{"report_id":"4cd861e0-0b26-437d-9fc4-ef90dad4fc3d","version":6,"status":"done","tags":[],"date":"2026-04-15T05:27:54Z","url":{"schema":"https","addr":"appdefisavertool.live","fqdn":"appdefisavertool.live","domain":"appdefisavertool.live","tld":"live"},"ip":{"addr":"216.198.79.1","port":0,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"www.appdefisavertool.live/","fqdn":"www.appdefisavertool.live","domain":"appdefisavertool.live","tld":"live"},"title":"Defi Protocol - Resolve All Defi Wallet Pending Issues","dom":{"size":22685,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (14199)","md5":"4ad9f1cbd4ab2916c17207083df5e0ce","sha1":"e421d44471d07ad9229d32fe72ed40cc64020e3d","sha256":"e1e6edae4a65536564d6352eb59491d70afdbdb47c60756cf12b1e4e3039feb8","sha512":"d6989572dd3883041e099054c3023f1f501e06bf44beb0022de3827843bb6deaeca353a318bdc276dc5b1c89edc79aa26886e64004641f1475df442f11508fcc","ssdeep":"384:1CTQzbeR5aB7Bt6BVBiiBoBwVBAtBpRBb3BHSBS7ByButBvB+B16BRkBph2P:OQXBJv67Ei2mVWtBV3VSs7YQt9Yr6/ka","tlshash":"f5a20d6094511e372d132fa257dc9b6de1668582ccff25983fee41480bc2fd90f6aa4b","dom_hash":"domhash0971d21930d621aa241833738666df76","first_seen":"2026-04-15T05:28:02.399023Z","last_seen":"2026-04-15T05:28:02.399023Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"appdefisavertool.live","fqdn":"appdefisavertool.live","domain":"appdefisavertool.live","tld":"live"},"ip":{"addr":"216.198.79.1","port":0,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"tags":null,"meta":null,"user":{"user_id":"akbkyowd9geqr98"}},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-05-20T05:27:54Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":4}},"detection":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"www.appdefisavertool.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"www.appdefisavertool.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"appdefisavertool.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"appdefisavertool.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"www.appdefisavertool.live","ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":22,"request_count":11,"received_data":2221631,"sent_data":5113,"comment":"","tags":null,"fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"appdefisavertool.live","ip":{"addr":"216.198.79.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2025-09-26","domain_rank":0,"first_seen":"2026-04-15T05:27:55.300996Z","last_seen":"2026-04-15T05:27:55.300996Z","alert_count":2,"request_count":1,"received_data":844,"sent_data":490,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"www.appdefisavertool.live/assets/index-ChBdoC2x.js","fqdn":"www.appdefisavertool.live","domain":"appdefisavertool.live","tld":"live"},"ip":{"addr":"64.29.17.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"238296eb5d67d9d84673d2246ae0e969","sha1":"563c60bca22f1b6d663d266b403a710ca5c3d0ea","sha256":"9180c115ea9c3043425f4e1689d4559732fe2829fee19399a9e68b75f58080b6","sha512":"748b00fc42f4fd904259ccaccb6431cb459afd5d39626d192e637dfd5643102de437c5519058c282e8d0f4a4a16591c2b7e7f0e9e80682d3cb804cabd9088f67","ssdeep":"3072:LfKD0JI3G1VrIm74qY6gaJnF5kKxGGfgeNNeKeNuQjGNdMOlZ7+xfRfJwKtOppRn:LpxnF5kG737W0N","tlshash":"30345cd831b9bb366ea346a100ef1507f13c3823584d4870b565ed9e27b858a12b7fde","size":230877,"data":"","first_seen":"2026-04-15T05:28:02.425331Z","last_seen":"2026-04-15T05:28:02.425331Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"www.appdefisavertool.live/images/1.png","fqdn":"www.appdefisavertool.live","domain":"appdefisavertool.live","tld":"live"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.appdefisavertool.live/","date":"2026-04-15T05:27:33.831Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.appdefisavertool.live","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 30 Mar 2026 03:21:19 GMT","end":"Sun, 28 Jun 2026 03:21:18 GMT"},"fingerprint":{"sha1":"94:CB:5E:8F:67:E2:B5:BE:46:19:A0:63:0C:BE:C0:FB:DE:9D:F7:E8","sha256":"67:4D:5A:4D:67:DA:E6:35:C2:6E:BD:00:A8:51:B2:F7:B0:40:87:EB:2C:5C:C8:8E:E5:40:63:3F:61:EF:D9:78"}}},"request":{"raw":"GET /images/1.png HTTP/1.1\r\nHost: www.appdefisavertool.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.appdefisavertool.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-07T01:07:07.99671Z","times_seen":17753107,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"www.appdefisavertool.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"www.appdefisavertool.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.appdefisavertool.live/images/challenge1.png","fqdn":"www.appdefisavertool.live","domain":"appdefisavertool.live","tld":"live"},"ip":{"addr":"64.29.17.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.appdefisavertool.live/","date":"2026-04-15T05:27:33.835Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.appdefisavertool.live","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 30 Mar 2026 03:21:19 GMT","end":"Sun, 28 Jun 2026 03:21:18 GMT"},"fingerprint":{"sha1":"94:CB:5E:8F:67:E2:B5:BE:46:19:A0:63:0C:BE:C0:FB:DE:9D:F7:E8","sha256":"67:4D:5A:4D:67:DA:E6:35:C2:6E:BD:00:A8:51:B2:F7:B0:40:87:EB:2C:5C:C8:8E:E5:40:63:3F:61:EF:D9:78"}}},"request":{"raw":"GET /images/challenge1.png HTTP/1.1\r\nHost: www.appdefisavertool.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.appdefisavertool.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 0\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"challenge1.png\"\r\ncontent-type: image/png\r\ndate: Wed, 15 Apr 2026 05:27:34 GMT\r\netag: \"84a864167593eac0ea10a30b38cb9893\"\r\nlast-modified: Wed, 15 Apr 2026 05:27:34 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::bpvcv-1776230853834-2018d1e79f0e\r\ncontent-length: 645423\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":645423,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 2048 x 2048, 8-bit/color RGBA, non-interlaced","md5":"84a864167593eac0ea10a30b38cb9893","sha1":"a288f0a731af80b85d74c31814206598d469ed81","sha256":"71e3f5f94096fd5020dca5a4259551f0e99b42e360913b319da94c978f77926f","sha512":"7f7440a82791cd6f5a8fd89e4fc8ebff860f6f56bcd22726f8b6fca23cd0bf88ee9815da733c5e385fec1e34fbd7faa62be3c470c7eef4d0387f20568276ee2e","ssdeep":"12288:CnYWE2kPpvYy7ce2GgRSZC5RZif+1yPox11TcyKaxESP7fK:/WcPBYy7V2GZC57iGwPGneaxEW7fK","tlshash":"38d4224e96d683a4d8ad113213a23b129a5230ef53d8857507a890ecf47f1c9fb31b6f","first_seen":"2025-08-16T16:57:27.959695Z","last_seen":"2026-04-15T05:28:02.410445Z","times_seen":7,"resource_available":false,"data":null}},"time_used":432,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":409,"receive":23,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"www.appdefisavertool.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"www.appdefisavertool.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.appdefisavertool.live/images/challenge3.png","fqdn":"www.appdefisavertool.live","domain":"appdefisavertool.live","tld":"live"},"ip":{"addr":"64.29.17.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.appdefisavertool.live/","date":"2026-04-15T05:27:33.838Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.appdefisavertool.live","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 30 Mar 2026 03:21:19 GMT","end":"Sun, 28 Jun 2026 03:21:18 GMT"},"fingerprint":{"sha1":"94:CB:5E:8F:67:E2:B5:BE:46:19:A0:63:0C:BE:C0:FB:DE:9D:F7:E8","sha256":"67:4D:5A:4D:67:DA:E6:35:C2:6E:BD:00:A8:51:B2:F7:B0:40:87:EB:2C:5C:C8:8E:E5:40:63:3F:61:EF:D9:78"}}},"request":{"raw":"GET /images/challenge3.png HTTP/1.1\r\nHost: www.appdefisavertool.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.appdefisavertool.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 391\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"challenge3.png\"\r\ncontent-type: image/png\r\ndate: Wed, 15 Apr 2026 05:27:33 GMT\r\netag: \"fc7a29c8bd5326eb0419bf3d3362fd9c\"\r\nlast-modified: Wed, 15 Apr 2026 05:21:02 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::v9vdj-1776230853837-0dd9f3909f02\r\ncontent-length: 225103\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":225103,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 500 x 500, 8-bit/color RGBA, non-interlaced","md5":"fc7a29c8bd5326eb0419bf3d3362fd9c","sha1":"1c66bab6b430e7fcf19a48702db4db10998960e0","sha256":"f5d66ed1917ca8504d78fe00e0b18f65b8b0fddd118006a19488e12240d909ed","sha512":"8b156bebc6c54b99db391d84fe5598a13cfb305257b440fd73af8e423d8a0d652b574e4cd2532cf6abaee3f0ea5c9af26911588d3d976d6c19813daa92a4b89c","ssdeep":"6144:eUyOtvOV++bPFTUCzF4q4+4ScnJQpQQVmFCRbrqL:eUyOtvGxZUnNeQQVrVWL","tlshash":"9324123cdc68ec15a02783731f0f850fed5ba6130a95e35b95478b236b8bb58788972d","first_seen":"2026-04-15T05:28:02.414457Z","last_seen":"2026-04-15T05:28:02.414457Z","times_seen":1,"resource_available":false,"data":null}},"time_used":39,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"www.appdefisavertool.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"www.appdefisavertool.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.appdefisavertool.live/images/1.png","fqdn":"www.appdefisavertool.live","domain":"appdefisavertool.live","tld":"live"},"ip":{"addr":"64.29.17.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.appdefisavertool.live/","date":"2026-04-15T05:27:33.857Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.appdefisavertool.live","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 30 Mar 2026 03:21:19 GMT","end":"Sun, 28 Jun 2026 03:21:18 GMT"},"fingerprint":{"sha1":"94:CB:5E:8F:67:E2:B5:BE:46:19:A0:63:0C:BE:C0:FB:DE:9D:F7:E8","sha256":"67:4D:5A:4D:67:DA:E6:35:C2:6E:BD:00:A8:51:B2:F7:B0:40:87:EB:2C:5C:C8:8E:E5:40:63:3F:61:EF:D9:78"}}},"request":{"raw":"GET /images/1.png HTTP/1.1\r\nHost: www.appdefisavertool.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.appdefisavertool.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 0\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"1.png\"\r\ncontent-type: image/png\r\ndate: Wed, 15 Apr 2026 05:27:34 GMT\r\netag: \"5eb611ca877fc1a7625afa8a773b6b16\"\r\nlast-modified: Wed, 15 Apr 2026 05:27:34 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::n7tkj-1776230853858-53c5f8320095\r\ncontent-length: 500345\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":500345,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1315 x 860, 8-bit/color RGBA, non-interlaced","md5":"5eb611ca877fc1a7625afa8a773b6b16","sha1":"93cf14c210deda3fa983348ce83eced05914fb08","sha256":"bbc1f5c91bd541797f3cd1fa3c147ad1a20803d05d4b3be34e168b9f4c3c56ff","sha512":"54031b3d6f1ba0b2844b6151ac839d587eadd57d0985e3ba1bf7ba4f2b3a7f75013b3fa87bbd301957a11869922347f9c53f049e519a732564b4fbb8ad173001","ssdeep":"12288:cBQdQ281gvdkpcWxGHtz43h6eM0f3Di6HxUe4Tl0:cSW11Cdk7xGNz4x6Of3DJR/4Tl0","tlshash":"95b423cac3e6e50334ae7986ff8c9d1446676cd4118d8eb2fa55a809200fee545a1bb3","first_seen":"2025-08-16T16:57:27.973327Z","last_seen":"2026-04-15T05:28:02.417933Z","times_seen":7,"resource_available":false,"data":null}},"time_used":204,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":188,"receive":16,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"www.appdefisavertool.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"www.appdefisavertool.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.appdefisavertool.live/images/2.png","fqdn":"www.appdefisavertool.live","domain":"appdefisavertool.live","tld":"live"},"ip":{"addr":"64.29.17.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.appdefisavertool.live/","date":"2026-04-15T05:27:33.859Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.appdefisavertool.live","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 30 Mar 2026 03:21:19 GMT","end":"Sun, 28 Jun 2026 03:21:18 GMT"},"fingerprint":{"sha1":"94:CB:5E:8F:67:E2:B5:BE:46:19:A0:63:0C:BE:C0:FB:DE:9D:F7:E8","sha256":"67:4D:5A:4D:67:DA:E6:35:C2:6E:BD:00:A8:51:B2:F7:B0:40:87:EB:2C:5C:C8:8E:E5:40:63:3F:61:EF:D9:78"}}},"request":{"raw":"GET /images/2.png HTTP/1.1\r\nHost: www.appdefisavertool.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.appdefisavertool.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 391\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"2.png\"\r\ncontent-type: image/png\r\ndate: Wed, 15 Apr 2026 05:27:33 GMT\r\netag: \"66a309fc7e48332806e924463171ffb9\"\r\nlast-modified: Wed, 15 Apr 2026 05:21:02 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::2cjnw-1776230853859-c74c82cb9362\r\ncontent-length: 332829\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":332829,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1873 x 897, 8-bit/color RGBA, non-interlaced","md5":"66a309fc7e48332806e924463171ffb9","sha1":"a0424fca76a73ab73f990820979941d441cb6b9e","sha256":"b3add59f0c9dead4995fe1b6a8501448a7852563c19e9c34f788b014009940f7","sha512":"71fddfa9eb1f40754b6ff9c2e45e67d396a7899001a650518227aceb1cad044efd68495f3bb16b255b92323fd30caf40bbef76b51b9fc8a3ca93403d28b1819d","ssdeep":"6144:cx3JiDm3LQFgArd7Z1rKzMFlfOv8ROsgyV9WGLC3tkYBl5vBD+6:cx3AHrWMFlfnROsh7W8bYbFBZ","tlshash":"5964120a293bcd248d8f3633d1804f4b91374087a4d917f9d1f6ea5ed8abe386606727","first_seen":"2026-04-15T05:28:02.42047Z","last_seen":"2026-04-15T05:28:02.42047Z","times_seen":1,"resource_available":false,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":12,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"www.appdefisavertool.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"www.appdefisavertool.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.appdefisavertool.live/images/serverlogo-1.png","fqdn":"www.appdefisavertool.live","domain":"appdefisavertool.live","tld":"live"},"ip":{"addr":"64.29.17.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.appdefisavertool.live/","date":"2026-04-15T05:27:34.170Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.appdefisavertool.live","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 30 Mar 2026 03:21:19 GMT","end":"Sun, 28 Jun 2026 03:21:18 GMT"},"fingerprint":{"sha1":"94:CB:5E:8F:67:E2:B5:BE:46:19:A0:63:0C:BE:C0:FB:DE:9D:F7:E8","sha256":"67:4D:5A:4D:67:DA:E6:35:C2:6E:BD:00:A8:51:B2:F7:B0:40:87:EB:2C:5C:C8:8E:E5:40:63:3F:61:EF:D9:78"}}},"request":{"raw":"GET /images/serverlogo-1.png HTTP/1.1\r\nHost: www.appdefisavertool.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.appdefisavertool.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-type: text/plain; charset=utf-8\r\ndate: Wed, 15 Apr 2026 05:27:34 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-error: NOT_FOUND\r\nx-vercel-id: arn1::n7tkj-1776230854173-0b2474271fbb\r\ncontent-length: 79\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":79,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"6583225a0cf7c020631a9ec98ec4241e","sha1":"ff3d513d48b61a29bfb7c6df3abeece406c8184e","sha256":"f8ff06685832bad0e26732a5793738ede607df4cc7d599742f0ad17ee6a418b7","sha512":"6a46fd8da229b10ce4621e1b22b95bd784bdc83a25cce2e0062aa4b513478a792a59b75408b4d7d3d3baadcf6102c706f1e75a619337f524e9d33bd5f33601e2","ssdeep":"","tlshash":"c5a011af08880cc833ca00022082233a20a00222eeaaa20008aa22082002b8ea3880b0","first_seen":"2026-04-15T05:28:02.423432Z","last_seen":"2026-04-15T05:28:02.423432Z","times_seen":1,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":13,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"www.appdefisavertool.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"www.appdefisavertool.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"appdefisavertool.live/","fqdn":"appdefisavertool.live","domain":"appdefisavertool.live","tld":"live"},"ip":{"addr":"216.198.79.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-04-15T05:27:32.684Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"appdefisavertool.live","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 07:54:51 GMT","end":"Tue, 30 Jun 2026 07:54:50 GMT"},"fingerprint":{"sha1":"D8:7D:1B:CF:6F:6D:26:D8:BA:52:B6:6A:31:BE:E3:CA:16:F0:6D:FF","sha256":"48:1E:1E:7C:92:BE:AA:3F:89:77:3F:B3:0A:F8:7C:1A:FE:40:7A:74:40:79:AE:4E:B4:96:07:76:8F:19:76:A3"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: appdefisavertool.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 307 Temporary Redirect\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-type: text/html\r\ndate: Wed, 15 Apr 2026 05:27:33 GMT\r\nlocation: https://www.appdefisavertool.live/\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-id: arn1::4rn5h-1776230853349-21fda2c894be\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"307","status_text":"Temporary Redirect","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":518,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-07T01:07:07.99671Z","times_seen":17753107,"resource_available":true,"data":null}},"time_used":1341,"timings":{"blocked":663,"dns":640,"connect":1,"send":0,"wait":10,"receive":0,"ssl":24},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"appdefisavertool.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"appdefisavertool.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.appdefisavertool.live/assets/index-ChBdoC2x.js","fqdn":"www.appdefisavertool.live","domain":"appdefisavertool.live","tld":"live"},"ip":{"addr":"64.29.17.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.appdefisavertool.live/","date":"2026-04-15T05:27:33.730Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.appdefisavertool.live","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 30 Mar 2026 03:21:19 GMT","end":"Sun, 28 Jun 2026 03:21:18 GMT"},"fingerprint":{"sha1":"94:CB:5E:8F:67:E2:B5:BE:46:19:A0:63:0C:BE:C0:FB:DE:9D:F7:E8","sha256":"67:4D:5A:4D:67:DA:E6:35:C2:6E:BD:00:A8:51:B2:F7:B0:40:87:EB:2C:5C:C8:8E:E5:40:63:3F:61:EF:D9:78"}}},"request":{"raw":"GET /assets/index-ChBdoC2x.js HTTP/1.1\r\nHost: www.appdefisavertool.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.appdefisavertool.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 391\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"index-ChBdoC2x.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Wed, 15 Apr 2026 05:27:33 GMT\r\netag: \"3c8656dec72000e53c7792995b7e5143\"\r\nlast-modified: Wed, 15 Apr 2026 05:21:01 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::94mlb-1776230853731-a9e2c13e21ca\r\ncontent-length: 73507\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":230877,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (35649)","md5":"238296eb5d67d9d84673d2246ae0e969","sha1":"563c60bca22f1b6d663d266b403a710ca5c3d0ea","sha256":"9180c115ea9c3043425f4e1689d4559732fe2829fee19399a9e68b75f58080b6","sha512":"748b00fc42f4fd904259ccaccb6431cb459afd5d39626d192e637dfd5643102de437c5519058c282e8d0f4a4a16591c2b7e7f0e9e80682d3cb804cabd9088f67","ssdeep":"3072:LfKD0JI3G1VrIm74qY6gaJnF5kKxGGfgeNNeKeNuQjGNdMOlZ7+xfRfJwKtOppRn:LpxnF5kG737W0N","tlshash":"30345cd831b9bb366ea346a100ef1507f13c3823584d4870b565ed9e27b858a12b7fde","first_seen":"2026-04-15T05:28:02.425331Z","last_seen":"2026-04-15T05:28:02.425331Z","times_seen":1,"resource_available":true,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"www.appdefisavertool.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"www.appdefisavertool.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.appdefisavertool.live/assets/index-wQgJzf8k.css","fqdn":"www.appdefisavertool.live","domain":"appdefisavertool.live","tld":"live"},"ip":{"addr":"64.29.17.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.appdefisavertool.live/","date":"2026-04-15T05:27:33.732Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.appdefisavertool.live","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 30 Mar 2026 03:21:19 GMT","end":"Sun, 28 Jun 2026 03:21:18 GMT"},"fingerprint":{"sha1":"94:CB:5E:8F:67:E2:B5:BE:46:19:A0:63:0C:BE:C0:FB:DE:9D:F7:E8","sha256":"67:4D:5A:4D:67:DA:E6:35:C2:6E:BD:00:A8:51:B2:F7:B0:40:87:EB:2C:5C:C8:8E:E5:40:63:3F:61:EF:D9:78"}}},"request":{"raw":"GET /assets/index-wQgJzf8k.css HTTP/1.1\r\nHost: www.appdefisavertool.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.appdefisavertool.live/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 391\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"index-wQgJzf8k.css\"\r\ncontent-encoding: br\r\ncontent-type: text/css; charset=utf-8\r\ndate: Wed, 15 Apr 2026 05:27:33 GMT\r\netag: \"7945a34e428df05f90f6c69faf0303af\"\r\nlast-modified: Wed, 15 Apr 2026 05:21:02 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::97zx6-1776230853731-3ad99c45a543\r\ncontent-length: 7845\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":37399,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (37398)","md5":"21219ef1bbf01d79d2dfa5a6d39a174b","sha1":"95c979c9a13e2b421e3339192729a5c7b5800453","sha256":"5ff3c3bf639aa5ae8a5f56786cd8ea0890fe9ba3a76f16a2d04fe6610dbf694c","sha512":"d2ccf2933319a06286f9e05c77c9650dbc05489826a0dd0345f61dd187d81349e031d88ce67af9962a9a00c049bb6af9d92c1cd26994b93db62b278372f18c0c","ssdeep":"192:ch2C+usXVCiKIE744Ec8VQIFyD2vFUoiWCYU7NqdrxNxkv20ejSqNjmRkbE4Zmhn:TeHE1UoiWTdNN8ARqsrHkthg+CTQzbeq","tlshash":"38f29510a6106a397c27eea296c85a9cf015d493d1ab1afd7fde6029c6c23d70f7234d","first_seen":"2026-04-15T05:28:02.428435Z","last_seen":"2026-04-15T05:28:02.428435Z","times_seen":1,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"www.appdefisavertool.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"www.appdefisavertool.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.appdefisavertool.live/images/saverlogo-1.png","fqdn":"www.appdefisavertool.live","domain":"appdefisavertool.live","tld":"live"},"ip":{"addr":"64.29.17.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.appdefisavertool.live/","date":"2026-04-15T05:27:33.823Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.appdefisavertool.live","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 30 Mar 2026 03:21:19 GMT","end":"Sun, 28 Jun 2026 03:21:18 GMT"},"fingerprint":{"sha1":"94:CB:5E:8F:67:E2:B5:BE:46:19:A0:63:0C:BE:C0:FB:DE:9D:F7:E8","sha256":"67:4D:5A:4D:67:DA:E6:35:C2:6E:BD:00:A8:51:B2:F7:B0:40:87:EB:2C:5C:C8:8E:E5:40:63:3F:61:EF:D9:78"}}},"request":{"raw":"GET /images/saverlogo-1.png HTTP/1.1\r\nHost: www.appdefisavertool.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.appdefisavertool.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 391\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"saverlogo-1.png\"\r\ncontent-type: image/png\r\ndate: Wed, 15 Apr 2026 05:27:33 GMT\r\netag: \"ab06e4249ba3707f0872fcbaa6d2db55\"\r\nlast-modified: Wed, 15 Apr 2026 05:21:02 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::97zx6-1776230853825-506ba6115803\r\ncontent-length: 48582\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":48582,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 673 x 240, 8-bit/color RGBA, non-interlaced","md5":"ab06e4249ba3707f0872fcbaa6d2db55","sha1":"4ecdf0004659baa4966364f9b42843ba8c29c3c4","sha256":"b0a507ce17fe5c91d8d347b56d6a397c96ca0eac3322ce9a9adc4d1c549bb3f5","sha512":"a962e996aaa0a130dce36a1434227aa1dc5ff6a3df2fce170c79021e94643c2f619f046d40ca4b0ad23f546f9bc322666d9bd3da64dca633c270027422ec4b68","ssdeep":"768:WfrKucBmKt3xZcPli9Jiq18oA1Q/ZNJqhIRwsbRBqD6Pmh11fNT+jIjH/+tQ0OpT:Wfuucr3jUliH/yQTJ2w/3qDaurfNTgA3","tlshash":"a023f1970318f31fa7a06164dc146607af0ee2deaafe7199ac98c4d9154f246c176f31","first_seen":"2025-07-01T02:38:32.968808Z","last_seen":"2026-06-27T05:19:56.356526Z","times_seen":12,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"www.appdefisavertool.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"www.appdefisavertool.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.appdefisavertool.live/images/challenge2.png","fqdn":"www.appdefisavertool.live","domain":"appdefisavertool.live","tld":"live"},"ip":{"addr":"64.29.17.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.appdefisavertool.live/","date":"2026-04-15T05:27:33.837Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.appdefisavertool.live","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 30 Mar 2026 03:21:19 GMT","end":"Sun, 28 Jun 2026 03:21:18 GMT"},"fingerprint":{"sha1":"94:CB:5E:8F:67:E2:B5:BE:46:19:A0:63:0C:BE:C0:FB:DE:9D:F7:E8","sha256":"67:4D:5A:4D:67:DA:E6:35:C2:6E:BD:00:A8:51:B2:F7:B0:40:87:EB:2C:5C:C8:8E:E5:40:63:3F:61:EF:D9:78"}}},"request":{"raw":"GET /images/challenge2.png HTTP/1.1\r\nHost: www.appdefisavertool.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.appdefisavertool.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 391\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"challenge2.png\"\r\ncontent-type: image/png\r\ndate: Wed, 15 Apr 2026 05:27:33 GMT\r\netag: \"1dea832d539e2b726f2015e85dcb65de\"\r\nlast-modified: Wed, 15 Apr 2026 05:21:02 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::n7tkj-1776230853836-afcab35b6a0a\r\ncontent-length: 195436\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":195436,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 500 x 500, 8-bit/color RGBA, non-interlaced","md5":"1dea832d539e2b726f2015e85dcb65de","sha1":"04f625c4e3a4267ad04ba5c5e64366d7872d03f4","sha256":"a1120118de601ed14b1cec79b7ffec46d205c30cfd9a82b6264677515d35a043","sha512":"3459c472e8a5bb3d42c54539725e621eef12719b1d04aa8c8480d56535b08db909c2da031be08be29064b7dcfc3c8da07f19b94fdc72297d3ffcf9a449ec8732","ssdeep":"3072:2znc/JOIlDPCQhwL87JrsdGsc0Ue5MrkuHThJrI03wjvsqKIQyC3gPlfvQO5PYV:snuOIl7CQKL8Odc0UrJU0Ue8rPYV","tlshash":"7c1412167be3046219f36a68cd76a557b241d706d361f6cab237b3b44d7ea00b083e9c","first_seen":"2026-04-15T05:28:02.431353Z","last_seen":"2026-04-15T05:28:02.431353Z","times_seen":1,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"www.appdefisavertool.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"www.appdefisavertool.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.appdefisavertool.live/","fqdn":"www.appdefisavertool.live","domain":"appdefisavertool.live","tld":"live"},"ip":{"addr":"64.29.17.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-04-15T05:27:33.375Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.appdefisavertool.live","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 30 Mar 2026 03:21:19 GMT","end":"Sun, 28 Jun 2026 03:21:18 GMT"},"fingerprint":{"sha1":"94:CB:5E:8F:67:E2:B5:BE:46:19:A0:63:0C:BE:C0:FB:DE:9D:F7:E8","sha256":"67:4D:5A:4D:67:DA:E6:35:C2:6E:BD:00:A8:51:B2:F7:B0:40:87:EB:2C:5C:C8:8E:E5:40:63:3F:61:EF:D9:78"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: www.appdefisavertool.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 564\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline\r\ncontent-type: text/html; charset=utf-8\r\ndate: Wed, 15 Apr 2026 05:27:33 GMT\r\netag: \"f35b8e23d899bc4139ed2ddd7127dcc8\"\r\nlast-modified: Wed, 15 Apr 2026 05:18:09 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::2447s-1776230853512-2453a14d902c\r\ncontent-length: 518\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":518,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"f35b8e23d899bc4139ed2ddd7127dcc8","sha1":"7fb693ceb98c043239cd512a81ae9096210df1d4","sha256":"9df0c277abcf68862b55c8c733269e47847a28a893b6828b9c2c0daf17368f03","sha512":"d891275a0047eddce43cb983b940ec448cdbddebdb665a567ed6a7b37bd4b2d221e893d0949788bed99ce8a87ff7c50a7d99269cfad8a35fd06b2dac7f60a3b3","ssdeep":"","tlshash":"3af0954594d14949026007559ed1b508a647d747c349ac44759f60b51f84bc1cadf5bc","first_seen":"2026-04-15T05:28:02.433596Z","last_seen":"2026-04-15T05:28:02.433596Z","times_seen":1,"resource_available":false,"data":null}},"time_used":292,"timings":{"blocked":135,"dns":107,"connect":1,"send":0,"wait":15,"receive":7,"ssl":25},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"www.appdefisavertool.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"www.appdefisavertool.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}}]}