{"report_id":"44b1351e-bc65-4430-85e3-0ebfbd217368","version":6,"status":"done","tags":[],"date":"2026-03-07T02:43:56Z","url":{"schema":"http","addr":"litclub.live/madnetwork/a/click?cmpid=656\u0026pubid=5596_\u0026cid=854eea90720c43c49e14be148a28da82","fqdn":"litclub.live","domain":"litclub.live","tld":"live"},"ip":{"addr":"54.69.219.69","port":0,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"runsafeads.com/g/2c710a5206345bd5?external_id=1772851414990a44047560a1090\u0026subpublisher_id=%7Byour_subpublisher_id_here%7D","fqdn":"runsafeads.com","domain":"runsafeads.com","tld":"com"},"title":"Loading...","dom":{"size":39,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with no line terminators","md5":"086707e4369f60afedcafb16050a7618","sha1":"8216b0cc6876cbd44f01c158e7dff3833ceccd41","sha256":"a7fe83ec64bb23eb28090598db3d166ed98e52e39d1afbbfd74c579553f93e4e","sha512":"aade21843813e2cab329b99185c6f61db7907a556ea974e0315dcf3ad967cab20fee66d4f10db0d0ec43a71e086ce6d700d5524103deaefa3ce5f6be74ba5737","ssdeep":"","tlshash":"6a9000fee0a2000efc303bc00cc2238a0c28c3a830028e002ac038b8c80822bcc032c8","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"litclub.live/madnetwork/a/click?cmpid=656\u0026pubid=5596_\u0026cid=854eea90720c43c49e14be148a28da82","fqdn":"litclub.live","domain":"litclub.live","tld":"live"},"ip":{"addr":"54.69.219.69","port":0,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-04-11T02:43:56Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"litclub.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"mobiwin.club","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"runsafeads.com","ip":{"addr":"62.212.87.244","port":443,"asn":60781,"as":"LeaseWeb Netherlands B.V.","country":"The Netherlands","country_code":"NL"},"domain_registered":"2021-02-17","domain_rank":734324,"first_seen":"2021-02-17T11:30:01Z","last_seen":"2026-02-24T06:40:59.695172Z","alert_count":0,"request_count":2,"received_data":89132,"sent_data":1432,"comment":"","tags":null,"fingerprints":null},{"fqdn":"litclub.live","ip":{"addr":"54.69.219.69","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2020-11-06","domain_rank":0,"first_seen":"2021-06-28T12:19:11Z","last_seen":"2025-10-28T14:39:21.25879Z","alert_count":1,"request_count":1,"received_data":88545,"sent_data":558,"comment":"","tags":null,"fingerprints":null},{"fqdn":"mobiwin.club","ip":{"addr":"52.42.48.107","port":80,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2022-02-05","domain_rank":0,"first_seen":"2016-01-10T04:55:27Z","last_seen":"2025-10-28T14:39:21.275949Z","alert_count":1,"request_count":1,"received_data":88716,"sent_data":498,"comment":"","tags":null,"fingerprints":[{"name":"Java","description":"Java is a class-based, object-oriented programming language that is designed to have as few implementation dependencies as possible.","website":"https://java.com","common_platform_enumeration":"cpe:2.3:a:oracle:jre:*:*:*:*:*:*:*:*","icon":"Java.svg","categories":["Programming languages"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"runsafeads.com/g/2c710a5206345bd5?external_id=1772851414990a44047560a1090\u0026subpublisher_id=%7Byour_subpublisher_id_here%7D","fqdn":"runsafeads.com","domain":"runsafeads.com","tld":"com"},"ip":{"addr":"62.212.87.244","port":443,"asn":60781,"as":"LeaseWeb Netherlands B.V.","country":"The Netherlands","country_code":"NL"},"introduction_type":"eval","is_inline":false,"md5":"352f5bbd9ad08d3d3625f0a622e4465c","sha1":"749b17640bf18d96c509f518d6f1a4b41d8cdc60","sha256":"3f41cbb303012f33212c92326b27f6cc604fd414e20315cb10f2be7f1f6bb83c","sha512":"bee72dc895871a552a80979131077676be67a7654ae7b978269bd3aeae16b40d622bbd4b909c56a76ad2d4bdcab0dcef91b338ee85bfa699c3f00f64292311ef","ssdeep":"","tlshash":"8a6000000000000c000000c0c300c030300000003fc03cc0000c000000030000030300","size":12,"data":"","first_seen":"2023-03-07T01:32:54Z","last_seen":"2026-04-04T13:13:43.590241Z","times_seen":799,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"runsafeads.com/g/2c710a5206345bd5?external_id=1772851414990a44047560a1090\u0026subpublisher_id=%7Byour_subpublisher_id_here%7D","fqdn":"runsafeads.com","domain":"runsafeads.com","tld":"com"},"ip":{"addr":"62.212.87.244","port":443,"asn":60781,"as":"LeaseWeb Netherlands B.V.","country":"The Netherlands","country_code":"NL"},"introduction_type":"eval","is_inline":false,"md5":"ee08444c156007dc01a7dee031d84585","sha1":"9aa411d4fc3515c12577bdcaf44ac5bc20e2ae0f","sha256":"75ba6719a1522c8839a6d4ff38820b060b588de0ba2347112082414a72ced7e2","sha512":"3efbfa0021f647bbbafe4c1ed29073aaca40c3f257665747877613227184d90de70df0acd97e5692d1091e5ba9de8736cdcb04cdb132266a6d8a7978e8ab03aa","ssdeep":"","tlshash":"0690025e7d46520044526171a4bad0188437b6125a5088c9858496a4185ef4c2925949","size":53,"data":"","first_seen":"2023-03-08T07:10:32Z","last_seen":"2026-04-04T13:13:43.594823Z","times_seen":797,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"runsafeads.com/g/2c710a5206345bd5?external_id=1772851414990a44047560a1090\u0026subpublisher_id=%7Byour_subpublisher_id_here%7D","fqdn":"runsafeads.com","domain":"runsafeads.com","tld":"com"},"ip":{"addr":"62.212.87.244","port":443,"asn":60781,"as":"LeaseWeb Netherlands B.V.","country":"The Netherlands","country_code":"NL"},"introduction_type":"Function","is_inline":false,"md5":"e22cbc720260b931b79aac4bdd488932","sha1":"48749ba1be5f6b3c9a2b299fed8ede49c493565a","sha256":"336dc2adfd7b773ea0234ed0bbbcf6a2394635f1229baba98743bd9258547679","sha512":"0745f5be5fc637d8d06c50d2b15b68a5c5a5c37fd4a05c37809d87aaa34ec68e4bff299feaca13c0f32882b794f6d7e2638c2940e184d76871fad815d05c9512","ssdeep":"","tlshash":"ff9002b976d7a00dcbe72194116e1e8952a48761948c4e808080af912995470a93a45c","size":55,"data":"","first_seen":"2026-03-07T02:43:57.94607Z","last_seen":"2026-03-07T02:43:57.94607Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"runsafeads.com/g/2c710a5206345bd5?external_id=1772851414990a44047560a1090\u0026subpublisher_id=%7Byour_subpublisher_id_here%7D","fqdn":"runsafeads.com","domain":"runsafeads.com","tld":"com"},"ip":{"addr":"62.212.87.244","port":443,"asn":60781,"as":"LeaseWeb Netherlands B.V.","country":"The Netherlands","country_code":"NL"},"introduction_type":"eval","is_inline":false,"md5":"28594f6b6242b5bf4900911e88d039b1","sha1":"5ba352707281dd08a4fe8fab94c20f0c4a9cad6c","sha256":"610ce38b86667708884414ba2caa0fb335cf8907610376b87186ca3b5ba8507b","sha512":"724908607d164db51380d0f3dde8ee88e4f20480f0c68660752a7423db91d9ac01dba81f854cc782d12646a5f4859ff195e08834f004a31e97d7dbba16b9b52f","ssdeep":"","tlshash":"5b70000822082008c0223020c20b00080020c200280200832808a0a008300382302c08","size":21,"data":"","first_seen":"2023-03-07T01:32:54Z","last_seen":"2026-04-04T13:13:43.59282Z","times_seen":801,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"runsafeads.com/g/2c710a5206345bd5?external_id=1772851414990a44047560a1090\u0026subpublisher_id=%7Byour_subpublisher_id_here%7D","fqdn":"runsafeads.com","domain":"runsafeads.com","tld":"com"},"ip":{"addr":"62.212.87.244","port":443,"asn":60781,"as":"LeaseWeb Netherlands B.V.","country":"The Netherlands","country_code":"NL"},"introduction_type":"eval","is_inline":false,"md5":"494a569d753e79b69dcfcb11b3d3decd","sha1":"dca0bf4731e44366e6b24d490fceb980194c6332","sha256":"74727a327a9632193368cc012366e7db4196d6fd871c3ee825c65fe2a920a83f","sha512":"d51ab7cf081816877008822118c5256778ffd61ac5d712aa810d4ac512474cb94fb002f1ce4d21f4661ef3de3a2299cbc634a7502c6e4414bbab2994e1f84968","ssdeep":"","tlshash":"8380008a32a8a2030c023820be8b200c2aa0020c300802808e0280c28830082a00ab08","size":26,"data":"","first_seen":"2023-03-07T01:32:54Z","last_seen":"2026-04-04T13:13:43.596479Z","times_seen":797,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"runsafeads.com/g/2c710a5206345bd5?external_id=1772851414990a44047560a1090\u0026subpublisher_id=%7Byour_subpublisher_id_here%7D","fqdn":"runsafeads.com","domain":"runsafeads.com","tld":"com"},"ip":{"addr":"62.212.87.244","port":443,"asn":60781,"as":"LeaseWeb Netherlands B.V.","country":"The Netherlands","country_code":"NL"},"introduction_type":"eval","is_inline":false,"md5":"636b52edd9bc1ee1d7424a5a0c3e807b","sha1":"d79bda25a35825b0e659baad61c3be15b45d63cb","sha256":"fbd4480f3bf1d131a5e0f31cc1476321fde88b94188ae1d2d42f9fe76b8d0417","sha512":"d00da0242be88bb0bd523a0a17802a4222f256a0428fa1f4d85e355c98f72ccbeed31c173a9a4c789df3009331f376b22e4a871f52b077eba2ec4e3cbfb40a94","ssdeep":"","tlshash":"81500000000000000000c0000000c000300000000cc03000000c000000003000030300","size":9,"data":"","first_seen":"2023-03-07T01:32:54Z","last_seen":"2026-04-04T13:13:43.586307Z","times_seen":792,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"runsafeads.com/g/2c710a5206345bd5?external_id=1772851414990a44047560a1090\u0026subpublisher_id=%7Byour_subpublisher_id_here%7D","fqdn":"runsafeads.com","domain":"runsafeads.com","tld":"com"},"ip":{"addr":"62.212.87.244","port":443,"asn":60781,"as":"LeaseWeb Netherlands B.V.","country":"The Netherlands","country_code":"NL"},"introduction_type":"eval","is_inline":false,"md5":"0c192aa1ab276c6379c2b09a7aaad387","sha1":"9aeaca82bb66d7944e1599296d369124bec69072","sha256":"34d6af7a57b87b7beefc09b6570c534734f6a5f65d123c1850754268d1cc44d1","sha512":"fc795059fc6f69eebf889ff641d764e5e7ba50bbfd07fc2c4c6a2a81cbb8a1dc456087dbd726e1891bb8c5e4b542af929def061f0e88617cd65db83a21439753","ssdeep":"","tlshash":"9f60000f0003000fc0000c000c00cc000c0000300c000f3c30c030c00c00cc00303030","size":15,"data":"","first_seen":"2023-03-08T20:55:44Z","last_seen":"2026-04-04T13:13:43.576711Z","times_seen":798,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"about","addr":"about:blank","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eventHandler","is_inline":false,"md5":"8820fb1d538650e3ef2635517d38ab24","sha1":"69d814109f92526193bcef368f209dcd643055fc","sha256":"635137ceaef2cb08a0e55f81fdf50d4d85a6f69747ae92e6a2a3e82f5aa37088","sha512":"df431825feac1c1e6536ebdd2e9dfd0e492ffa70410f12825655a618ca5836897362f939f050f6eaa3956d10517a4d35ea2823e421f69922da626bb160226250","ssdeep":"","tlshash":"4360000a2200220880220822c00b000800208000088a0000080080800a200b00302808","size":14,"data":"","first_seen":"2023-06-14T12:38:46Z","last_seen":"2026-04-04T13:13:43.577333Z","times_seen":108,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"runsafeads.com/g/2c710a5206345bd5?external_id=1772851414990a44047560a1090\u0026subpublisher_id=%7Byour_subpublisher_id_here%7D","fqdn":"runsafeads.com","domain":"runsafeads.com","tld":"com"},"ip":{"addr":"62.212.87.244","port":443,"asn":60781,"as":"LeaseWeb Netherlands B.V.","country":"The Netherlands","country_code":"NL"},"introduction_type":"eval","is_inline":false,"md5":"4603e61bef0710b4258365ba29a3a659","sha1":"1dcd8fc1a0be55707e0a434392312f2a5e1c3700","sha256":"0889a34434e586e918436027c4e8b4c3380f84643731bdeb57024adb8745cf53","sha512":"d2e4bed87aea3b319cdcadeac90099adbfd11e254e614644be4ebcc72d2d1bee5804ab861b9b0e86477edc212d3c159e71963dc447792e65b89dd1202534fb03","ssdeep":"","tlshash":"c71000000c300000000000000000000000000000000300000000000000000000003000","size":2,"data":"","first_seen":"2023-03-08T16:26:24Z","last_seen":"2026-04-04T13:13:43.58545Z","times_seen":8282,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"runsafeads.com/g/2c710a5206345bd5?external_id=1772851414990a44047560a1090\u0026subpublisher_id=%7Byour_subpublisher_id_here%7D","fqdn":"runsafeads.com","domain":"runsafeads.com","tld":"com"},"ip":{"addr":"62.212.87.244","port":443,"asn":60781,"as":"LeaseWeb Netherlands B.V.","country":"The Netherlands","country_code":"NL"},"introduction_type":"Function","is_inline":false,"md5":"afdcb89660ac248bafe696ea7fff90bf","sha1":"9be97a99d0c3c8c509f114f2820538bbc0a373ea","sha256":"e67d7a3f7eacff7a139630d91996a75b47496358583f6d6b45829e30129b78d9","sha512":"3734b22d17ffdcbd63e6a8b559fdec55a8376e7bc21e64e2718765a66b5fd6b5415ccad50ced918f80e6e59e94671130759b915f52d29c193bc8624cf42ce764","ssdeep":"","tlshash":"988004d471c751005113535440f75cc5503cc43031444dc04400d4501cf5030433745d","size":37,"data":"","first_seen":"2023-04-12T10:26:26Z","last_seen":"2026-04-04T13:13:43.592265Z","times_seen":704,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"data","addr":"data:text/javascript,;","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"9eecb7db59d16c80417c72d1e1f4fbf1","sha1":"2d14ab97cc3dc294c51c0d6814f4ea45f4b4e312","sha256":"41b805ea7ac014e23556e98bb374702a08344268f92489a02f0880849394a1e4","sha512":"e28e547f8138106fbdd0c6fcdb4147d981437f822e5f86df530402eeb78ad5986071758904a30adb7df45c810b685249f0788f7df4bd98feb430f8ee5cc22b1c","ssdeep":"","tlshash":"c700000000000000c0000030000000000000000000000c000000000000000000000000","size":1,"data":"","first_seen":"2023-03-07T12:02:21Z","last_seen":"2026-04-04T13:39:39.488681Z","times_seen":9902,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"runsafeads.com/g/2c710a5206345bd5?external_id=1772851414990a44047560a1090\u0026subpublisher_id=%7Byour_subpublisher_id_here%7D","fqdn":"runsafeads.com","domain":"runsafeads.com","tld":"com"},"ip":{"addr":"62.212.87.244","port":443,"asn":60781,"as":"LeaseWeb Netherlands B.V.","country":"The Netherlands","country_code":"NL"},"introduction_type":"eval","is_inline":false,"md5":"f21244a78addd0fc85c04222825c484e","sha1":"423ca19c1fc4e572225162c4eb512e5a96abdf34","sha256":"5fa8c711247d70f5c653bac436acb6b2959231e50344d054ff9cf6093cc71a2c","sha512":"642425ed003c62f32986811766359776780f7bd070c3c1c04427f066c4674dbe87a37d03052cf7cf070c681bb841c54dc83e48ed9dbccf67d7d3a6ed132accd1","ssdeep":"","tlshash":"5450000033000300000030000000000f0000000000c000000000303000c033000c0000","size":8,"data":"","first_seen":"2023-03-07T01:32:54Z","last_seen":"2026-04-04T13:13:43.589673Z","times_seen":826,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"runsafeads.com/g/2c710a5206345bd5?external_id=1772851414990a44047560a1090\u0026subpublisher_id=%7Byour_subpublisher_id_here%7D","fqdn":"runsafeads.com","domain":"runsafeads.com","tld":"com"},"ip":{"addr":"62.212.87.244","port":443,"asn":60781,"as":"LeaseWeb Netherlands B.V.","country":"The Netherlands","country_code":"NL"},"introduction_type":"eval","is_inline":false,"md5":"fc9d6fd2d8db223be4a7484a8619f26b","sha1":"222b2b4ab2fdd2dd8ef261d8953351ac6bc457fa","sha256":"059b850298ae33529c41f5466960be1c7436e9dced68e6ca7a5f5d6dca520d8a","sha512":"a61e8f74119b05b28526968083ed02ca5efea372cf45e6610920420a44bf9d2795799a9e9b7ff4b48a5f8b9d7a172610cc3fb5c431f45688fba38621dd2c15c8","ssdeep":"","tlshash":"c71000000000000000000000000000000c000000000000000000000000000000000000","size":2,"data":"","first_seen":"2023-03-07T01:32:54Z","last_seen":"2026-04-04T13:13:43.586964Z","times_seen":1702,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"runsafeads.com/g/2c710a5206345bd5?external_id=1772851414990a44047560a1090\u0026subpublisher_id=%7Byour_subpublisher_id_here%7D","fqdn":"runsafeads.com","domain":"runsafeads.com","tld":"com"},"ip":{"addr":"62.212.87.244","port":443,"asn":60781,"as":"LeaseWeb Netherlands B.V.","country":"The Netherlands","country_code":"NL"},"introduction_type":"eval","is_inline":false,"md5":"e37769f16d2214929f89627ad45b5a55","sha1":"8cc99cffbfca8170d20b2be5aec3a9623f4f9859","sha256":"453ef66dbae2201936a27e4f11c2b40be5450698ff4335c0a36df1b189710d51","sha512":"acf1d7405c7c8e39d2fdb5ae5c0b55916f3ed5918bbc44b092ec68a6612528874c5992e9b64e09abf5063cfb1f1610b92775cba473c738875bdf3dd433615c83","ssdeep":"","tlshash":"4a90026e76a7b11c879a2020555e06db56a44702805c174480405fa027608689926458","size":51,"data":"","first_seen":"2026-03-07T02:43:57.970942Z","last_seen":"2026-03-07T02:43:57.970942Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"runsafeads.com/g/2c710a5206345bd5?external_id=1772851414990a44047560a1090\u0026subpublisher_id=%7Byour_subpublisher_id_here%7D","fqdn":"runsafeads.com","domain":"runsafeads.com","tld":"com"},"ip":{"addr":"62.212.87.244","port":443,"asn":60781,"as":"LeaseWeb Netherlands B.V.","country":"The Netherlands","country_code":"NL"},"introduction_type":"Function","is_inline":false,"md5":"9a33d0c180f7e6bdcddfca9e687f2f8f","sha1":"8543211fb529a921d16e50ada71f74bbc2ab6414","sha256":"044bf66abab1ffa0f4bf645d0fad9a4965c764abd6e7316975d0cc94cc9dcd2b","sha512":"6a86b8244b8165bc9241f3fec3dc9637d62f75fa0727e65a53d86343cb9a63d978903e9eb1138a2b3a256e07a4bd432430c49322b291811a824ff4d5be769265","ssdeep":"","tlshash":"2ea0124ef000214440573155501f0e08896452b040b16c906044ec8a0a214f8020f55c","size":83,"data":"","first_seen":"2023-04-12T10:26:25Z","last_seen":"2026-04-04T13:13:43.593353Z","times_seen":704,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"runsafeads.com/g/2c710a5206345bd5?external_id=1772851414990a44047560a1090\u0026subpublisher_id=%7Byour_subpublisher_id_here%7D","fqdn":"runsafeads.com","domain":"runsafeads.com","tld":"com"},"ip":{"addr":"62.212.87.244","port":443,"asn":60781,"as":"LeaseWeb Netherlands B.V.","country":"The Netherlands","country_code":"NL"},"introduction_type":"eval","is_inline":false,"md5":"4603e61bef0710b4258365ba29a3a659","sha1":"1dcd8fc1a0be55707e0a434392312f2a5e1c3700","sha256":"0889a34434e586e918436027c4e8b4c3380f84643731bdeb57024adb8745cf53","sha512":"d2e4bed87aea3b319cdcadeac90099adbfd11e254e614644be4ebcc72d2d1bee5804ab861b9b0e86477edc212d3c159e71963dc447792e65b89dd1202534fb03","ssdeep":"","tlshash":"c71000000c300000000000000000000000000000000300000000000000000000003000","size":2,"data":"","first_seen":"2023-03-08T16:26:24Z","last_seen":"2026-04-04T13:13:43.58545Z","times_seen":8282,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"runsafeads.com/g/2c710a5206345bd5?external_id=1772851414990a44047560a1090\u0026subpublisher_id=%7Byour_subpublisher_id_here%7D","fqdn":"runsafeads.com","domain":"runsafeads.com","tld":"com"},"ip":{"addr":"62.212.87.244","port":443,"asn":60781,"as":"LeaseWeb Netherlands B.V.","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":true,"md5":"79b7b6bbc6c32c31abe2e6c51796b01c","sha1":"03e8bd6def7eed4c4a66dbe7074aac232c7c4cb5","sha256":"7f3d275aafc14b921c5b97c8285807e0af7fea3d8c062125676c55b8396c664d","sha512":"8c0928a9648db6f709f9964bf2f8e3b5f0722cb2c63c04d5fc008b83cc7bfb40c68af09d88a70f8155d55c616172eb228387a15c207f21ce1e9424bd9ce4aeb0","ssdeep":"1536:X90P5H0mC2s8dBcY9hP0YuaBy2ds4fCPaOhqiQUYHhNAyU4WF58hlraPDCqI8nWE:XIZ0eP9hP0YuaBy2ds4fCPaOhTQz0yvY","tlshash":"ad83c8c97e95bc6c435d223372af0c4ae3178c8578d9c0d9e0d3b995ffa8a48e972518","size":87493,"data":"","first_seen":"2026-03-07T02:43:57.97252Z","last_seen":"2026-03-07T02:43:57.97252Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"runsafeads.com/g/2c710a5206345bd5?external_id=1772851414990a44047560a1090\u0026subpublisher_id=%7Byour_subpublisher_id_here%7D","fqdn":"runsafeads.com","domain":"runsafeads.com","tld":"com"},"ip":{"addr":"62.212.87.244","port":443,"asn":60781,"as":"LeaseWeb Netherlands B.V.","country":"The Netherlands","country_code":"NL"},"introduction_type":"eval","is_inline":false,"md5":"5f093783cf3fe3d4f21f5f00a84086b9","sha1":"839dd976c57d7e7c8536b00e4ba0ef92bdf8c768","sha256":"107310d1668e0941284e7595573d77788d10959a91d6eb1a53c03b4faba0bc97","sha512":"9dff184cc57cfe8896309b01ea57b649b8f0c2dc146e06af0943c9719df07302627e0c7b7f1ea4f6954381570741000321df0f4548fc8e4a0fc5abd09d2eaac1","ssdeep":"","tlshash":"7850000000300c0c00330c030c0c0c033000000003000c0000fcc03000000000000f30","size":10,"data":"","first_seen":"2023-03-08T20:55:44Z","last_seen":"2026-04-04T13:13:43.595388Z","times_seen":798,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"runsafeads.com/g/2c710a5206345bd5?external_id=1772851414990a44047560a1090\u0026subpublisher_id=%7Byour_subpublisher_id_here%7D","fqdn":"runsafeads.com","domain":"runsafeads.com","tld":"com"},"ip":{"addr":"62.212.87.244","port":443,"asn":60781,"as":"LeaseWeb Netherlands B.V.","country":"The Netherlands","country_code":"NL"},"introduction_type":"eval","is_inline":false,"md5":"f2f0751a0a25adf650370dafdf40b77a","sha1":"64348c754d72c67cb666e1e538c0e540a5f0aa3b","sha256":"8ac4fa3ea82f329907a6a8a61e7d31ba81f22b3d97937ada3a92cbf299097f56","sha512":"17aa4dfb26cecf01b3be228cb687bf673cbc351b17ed5b490417811d50b6371c29da997f4d41c7e4a78d87ae92f393fee3be0f9b56a5f6cd7289a057f2caa1cc","ssdeep":"","tlshash":"7070000a3020288880222032c82b208a2820e038000300b80008eae00c200300a0280c","size":22,"data":"","first_seen":"2023-03-07T01:32:54Z","last_seen":"2026-04-04T13:13:43.595949Z","times_seen":795,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"runsafeads.com/g/2c710a5206345bd5?external_id=1772851414990a44047560a1090\u0026subpublisher_id=%7Byour_subpublisher_id_here%7D","fqdn":"runsafeads.com","domain":"runsafeads.com","tld":"com"},"ip":{"addr":"62.212.87.244","port":443,"asn":60781,"as":"LeaseWeb Netherlands B.V.","country":"The Netherlands","country_code":"NL"},"introduction_type":"eval","is_inline":false,"md5":"a19616470f2ba0ea9272f63db87c4da0","sha1":"5feb4a4d468adf0b21786905bb431d2066b985ec","sha256":"d558149cfbb9fa7a09ecd9171b5c04e91245ed29cb7a83935f92c7870b7a6935","sha512":"128bc2af90e78cf06e7f45f77b5153e207dd2ed1ebab60a5939f4a0195ab2bbec81593207e40a85bc36b80671a174311cd75e579d8e1a4c68358ea2f2624e151","ssdeep":"","tlshash":"17500000000000c000030003000c30c03030c00033000f0000f00c00000000c0300000","size":11,"data":"","first_seen":"2023-03-08T20:55:44Z","last_seen":"2026-04-04T13:13:43.590797Z","times_seen":794,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"runsafeads.com/g/2c710a5206345bd5?external_id=1772851414990a44047560a1090\u0026subpublisher_id=%7Byour_subpublisher_id_here%7D","fqdn":"runsafeads.com","domain":"runsafeads.com","tld":"com"},"ip":{"addr":"62.212.87.244","port":443,"asn":60781,"as":"LeaseWeb Netherlands B.V.","country":"The Netherlands","country_code":"NL"},"introduction_type":"eval","is_inline":false,"md5":"450465dd2720004691aa782acf9ec6d9","sha1":"d04fabbf43c994567ca200a7913b8e986d4e3fd3","sha256":"5804e361e548d6cc96f39ac631de00d9bc7ecb8ecde362f32763d927c162b4d3","sha512":"168b4e919d91d51b7882d222a2afae343b5033358397251c577eec9e4b54cc1f36a0255fdb3d4048e780c5ff64a25648452034eb40742701e84fa2080473752c","ssdeep":"","tlshash":"055000000000c0c000030003000030003c00000c03000f0c00f00c00000030c3000000","size":10,"data":"","first_seen":"2023-03-08T20:55:44Z","last_seen":"2026-04-04T13:13:43.580603Z","times_seen":793,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null},"http":[{"url":{"schema":"https","addr":"runsafeads.com/l/2c710a5206345bd5?external_id=1772851414990a44047560a1090\u0026subpublisher_id=%7Byour_subpublisher_id_here%7D\u0026_tdf=309","fqdn":"runsafeads.com","domain":"runsafeads.com","tld":"com"},"ip":{"addr":"62.212.87.244","port":443,"asn":60781,"as":"LeaseWeb Netherlands B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-07T02:43:35.804Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"track.opticks.io","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 15 Feb 2026 14:50:19 GMT","end":"Sat, 16 May 2026 14:50:18 GMT"},"fingerprint":{"sha1":"BC:EA:13:2F:8B:F6:54:5C:BE:36:96:CE:F2:92:95:CF:5E:85:5D:32","sha256":"E0:B7:5C:6D:C3:0C:0F:67:B9:F7:8C:F2:B2:FE:6C:AB:6D:E1:FD:0C:F5:4F:A0:81:B9:27:6A:A0:53:79:CF:2C"}}},"request":{"raw":"POST /l/2c710a5206345bd5?external_id=1772851414990a44047560a1090\u0026subpublisher_id=%7Byour_subpublisher_id_here%7D\u0026_tdf=309 HTTP/1.1\r\nHost: runsafeads.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded\r\nContent-Length: 2512\r\nOrigin: https://runsafeads.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://runsafeads.com/g/2c710a5206345bd5?external_id=1772851414990a44047560a1090\u0026subpublisher_id=%7Byour_subpublisher_id_here%7D\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":2512,"data":"c=4bMTIyMzU2Njg4OTo8PT0.P0FCQ0RFRkdISEpLTE1NT1BQUlNUVFZXWFlaW1xcXl9gYWJjZGVlZ2hpamtsbW5ucHFxc3Nldnd4eXp7MTIzNDQ2Nzg5Ojs8PD0-QEFCQ0RFRkdISUpLTE1OT1BRUlNUVVVXWFlaW1xdXl9gYWJjZGVmZ2dpamtrbW5ucHByc3N1dXZ4eXp7MTIzNDU2Njc5Ojs8PD4-QUFCQ0RFRkdISEpLTE1OT1BQUlNUVVVWWFlaW1xcXV9gYWJjZGVmZ2hpamtsbG5vb3FxcnR1dnd4eXp6MTIzNDU1Nzg5Ojs8PT4-QEFCQ0RFRkdISUpLTE1OT1BRUlJUVVZXV1laW1xdXl5gYWJjZGRmZ2hpaWtsbW5vb3FycnR0dnZ4eXp7MTIzNDU2Nzg5Ojs8PT4-QEFCQ0RFRUdISUpLTE1OT1BRUlJUVVZWWFlaW1xdXl9gYWJjZGVmZmhoaWtsbG5ucHFycnR1dnd4eHp7MDIzNDU1Nzg5Ojs8PD4-QEFCQ0RFRkdISUlLTE1OTlBRUVJTVVZWWFlZW1xdXl9gYGJjZGVmZmhpamptbW5ucHFxc3R1dnZ4eXp7MTIzNDQ1Nzg4OTo8PT4.P0BBQ0NERkZISUpLTE0.P1BQUlJUVVZXWFlZW1xdXl9fYWFjZGVmZmhpamtsbW1ucHFyc3R1dnd3eXp6MTIzNDU2Nzc5OTo8PT4-P0FCM0NERkdHSUpLTE1OT1BRUlNUVVZXWFlaW1xdXl9gYWJjZGVlZ2hpampsbG5ub3BycnN0dXZ4eXp6MTIyNDU2Njg5OTo7PD0-P0BCQ0NERUZHSEpKS0xNTk9RUVJUVFVWV1haW1xdXl5fYGJiY2RlZmdoaWpsbW1ub3FicnR1dXZ3eHl6MDIyNDQ1Njg4OTo7PD0.P0BBQkNERUZHSElKS0xNTk9QUUBaWUNnk3mef11hYnKglp1qaqWWnp2Hg5NzcXCIlYWbcrePrbZyd5qRUzRFeDt1eH59Y1JjVkZhYVF0Sj53Z1mMjIlNk2trZXSKbo9nnoiZdJWbnI2PdKKcoWB7nXuln3.ps4OBia.lhaiKt5KvmJF8jsGLYnlEd3ttUmg8PHpxQj92hlZiPWlNZ0mGa4dfjmGVcJBrWJdTi5GgeoCbdWxzY2.AnXp.lIqpnaiOnIyhimyIeHStlom3kLd2fHi.Znt8bHpGaXtzgnuCfDxndFlZX3lbhUpQen5dgo.LhlKLjnJraZ1yeFOLbHSPoJGGfnyIip6sp4CPkIyPa5dueIuEqYt8j7SweZOecDRvREo3PTh0QXF.cng-aF16VHSDjEaQe0pyZZBmSXVLc2xvWnRfipSLgXiBnpZappKAi4OeaJFrm3OEZ4Ojq3iNrXmweZO0q37EWEhpRkVffHNhSnOFTXZhcEZ9e35DbYlKjoBLhW92Z4lvkHeIb3SQcpV-fXCeYGWioqVod2RmiWxjp6.FkpJ2iXiMlHSolq62kLSQN1N4V2xGXD9VcD.AWm9CTC5CSUpGTUtITEpPT1JWPJdTWZqdlFVdnZZfpKJklGaopqOsUZ2kVG5tV5GkqnBwXV5ydHt0Y3d3en1oMTM6MyI2Njk8JzopPCs-QUhBMERER0o1SDdKOU1PVk8.UlJVWENWRVpZW2NdXV5gYGFiY2RlVGhWaVhZWqOfq7OmYJCzv6.ztKp5NS8yIyxcb3VseIF.LFtiL0FBQENPNW2Ahk9OVjyVVFNbQZSZXlZZW1ZZU0tzkpGan2BkY2VlZmhoalqBpa.jpa.5cXR3eXR3ZoZoMB8yMzQ1JDcmOjs8PT4.Py5de4GJjTaPUE95UVA7UVY.P0BwiZiHRWVHlpeimp6YoJZQcFKsZGdzsGiqrLGKrqGlp6diqrR0nZyFZW8gJCIyNyU4Jzs8PD4-QEBBQjFFRUZ5SjdqX2I9dIiFmIeVoI6Um42bmIyYWp6Tll6onJmsm6lzfKKtq6qjX5CFiGOarqu.rbvGaW92aHZzZ3M1eW5xOYN3dId2hE5XfYiGhYKPiDxtYmVAd4uIm4qYo5GXnpCem4.bXaGWmWGrn5yvnqx2iaahsa.0sam4ZYurr65qUEVII1pua35te4Z0eoFzgX5yfkCEeXxEjoJ-koGPWXaFg22MmEWInJGVnliVm05-dHeunKKpm6mmmqZorKGkbLaqp7qpt2R5fGd8NB8zISUjNzcmLCguKjAsP0BBQkNERUZHNklKS0w7UD1RP4OTlJGPiomdk5qaXJ6TlmymmKypZaecn1iJbFtrXWNflWGKi4xleHl6MB99gCI5JDQmLCg7PCs-QUhBMERER0o1STeVmDqYmz1RP3d3Z0NJRUtHWltcXV5NYE9ma1KtnJ2lp7NZbFugr6l0pKdiuLvAqa.yHjpoNWhwdiV0gnJyfH8sPC4.MEAyQjRENkY4SDpPUpdSVUBGQkhESkZMSE5KUExSTlRQVlJraWdxaW9rb3N2XXC9cr90Y3bDdcV3fDF.MyI1"}},"response":{"raw":"HTTP/2 204 No Content\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://runsafeads.com\r\naccess-control-allow-methods: GET,POST,OPTIONS\r\ncontent-encoding: identity\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T15:49:33.06692Z","times_seen":13337345,"resource_available":true,"data":null}},"time_used":74,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":74,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"litclub.live/madnetwork/a/click?cmpid=656\u0026pubid=5596_\u0026cid=854eea90720c43c49e14be148a28da82","fqdn":"litclub.live","domain":"litclub.live","tld":"live"},"ip":{"addr":"54.69.219.69","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-07T02:43:34.056Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"litclub.live","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 04 Aug 2025 00:00:00 GMT","end":"Tue, 04 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"A7:8C:AA:B7:D1:28:7F:6E:1D:BA:97:72:F0:AD:F8:42:78:1C:2C:B4","sha256":"25:C2:08:AD:A1:BC:89:7F:84:2D:4C:A0:2B:B3:7D:2D:CC:16:61:55:BD:8D:9D:07:FA:CA:1A:EC:DF:1E:90:29"}}},"request":{"raw":"GET /madnetwork/a/click?cmpid=656\u0026pubid=5596_\u0026cid=854eea90720c43c49e14be148a28da82 HTTP/1.1\r\nHost: litclub.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 302 \r\nLocation: http://mobiwin.club/international-op/cnt/mcmp?cmpid=1090\u0026adid=181\u0026token=1772851414587m610434064m4513m656m4513\u0026pubid=5596_\r\nContent-Language: en-US\r\nContent-Length: 0\r\nDate: Sat, 07 Mar 2026 02:43:34 GMT\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"","fingerprints":null,"data":{"size":88314,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T15:49:33.06692Z","times_seen":13337345,"resource_available":true,"data":null}},"time_used":1083,"timings":{"blocked":455,"dns":35,"connect":173,"send":0,"wait":173,"receive":0,"ssl":244},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"litclub.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"mobiwin.club/international-op/cnt/mcmp?cmpid=1090\u0026adid=181\u0026token=1772851414587m610434064m4513m656m4513\u0026pubid=5596_","fqdn":"mobiwin.club","domain":"mobiwin.club","tld":"club"},"ip":{"addr":"52.42.48.107","port":80,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-07T02:43:34.688Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /international-op/cnt/mcmp?cmpid=1090\u0026adid=181\u0026token=1772851414587m610434064m4513m656m4513\u0026pubid=5596_ HTTP/1.1\r\nHost: mobiwin.club\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 302 \r\nCache-Control: private\r\nSet-Cookie: JSESSIONID=A624F42861EF610D8146DB52AA151094; Path=/international-op; HttpOnly\r\nLocation: https://runsafeads.com/g/2c710a5206345bd5?external_id=1772851414990a44047560a1090\u0026subpublisher_id=%7Byour_subpublisher_id_here%7D\r\nContent-Language: en-US\r\nContent-Length: 0\r\nDate: Sat, 07 Mar 2026 02:43:34 GMT\r\nKeep-Alive: timeout=20\r\nConnection: keep-alive\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"","fingerprints":[{"name":"Java","description":"Java is a class-based, object-oriented programming language that is designed to have as few implementation dependencies as possible.","website":"https://java.com","common_platform_enumeration":"cpe:2.3:a:oracle:jre:*:*:*:*:*:*:*:*","icon":"Java.svg","categories":["Programming languages"]}],"data":{"size":88314,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T15:49:33.06692Z","times_seen":13337345,"resource_available":true,"data":null}},"time_used":619,"timings":{"blocked":222,"dns":49,"connect":172,"send":0,"wait":174,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"mobiwin.club","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"runsafeads.com/g/2c710a5206345bd5?external_id=1772851414990a44047560a1090\u0026subpublisher_id=%7Byour_subpublisher_id_here%7D","fqdn":"runsafeads.com","domain":"runsafeads.com","tld":"com"},"ip":{"addr":"62.212.87.244","port":443,"asn":60781,"as":"LeaseWeb Netherlands B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-07T02:43:35.092Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"track.opticks.io","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 15 Feb 2026 14:50:19 GMT","end":"Sat, 16 May 2026 14:50:18 GMT"},"fingerprint":{"sha1":"BC:EA:13:2F:8B:F6:54:5C:BE:36:96:CE:F2:92:95:CF:5E:85:5D:32","sha256":"E0:B7:5C:6D:C3:0C:0F:67:B9:F7:8C:F2:B2:FE:6C:AB:6D:E1:FD:0C:F5:4F:A0:81:B9:27:6A:A0:53:79:CF:2C"}}},"request":{"raw":"GET /g/2c710a5206345bd5?external_id=1772851414990a44047560a1090\u0026subpublisher_id=%7Byour_subpublisher_id_here%7D HTTP/1.1\r\nHost: runsafeads.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/html;charset=utf-8\r\naccept-ch: Width, Viewport-Width, Viewport-Height, Device-Memory, Content-DPR, DPR, Save-Data, Downlink, ECT, RTT, Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factor, Sec-CH-UA-Form-Factors\r\ncache-control: private, max-age=0, no-cache, must-revalidate\r\netag: 335e12d969ab90d7924f8e3b2ea20071\r\npragma: no-cache\r\ncontent-encoding: gzip\r\ncontent-length: 33264\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":88314,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (65536), with no line terminators","md5":"9680bd4aca4372a65f6bb186680146dd","sha1":"8a58348072970317501c2bfab05477c66aa1e827","sha256":"b89fdf0847af00d1e20231dd687dea2eb2c777b82f2babe471cc432c0b271fdf","sha512":"d7eca4d855b9715d557465db47475cefcc81b521baf55e9adf1500257d296654dc8d9990b684ca369963dd8cc170424106d72b4e98db39a241e4865c7f0d4a62","ssdeep":"1536:790P5H0mC2s8dBcY9hP0YuaBy2ds4fCPaOhqiQUYHhNAyU4WF58hlraPDCqI8nWz:7IZ0eP9hP0YuaBy2ds4fCPaOhTQz0yvn","tlshash":"c383d8c97e95bc6c435d223372af0c4ae3178c8578dac0d5e0d3b995ffa8a48e972518","first_seen":"2026-03-07T02:43:57.928065Z","last_seen":"2026-03-07T02:43:57.928065Z","times_seen":1,"resource_available":true,"data":null}},"time_used":214,"timings":{"blocked":77,"dns":15,"connect":26,"send":0,"wait":52,"receive":8,"ssl":31},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}