip":{"addr":"185.7.33.81","port":443,"asn":199968,"as":"Iws Networks LLC","country":"Sweden","country_code":"SE"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-08T19:07:57.532Z","timestamp":1788894477532,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.puksy.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 09 Aug 2026 14:01:09 GMT","end":"Sat, 07 Nov 2026 14:01:08 GMT"},"fingerprint":{"sha1":"38:24:D2:C8:DE:DA:35:A0:55:8C:46:19:B7:76:01:E8:A2:6B:53:81","sha256":"B3:D1:F6:9D:B0:A7:55:51:96:6F:B4:C2:E2:F3:08:50:57:6F:A8:C7:AD:DE:F8:AC:2C:2F:D0:33:F9:CC:10:C0"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: puksy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nset-cookie: lang=en; expires=Thu, 08-Oct-2026 19:07:57 GMT; Max-Age=2592000; path=/; secure\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Tue, 08 Sep 2026 19:07:57 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":[{"name":"lang","value":"en","quoted":false,"path":"/","expires":"2026-10-08T19:07:57Z","raw_expires":"Thu, 08-Oct-2026 19:07:57 GMT","max_age":2592000,"secure":true,"http_only":false,"same_site":"","partitioned":false,"raw":"lang=en; expires=Thu, 08-Oct-2026 19:07:57 GMT; Max-Age=2592000; path=/; secure"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":17498,"size_decoded":5702,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (4781)","md5":"e80d1dc611cd78aecfdb45b0a14b0435","sha1":"abd198386bcff99e0c2d9df82359216aabee8384","sha256":"fe879b8f39a2fa1d775f7a2659516057c473c9d4e2a4a27f5281933505b488a8","sha512":"ce81633a7aa628b34894cbd0972d907041928944d329aefae3f2175fc4b9c257d798ac998c05d63ac76a01a4c92132b44f7dd9669b7272ac21a22a4165d65ad6","ssdeep":"384:HymONdxNYzNLmo5KhiO8F7QeUI0Dx7/m7iSLD:HymONdYcexq7euSP","tlshash":"e772e41792f6053a11670599afafbb0c5da502038629fd4cf9bcd3ac1fa596ac8734cc","first_seen":"2026-09-08T19:08:38.974317Z","last_seen":"2026-09-08T21:11:41.399126Z","times_seen":2,"resource_available":false,"data":null}},"time_used":439,"timings":{"blocked":-1,"dns":133,"connect":14,"send":0,"wait":257,"receive":0,"ssl":35},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"puksy.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"puksy.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"puksy.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-08","alert":"Phishing Block","trigger":"puksy.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mtict.sjscdn.com/ps/ps.js?id=hquQ6gElLk610qlqNEQAxA","fqdn":"mtict.sjscdn.com","domain":"sjscdn.com","tld":"com"},"ip":{"addr":"104.21.75.75","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://puksy.com/","date":"2026-09-08T19:07:58.395Z","timestamp":1788894478395,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sjscdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 22 Aug 2026 15:53:07 GMT","end":"Fri, 20 Nov 2026 16:50:51 GMT"},"fingerprint":{"sha1":"06:93:33:35:A7:41:39:C6:9B:74:D7:B2:B9:DC:0B:86:42:B0:D5:B3","sha256":"D6:4B:98:0B:0B:CB:B6:A2:D8:4E:B1:9D:88:2B:CF:B8:37:6B:DC:15:DC:4A:B4:C3:8D:DC:4F:99:A2:28:0D:BE"}}},"request":{"raw":"GET /ps/ps.js?id=hquQ6gElLk610qlqNEQAxA HTTP/1.1\r\nHost: mtict.sjscdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://puksy.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 08 Sep 2026 19:07:58 GMT\r\ncontent-type: application/javascript\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: gzip\r\nset-cookie: __psu=85e59b74-cdf1-49ee-ade2-8193d6baf247; expires=Thu, 08 Oct 2026 19:07:58 GMT; path=/; secure; samesite=none\r\nvary: Accept-Encoding\r\ncache-control: max-age=0, no-cache, no-store, must-revalidate\r\naccept-ch: Sec-CH-UA, Sec-CH-UA-Platform, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version\r\nreferrer-policy: no-referrer\r\ncf-cache-status: BYPASS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nhOGhkciki1PQljM1KFqEbFlngDmpG06BSvllKBJKTp89iwHPi2E3UMF%2F9xwWtY0rs5nWqVcMjRnV7A8iVHs03UqvVzM11OZCsIqGX9UjjoAys7NvNGVswes9vQZVb4ysVUD\"}]}\r\npriority: u=3,i=?0\r\ncf-ray: a3803d3a5cc4ebdd-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":[{"name":"__psu","value":"85e59b74-cdf1-49ee-ade2-8193d6baf247","quoted":false,"path":"/","expires":"2026-10-08T19:07:58Z","raw_expires":"Thu, 08 Oct 2026 19:07:58 GMT","secure":true,"http_only":false,"same_site":"None","partitioned":false,"raw":"__psu=85e59b74-cdf1-49ee-ade2-8193d6baf247; expires=Thu, 08 Oct 2026 19:07:58 GMT; path=/; secure; samesite=none"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":37961,"size_decoded":16907,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (35176), with no line terminators","md5":"dcd36b06533de06c6cfc317acd3b0a83","sha1":"1270e0ea81f8dcbd67be7136253434871bcf299c","sha256":"7cadae5ea964fc7607f22127ab27ceab3cbe8c76886b8d9c90de38590f598394","sha512":"d4d441243a5dc7bcbcc6fa7da6252fab0a2a06035263e4b64d8a5678bb2332b3c008af0e0673f32a0e3ae61d3529a17d0882a473bda8879bd958ff3f4b100ae1","ssdeep":"768:wyNhe8X4X/D1DMIGtaJDA1gIpuECmVTsHwqLobz24oRR6DWXRC/zDAi7E:XBMO1HAXm+MuqE","tlshash":"5903fb80b5809970138246b7737e6b9df8161f6ebdce484de10a79916bd721acbf2334","first_seen":"2026-09-08T19:08:38.976888Z","last_seen":"2026-09-08T19:08:38.976888Z","times_seen":1,"resource_available":true,"data":null}},"time_used":155,"timings":{"blocked":-1,"dns":17,"connect":34,"send":0,"wait":78,"receive":25,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://puksy.com/","date":"2026-09-08T19:07:58.596Z","timestamp":1788894478596,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:10 GMT","end":"Mon, 02 Nov 2026 08:39:09 GMT"},"fingerprint":{"sha1":"AB:CB:A4:4C:A5:65:CD:AE:7D:49:56:A1:8A:F1:7C:FB:63:84:AE:13","sha256":"61:13:42:1F:BA:E8:AE:1B:A2:FC:89:02:B5:BE:EF:3C:35:FC:AE:06:22:3C:B0:DF:74:48:AD:42:E0:4A:30:A5"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://puksy.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 02 Sep 2026 10:31:27 GMT\r\nexpires: Thu, 02 Sep 2027 10:31:27 GMT\r\ncache-control: public, max-age=31536000\r\nage: 549391\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48532,"size_decoded":49345,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-09-08T22:46:07.701329Z","times_seen":279189,"resource_available":false,"data":null}},"time_used":91,"timings":{"blocked":25,"dns":0,"connect":0,"send":0,"wait":30,"receive":36,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mtict.sjscdn.com/ps/config.js?id=hquQ6gElLk610qlqNEQAxA","fqdn":"mtict.sjscdn.com","domain":"sjscdn.com","tld":"com"},"ip":{"addr":"104.21.75.75","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://puksy.com/","date":"2026-09-08T19:07:58.639Z","timestamp":1788894478639,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sjscdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 22 Aug 2026 15:53:07 GMT","end":"Fri, 20 Nov 2026 16:50:51 GMT"},"fingerprint":{"sha1":"06:93:33:35:A7:41:39:C6:9B:74:D7:B2:B9:DC:0B:86:42:B0:D5:B3","sha256":"D6:4B:98:0B:0B:CB:B6:A2:D8:4E:B1:9D:88:2B:CF:B8:37:6B:DC:15:DC:4A:B4:C3:8D:DC:4F:99:A2:28:0D:BE"}}},"request":{"raw":"GET /ps/config.js?id=hquQ6gElLk610qlqNEQAxA HTTP/1.1\r\nHost: mtict.sjscdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://puksy.com/\r\nCookie: __psu=85e59b74-cdf1-49ee-ade2-8193d6baf247\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 08 Sep 2026 19:07:58 GMT\r\ncontent-type: application/javascript\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: gzip\r\nvary: Accept-Encoding\r\ncache-control: max-age=0, no-cache, no-store, must-revalidate\r\naccept-ch: Sec-CH-UA, Sec-CH-UA-Platform, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version\r\nreferrer-policy: no-referrer\r\ncf-cache-status: BYPASS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HFfalrTVoRxvxOKn9G1VCWLxMK09sUtAXhC7oQPBpFMhehBtkAY0GFLNVu23PdgFzUlRSYQ1o0O7NOjAgEohxzqpwesDn0pDxjAVYCADocmO0PjcmT72sub3fwDfOtPEgCsC\"}]}\r\npriority: u=3,i=?0\r\ncf-ray: a3803d3b8d2febdd-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":360,"size_decoded":1030,"mime_type":"application/javascript","magic":"ASCII text, with CRLF line terminators","md5":"eae6ec126c87767ad26c82c7e1da75d1","sha1":"2a7fd5fefa6e64a5c24257f85567659b42fcaae0","sha256":"fd3fbf290d3e137153d82251b3c8fdd0c0b7caeebaf3e520c74fb11f6b94151c","sha512":"ff2a3e3ec95190bc695f0a8ee518282b60603b83370701050b16f838bf64e259fda905dc6fa244ba452f3e4526983800c6fb679b029cfd5656c64780c9e5a5a6","ssdeep":"","tlshash":"21e0d8fb288396010bb508aff7a27c50e94293572847d0db3875d25c5fa1009e657e34","first_seen":"2026-06-23T18:14:15.005046Z","last_seen":"2026-09-08T21:11:41.422547Z","times_seen":5,"resource_available":true,"data":null}},"time_used":80,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":80,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/firebasejs/10.3.1/firebase-app-compat.js","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://puksy.com/","date":"2026-09-08T19:07:58.758Z","timestamp":1788894478758,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:10 GMT","end":"Mon, 02 Nov 2026 08:39:09 GMT"},"fingerprint":{"sha1":"AB:CB:A4:4C:A5:65:CD:AE:7D:49:56:A1:8A:F1:7C:FB:63:84:AE:13","sha256":"61:13:42:1F:BA:E8:AE:1B:A2:FC:89:02:B5:BE:EF:3C:35:FC:AE:06:22:3C:B0:DF:74:48:AD:42:E0:4A:30:A5"}}},"request":{"raw":"GET /firebasejs/10.3.1/firebase-app-compat.js HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://puksy.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/firebase-js\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"firebase-js\"\r\nreport-to: {\"group\":\"firebase-js\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/firebase-js\"}]}\r\ncontent-length: 9308\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 03 Sep 2026 23:15:36 GMT\r\nexpires: Fri, 03 Sep 2027 23:15:36 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Thu, 31 Aug 2023 15:20:38 GMT\r\ncontent-type: text/javascript; charset=UTF-8\r\nvary: Accept-Encoding\r\nage: 417142\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":28949,"size_decoded":10196,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (28368)","md5":"9900403b65514fad7df39a4e788a6e45","sha1":"75f9ba061ef4e72bb23528c700f2a11c56d637e9","sha256":"a202b2051ea9810cd9ba592b3f9418a89e2062f5c185e29e288080b28eb64fe5","sha512":"6c24f5dba5409574433e7438b7be890202132302f22cc79eb4446f29e02afd054dae6e79fce02c66444c76ba8f857658c4de4b8379e5cbae54c847bdd54a3fc6","ssdeep":"768:dASlCDOW3GZSQaujrg/AfjpNBLJ8EElOZbwrgmJHNS55/:VW3tujrlESkNu/","tlshash":"74d20a587be3f4270bb940da00762403f36d5a08594d846cf22cedebaa9584b90bff75","first_seen":"2023-09-16T15:58:25Z","last_seen":"2026-09-08T21:11:41.412903Z","times_seen":7896,"resource_available":true,"data":null}},"time_used":66,"timings":{"blocked":-1,"dns":3,"connect":16,"send":0,"wait":17,"receive":2,"ssl":29},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/firebasejs/10.3.1/firebase-messaging-compat.js","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://puksy.com/","date":"2026-09-08T19:07:58.840Z","timestamp":1788894478840,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:10 GMT","end":"Mon, 02 Nov 2026 08:39:09 GMT"},"fingerprint":{"sha1":"AB:CB:A4:4C:A5:65:CD:AE:7D:49:56:A1:8A:F1:7C:FB:63:84:AE:13","sha256":"61:13:42:1F:BA:E8:AE:1B:A2:FC:89:02:B5:BE:EF:3C:35:FC:AE:06:22:3C:B0:DF:74:48:AD:42:E0:4A:30:A5"}}},"request":{"raw":"GET /firebasejs/10.3.1/firebase-messaging-compat.js HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://puksy.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/firebase-js\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"firebase-js\"\r\nreport-to: {\"group\":\"firebase-js\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/firebase-js\"}]}\r\ncontent-length: 9934\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 02 Sep 2026 20:20:48 GMT\r\nexpires: Thu, 02 Sep 2027 20:20:48 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Thu, 31 Aug 2023 15:20:50 GMT\r\ncontent-type: text/javascript; charset=UTF-8\r\nvary: Accept-Encoding\r\nage: 514030\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":38286,"size_decoded":10822,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (38231)","md5":"0541b823dfaf39162ef84cf075c9951b","sha1":"e0934726455558cc1a59823efada9651e33aafaa","sha256":"21f1d62f222007068c793f0947d98f4ccb7c1595adb68efeb783390fdd8b5522","sha512":"41dcfb4e2d91a5f8b7cc482e25a8a4ed5bcd1202d7c34b9ab0b258d1599bd669479a101024af30f6a90eb09e3c7817a6565d5f9978c6fb31897ef63e5d5bd3a5","ssdeep":"768:s/XYybWGO7ksZus7aKXhFTSjDH3WQZZfuaNNHRzxHs67ZoL3udKoW3gbUFuOt:5GO55/CXS3udKoWyQ/","tlshash":"a903faca7af3b53356d714eb987b2002a13a8a0c584e9020b7eed5c57d6e40adb77f14","first_seen":"2023-05-26T20:56:20Z","last_seen":"2026-09-08T21:11:41.417853Z","times_seen":9704,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":17,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Lilita+One\u0026family=Inter:wght@400;500;600;700;800\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://puksy.com/","date":"2026-09-08T19:07:58.389Z","timestamp":1788894478389,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:11 GMT","end":"Mon, 02 Nov 2026 08:39:10 GMT"},"fingerprint":{"sha1":"97:55:92:07:19:C2:C2:85:E6:88:C9:C8:47:76:A5:6A:F2:45:6E:8D","sha256":"04:DC:D7:95:F1:60:AD:D7:D0:1C:2C:83:57:A1:87:FF:3E:5F:D7:B4:AC:EF:0D:A5:1F:03:CD:E3:6E:05:0A:2F"}}},"request":{"raw":"GET /css2?family=Lilita+One\u0026family=Inter:wght@400;500;600;700;800\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://puksy.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Tue, 08 Sep 2026 19:07:58 GMT\r\ndate: Tue, 08 Sep 2026 19:07:58 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":13491,"size_decoded":1550,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"3088efc77d7d31a6076159e104b27dd4","sha1":"1e4e1dceb3108054ba7962e38f40e9003076d1a8","sha256":"ddb2d6034c9b8500ca0377954c0ab7e3eaf2250df6c49e00b69965d62fee44a7","sha512":"0d3e5bd23c8e59b3356f50cbe8fe44cbfbbd886ae89aac3ee1d210975867a83711358049aa3e844927c1bdc5b3ef0250fa507939b41fe428e72450b1211f71ba","ssdeep":"192:9NNIxO34OxDENOPCO3/Nx8NNryfO3iExlONEhYO3RrxGfNx0NO3kCxHFc+s0:vXuM0p2+g740","tlshash":"d6529992002ba400ab971dc223cf7f3aaece50896485d1b95ffd0dc99ceed66436875d","first_seen":"2026-06-06T14:49:33.055137Z","last_seen":"2026-09-08T21:11:41.413402Z","times_seen":3,"resource_available":false,"data":null}},"time_used":87,"timings":{"blocked":-1,"dns":0,"connect":16,"send":0,"wait":34,"receive":0,"ssl":37},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"puksy.com/js/shared.js","fqdn":"puksy.com","domain":"puksy.com","tld":"com"},"ip":{"addr":"185.7.33.81","port":443,"asn":199968,"as":"Iws Networks LLC","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://puksy.com/","date":"2026-09-08T19:07:58.397Z","timestamp":1788894478397,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.puksy.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 09 Aug 2026 14:01:09 GMT","end":"Sat, 07 Nov 2026 14:01:08 GMT"},"fingerprint":{"sha1":"38:24:D2:C8:DE:DA:35:A0:55:8C:46:19:B7:76:01:E8:A2:6B:53:81","sha256":"B3:D1:F6:9D:B0:A7:55:51:96:6F:B4:C2:E2:F3:08:50:57:6F:A8:C7:AD:DE:F8:AC:2C:2F:D0:33:F9:CC:10:C0"}}},"request":{"raw":"GET /js/shared.js HTTP/1.1\r\nHost: puksy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://puksy.com/\r\nCookie: lang=en\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/javascript\r\nlast-modified: Tue, 02 Jun 2026 11:42:38 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 849\r\ndate: Tue, 08 Sep 2026 19:07:58 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2580,"size_decoded":1085,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text","md5":"6fccb475decab62138add42cf6364de8","sha1":"2d9ecc4e4d16932d8f9d07376389f2153fddb19e","sha256":"9c21e043ad6aaaef71267e6ab8050312e6c63dac850bc47a4441d7140e187f22","sha512":"b589c9c84a6e0b1fe1e420e2bbe5d029da44e5c41b35d83c2e234f7d2a36c704528a9e09b94e7a252bf6c6ed73c125b142c650930209d0b05338190e9bb39ec2","ssdeep":"","tlshash":"83511e4e7ca73829147bf53a3abfa409f56885030446ea52789c52684fb4b6403befdc","first_seen":"2026-06-06T14:49:33.049802Z","last_seen":"2026-09-08T21:11:41.418342Z","times_seen":3,"resource_available":true,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"puksy.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"puksy.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"puksy.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-08","alert":"Phishing Block","trigger":"puksy.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"puksy.com/images/icon_resource_gem.png","fqdn":"puksy.com","domain":"puksy.com","tld":"com"},"ip":{"addr":"185.7.33.81","port":443,"asn":199968,"as":"Iws Networks LLC","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://puksy.com/","date":"2026-09-08T19:07:58.724Z","timestamp":1788894478724,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.puksy.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 09 Aug 2026 14:01:09 GMT","end":"Sat, 07 Nov 2026 14:01:08 GMT"},"fingerprint":{"sha1":"38:24:D2:C8:DE:DA:35:A0:55:8C:46:19:B7:76:01:E8:A2:6B:53:81","sha256":"B3:D1:F6:9D:B0:A7:55:51:96:6F:B4:C2:E2:F3:08:50:57:6F:A8:C7:AD:DE:F8:AC:2C:2F:D0:33:F9:CC:10:C0"}}},"request":{"raw":"GET /images/icon_resource_gem.png HTTP/1.1\r\nHost: puksy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://puksy.com/\r\nCookie: lang=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Tue, 15 Sep 2026 19:07:58 GMT\r\ncontent-type: image/png\r\nlast-modified: Sun, 31 May 2026 13:16:40 GMT\r\naccept-ranges: bytes\r\ncontent-length: 16129\r\ndate: Tue, 08 Sep 2026 19:07:58 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":16129,"size_decoded":16395,"mime_type":"image/png","magic":"PNG image data, 100 x 106, 8-bit/color RGBA, non-interlaced","md5":"b80eabffe4d6d05158f51a0163aa9f7f","sha1":"9e3b891eeab4c49d354cc684af0514bd06ec4c64","sha256":"58fc7faf82ed308c16ae63c6bfce8261bb9b07e171b64c176ef84c1a7a4f6572","sha512":"f205ae902174fadd00ed901b039cd20c1902bdf7873cfc675fe4fdf7323300e50223a3be1594487a756805105095c0d126a1336ef48fc883ec3a5f88a795f090","ssdeep":"384:daSw5xCgskFWnS8Fm4CoQz/AMveglzYshDtiGCt:MmgB4SADgz4rgl8+vCt","tlshash":"b272d0eecfe642a3bd7360170cfad99b5287c72021d101e965ae05779f2084249f6296","first_seen":"2026-06-06T14:49:33.038593Z","last_seen":"2026-09-08T21:11:41.419685Z","times_seen":3,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-08","alert":"Phishing Block","trigger":"puksy.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"puksy.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"puksy.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"puksy.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.google.no/ads/ga-audiences?v=1\u0026t=sr\u0026slf_rd=1\u0026_r=4\u0026tid=G-0SPKJGQ494\u0026cid=1071542060.1788894479\u0026gtm=45je6930v9165280368za200zd9165280368\u0026rcb=14\u0026aip=1\u0026dma=1\u0026dma_cps=a\u0026gcd=13l3l3l2l1l1\u0026npa=1\u0026frm=0\u0026tag_exp=115938465~115938469~118897920~118897930~120213116~120385423~120469145~120469153\u0026z=1631995230","fqdn":"www.google.no","domain":"google.no","tld":"no"},"ip":{"addr":"216.58.207.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://puksy.com/","date":"2026-09-08T19:07:58.836Z","timestamp":1788894478836,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.no","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:40:43 GMT","end":"Mon, 02 Nov 2026 08:40:42 GMT"},"fingerprint":{"sha1":"02:9A:CB:16:39:50:CE:90:DB:9A:93:5F:FD:1F:C2:4D:13:34:0B:F2","sha256":"3F:34:55:69:88:E8:4F:E8:54:9D:5C:BA:C9:B5:2A:83:33:D7:83:4E:EC:DC:31:8C:F2:02:CF:6F:8D:CA:3C:3A"}}},"request":{"raw":"GET /ads/ga-audiences?v=1\u0026t=sr\u0026slf_rd=1\u0026_r=4\u0026tid=G-0SPKJGQ494\u0026cid=1071542060.1788894479\u0026gtm=45je6930v9165280368za200zd9165280368\u0026rcb=14\u0026aip=1\u0026dma=1\u0026dma_cps=a\u0026gcd=13l3l3l2l1l1\u0026npa=1\u0026frm=0\u0026tag_exp=115938465~115938469~118897920~118897930~120213116~120385423~120469145~120469153\u0026z=1631995230 HTTP/1.1\r\nHost: www.google.no\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://puksy.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\np3p: policyref=\"https://www.googleadservices.com/pagead/p3p.xml\", CP=\"NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC\"\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\ndate: Tue, 08 Sep 2026 19:07:58 GMT\r\npragma: no-cache\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\ncache-control: no-cache, no-store, must-revalidate\r\ncontent-type: image/gif\r\nx-content-type-options: nosniff\r\nserver: cafe\r\ncontent-length: 42\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":42,"size_decoded":578,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"d89746888da2d9510b64a9f031eaecd5","sha1":"d5fceb6532643d0d84ffe09c40c481ecdf59e15a","sha256":"ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629","sha512":"d5da26b5d496edb0221df1a4057a8b0285d15592a8f8dc7016a294df37ed335f3fde6a2252962e0df38b62847f8b771463a0124ef3f84299f262ed9d9d3cee4c","ssdeep":"","tlshash":"c4900023fa808000c3a8c2300a0b238a2b8c80200a28030b80ae208cec3a3a22c03020","first_seen":"2023-04-05T02:54:03Z","last_seen":"2026-09-08T22:47:04.476868Z","times_seen":1058202,"resource_available":true,"data":null}},"time_used":65,"timings":{"blocked":-1,"dns":3,"connect":8,"send":0,"wait":29,"receive":0,"ssl":25},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}