{"report_id":"49a9edd5-7cc8-4005-83d8-6261893a3471","version":0,"status":"done","tags":[],"date":"2026-10-10T05:19:48Z","url":{"schema":"https","addr":"psfh.link","fqdn":"psfh.link","domain":"psfh.link","tld":"link"},"ip":{"addr":"45.153.88.2","port":0,"asn":51295,"as":"Tes Euro Media SRL","country":"Romania","country_code":"RO"},"final":{"url":{"schema":"https","addr":"psfh.link/","fqdn":"psfh.link","domain":"psfh.link","tld":"link"},"title":"PasteFlash — Simple, Secure \u0026 Monetized Paste","dom":{"size":12329,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (364)","md5":"3638db9e449e63c7429172e74a3193fe","sha1":"ea1988e30e7ffb7dd8c434d405f0e4f48b95b58e","sha256":"a8790b22a6e68672d06c3abc1e3f538126d401c8d34ee70492edfa375027f70f","sha512":"d86e6f07081f43a84cd2d3396a97ced996c5b98bbc5384634698739000282de9c3fee2e1144a6af006b2084ad1543e983675c45aafebf74e5c5efcf95dcdd0a2","ssdeep":"192:ZxiIPZnJxjGq4f9xaniiHWmcwPk1Beebe04WrX56JTaXaXDAofCG8AYpBRP:ZxiIPZvSKtJoee9rX5waXaXgfRP","tlshash":"504295e2d9f005247467c5d635a29b9d36689007d02ad6683fbc52acdfc97c2e82379c","dom_hash":"domhashda251473bd1c11c673af6776d2b80a60","first_seen":"2026-10-10T05:19:55.935579Z","last_seen":"2026-10-10T05:19:55.935579Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"psfh.link","fqdn":"psfh.link","domain":"psfh.link","tld":"link"},"ip":{"addr":"45.153.88.2","port":0,"asn":51295,"as":"Tes Euro Media SRL","country":"Romania","country_code":"RO"},"tags":null,"meta":null,"user":{"user_id":"akbkyowd9geqr98"}},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-11-14T05:19:48Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":4}},"detection":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"spendsdetachment.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"spendsdetachment.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"psfh.link","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"acceptableredheadcaviar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"spendsdetachment.com","ip":{"addr":"172.240.127.244","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"domain_registered":"2024-09-03","domain_rank":0,"first_seen":"2025-10-05T07:40:04.892598Z","last_seen":"2026-10-04T02:23:08.871918Z","alert_count":8,"request_count":4,"received_data":9597,"sent_data":5986,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"psfh.link","ip":{"addr":"45.153.88.2","port":443,"asn":51295,"as":"Tes Euro Media SRL","country":"Romania","country_code":"RO"},"domain_registered":"2026-01-17","domain_rank":0,"first_seen":"2026-01-18T01:12:01.724881Z","last_seen":"2026-08-25T04:52:34.088269Z","alert_count":3,"request_count":3,"received_data":562107,"sent_data":1499,"comment":"","tags":null,"fingerprints":[{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}]},{"fqdn":"cdn.storageimagedisplay.com","ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"domain_registered":"2024-09-13","domain_rank":170153,"first_seen":"2024-09-13T12:56:32Z","last_seen":"2026-10-09T17:57:10.918285Z","alert_count":0,"request_count":1,"received_data":26425,"sent_data":523,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"acceptableredheadcaviar.com","ip":{"addr":"172.240.127.244","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"domain_registered":"2025-05-12","domain_rank":409736,"first_seen":"2025-05-21T00:06:33.88165Z","last_seen":"2026-10-03T18:23:27.455613Z","alert_count":1,"request_count":1,"received_data":55133,"sent_data":494,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}]},{"fqdn":"protrafficinspector.com","ip":{"addr":"63.184.52.10","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"domain_registered":"2025-06-18","domain_rank":614186,"first_seen":"2025-07-25T22:45:21.95813Z","last_seen":"2026-10-08T13:10:36.220282Z","alert_count":0,"request_count":1,"received_data":512,"sent_data":476,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"psfh.link/","fqdn":"psfh.link","domain":"psfh.link","tld":"link"},"ip":{"addr":"45.153.88.2","port":443,"asn":51295,"as":"Tes Euro Media SRL","country":"Romania","country_code":"RO"},"introduction_type":"scriptElement","is_inline":true,"md5":"356568dd019f7d48cf3fb0cc0e9145fc","sha1":"d866f0e4057c5c405656cf0c5738dba8fe278432","sha256":"e970160330f448cd7b2635403dab808c8418322aee681e99cb0228a85b97b869","sha512":"dd242c2528491a05a4e9a7e15948a42ead70eb553e66a64ea2faaea6bfbb02c7eb3e8686628263349d5d2bb35c791e21256b81cd44db268074c1e6a9e4b57680","ssdeep":"","tlshash":"50b012dbb4a5293108ab165213a786f83154424428891012361cd0490623550157bdb8","size":87,"data":"","first_seen":"2026-07-29T00:05:32.139551Z","last_seen":"2026-10-10T05:19:56.057841Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"psfh.link/","fqdn":"psfh.link","domain":"psfh.link","tld":"link"},"ip":{"addr":"45.153.88.2","port":443,"asn":51295,"as":"Tes Euro Media SRL","country":"Romania","country_code":"RO"},"introduction_type":"scriptElement","is_inline":true,"md5":"7d6aefaea20fb3013b14ea90308d7e78","sha1":"528c5accd7c24e8c238cfc247e20490e0e277549","sha256":"8a6d5f343dae83829954d6bbde65236f8a662a2e6b0aafc24bb0d3efaa89d479","sha512":"3b85e602f35795ea34e204ac8727a2fadb18ee898afacd61f68375c4b825db3d34179b6ccf0fe0f764ec94711c8fc0ba3d473e9c3821c12166456c21e2b4fe22","ssdeep":"","tlshash":"db217ce7797209340aee56bf39a23648383621153574c1c6ba2c48506d92f58f1b7acb","size":1152,"data":"","first_seen":"2026-07-29T00:05:32.140397Z","last_seen":"2026-10-10T05:19:56.069037Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"psfh.link/assets/banner-728.js","fqdn":"psfh.link","domain":"psfh.link","tld":"link"},"ip":{"addr":"45.153.88.2","port":443,"asn":51295,"as":"Tes Euro Media SRL","country":"Romania","country_code":"RO"},"introduction_type":"scriptElement","is_inline":false,"md5":"995ee8953a4459f0b0823579eb110c4a","sha1":"196e8819902e0483761a36bcae7bc0df9e925b23","sha256":"470745147bbced0a368f326cc42e4308a771f41afe50ac5f7aacd1d52bab78d8","sha512":"adc53d8b0fa5194f04d12b27822f14cbae262f25f088d358d811f8176454647e1e7c5f0b658602770187df3910069dd1e5928eca9472ba07f5f6231390ca5986","ssdeep":"","tlshash":"8101b83e0ea32030c4a6242c5baf22403722c0334502ec017e8cc6446fa1e6695b2fdd","size":819,"data":"","first_seen":"2026-03-07T18:17:02.545943Z","last_seen":"2026-10-10T05:19:56.022144Z","times_seen":55,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"acceptableredheadcaviar.com/21b0e994d14a596d05cc4cc50311bbc7/invoke.js","fqdn":"acceptableredheadcaviar.com","domain":"acceptableredheadcaviar.com","tld":"com"},"ip":{"addr":"172.240.127.244","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"cd787b5900185fb219a38eb524d63566","sha1":"34b5e5e972d41e72d084cbe63161d259d7652966","sha256":"e4892d05042d2c28802bc4b87f0ecc6ecd82bd9d30389349efdef1b3b5d955e1","sha512":"5f00951b9fc0d9747e2be73630fe1c36aed2206ccacfda202cbf2af2eae1fc8fd4856430c9a3cffff99899ecbba96b66a3e3c4996ebef1c6c04d4297fbda330a","ssdeep":"1536:BQtYLQ8UEAzZILFIYPlBHlwxjLk45saIFe:BQyfAzzec","tlshash":"3f33e8cc7be9a2a313b029ff32669663e81d0c51358ca4d4e02f3cc56d47766e876978","size":54206,"data":"","first_seen":"2026-10-10T05:19:56.035425Z","last_seen":"2026-10-10T05:19:56.035425Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"about","addr":"about:blank","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"fc5fe982db421ae8b56adec5c2ce268a","sha1":"fa80976aed7a03a63bd12068a4f7d02098f23486","sha256":"f18ac7903a94b657ca9a44adc020d46dc66a3ee70042c22a4604cdb267819cfd","sha512":"ba49e2cfbf3bf309195baeff576ee90fa60239903ca20485a62889b29c0ef5ae778a5beac6686daf334694d13a9144cf2ca76e8d66cbbf74fc1f07340c24c24e","ssdeep":"","tlshash":"07c02b46df000810e9613c4deb4203e37cc142f3b832fc53168040c064e7433c4d00c8","size":145,"data":"","first_seen":"2026-03-07T18:17:02.557726Z","last_seen":"2026-10-10T05:19:56.079904Z","times_seen":54,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"about","addr":"about:blank","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"333f4276d82710e307b0b2ddc16b26a8","sha1":"8e1b03ddab3507e431f0d565fab9e2ccc727a3fe","sha256":"56998b7f9f4aaf37336b75166af7dc4f138344dfd28c5baa5710a99f90d9f6d6","sha512":"f007642b149c9f358c886f8da542a0481d177f92381607cb8e8b0a5ace13c26f8e3e331b29929f65c1c54c7cc9e806504a70b674e7860eac609f7b76ae012c3c","ssdeep":"","tlshash":"0d815eb8aec6a63c147264fd3237a6262c16d21f0500fe45f84ce9515f31fa089f5dc4","size":4064,"data":"","first_seen":"2026-10-10T05:19:56.088654Z","last_seen":"2026-10-10T05:19:56.088654Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"about","addr":"about:blank","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eval","is_inline":false,"md5":"c5daaa23181dc4a1f7b1b5d05685e2c5","sha1":"664dccfbedcc5b14b36c14a6561b6afd904e9402","sha256":"544229d8d8e40f5fbcd3fc02a858d8668049bc1da3947671c8aa0da1185dfe38","sha512":"2d88d64713c0d93ae895bfb46c9099645937ac91f0a3c00bcf4761d3b4084a1b6db7e1803f47bd2e3eefa428766cbb340a467fd1c97b547a85e05d33b0dfac93","ssdeep":"","tlshash":"a33119aab606322a4876b4f9208b7f752c1bff5e0d457bc1e4015ae23a30891c069dc0","size":1471,"data":"","first_seen":"2026-10-10T05:19:56.099809Z","last_seen":"2026-10-10T05:19:56.099809Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"about","addr":"about:blank","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eval","is_inline":false,"md5":"0ed26ab1187aafb6a8820a26113b56ce","sha1":"54c8fe6eb98225c992ce7836732a07620f9f4c9a","sha256":"fb60fc9a71bbcf2ff6785991a8da83a64cb7495331353b6653d98a4e3578b2a2","sha512":"dc431ee034fb3960c506d4970b7230a61bcd93b4ad9c368b2b5c31851734e98601aedf5747df2af8dc54e337f5d0dba7f233646c985070601bbc29d33fe5c0f1","ssdeep":"","tlshash":"f42117fc666f9b1d836083f0760b823f892e0b2a1141968cf1789600fa12aa81b231f1","size":1252,"data":"","first_seen":"2026-10-10T05:19:56.113936Z","last_seen":"2026-10-10T05:19:56.113936Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"spendsdetachment.com/watch.558311057114.js?key=21b0e994d14a596d05cc4cc50311bbc7\u0026kw=%5B%22pasteflash%22%2C%22%E2%80%94%22%2C%22simple%22%2C%22secure%22%2C%22monetized%22%2C%22paste%22%5D\u0026refer=https%3A%2F%2Fpsfh.link%2F\u0026tz=0\u0026dev=e\u0026res=14.1055\u0026rb=e\u0026uuid=01a12438-1068-705f-bece-ef907746192a%3A1%3A1","fqdn":"spendsdetachment.com","domain":"spendsdetachment.com","tld":"com"},"ip":{"addr":"172.240.127.244","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://psfh.link/","date":"2026-10-10T05:10:16.458Z","timestamp":1791609016458,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"spendsdetachment.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 26 Aug 2026 04:27:12 GMT","end":"Tue, 24 Nov 2026 04:27:11 GMT"},"fingerprint":{"sha1":"EB:97:C4:8B:DE:F8:13:B1:55:C6:2E:E9:8C:5C:48:F7:1E:59:B1:F2","sha256":"D3:ED:AA:AB:A7:0F:5D:B5:E3:C6:C8:42:92:C6:71:07:01:45:1D:84:99:AD:9D:45:AD:FB:7A:B9:4D:A7:8F:57"}}},"request":{"raw":"GET /watch.558311057114.js?key=21b0e994d14a596d05cc4cc50311bbc7\u0026kw=%5B%22pasteflash%22%2C%22%E2%80%94%22%2C%22simple%22%2C%22secure%22%2C%22monetized%22%2C%22paste%22%5D\u0026refer=https%3A%2F%2Fpsfh.link%2F\u0026tz=0\u0026dev=e\u0026res=14.1055\u0026rb=e\u0026uuid=01a12438-1068-705f-bece-ef907746192a%3A1%3A1 HTTP/1.1\r\nHost: spendsdetachment.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://psfh.link\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://psfh.link/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 307 Temporary Redirect\r\nServer: nginx/1.28.2\r\nDate: Sat, 10 Oct 2026 05:10:16 GMT\r\nContent-Type: text/html\r\nContent-Length: 0\r\nConnection: keep-alive\r\naccept-ch: Sec-Ch-Ua-Full-Version-List,Device-Stock-Ua,X-Operamini-Phone-Ua,User-Agent,Sec-Ch-Ua-Platform-Version,Sec-Ch-Ua-Full-Version,Sec-Ch-Ua-Platform,Sec-Ch-Ua-Model,Sec-Ch-Ua-Mobile,X-Device-User-Agent,X-Ucbrowser-Device-Ua,Sec-Ch-Ua,Sec-Ch-Ua-Platformuser-Agent\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://psfh.link\r\nlocation: https://spendsdetachment.com/watch.558311057114.js?dev=e\u0026fstu=01a12438-11cb-7c5f-9df2-4492d2529ddb\u0026key=21b0e994d14a596d05cc4cc50311bbc7\u0026kw=%5B%22pasteflash%22%2C%22%E2%80%94%22%2C%22simple%22%2C%22secure%22%2C%22monetized%22%2C%22paste%22%5D\u0026ps1=1791609016\u0026rb=e\u0026refer=https%3A%2F%2Fpsfh.link%2F\u0026res=14.1055\u0026rmtc=t\u0026sht=CoFTr9Pt7VfvfcmYSFQkaWz16m8flS5gmAelUwyFvao\u0026shv=2\u0026st1=139ed0dc3b3e26c7b26fe43a3a7070fe\u0026tz=0\u0026uuid=01a12438-1068-705f-bece-ef907746192a%3A1%3A1\r\nset-cookie: uid_id2=01a12438-1068-705f-bece-ef907746192a:1:1; Path=/; Expires=Sat, 17 Oct 2026 05:10:16 GMT; Secure; SameSite=None\nain=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.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.yF7OV7eJTkapQpGAjBs-WHgO8KmFwmxABcuT_aefCfY; Path=/; Expires=Sat, 10 Oct 2026 05:11:16 GMT; Secure; SameSite=None\r\nvary: Accept-Encoding\r\nx-envoy-upstream-service-time: 2\r\nHost: spendsdetachment.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 5a0f059db21a4e84ca4ed4fa5913276d\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":[{"name":"uid_id2","value":"01a12438-1068-705f-bece-ef907746192a:1:1","quoted":false,"path":"/","expires":"2026-10-17T05:10:16Z","raw_expires":"Sat, 17 Oct 2026 05:10:16 GMT","secure":true,"http_only":false,"same_site":"None","partitioned":false,"raw":"uid_id2=01a12438-1068-705f-bece-ef907746192a:1:1; Path=/; Expires=Sat, 17 Oct 2026 05:10:16 GMT; Secure; SameSite=None"},{"name":"ain","value":"eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.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.yF7OV7eJTkapQpGAjBs-WHgO8KmFwmxABcuT_aefCfY","quoted":false,"path":"/","expires":"2026-10-10T05:11:16Z","raw_expires":"Sat, 10 Oct 2026 05:11:16 GMT","secure":true,"http_only":false,"same_site":"None","partitioned":false,"raw":"ain=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.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.yF7OV7eJTkapQpGAjBs-WHgO8KmFwmxABcuT_aefCfY; Path=/; Expires=Sat, 10 Oct 2026 05:11:16 GMT; Secure; SameSite=None"}],"status_code":"307","status_text":"Temporary Redirect","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-10T07:18:38.983381Z","times_seen":18993735,"resource_available":true,"data":null}},"time_used":373,"timings":{"blocked":0,"dns":3,"connect":91,"send":0,"wait":95,"receive":0,"ssl":184},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"spendsdetachment.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"spendsdetachment.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"spendsdetachment.com/watch.558311057114.js?dev=e\u0026fstu=01a12438-11cb-7c5f-9df2-4492d2529ddb\u0026key=21b0e994d14a596d05cc4cc50311bbc7\u0026kw=%5B%22pasteflash%22%2C%22%E2%80%94%22%2C%22simple%22%2C%22secure%22%2C%22monetized%22%2C%22paste%22%5D\u0026ps1=1791609016\u0026rb=e\u0026refer=https%3A%2F%2Fpsfh.link%2F\u0026res=14.1055\u0026rmtc=t\u0026sht=CoFTr9Pt7VfvfcmYSFQkaWz16m8flS5gmAelUwyFvao\u0026shv=2\u0026st1=139ed0dc3b3e26c7b26fe43a3a7070fe\u0026tz=0\u0026uuid=01a12438-1068-705f-bece-ef907746192a%3A1%3A1","fqdn":"spendsdetachment.com","domain":"spendsdetachment.com","tld":"com"},"ip":{"addr":"172.240.127.244","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://psfh.link/","date":"2026-10-10T05:10:16.836Z","timestamp":1791609016836,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"spendsdetachment.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 26 Aug 2026 04:27:12 GMT","end":"Tue, 24 Nov 2026 04:27:11 GMT"},"fingerprint":{"sha1":"EB:97:C4:8B:DE:F8:13:B1:55:C6:2E:E9:8C:5C:48:F7:1E:59:B1:F2","sha256":"D3:ED:AA:AB:A7:0F:5D:B5:E3:C6:C8:42:92:C6:71:07:01:45:1D:84:99:AD:9D:45:AD:FB:7A:B9:4D:A7:8F:57"}}},"request":{"raw":"GET /watch.558311057114.js?dev=e\u0026fstu=01a12438-11cb-7c5f-9df2-4492d2529ddb\u0026key=21b0e994d14a596d05cc4cc50311bbc7\u0026kw=%5B%22pasteflash%22%2C%22%E2%80%94%22%2C%22simple%22%2C%22secure%22%2C%22monetized%22%2C%22paste%22%5D\u0026ps1=1791609016\u0026rb=e\u0026refer=https%3A%2F%2Fpsfh.link%2F\u0026res=14.1055\u0026rmtc=t\u0026sht=CoFTr9Pt7VfvfcmYSFQkaWz16m8flS5gmAelUwyFvao\u0026shv=2\u0026st1=139ed0dc3b3e26c7b26fe43a3a7070fe\u0026tz=0\u0026uuid=01a12438-1068-705f-bece-ef907746192a%3A1%3A1 HTTP/1.1\r\nHost: spendsdetachment.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://psfh.link\r\nReferer: https://psfh.link/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: uid_id2=01a12438-1068-705f-bece-ef907746192a:1:1; ain=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.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.yF7OV7eJTkapQpGAjBs-WHgO8KmFwmxABcuT_aefCfY\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"uid_id2","value":"01a12438-1068-705f-bece-ef907746192a:1:1"},{"name":"ain","value":"eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJwIjp7ImlkIjoyODc1OTM1MywiayI6IjIxYjBlOTk0ZDE0YTU5NmQwNWNjNGNjNTAzMTFiYmM3Iiwic2lkIjoiIiwiaXNpZCI6MiwiYXNpZCI6MSwiemlkIjo1NjQ4NjMxLCJwaWQiOjE2NjM3LCJhbiI6dHJ1ZSwibGFuIjp0cnVlLCJjaWQiOjM0LCJhaWQiOjIzLCJwdCI6NCwicGsiOiJueTU0YTZ3N3kiLCJjcGtzIjp7IjI4IjoiYmU0ZTI4ZDExMjcxNWE0MjZkMTI1YWRiNGVjNTQ4YzcifSwidCI6MX0sInUiOnsidSI6MSwiYXUiOjEsImQiOnsiaWQiOjI2NjU2MTExNSwiaWRzIjoiIiwiaWMiOmZhbHNlLCJuIjoiRGVza3RvcCxFbXVsYXRvciIsInYiOiJVbmtub3duIiwibSI6IlVua25vd24iLCJmIjoxLCJmbiI6IkRlc2t0b3AiLCJvaWQiOjM4OTE0LCJvbiI6IldpbmRvd3MiLCJvdiI6IjEwLjAiLCJiaWQiOjEzNjkyNSwiYm4iOiJGaXJlZm94IiwiYnYiOiIxMzQuMCIsInd2IjpmYWxzZSwiZSI6dHJ1ZSwiYWIiOmZhbHNlfSwiYyI6eyJpZCI6MTYyLCJjIjoiTk8iLCJuIjoiTm9yd2F5In0sImN0Ijp7ImlkIjozMTQ2MjcwLCJuIjoiTWF1cmEifSwicmciOnsiaWQiOjMyNzEsIm4iOiJWaWtlbiJ9LCJhIjpmYWxzZSwiY3IiOnsibiI6IkJsaXggU29sdXRpb25zIn0sInhmIjoiIiwiaXhmIjpmYWxzZSwiaWd4ZiI6ZmFsc2UsIml3ZiI6dHJ1ZSwidXAiOnRydWUsInIiOiJodHRwczovL3BzZmgubGluay8iLCJ0eiI6MiwiaWR1YyI6MCwiYXIiOltdfX0.yF7OV7eJTkapQpGAjBs-WHgO8KmFwmxABcuT_aefCfY"}],"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.2\r\nDate: Sat, 10 Oct 2026 05:10:16 GMT\r\nContent-Type: text/html\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\naccept-ch: Sec-Ch-Ua,Sec-Ch-Ua-Platformuser-Agent,Sec-Ch-Ua-Full-Version-List,Sec-Ch-Ua-Model,Sec-Ch-Ua-Mobile,Device-Stock-Ua,X-Device-User-Agent,X-Ucbrowser-Device-Ua,Sec-Ch-Ua-Full-Version,Sec-Ch-Ua-Platform,X-Operamini-Phone-Ua,User-Agent,Sec-Ch-Ua-Platform-Version\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://psfh.link\r\ncontent-encoding: zstd\r\nset-cookie: uid_id2=01a12438-1068-705f-bece-ef907746192a:1:1; Path=/; Expires=Sat, 17 Oct 2026 05:10:16 GMT; Secure; SameSite=None\npdhtkv=true; Path=/; Expires=Sun, 11 Oct 2026 05:10:16 GMT; Secure; SameSite=None\nuncs=1; Path=/; Expires=Sun, 11 Oct 2026 05:10:16 GMT; Secure; SameSite=None\npdhtkv23=true; Path=/; Expires=Sun, 11 Oct 2026 05:10:16 GMT; Secure; SameSite=None\nuncs23=1; Path=/; Expires=Sun, 11 Oct 2026 05:10:16 GMT; Secure; SameSite=None\nu_pl28759353=1; Path=/; Expires=Sun, 11 Oct 2026 05:10:16 GMT; Secure; SameSite=None\r\nvary: Accept-Encoding\r\nx-envoy-upstream-service-time: 20\r\nHost: spendsdetachment.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 45c0c6ecab6b2fd0e7ae09d88e22c0c6\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":[{"name":"uid_id2","value":"01a12438-1068-705f-bece-ef907746192a:1:1","quoted":false,"path":"/","expires":"2026-10-17T05:10:16Z","raw_expires":"Sat, 17 Oct 2026 05:10:16 GMT","secure":true,"http_only":false,"same_site":"None","partitioned":false,"raw":"uid_id2=01a12438-1068-705f-bece-ef907746192a:1:1; Path=/; Expires=Sat, 17 Oct 2026 05:10:16 GMT; Secure; SameSite=None"},{"name":"pdhtkv","value":"true","quoted":false,"path":"/","expires":"2026-10-11T05:10:16Z","raw_expires":"Sun, 11 Oct 2026 05:10:16 GMT","secure":true,"http_only":false,"same_site":"None","partitioned":false,"raw":"pdhtkv=true; Path=/; Expires=Sun, 11 Oct 2026 05:10:16 GMT; Secure; SameSite=None"},{"name":"uncs","value":"1","quoted":false,"path":"/","expires":"2026-10-11T05:10:16Z","raw_expires":"Sun, 11 Oct 2026 05:10:16 GMT","secure":true,"http_only":false,"same_site":"None","partitioned":false,"raw":"uncs=1; Path=/; Expires=Sun, 11 Oct 2026 05:10:16 GMT; Secure; SameSite=None"},{"name":"pdhtkv23","value":"true","quoted":false,"path":"/","expires":"2026-10-11T05:10:16Z","raw_expires":"Sun, 11 Oct 2026 05:10:16 GMT","secure":true,"http_only":false,"same_site":"None","partitioned":false,"raw":"pdhtkv23=true; Path=/; Expires=Sun, 11 Oct 2026 05:10:16 GMT; Secure; SameSite=None"},{"name":"uncs23","value":"1","quoted":false,"path":"/","expires":"2026-10-11T05:10:16Z","raw_expires":"Sun, 11 Oct 2026 05:10:16 GMT","secure":true,"http_only":false,"same_site":"None","partitioned":false,"raw":"uncs23=1; Path=/; Expires=Sun, 11 Oct 2026 05:10:16 GMT; Secure; SameSite=None"},{"name":"u_pl28759353","value":"1","quoted":false,"path":"/","expires":"2026-10-11T05:10:16Z","raw_expires":"Sun, 11 Oct 2026 05:10:16 GMT","secure":true,"http_only":false,"same_site":"None","partitioned":false,"raw":"u_pl28759353=1; Path=/; Expires=Sun, 11 Oct 2026 05:10:16 GMT; Secure; SameSite=None"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":4096,"size_decoded":4173,"mime_type":"text/html","magic":"JavaScript source, ASCII text, with very long lines (3220)","md5":"baa77bfc456c3ec83712eac78eac3fe0","sha1":"c889102f921c8ae8ce4a16ff2d24f472153df5ab","sha256":"807b24e4f16111740c4189de48131294cba9466b8eaa8725e2ce2215964e05a8","sha512":"5b181c5a0208635bf8ccb3e08f7220d90d224c6d9ff387cdca6d5506ca7b9e5e513af0f18bb87ec091a897420cd5f830fa7dc465cba961a8820e90d83218319b","ssdeep":"","tlshash":"9b813cb8aec6a63c546264fd3237a62a2c16d21f1600fe45f84ce9516f31ea089f5dc8","first_seen":"2026-10-10T05:19:55.960782Z","last_seen":"2026-10-10T05:19:55.960782Z","times_seen":1,"resource_available":true,"data":null}},"time_used":114,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":114,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"spendsdetachment.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"spendsdetachment.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"spendsdetachment.com/impr.gif?sid=H4sIAAAAAAAC_1xSv28cRRSeNRYNBRKKQodWiAIk7jyzP25vkyaK-FHFRiSQgmp-OhPv7W52du8uVzkEUVBZoqFcf2fHnQVNRAlnCn5ISD6JwkXc8CcgQYWE7nLCVkaa997M9zTzvk_fl_vNOemi4Wcf3SomNsv4Rtyl_tt3ba6KkfM37_iMdul1_67Ne9F1f7wI1fAaC6Mufcf_UMudYiOgjFJGmf-BrbQpxhtLFLY8Zmnc7UVdxvpdFgcYVy_euMaD4x7U8Jy8Bqvmr_5pPoOVM-SDb9_TbqcuynffHzQZr4sKQ3X0Sb6TF6Mcg4vSVB5MfrTqRuHmhHyzhiI_WrFAMTxYsICwc7J29RlEfrQaFWJ4-HxakUHnEOoVjIYz6OwEls8gi8ew6pQAUmFzC_ngyWZRjfjD5yhfoHOy_vdfsKM5WX92Bfng-GZmx_7tImtqW-QOY9PCjmew2zOUzQnqyRrs6ASy_hxW_U7o2hvIB4e3eFNxWHX2FmWcBVHY7zDa63cSGpuO0FJ3tElpkkQ9lgZ8qZE1M3DnoVls66ExHprSw0Cd-TztG5H2Ip5qkxhFWSJ5HIZpEsWB6ckYjXwEq_Ygq12U1S527B6c8uBqgqFqD1XmAtc-UZlrBFvlYJXDdlrU2_v8sKi3dU7Aqz1Uqj2w5QP3GLJ-aToxTk2LReCibqdcqHZqVU1QPbhMMAhpJ4lD0xGGiU5fs4AGcd_EET8wrm4utzIpOomMTSdVJuhEURqoIA5SpcR-uTKP9_SPFDv6zA-YoDpNI8UiHqc9RWMpIyljGjImhEzgbAvr1pbqTeycfEr_QWlPb_wLwU_gshNI-yZ48zr4aJoEffB7SCkm-XHJXa1Nxt29oOvGUEWLsl5H_dCDrsl-dk6uTD--c_OHpTHM0y1o-RtZLciqRVm1uG9_ItjOHn23VdZ2YCd84ZTbNa_1y-D2VP8Kaefk6g2ytOy1HyPIcheu_P-laebKOdFffwVXEIiSILMEmb74iosW7tJZXNT77gtsVx5E5k1FVpEDkVXZHpw98_tBQKlkQarSOErDvtFxxJJExyzsaRrGqN38_i8_f__fAHKKAi04BAAA","fqdn":"spendsdetachment.com","domain":"spendsdetachment.com","tld":"com"},"ip":{"addr":"172.240.127.244","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://psfh.link/","date":"2026-10-10T05:10:16.998Z","timestamp":1791609016998,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"spendsdetachment.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 26 Aug 2026 04:27:12 GMT","end":"Tue, 24 Nov 2026 04:27:11 GMT"},"fingerprint":{"sha1":"EB:97:C4:8B:DE:F8:13:B1:55:C6:2E:E9:8C:5C:48:F7:1E:59:B1:F2","sha256":"D3:ED:AA:AB:A7:0F:5D:B5:E3:C6:C8:42:92:C6:71:07:01:45:1D:84:99:AD:9D:45:AD:FB:7A:B9:4D:A7:8F:57"}}},"request":{"raw":"GET /impr.gif?sid=H4sIAAAAAAAC_1xSv28cRRSeNRYNBRKKQodWiAIk7jyzP25vkyaK-FHFRiSQgmp-OhPv7W52du8uVzkEUVBZoqFcf2fHnQVNRAlnCn5ISD6JwkXc8CcgQYWE7nLCVkaa997M9zTzvk_fl_vNOemi4Wcf3SomNsv4Rtyl_tt3ba6KkfM37_iMdul1_67Ne9F1f7wI1fAaC6Mufcf_UMudYiOgjFJGmf-BrbQpxhtLFLY8Zmnc7UVdxvpdFgcYVy_euMaD4x7U8Jy8Bqvmr_5pPoOVM-SDb9_TbqcuynffHzQZr4sKQ3X0Sb6TF6Mcg4vSVB5MfrTqRuHmhHyzhiI_WrFAMTxYsICwc7J29RlEfrQaFWJ4-HxakUHnEOoVjIYz6OwEls8gi8ew6pQAUmFzC_ngyWZRjfjD5yhfoHOy_vdfsKM5WX92Bfng-GZmx_7tImtqW-QOY9PCjmew2zOUzQnqyRrs6ASy_hxW_U7o2hvIB4e3eFNxWHX2FmWcBVHY7zDa63cSGpuO0FJ3tElpkkQ9lgZ8qZE1M3DnoVls66ExHprSw0Cd-TztG5H2Ip5qkxhFWSJ5HIZpEsWB6ckYjXwEq_Ygq12U1S527B6c8uBqgqFqD1XmAtc-UZlrBFvlYJXDdlrU2_v8sKi3dU7Aqz1Uqj2w5QP3GLJ-aToxTk2LReCibqdcqHZqVU1QPbhMMAhpJ4lD0xGGiU5fs4AGcd_EET8wrm4utzIpOomMTSdVJuhEURqoIA5SpcR-uTKP9_SPFDv6zA-YoDpNI8UiHqc9RWMpIyljGjImhEzgbAvr1pbqTeycfEr_QWlPb_wLwU_gshNI-yZ48zr4aJoEffB7SCkm-XHJXa1Nxt29oOvGUEWLsl5H_dCDrsl-dk6uTD--c_OHpTHM0y1o-RtZLciqRVm1uG9_ItjOHn23VdZ2YCd84ZTbNa_1y-D2VP8Kaefk6g2ytOy1HyPIcheu_P-laebKOdFffwVXEIiSILMEmb74iosW7tJZXNT77gtsVx5E5k1FVpEDkVXZHpw98_tBQKlkQarSOErDvtFxxJJExyzsaRrGqN38_i8_f__fAHKKAi04BAAA HTTP/1.1\r\nHost: spendsdetachment.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: uid_id2=01a12438-1068-705f-bece-ef907746192a:1:1; ain=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.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.yF7OV7eJTkapQpGAjBs-WHgO8KmFwmxABcuT_aefCfY; pdhtkv=true; uncs=1; pdhtkv23=true; uncs23=1; u_pl28759353=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\n\r\n","headers":null,"cookies":[{"name":"uid_id2","value":"01a12438-1068-705f-bece-ef907746192a:1:1"},{"name":"ain","value":"eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.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.yF7OV7eJTkapQpGAjBs-WHgO8KmFwmxABcuT_aefCfY"},{"name":"pdhtkv","value":"true"},{"name":"uncs","value":"1"},{"name":"pdhtkv23","value":"true"},{"name":"uncs23","value":"1"},{"name":"u_pl28759353","value":"1"}],"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.2\r\nDate: Sat, 10 Oct 2026 05:10:17 GMT\r\nContent-Type: image/gif\r\nContent-Length: 7\r\nConnection: keep-alive\r\naccept-ch: Sec-Ch-Ua-Platform-Version,Sec-Ch-Ua-Platformuser-Agent,Sec-Ch-Ua-Full-Version,Sec-Ch-Ua-Platform,Sec-Ch-Ua-Model,Sec-Ch-Ua-Mobile,Device-Stock-Ua,X-Device-User-Agent,X-Operamini-Phone-Ua,Sec-Ch-Ua,Sec-Ch-Ua-Full-Version-List,X-Ucbrowser-Device-Ua,User-Agent\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: *\r\nvary: Origin\r\nx-envoy-upstream-service-time: 34\r\nHost: spendsdetachment.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 7cf62fcdb974110cb7fe5b594e33e815\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-10T07:18:38.983381Z","times_seen":18993735,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"spendsdetachment.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"spendsdetachment.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"psfh.link/","fqdn":"psfh.link","domain":"psfh.link","tld":"link"},"ip":{"addr":"45.153.88.2","port":443,"asn":51295,"as":"Tes Euro Media SRL","country":"Romania","country_code":"RO"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-10-10T05:10:14.580Z","timestamp":1791609014580,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mail.pasteflash.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 28 Sep 2026 23:28:32 GMT","end":"Sun, 27 Dec 2026 23:28:31 GMT"},"fingerprint":{"sha1":"06:4B:AA:11:7F:82:97:53:2B:7E:02:D3:15:08:78:9A:37:7C:7F:D9","sha256":"37:87:25:46:AC:09:E2:89:6E:AB:BE:2B:1C:EC:9B:B2:45:44:F9:6A:F2:BD:D7:36:70:F5:2B:26:C5:5F:8A:0C"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: psfh.link\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nset-cookie: PHPSESSID=bac04b7e2306580909b2854746604a45; expires=Mon, 09 Nov 2026 05:10:15 GMT; Max-Age=2592000; path=/; secure; HttpOnly; SameSite=Lax\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Sat, 10 Oct 2026 05:10:15 GMT\r\nx-frame-options: DENY\r\ncontent-security-policy: frame-ancestors 'none';\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":[{"name":"PHPSESSID","value":"bac04b7e2306580909b2854746604a45","quoted":false,"path":"/","expires":"2026-11-09T05:10:15Z","raw_expires":"Mon, 09 Nov 2026 05:10:15 GMT","max_age":2592000,"secure":true,"http_only":true,"same_site":"Lax","partitioned":false,"raw":"PHPSESSID=bac04b7e2306580909b2854746604a45; expires=Mon, 09 Nov 2026 05:10:15 GMT; Max-Age=2592000; path=/; secure; HttpOnly; SameSite=Lax"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":12018,"size_decoded":4448,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"1f517dfac02ce26246b7bfb390e79440","sha1":"89574af1bf7595edf05c784c263273e22e4f32a2","sha256":"5e79ca8665644cb76bb9b5d2b0be32ae0d90512208cc122317c914517ce4f5c6","sha512":"4024ee562c59de313bb05c570e774dd0a890c779d040cd4f210bde4656df67996e6a8809fe2edb7b8d1db90a7ae076089a7b1f83ca80eb0c182fdcd56c1b7fbb","ssdeep":"192:mxiIkZnJxjGq4f9xaniiHWmcwPk1Beebew4WrYJTaXaXDAofCG8sYpBRz:mxiIkZvSKtJoeeHrCaXaXEfRz","tlshash":"644295e299f011247467d1c635a29b9d36a89007d02bd66c3fbc61acdfc97c2e82379c","first_seen":"2026-10-10T05:19:55.968838Z","last_seen":"2026-10-10T05:19:55.968838Z","times_seen":1,"resource_available":true,"data":null}},"time_used":454,"timings":{"blocked":-1,"dns":245,"connect":48,"send":0,"wait":60,"receive":0,"ssl":100},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"psfh.link","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"psfh.link/favicon.ico","fqdn":"psfh.link","domain":"psfh.link","tld":"link"},"ip":{"addr":"45.153.88.2","port":443,"asn":51295,"as":"Tes Euro Media SRL","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://psfh.link/","date":"2026-10-10T05:10:15.378Z","timestamp":1791609015378,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mail.pasteflash.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 28 Sep 2026 23:28:32 GMT","end":"Sun, 27 Dec 2026 23:28:31 GMT"},"fingerprint":{"sha1":"06:4B:AA:11:7F:82:97:53:2B:7E:02:D3:15:08:78:9A:37:7C:7F:D9","sha256":"37:87:25:46:AC:09:E2:89:6E:AB:BE:2B:1C:EC:9B:B2:45:44:F9:6A:F2:BD:D7:36:70:F5:2B:26:C5:5F:8A:0C"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: psfh.link\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://psfh.link/\r\nCookie: PHPSESSID=bac04b7e2306580909b2854746604a45\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"PHPSESSID","value":"bac04b7e2306580909b2854746604a45"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sat, 17 Oct 2026 05:10:15 GMT\r\ncontent-type: image/x-icon\r\nlast-modified: Fri, 26 Dec 2025 22:36:32 GMT\r\naccept-ranges: bytes\r\ncontent-length: 547962\r\ndate: Sat, 10 Oct 2026 05:10:15 GMT\r\nx-frame-options: DENY\r\ncontent-security-policy: frame-ancestors 'none';\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":547962,"size_decoded":548286,"mime_type":"image/x-icon","magic":"PNG image data, 1024 x 1024, 8-bit/color RGB, non-interlaced","md5":"53282e2599efd87def33b14a3df42f91","sha1":"bd5f54a403bfe4b3951016e4ac04fa393c2abe66","sha256":"c0680c9a1abe91647ea808fedc790ed9f73672c078c729e62ae2929b00a8d878","sha512":"aac97cc1b64c3aabc3082f59809f04c26a7b2f6d799ee5f2e27e32800c0806ed321c0d780ac70a8933d76e3e4626964f8552c5d5f58d60fa16b604cdbbbf8fdd","ssdeep":"12288:QswTIkLiH1KzSpq/lDIoMjCVGlu0kzWJoUDxIjuN9qB:fFkLiVSDIoMjNlrkCJztISjqB","tlshash":"29c4233d9a615902cf1792f5d9a015223fabaf917de087af139910412fd0be7e085fc9","first_seen":"2026-01-03T04:30:22.50261Z","last_seen":"2026-10-10T05:19:55.982349Z","times_seen":245,"resource_available":false,"data":null}},"time_used":310,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":48,"receive":262,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"psfh.link","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.storageimagedisplay.com/cti/0d/cf/36/0dcf36aed92e8012fc56f3d890e70656/1782466100.gif","fqdn":"cdn.storageimagedisplay.com","domain":"storageimagedisplay.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://psfh.link/","date":"2026-10-10T05:10:16.997Z","timestamp":1791609016997,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.storageimagedisplay.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Sep 2026 02:32:58 GMT","end":"Wed, 02 Dec 2026 02:32:57 GMT"},"fingerprint":{"sha1":"0C:28:A6:45:71:D0:51:55:56:A0:1D:34:71:8C:C4:7C:16:5A:03:5C","sha256":"68:73:EC:1A:D4:78:3E:46:1A:F8:1D:99:8F:CB:9D:46:B9:0E:28:CF:C6:BF:14:EF:F5:90:39:D3:FF:5A:1F:5C"}}},"request":{"raw":"GET /cti/0d/cf/36/0dcf36aed92e8012fc56f3d890e70656/1782466100.gif HTTP/1.1\r\nHost: cdn.storageimagedisplay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sat, 10 Oct 2026 05:10:17 GMT\r\ncontent-type: image/gif\r\ncontent-length: 26078\r\nserver: nginx/1.21.6\r\nlast-modified: Fri, 26 Jun 2026 09:28:20 GMT\r\netag: \"6a3e4634-65de\"\r\nexpires: Mon, 12 Oct 2026 05:10:17 GMT\r\ncache-control: max-age=172800\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":26078,"size_decoded":26425,"mime_type":"image/gif","magic":"GIF image data, version 89a, 728 x 90","md5":"0022ad757afb77aa45557208ad5b4a49","sha1":"87c012bb226f23cd10e63203503a45c52500ec44","sha256":"5d9bcb7b8ac2805f96f38dca46bc58e4ae58230a60ebbf2d1ba18398221b1a79","sha512":"ca3efe3b4d9fde06712311d27b683a3baa9ebd5ebc2becd83d988417273c24fcab7744f4d07b582100faa9ccdcf4a461ef5856aa2bde1b08a7e2b7cadb5cc7e1","ssdeep":"768:XnSSu/J4sCQIIECQoV2F52+Yc28z1PccM0Kd:oJCQBnV2FxXWBd","tlshash":"91c2d0c9af54ab00ec5db53f6f832b6aef0115225442aa0b478fd6b3231667fa5484c3","first_seen":"2026-10-10T02:13:28.47647Z","last_seen":"2026-10-10T05:19:55.999814Z","times_seen":2,"resource_available":false,"data":null}},"time_used":136,"timings":{"blocked":-1,"dns":30,"connect":20,"send":0,"wait":27,"receive":14,"ssl":45},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"spendsdetachment.com/pixel/ase","fqdn":"spendsdetachment.com","domain":"spendsdetachment.com","tld":"com"},"ip":{"addr":"172.240.127.244","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://psfh.link/","date":"2026-10-10T05:10:17.984Z","timestamp":1791609017984,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"spendsdetachment.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 26 Aug 2026 04:27:12 GMT","end":"Tue, 24 Nov 2026 04:27:11 GMT"},"fingerprint":{"sha1":"EB:97:C4:8B:DE:F8:13:B1:55:C6:2E:E9:8C:5C:48:F7:1E:59:B1:F2","sha256":"D3:ED:AA:AB:A7:0F:5D:B5:E3:C6:C8:42:92:C6:71:07:01:45:1D:84:99:AD:9D:45:AD:FB:7A:B9:4D:A7:8F:57"}}},"request":{"raw":"POST /pixel/ase HTTP/1.1\r\nHost: spendsdetachment.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://psfh.link/\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 454\r\nOrigin: https://psfh.link\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.2\r\nDate: Sat, 10 Oct 2026 05:10:18 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\nAccept-Ch: Sec-Ch-Ua-Full-Version-List, Sec-Ch-Ua-Platform, Device-Stock-Ua, X-Device-User-Agent, Sec-Ch-Ua-Platform-Version, Sec-Ch-Ua-Full-Version, Sec-Ch-Ua-Model, Sec-Ch-Ua-Mobile, X-Operamini-Phone-Ua, X-Ucbrowser-Device-Ua, User-Agent, Sec-Ch-Ua, Sec-Ch-Ua-Platformuser-Agent\r\nHost: spendsdetachment.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nCache-Control: no-cache\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: GET, POST, OPTIONS\r\nAccess-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests,C-High-Entropy-Values\r\nAccess-Control-Expose-Headers: Content-Length,Content-Range\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":1778,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-10T07:18:38.983381Z","times_seen":18993735,"resource_available":true,"data":null}},"time_used":400,"timings":{"blocked":0,"dns":0,"connect":98,"send":0,"wait":100,"receive":0,"ssl":201},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"spendsdetachment.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"spendsdetachment.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"psfh.link/assets/banner-728.js","fqdn":"psfh.link","domain":"psfh.link","tld":"link"},"ip":{"addr":"45.153.88.2","port":443,"asn":51295,"as":"Tes Euro Media SRL","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://psfh.link/","date":"2026-10-10T05:10:15.255Z","timestamp":1791609015255,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mail.pasteflash.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 28 Sep 2026 23:28:32 GMT","end":"Sun, 27 Dec 2026 23:28:31 GMT"},"fingerprint":{"sha1":"06:4B:AA:11:7F:82:97:53:2B:7E:02:D3:15:08:78:9A:37:7C:7F:D9","sha256":"37:87:25:46:AC:09:E2:89:6E:AB:BE:2B:1C:EC:9B:B2:45:44:F9:6A:F2:BD:D7:36:70:F5:2B:26:C5:5F:8A:0C"}}},"request":{"raw":"GET /assets/banner-728.js HTTP/1.1\r\nHost: psfh.link\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://psfh.link/\r\nCookie: PHPSESSID=bac04b7e2306580909b2854746604a45\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"PHPSESSID","value":"bac04b7e2306580909b2854746604a45"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sat, 17 Oct 2026 05:10:15 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 06 Mar 2026 19:12:39 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 364\r\ndate: Sat, 10 Oct 2026 05:10:15 GMT\r\nx-frame-options: DENY\r\ncontent-security-policy: frame-ancestors 'none';\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":819,"size_decoded":798,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"995ee8953a4459f0b0823579eb110c4a","sha1":"196e8819902e0483761a36bcae7bc0df9e925b23","sha256":"470745147bbced0a368f326cc42e4308a771f41afe50ac5f7aacd1d52bab78d8","sha512":"adc53d8b0fa5194f04d12b27822f14cbae262f25f088d358d811f8176454647e1e7c5f0b658602770187df3910069dd1e5928eca9472ba07f5f6231390ca5986","ssdeep":"","tlshash":"8101b83e0ea32030c4a6242c5baf22403722c0334502ec017e8cc6446fa1e6695b2fdd","first_seen":"2026-03-07T18:17:02.545943Z","last_seen":"2026-10-10T05:19:56.022144Z","times_seen":55,"resource_available":true,"data":null}},"time_used":50,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":50,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"psfh.link","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"acceptableredheadcaviar.com/21b0e994d14a596d05cc4cc50311bbc7/invoke.js","fqdn":"acceptableredheadcaviar.com","domain":"acceptableredheadcaviar.com","tld":"com"},"ip":{"addr":"172.240.127.244","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://psfh.link/","date":"2026-10-10T05:10:15.602Z","timestamp":1791609015602,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"acceptableredheadcaviar.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 04 Sep 2026 20:40:50 GMT","end":"Thu, 03 Dec 2026 20:40:49 GMT"},"fingerprint":{"sha1":"3D:8C:D3:22:B4:28:19:BE:10:1D:85:83:96:61:54:11:C4:4E:36:97","sha256":"A5:23:45:F5:11:31:0A:38:90:52:B8:F0:24:C9:22:B5:BE:61:AA:57:26:C5:02:EE:3D:B4:2F:E7:C0:56:0C:0C"}}},"request":{"raw":"GET /21b0e994d14a596d05cc4cc50311bbc7/invoke.js HTTP/1.1\r\nHost: acceptableredheadcaviar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://psfh.link/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.2\r\nDate: Sat, 10 Oct 2026 05:10:16 GMT\r\nContent-Type: application/javascript\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\naccept-ch: Sec-Ch-Ua-Model,X-Operamini-Phone-Ua,X-Ucbrowser-Device-Ua,User-Agent,Sec-Ch-Ua-Platform-Version,Sec-Ch-Ua,Sec-Ch-Ua-Platformuser-Agent,Sec-Ch-Ua-Full-Version-List,Sec-Ch-Ua-Platform,Sec-Ch-Ua-Mobile,Device-Stock-Ua,X-Device-User-Agent,Sec-Ch-Ua-Full-Version\r\naccess-control-allow-origin: *\r\ncontent-encoding: zstd\r\nset-cookie: pip_be4e28d112715a426d125adb4ec548c7=1; Path=/; Expires=Sun, 11 Oct 2026 05:10:16 GMT; Secure; SameSite=None\r\nvary: Accept-Encoding\r\nx-envoy-upstream-service-time: 3\r\nHost: acceptableredheadcaviar.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 3509a87c7a8bba4324789eba25772bcf\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":[{"name":"pip_be4e28d112715a426d125adb4ec548c7","value":"1","quoted":false,"path":"/","expires":"2026-10-11T05:10:16Z","raw_expires":"Sun, 11 Oct 2026 05:10:16 GMT","secure":true,"http_only":false,"same_site":"None","partitioned":false,"raw":"pip_be4e28d112715a426d125adb4ec548c7=1; Path=/; Expires=Sun, 11 Oct 2026 05:10:16 GMT; Secure; SameSite=None"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":54206,"size_decoded":23482,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (54206), with no line terminators","md5":"cd787b5900185fb219a38eb524d63566","sha1":"34b5e5e972d41e72d084cbe63161d259d7652966","sha256":"e4892d05042d2c28802bc4b87f0ecc6ecd82bd9d30389349efdef1b3b5d955e1","sha512":"5f00951b9fc0d9747e2be73630fe1c36aed2206ccacfda202cbf2af2eae1fc8fd4856430c9a3cffff99899ecbba96b66a3e3c4996ebef1c6c04d4297fbda330a","ssdeep":"1536:BQtYLQ8UEAzZILFIYPlBHlwxjLk45saIFe:BQyfAzzec","tlshash":"3f33e8cc7be9a2a313b029ff32669663e81d0c51358ca4d4e02f3cc56d47766e876978","first_seen":"2026-10-10T05:19:56.035425Z","last_seen":"2026-10-10T05:19:56.035425Z","times_seen":1,"resource_available":true,"data":null}},"time_used":691,"timings":{"blocked":-1,"dns":137,"connect":91,"send":0,"wait":98,"receive":91,"ssl":274},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"acceptableredheadcaviar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"protrafficinspector.com/stats","fqdn":"protrafficinspector.com","domain":"protrafficinspector.com","tld":"com"},"ip":{"addr":"63.184.52.10","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://psfh.link/","date":"2026-10-10T05:10:16.314Z","timestamp":1791609016314,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"protrafficinspector.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Fri, 26 Jun 2026 00:00:00 GMT","end":"Sat, 09 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"A5:A0:EB:57:26:41:24:03:DD:F3:2D:91:FB:6B:49:B6:53:8B:5F:86","sha256":"82:7E:C7:50:5F:EC:61:E0:5F:7F:ED:2E:10:87:9B:31:A9:8F:4B:DF:E8:99:CC:2E:A1:13:31:E7:45:CE:89:25"}}},"request":{"raw":"GET /stats HTTP/1.1\r\nHost: protrafficinspector.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://psfh.link\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://psfh.link/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sat, 10 Oct 2026 05:10:16 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 40\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://psfh.link\r\nset-cookie: uid_id2=01a12438-1068-705f-bece-ef907746192a:1:1; Path=/; Expires=Tue, 07 Oct 2036 05:10:16 GMT; Secure; SameSite=None\r\nvary: Origin\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":[{"name":"uid_id2","value":"01a12438-1068-705f-bece-ef907746192a:1:1","quoted":false,"path":"/","expires":"2036-10-07T05:10:16Z","raw_expires":"Tue, 07 Oct 2036 05:10:16 GMT","secure":true,"http_only":false,"same_site":"None","partitioned":false,"raw":"uid_id2=01a12438-1068-705f-bece-ef907746192a:1:1; Path=/; Expires=Tue, 07 Oct 2036 05:10:16 GMT; Secure; SameSite=None"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":40,"size_decoded":512,"mime_type":"text/html; charset=UTF-8","magic":"ASCII text, with no line terminators","md5":"b06bf21381ac03409e0ca31e011b8780","sha1":"39ba2c5bdeba40600e1dc984454d923f4780d91e","sha256":"6cf49c97b214db24809ce3d2b5e221d1987191c8b41788e0c6955127eba65629","sha512":"97401d4319037a7adfe55ff59f623bcbd0a4a831bf570c4f6c3a9be0daa3fe99a4bc072cbbb82a0446e882f15003347ae824ff34f58392aa7fc0de54e17ea106","ssdeep":"","tlshash":"0c9000888b02b32b3c0ce003a00cc2ba833fe033e883c2c8a88aa82000b3020c0e8002","first_seen":"2026-10-10T05:19:56.051288Z","last_seen":"2026-10-10T05:19:56.051288Z","times_seen":1,"resource_available":true,"data":null}},"time_used":128,"timings":{"blocked":-1,"dns":3,"connect":25,"send":0,"wait":25,"receive":0,"ssl":75},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}