{"report_id":"4b2889f3-9597-400d-9c41-304c87d371ed","version":6,"status":"done","tags":["suspicious","telegram_bot"],"date":"2026-05-18T09:58:00Z","url":{"schema":"http","addr":"www.mylusmedya.com/wp-mail/","fqdn":"www.mylusmedya.com","domain":"mylusmedya.com","tld":"com"},"ip":{"addr":"89.252.181.227","port":0,"asn":42846,"as":"GNET Internet Telekomunikasyon A.S.","country":"Türkiye","country_code":"TR"},"final":{"url":{"schema":"https","addr":"www.mylusmedya.com/wp-mail/","fqdn":"www.mylusmedya.com","domain":"mylusmedya.com","tld":"com"},"title":"Just a moment...","dom":{"size":499046,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65531), with no line terminators","md5":"a1c69d2fda2c6f2e8de57469b9c0b241","sha1":"7d0dc1bf9b8c4a1b84998df95da7c80194150beb","sha256":"23718746581f0121ff72b29c837be1318738513e6337fc5f11199c36dcffbac7","sha512":"c9bf27516b73e2e6cf6609e070d8c101960a61d4a57a2b56a589d89f18da0706b28c6616cdf1b3fc7d62f378e17c62c10fcb6314070c4e61a6ac9213e4328845","ssdeep":"12288:9fMc64xoI+mbis0X6TVmb1o4YgoFyyQt8RJCciyCE:9rxlhbisde19YjFyyQ4cyCE","tlshash":"d7b4023157907f8a6c20405b803527976f25dc8b2773e68cba4d07abe26bed4ef14d62","dom_hash":"domhashf8a889f484b0856a83bb2fbf5ec4a671","first_seen":"2026-05-17T02:18:06.008786Z","last_seen":"2026-05-18T09:58:02.465883Z","times_seen":2,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"www.mylusmedya.com/wp-mail/","fqdn":"www.mylusmedya.com","domain":"mylusmedya.com","tld":"com"},"ip":{"addr":"89.252.181.227","port":0,"asn":42846,"as":"GNET Internet Telekomunikasyon A.S.","country":"Türkiye","country_code":"TR"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-06-22T09:58:00Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":2,"analyzer":5}},"detection":{"ids":null,"analyzer":[{"sensor_name":"infosec_yara","sensor_type":"yara","title":"YARAhub by abuse.ch","description":"YARAhub by abuse.ch","scan_date":"2026-05-18","alert":"Detects file containing Telegram Bot API","trigger":"www.mylusmedya.com/wp-mail/","verdict":"malware","severity":"medium","comment":"","link":"https://yaraify.abuse.ch/yarahub/","meta":{"author":"rectifyq","date":"2024-09-07","description":"Detects file containing Telegram Bot API","rule":"telegram_bot_api","yarahub_author_twitter":"@_rectifyq","yarahub_license":"CC0 1.0","yarahub_reference_md5":"9DA48D34DC999B4E05E0C6716A3B3B83","yarahub_rule_matching_tlp":"TLP:WHITE","yarahub_rule_sharing_tlp":"TLP:WHITE","yarahub_uuid":"58c9e4fe-d1e9-46ed-913c-dba943ac16d6"}},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-18","alert":"Phishing Block","trigger":"www.mylusmedya.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"www.mylusmedya.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"www.mylusmedya.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"www.mylusmedya.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Suspicious - Suspicious Javascript code","verdict":"suspicious","severity":"medium","comment":"","tags":["suspicious"],"meta":null},{"sensor_name":"urlquery","alert":"Suspicious - Suspicious Javascript code","verdict":"suspicious","severity":"medium","comment":"","tags":["suspicious"],"meta":null}]},"summary":[{"fqdn":"i.imgur.com","ip":{"addr":"199.232.192.193","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2009-01-09","domain_rank":3309,"first_seen":"2012-05-21T08:09:36Z","last_seen":"2026-05-14T00:30:15.081127Z","alert_count":0,"request_count":1,"received_data":13350,"sent_data":436,"comment":"","tags":null,"fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"cdn.jsdelivr.net","ip":{"addr":"151.101.193.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2012-05-16","domain_rank":1678,"first_seen":"2012-09-30T00:15:09Z","last_seen":"2026-05-17T22:41:40.561616Z","alert_count":0,"request_count":1,"received_data":705,"sent_data":439,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"www.mylusmedya.com","ip":{"addr":"89.252.181.227","port":443,"asn":42846,"as":"GNET Internet Telekomunikasyon A.S.","country":"Türkiye","country_code":"TR"},"domain_registered":"2025-09-29","domain_rank":0,"first_seen":"2026-05-17T02:18:02.016675Z","last_seen":"2026-05-17T02:18:02.016675Z","alert_count":6,"request_count":1,"received_data":499612,"sent_data":495,"comment":"","tags":null,"fingerprints":[{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]},{"name":"PHP:7.4.33","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":[{"url":{"schema":"https","addr":"www.mylusmedya.com/wp-mail/","fqdn":"www.mylusmedya.com","domain":"mylusmedya.com","tld":"com"},"ip":{"addr":"89.252.181.227","port":443,"asn":42846,"as":"GNET Internet Telekomunikasyon A.S.","country":"Türkiye","country_code":"TR"},"md5":"5b773d47624497e90c66538dbfd5898f","sha1":"ff5dae92074993d034707172985564e45dc3d2a9","sha256":"112b3bcb45330f7abd823b9bd1eb4f9d579483f081452e5e94f46a84ca3cc99c","sha512":"3f24a73b41b9a670afceb0cf9fea975140ff916ba2b28f53d77d5618a5e367c6a84de955f0bfbaa0386350835c781f755e90fe9f825b526f2178cd1d53e72531","size":1392,"token":"6765993315:AAENvhNc2PoV6XXA7eB1GLgZ4wByYCuFlfA","is_revoked":false,"bot":{"token":"6765993315:AAENvhNc2PoV6XXA7eB1GLgZ4wByYCuFlfA","user_id":"6765993315","username":"GroozaBot","first_name":"ْ","last_name":"","chat":{"chat_id":"5049733823","title":"","type":"private","bot_is":"member","total_users":2,"active_members":null,"admins":null},"pending_messages":0}}],"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Suspicious - Suspicious Javascript code","verdict":"suspicious","severity":"medium","comment":"","tags":["suspicious"],"meta":null}]},"javascript":{"script":[{"url":{"schema":"https","addr":"www.mylusmedya.com/wp-mail/","fqdn":"www.mylusmedya.com","domain":"mylusmedya.com","tld":"com"},"ip":{"addr":"89.252.181.227","port":443,"asn":42846,"as":"GNET Internet Telekomunikasyon A.S.","country":"Türkiye","country_code":"TR"},"introduction_type":"scriptElement","is_inline":true,"md5":"5b773d47624497e90c66538dbfd5898f","sha1":"ff5dae92074993d034707172985564e45dc3d2a9","sha256":"112b3bcb45330f7abd823b9bd1eb4f9d579483f081452e5e94f46a84ca3cc99c","sha512":"3f24a73b41b9a670afceb0cf9fea975140ff916ba2b28f53d77d5618a5e367c6a84de955f0bfbaa0386350835c781f755e90fe9f825b526f2178cd1d53e72531","ssdeep":"","tlshash":"a621cbf73ba61c7509ab466a71aeb344f83750956e099a190869cda00f7dcc99223f8c","size":1392,"data":"","first_seen":"2026-05-17T02:18:06.012133Z","last_seen":"2026-08-10T05:54:28.764437Z","times_seen":9,"alerts":{"ids":null,"analyzer":[{"sensor_name":"infosec_yara","sensor_type":"yara","title":"YARAhub by abuse.ch","description":"YARAhub by abuse.ch","scan_date":"2026-05-18","alert":"Detects file containing Telegram Bot API","trigger":"www.mylusmedya.com/wp-mail/","verdict":"malware","severity":"medium","comment":"","link":"https://yaraify.abuse.ch/yarahub/","meta":{"author":"rectifyq","date":"2024-09-07","description":"Detects file containing Telegram Bot API","rule":"telegram_bot_api","yarahub_author_twitter":"@_rectifyq","yarahub_license":"CC0 1.0","yarahub_reference_md5":"9DA48D34DC999B4E05E0C6716A3B3B83","yarahub_rule_matching_tlp":"TLP:WHITE","yarahub_rule_sharing_tlp":"TLP:WHITE","yarahub_uuid":"58c9e4fe-d1e9-46ed-913c-dba943ac16d6"}}],"urlquery":null}},{"url":{"schema":"https","addr":"www.mylusmedya.com/wp-mail/","fqdn":"www.mylusmedya.com","domain":"mylusmedya.com","tld":"com"},"ip":{"addr":"89.252.181.227","port":443,"asn":42846,"as":"GNET Internet Telekomunikasyon A.S.","country":"Türkiye","country_code":"TR"},"introduction_type":"scriptElement","is_inline":true,"md5":"bf31266de4a685baa243ea6e608a6266","sha1":"fae229e7da8d9320e0e23019dc404b0cb736037f","sha256":"1c56e3878d8cf7c974741d2970f1788fb20988a84a016b64dbd416266eec6455","sha512":"65effc70642227a88ededcd82ca97b5a26299d70c2305656f0ced0deb8ca6c478eeb5c03d5f4f29aacf690e07568e0bd6e8303b938fa8c0943853d23806b0e9b","ssdeep":"12288:OfMc64xoI+mbis0X6TVmb1o4YgoFyyQt8RJCciyC9:Orxlhbisde19YjFyyQ4cyC9","tlshash":"4ca4023157817fca6c20505b813517976f25dc8b2772e6ccba4c06abe22be94ff18d62","size":491021,"data":"","first_seen":"2025-07-06T16:03:22.416772Z","last_seen":"2026-08-10T05:54:28.765138Z","times_seen":21,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"www.mylusmedya.com/wp-mail/","fqdn":"www.mylusmedya.com","domain":"mylusmedya.com","tld":"com"},"ip":{"addr":"89.252.181.227","port":443,"asn":42846,"as":"GNET Internet Telekomunikasyon A.S.","country":"Türkiye","country_code":"TR"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-05-18T09:57:36.482Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mylusmedya.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 29 Mar 2026 09:23:12 GMT","end":"Sat, 27 Jun 2026 09:23:11 GMT"},"fingerprint":{"sha1":"39:F0:83:62:C1:F0:CF:E2:18:73:25:25:5E:F4:D2:BE:1D:82:47:45","sha256":"3E:A0:53:3D:CF:75:88:65:F4:6C:49:A0:FA:46:91:E6:29:7F:3A:BC:D7:48:F5:CE:61:A1:18:35:E5:E7:88:F9"}}},"request":{"raw":"GET /wp-mail/ HTTP/1.1\r\nHost: www.mylusmedya.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-powered-by: PHP/7.4.33\r\nset-cookie: PHPSESSID=9fc5beaba1e656e3dfc5409bc1bb8ed8; path=/; secure\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Mon, 18 May 2026 09:57:36 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]},{"name":"PHP:7.4.33","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":499048,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65531), with no line terminators","md5":"a7c118e496c819793189b743ad3727a2","sha1":"e56a2668c54d1151b10ae459671edca98fb8900b","sha256":"1e011ab5728edf1c5f3a6a7250226c02d85382e9ab91f4c15700c82b1a0ff39b","sha512":"705a8a3f2a9a25ff409c9d7b6372d12a1e95a1a45fb43cc2b0743b8c1abba027d900b6df8a9f52cf2bd8e0b7eecfc4241298ff78847490a017726f4b0a08c4ea","ssdeep":"12288:SfMc64xoI+mbis0X6TVmb1o4YgoFyyQt8RJCciyCE:Srxlhbisde19YjFyyQ4cyCE","tlshash":"23b4023157907f8a6c20405b803527976f25dc8b2773e68cba4d07abe26bed4ef14d62","first_seen":"2026-05-17T02:18:06.009967Z","last_seen":"2026-05-18T09:58:02.467391Z","times_seen":2,"resource_available":false,"data":null}},"time_used":837,"timings":{"blocked":269,"dns":155,"connect":54,"send":0,"wait":297,"receive":0,"ssl":60},"alerts":{"ids":null,"analyzer":[{"sensor_name":"infosec_yara","sensor_type":"yara","title":"YARAhub by abuse.ch","description":"YARAhub by abuse.ch","scan_date":"2026-05-18","alert":"Detects file containing Telegram Bot API","trigger":"www.mylusmedya.com/wp-mail/","verdict":"malware","severity":"medium","comment":"","link":"https://yaraify.abuse.ch/yarahub/","meta":{"author":"rectifyq","date":"2024-09-07","description":"Detects file containing Telegram Bot API","rule":"telegram_bot_api","yarahub_author_twitter":"@_rectifyq","yarahub_license":"CC0 1.0","yarahub_reference_md5":"9DA48D34DC999B4E05E0C6716A3B3B83","yarahub_rule_matching_tlp":"TLP:WHITE","yarahub_rule_sharing_tlp":"TLP:WHITE","yarahub_uuid":"58c9e4fe-d1e9-46ed-913c-dba943ac16d6"}},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-18","alert":"Phishing Block","trigger":"www.mylusmedya.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"www.mylusmedya.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"www.mylusmedya.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"www.mylusmedya.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Suspicious - Suspicious Javascript code","verdict":"suspicious","severity":"medium","comment":"","tags":["suspicious"],"meta":null}]}},{"url":{"schema":"https","addr":"i.imgur.com/nGvsiy6.jpeg","fqdn":"i.imgur.com","domain":"imgur.com","tld":"com"},"ip":{"addr":"199.232.192.193","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.mylusmedya.com/wp-mail/","date":"2026-05-18T09:57:37.251Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.imgur.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 13 Feb 2026 00:00:00 GMT","end":"Mon, 15 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"D4:9A:34:EF:13:3D:45:98:6B:98:4B:9D:CD:FC:74:9C:06:42:A0:7A","sha256":"90:50:0F:E4:90:40:B5:50:04:7E:E1:6E:55:14:FE:7B:38:BB:79:2B:70:83:78:AC:16:E0:F7:1E:3D:ED:92:9A"}}},"request":{"raw":"GET /nGvsiy6.jpeg HTTP/1.1\r\nHost: i.imgur.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.mylusmedya.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/jpeg\r\nlast-modified: Sat, 06 Jul 2024 08:33:52 GMT\r\netag: \"d7462bdbe5008c9ba9e6ebac0ab992eb\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-cf-pop: IAD89-P1\r\nx-amz-cf-id: Qhl3sOFgqvPbqRQezUQ5oduHPgBLkWDS6FC_j9dYQbz9biONcHX4Zg==\r\ncache-control: public, max-age=31536000\r\naccept-ranges: bytes\r\nage: 1731618\r\ndate: Mon, 18 May 2026 09:57:37 GMT\r\nx-served-by: cache-iad-kiad7000148-IAD, cache-hel1410027-HEL\r\nx-cache: Miss from cloudfront, HIT, HIT\r\nx-cache-hits: 951, 0\r\nx-timer: S1779098257.370275,VS0,VE1\r\nstrict-transport-security: max-age=300\r\naccess-control-allow-methods: GET, OPTIONS\r\naccess-control-allow-origin: *\r\nserver: cat factory 1.0\r\nx-content-type-options: nosniff\r\ncontent-length: 12593\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":12593,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, baseline, precision 8, 281x278, components 3","md5":"d7462bdbe5008c9ba9e6ebac0ab992eb","sha1":"6d310a30c8126273291d8b1fa9908a06fb5118e7","sha256":"fde4bd973865e2c07a05b1f5fd73f1028bf85e43bb2cdef248ac2d6b7d38136b","sha512":"afbc2ad6bff704543b42b0ed543072e11c78b599012d5ead3c8caf455c9585ae8032e640e6bf5760172a41472db50a3315806fa921c03f1d3df851cd4f4f2933","ssdeep":"384:DauxIVgv8fF3X573nz3NLh+c9ZApNIYnE:ejflXtrZApNIYnE","tlshash":"a942c0ffd2442c4afa6e2c32ba88f7b01b6a7347fa5b0263c6ea17513641d964c447d4","first_seen":"2024-07-20T09:38:57Z","last_seen":"2026-08-10T05:54:28.761684Z","times_seen":199,"resource_available":false,"data":null}},"time_used":237,"timings":{"blocked":99,"dns":21,"connect":26,"send":0,"wait":28,"receive":4,"ssl":56},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/gh/GroozaV2/my-styles/audiio.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.193.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.mylusmedya.com/wp-mail/","date":"2026-05-18T09:57:37.252Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 02 Jun 2025 15:43:52 GMT","end":"Sat, 04 Jul 2026 15:43:51 GMT"},"fingerprint":{"sha1":"21:17:81:78:41:C6:8F:86:D6:CF:8D:98:CC:74:A8:F1:03:F8:C9:D4","sha256":"D0:E6:8D:08:11:05:7E:0C:2A:0D:C7:E0:ED:AE:9E:18:C8:74:32:12:3D:56:43:98:62:CD:A2:08:6F:64:5B:B0"}}},"request":{"raw":"GET /gh/GroozaV2/my-styles/audiio.js HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.mylusmedya.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=600, s-maxage=600\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: text/plain; charset=utf-8\r\netag: W/\"34-aeMJDd/pMP9oZf0lEjoxrcEDASo\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\nage: 14\r\ndate: Mon, 18 May 2026 09:57:37 GMT\r\nx-served-by: cache-fra-etou8220058-FRA, cache-hel1410029-HEL\r\nx-cache: HIT, MISS\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 56\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-13T09:51:56.860212Z","times_seen":17869789,"resource_available":true,"data":null}},"time_used":107,"timings":{"blocked":30,"dns":1,"connect":13,"send":0,"wait":41,"receive":0,"ssl":19},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}