{"report_id":"53369c73-eb0d-480c-a925-3995b8e97eb3","version":6,"status":"done","tags":[],"date":"2025-03-08T13:57:20Z","url":{"schema":"http","addr":"fileditchfiles.me/file.php?f=/b52/bunsnQMZVBhKKGwVWcTb.zip","fqdn":"fileditchfiles.me","domain":"fileditchfiles.me","tld":"me"},"ip":{"addr":"104.26.7.109","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"fileditchfiles.me/file.php?f=/b52/bunsnQMZVBhKKGwVWcTb.zip","fqdn":"fileditchfiles.me","domain":"fileditchfiles.me","tld":"me"},"title":"File Viewer"},"submit":{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":""},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-05-17T13:57:20Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"yvtdq90pk9gkybs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":null},"summary":[{"fqdn":"my.rtmark.net","ip":{"addr":"104.18.41.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2014-10-29","domain_rank":9054,"first_seen":"2015-02-04T09:54:57Z","last_seen":"2025-03-05T19:34:49.643153Z","alert_count":0,"request_count":1,"received_data":843,"sent_data":481,"comment":"","tags":null,"fingerprints":null},{"fqdn":"img.icons8.com","ip":{"addr":"185.76.9.27","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"domain_registered":"2011-10-04","domain_rank":28959,"first_seen":"2017-05-26T09:10:54Z","last_seen":"2025-03-02T08:38:52.514525Z","alert_count":0,"request_count":1,"received_data":1466,"sent_data":456,"comment":"","tags":null,"fingerprints":null},{"fqdn":"fileditchfiles.me","ip":{"addr":"172.67.68.142","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2024-06-11","domain_rank":0,"first_seen":"2025-01-07T17:25:52.977315Z","last_seen":"2025-03-06T13:57:27.584858Z","alert_count":0,"request_count":3,"received_data":7602,"sent_data":1464,"comment":"","tags":null,"fingerprints":null},{"fqdn":"anal.ketaiptv.me","ip":{"addr":"62.133.61.167","port":443,"asn":215540,"as":"Global Connectivity Solutions Llp","country":"The Netherlands","country_code":"NL"},"domain_registered":"2024-05-08","domain_rank":0,"first_seen":"2024-11-04T02:09:27.111797Z","last_seen":"2025-03-06T13:57:27.569846Z","alert_count":0,"request_count":2,"received_data":1719,"sent_data":921,"comment":"","tags":null,"fingerprints":null},{"fqdn":"fileditch.com","ip":{"addr":"195.181.166.158","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"domain_registered":"2021-02-06","domain_rank":0,"first_seen":"2021-02-09T06:32:35Z","last_seen":"2025-03-06T13:57:27.688479Z","alert_count":0,"request_count":1,"received_data":95073,"sent_data":436,"comment":"","tags":null,"fingerprints":null},{"fqdn":"naupsithizeekee.com","ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2024-12-03","domain_rank":0,"first_seen":"2025-01-03T14:49:49.699555Z","last_seen":"2025-03-05T09:56:04.446838Z","alert_count":1,"request_count":1,"received_data":101587,"sent_data":420,"comment":"","tags":null,"fingerprints":null},{"fqdn":"zapsauwhouteeks.com","ip":{"addr":"139.45.197.242","port":443,"asn":9002,"as":"RETN Limited","country":"United Kingdom","country_code":"GB"},"domain_registered":"2025-03-04","domain_rank":0,"first_seen":"2025-03-05T09:56:03.897708Z","last_seen":"2025-03-05T09:56:03.897708Z","alert_count":2,"request_count":2,"received_data":9514,"sent_data":1866,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":null}],"analyzer":[{"sensor_name":"infosec_yara","type":"yara","description":"Public InfoSec YARA rules","link":"","alerts":null},{"sensor_name":"openphish","type":"url","description":"OpenPhish","link":"","alerts":null},{"sensor_name":"phishtank","type":"url","description":"PhishTank","link":"","alerts":null},{"sensor_name":"quad9","type":"domain","description":"Quad9 DNS","link":"","alerts":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-03-08","alert":"Sinkholed","trigger":"naupsithizeekee.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-03-08","alert":"Sinkholed","trigger":"zapsauwhouteeks.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-03-08","alert":"Sinkholed","trigger":"zapsauwhouteeks.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}]},{"sensor_name":"threatfox","type":"url","description":"ThreatFox","link":"","alerts":null}],"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"fileditchfiles.me/share.js","fqdn":"fileditchfiles.me","domain":"fileditchfiles.me","tld":"me"},"ip":{"addr":"172.67.68.142","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"deb92e8788646cd696bea9f2830a3f5b","sha1":"b7a6f9f9507dc9a75190f8f1283731e69f159d30","sha256":"eeca48cbafdf43cd7bdc81576d79e47a0392eabd2e360849bc3bb4a4462e6e4d","sha512":"4f38ee5ba5b6db3b08c4a6c83f634c68679141e57f96cb3d9041b8d22ca572635a56a28e84c410a29a579426bdb60396788b4bba7cc890696cc59156877887a8","ssdeep":"","tlshash":"8e11406b707e042d0f27e82b979b72157116e003a989ddf57c8e66080fc872252f6ac8","size":881,"data":"","first_seen":"2025-02-27T21:35:04.725442Z","last_seen":"2026-03-13T21:38:58.881162Z","times_seen":42,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"naupsithizeekee.com/tag.min.js","fqdn":"naupsithizeekee.com","domain":"naupsithizeekee.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"bc19d6147787c9aa036d93a2b1f76a7e","sha1":"adb0e21846422d5028bde11ee8389c64af7dad02","sha256":"0ada7509d3eacb5b69d969912346099bb743ee9929cf2c157d13862800108204","sha512":"c1ff8e5d5e2205330b7bfba0644b373e11e505b509661b26fe7157d041e233d05f3f2e74413f70eb0d102476f1a54a03a324be9e1308582626733a9ccb51ce71","ssdeep":"3072:XnwDkasIpcEJ3FzpiGZId6bxFqJaH1SxLln:XnkWI33F3IAC0VuZn","tlshash":"e7a3189f3197765652af9830a4ab941db1a5cccf85cec778e1e5b4a03ca4104d3abfe0","size":100165,"data":"","first_seen":"2025-03-05T15:14:17.166896Z","last_seen":"2025-03-10T03:04:00.568193Z","times_seen":69,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"wasm","addr":"wasm:naupsithizeekee.com/tag.min.js%20line%201%20%3E%20WebAssembly.instantiate","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"wasm","is_inline":false,"md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","size":0,"data":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T04:46:10.842589Z","times_seen":13317089,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"anal.ketaiptv.me/js/script.manual.js","fqdn":"anal.ketaiptv.me","domain":"ketaiptv.me","tld":"me"},"ip":{"addr":"62.133.61.167","port":443,"asn":215540,"as":"Global Connectivity Solutions Llp","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"a964b476ba56fd31630d8d959e2be162","sha1":"5e1e18366a5f8e78f5fe17bfddff0f262fb109b2","sha256":"7a89c62fd81ac6e717830fa748b64d4c25f543d9a438e727f91a7c9b6952d8b1","sha512":"4717e5b47299b13901d2de13bcc6defa9a0033281fd799fd0aa33351de632718b370d6bdcdf211306e4577de6aec4b15e9303c1c84af7e9167c22025d2adfcef","ssdeep":"","tlshash":"e8114257744332604971a9daee2b3306727b462a281ca423e50182133840ecfc375dce","size":1030,"data":"","first_seen":"2023-05-23T19:48:50Z","last_seen":"2026-03-07T20:07:27.758138Z","times_seen":246,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fileditchfiles.me/file.php?f=/b52/bunsnQMZVBhKKGwVWcTb.zip","fqdn":"fileditchfiles.me","domain":"fileditchfiles.me","tld":"me"},"ip":{"addr":"172.67.68.142","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"8fef7a6763c045bb8ebdde9c19d2b258","sha1":"56b8bcf527fd7bc0b82d489b5ff0c22ca7627c49","sha256":"6bf2ad2e9eda31d62edb02be154dd1dbbc9fd7cda1d20721e65dd9a73e8d846b","sha512":"6a366d7c758c97d40733ae507414721873907480377bde0d1aa7a41a3eff375c2f059836487eef3593658af162f641e6d4aff8ac86031257d0bfab1b461eeb46","ssdeep":"","tlshash":"3ec08080e5651ff014f711d127571d05e1d555d54eb831a357182405a68b7cfc6451e3","size":172,"data":"","first_seen":"2025-03-08T13:57:21.773465Z","last_seen":"2025-03-08T13:57:21.773465Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fileditchfiles.me/file.php?f=/b52/bunsnQMZVBhKKGwVWcTb.zip","fqdn":"fileditchfiles.me","domain":"fileditchfiles.me","tld":"me"},"ip":{"addr":"172.67.68.142","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"b415ed6a5114145b078b70c3a92e49d7","sha1":"16f6e98f0a2417fa821450d83f092dbc8f9aea41","sha256":"ffa4813ea5be196fbfff89e55d7e98d6747d756961d20b1027a28aef57631fa0","sha512":"b13d44342abb6b343629adc87bf4d223795c62c04952de576bd495f8008b8bfe778b8dd3901ae58357a46f6fa4d19e9840e6a7dd275790d1646348c2629aea4b","ssdeep":"","tlshash":"20b09234a018b24c44383000132b3307b4320816508427023602c553b832e878720f99","size":117,"data":"","first_seen":"2023-03-07T13:23:40Z","last_seen":"2026-04-04T05:01:11.061815Z","times_seen":3007,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fileditchfiles.me/file.php?f=/b52/bunsnQMZVBhKKGwVWcTb.zip","fqdn":"fileditchfiles.me","domain":"fileditchfiles.me","tld":"me"},"ip":{"addr":"172.67.68.142","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"988b91c1271fa7a27ecf0c774472018b","sha1":"d66ed982f4b24c5cdc7da33e9c4bed2454e956ed","sha256":"c5b1afb25414ac3f52b95147373bbfe339a44ee59356ace032a44c2dcf656a2f","sha512":"f601012940d52168cb66a075abc75d0f522599d3435f6c401d964b3a1cfdcf66e8fc5189070b494c58a2dbed7c2f7cfe9b694cda9cb78732431ca543ae2daa0a","ssdeep":"","tlshash":"ecf02b5cc0b1e3a522f32c90880b3265f2bb510b3200a845b69d9f004f4df1f96a39b5","size":439,"data":"","first_seen":"2025-03-02T17:26:48.357886Z","last_seen":"2026-01-12T01:00:43.739202Z","times_seen":36,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fileditchfiles.me/file.php?f=/b52/bunsnQMZVBhKKGwVWcTb.zip","fqdn":"fileditchfiles.me","domain":"fileditchfiles.me","tld":"me"},"ip":{"addr":"172.67.68.142","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"ae325dc743166c0ea446141bea8e9383","sha1":"d9064830302e3c7a37a5aa4e3a5f87a57b5b304a","sha256":"f078735acd105a5179fda15783b0c9e1bc2061261728d4a534fa3abba4eb1588","sha512":"5096f11d2a407b4c8ced8a870477e98145f97c9fa32be52ece7eb5db8b1702a7f0d52dd5a3f6c606f7d7e9173ff8767e78e11fbfbe4ab0bbac23a2f21d94d591","ssdeep":"","tlshash":"8ad0a73e34675231086714d931bfd2ad3db331263912a800b49cc908df20d960c02eac","size":262,"data":"","first_seen":"2025-03-02T17:26:48.361465Z","last_seen":"2025-03-21T14:34:17.573583Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null},"http":[{"url":{"schema":"https","addr":"fileditchfiles.me/file.php?f=/b52/bunsnQMZVBhKKGwVWcTb.zip","fqdn":"fileditchfiles.me","domain":"fileditchfiles.me","tld":"me"},"ip":{"addr":"172.67.68.142","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"","requested_by":"","date":"2025-03-08T13:56:59.619Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fileditchfiles.me","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Feb 2025 04:58:22 GMT","end":"Thu, 29 May 2025 05:58:02 GMT"},"fingerprint":{"sha1":"93:D3:B0:A7:31:57:A3:FB:52:4E:E9:B8:86:EF:03:25:28:EC:36:98","sha256":"A8:6E:94:77:D7:D5:E8:E3:41:D7:B3:4A:FE:C1:38:FA:F9:CC:B5:68:48:7C:30:81:3A:F0:22:A1:9C:BB:F3:39"}}},"request":{"raw":"GET /file.php?f=/b52/bunsnQMZVBhKKGwVWcTb.zip HTTP/1.1\r\nHost: fileditchfiles.me\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 08 Mar 2025 13:56:59 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncf-cache-status: DYNAMIC\r\nvary: accept-encoding\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=qlslzbR7jfDnrVx66KdNcbnULA%2FIRCBLMUJtxXBAoqfCN%2FojxU53NrV%2FUFhqiSAoFZejfbucs9CP5%2Fb7h8E%2Bg2My9R4wlybkd9LoF2%2Fe0ZSq6Tf%2BuLj97CunTzisM7jFQq9e\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 91d2d6d21811b50f-OSL\r\ncontent-encoding: br\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=56297\u0026min_rtt=56252\u0026rtt_var=11929\u0026sent=7\u0026recv=9\u0026lost=0\u0026retrans=0\u0026sent_bytes=3215\u0026recv_bytes=1158\u0026delivery_rate=66306\u0026cwnd=253\u0026unsent_bytes=0\u0026cid=94440639aea7d7f5\u0026ts=157\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":3980,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (4168), with no line terminators","md5":"4b42f9e3d0b5def41d3651f1d3baae36","sha1":"3f7c6c9b2878df93a9e3762d06d93805c6d046c3","sha256":"cace586855e6bec6980ab5ad916fd43cdde937ca091d960d7dbb446bb3ce8d97","sha512":"3d8a9ffeee1d2ec2f765220f9b7e947da18060286d61894f226ef7fa1c76819cb860353e500742bbe764121ded2cc3ca63afe77b50375f31896fd961798908e3","ssdeep":"48:+Rg+Lr0z7W1uvAg79gx+kNY8pM9n4FBbRMQA3rLDUiJRaR2Hl9PnQ:dz5R9JkHM94FBbCrDJcRkQ","tlshash":"e081b81facd1427d3422afc823f323ad37be71896021456d369d9353834ce68c963aad","first_seen":"2025-03-08T13:57:21.764041Z","last_seen":"2025-03-08T13:57:21.764041Z","times_seen":1,"resource_available":false,"data":null}},"time_used":564,"timings":{"blocked":214,"dns":76,"connect":56,"send":0,"wait":136,"receive":0,"ssl":77},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"anal.ketaiptv.me/js/script.manual.js","fqdn":"anal.ketaiptv.me","domain":"ketaiptv.me","tld":"me"},"ip":{"addr":"62.133.61.167","port":443,"asn":215540,"as":"Global Connectivity Solutions Llp","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"","requested_by":"https://fileditchfiles.me/file.php?f=/b52/bunsnQMZVBhKKGwVWcTb.zip","date":"2025-03-08T13:57:00.256Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"anal.ketaiptv.me","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Tue, 31 Dec 2024 12:32:24 GMT","end":"Mon, 31 Mar 2025 12:32:23 GMT"},"fingerprint":{"sha1":"4E:88:40:29:A1:04:8A:7B:26:EF:AF:54:99:93:8E:34:0B:D0:F5:8C","sha256":"CC:0D:AD:B3:C6:5A:DD:D5:CA:D6:0A:EB:AB:AF:B2:9D:57:3A:12:75:B4:27:2C:25:10:45:48:2E:61:5F:44:FB"}}},"request":{"raw":"GET /js/script.manual.js HTTP/1.1\r\nHost: anal.ketaiptv.me\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fileditchfiles.me/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0\r\nDate: Sat, 08 Mar 2025 13:57:00 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 1030\r\nConnection: keep-alive\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=86400, must-revalidate\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1030,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (1058), with no line terminators","md5":"7ca61352ff7fb6e5b07fab5cf75348f0","sha1":"cd16d605bb7ebc5cf9ce4ceca9906b661132e050","sha256":"90c3ae0d3c263e1cf9a4d03a0e7ded24420c3eba62b59177a1ec91927661bb2e","sha512":"d8a313b7a8e6db81fefb63dfba804d12894f9151827d1a71e1a58bc69c7b4ca54c31e7cac076d490a12fe0c29ab99f86d6cc414788e31a87011fc0b7ac673f34","ssdeep":"","tlshash":"3f112396b88271214575a9d6af1f2306726b962a241da033a701c457b450adf8375e8e","first_seen":"2023-05-23T19:48:51Z","last_seen":"2025-04-03T04:45:40.856851Z","times_seen":116,"resource_available":false,"data":null}},"time_used":1187,"timings":{"blocked":532,"dns":86,"connect":76,"send":0,"wait":115,"receive":1,"ssl":371},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fileditch.com/woetpls.jpg","fqdn":"fileditch.com","domain":"fileditch.com","tld":"com"},"ip":{"addr":"195.181.166.158","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"","requested_by":"https://fileditchfiles.me/file.php?f=/b52/bunsnQMZVBhKKGwVWcTb.zip","date":"2025-03-08T13:57:00.261Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fileditch.com","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Fri, 07 Mar 2025 02:11:53 GMT","end":"Thu, 05 Jun 2025 02:11:52 GMT"},"fingerprint":{"sha1":"E7:DA:63:22:42:A1:8F:1E:A5:A9:CC:9C:86:32:0E:D7:AD:A8:7A:25","sha256":"6E:58:EE:EB:CB:D7:43:B2:BF:03:01:A1:E5:F5:6D:E2:03:0D:F4:76:C6:66:F9:26:0C:3E:1D:65:E2:E9:2F:A5"}}},"request":{"raw":"GET /woetpls.jpg HTTP/1.1\r\nHost: fileditch.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fileditchfiles.me/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET","post_data":{"size":1851,"data":"e=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\u0026cri=tl4ZGhlamS\u0026sf=0\u0026dc=\u0026cp=15\u0026gtm=-\u0026gac=-\u0026tb=1\u0026ws=1280x1024\u0026wos=1280x1024\u0026ver=13\u0026fi=\u0026ti=15072\u0026mo=0\u0026pn=16980\u0026spn=1907\u0026fp=1072\u0026snt=1"}},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 08 Mar 2025 13:57:00 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 94453\r\nserver: BunnyCDN-SE1-725\r\ncdn-pullzone: 2190448\r\ncdn-uid: d8a28f20-da91-4196-90a5-b717a9aa69ec\r\ncdn-requestcountrycode: NO\r\ncache-control: public, max-age=180\r\netag: \"65f7057b-170f5\"\r\nlast-modified: Sun, 17 Mar 2024 15:00:11 GMT\r\ncdn-proxyver: 1.19\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 02/04/2025 19:00:52\r\ncdn-edgestorageid: 725\r\ncdn-status: 200\r\ncdn-requesttime: 1\r\ncdn-requestid: 5dbf24cc9d8859e15d50dd592538335a\r\ncdn-cache: REVALIDATED\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":94453,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CC 2017 (Windows), datetime=2019:11:06 15:24:48], baseline, precision 8, 400x300, components 3","md5":"c1d96a3f41856f5edba2fd711adf4b9f","sha1":"1915d6227cc3d041fc899c623057427d1676aa22","sha256":"6c3ca0d698df0fd98cdbbc23bdfefd821a4398da9166a056f01ad5fbf19cb147","sha512":"487461e131d12d5ec4d817298af9944a2950a21a3e2903d227a8c1960abe5e85f5bdb3201256e3714104cfb2d260c1e7589e26276f62c160ca5f70f96f8f040e","ssdeep":"1536:MvVllvVlq+90xhEB+EgN9Rohq0Mdj11boUQ9SYCXQbUO+oCY+dzXX4G+34:MHlHaE89R+3Mdj11Ux92QbU35XoG+34","tlshash":"0493f196ad53b946eed105b709fac3aab4225f9f61d35b023c0ca058f7f1742580f89d","first_seen":"2025-02-27T21:35:04.713614Z","last_seen":"2025-04-03T04:45:40.859712Z","times_seen":13,"resource_available":false,"data":null}},"time_used":1444,"timings":{"blocked":563,"dns":88,"connect":64,"send":0,"wait":172,"receive":139,"ssl":415},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"naupsithizeekee.com/tag.min.js","fqdn":"naupsithizeekee.com","domain":"naupsithizeekee.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://fileditchfiles.me/file.php?f=/b52/bunsnQMZVBhKKGwVWcTb.zip","date":"2025-03-08T13:57:00.265Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"naupsithizeekee.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 31 Jan 2025 15:23:47 GMT","end":"Thu, 01 May 2025 16:21:22 GMT"},"fingerprint":{"sha1":"A0:2D:FB:33:7F:74:38:2B:3C:61:79:E8:0F:9C:FD:77:BA:A3:48:A6","sha256":"CD:AF:D8:BC:99:DD:62:51:B1:0A:B9:B2:86:C4:BA:81:03:C7:12:88:87:AF:DD:A5:D1:3D:22:20:30:2D:57:B9"}}},"request":{"raw":"GET /tag.min.js HTTP/1.1\r\nHost: naupsithizeekee.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fileditchfiles.me/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 08 Mar 2025 13:57:00 GMT\r\ncontent-type: application/javascript\r\nx-trace-id: 7ea42188fcddf062808dd28faf64daa1\r\ncache-control: public, max-age=3600, s-maxage=1800\r\naccept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace, favicon\r\naccess-control-max-age: 86400\r\ntiming-allow-origin: *\r\ncontent-encoding: gzip\r\ncf-cache-status: HIT\r\nage: 772\r\nlast-modified: Sat, 08 Mar 2025 13:44:08 GMT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=uF2owivW93X4vtzT7K3m6B2AdXcYQ3I%2Fjl0nsofNUJogF14RbPz1nMqt9%2BwsDp1phfGAzuSO3Dcw4XFYkyaz1newd8CEVrAfH5vgHl7jTnUb08eqTzMt11OqyXKAsDoHB9mAuKWm\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 91d2d6d61975568a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=56261\u0026min_rtt=56129\u0026rtt_var=15897\u0026sent=7\u0026recv=8\u0026lost=0\u0026retrans=0\u0026sent_bytes=3221\u0026recv_bytes=1039\u0026delivery_rate=66678\u0026cwnd=252\u0026unsent_bytes=0\u0026cid=152c732b82e3543b\u0026ts=93\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":100165,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"bc19d6147787c9aa036d93a2b1f76a7e","sha1":"adb0e21846422d5028bde11ee8389c64af7dad02","sha256":"0ada7509d3eacb5b69d969912346099bb743ee9929cf2c157d13862800108204","sha512":"c1ff8e5d5e2205330b7bfba0644b373e11e505b509661b26fe7157d041e233d05f3f2e74413f70eb0d102476f1a54a03a324be9e1308582626733a9ccb51ce71","ssdeep":"3072:XnwDkasIpcEJ3FzpiGZId6bxFqJaH1SxLln:XnkWI33F3IAC0VuZn","tlshash":"e7a3189f3197765652af9830a4ab941db1a5cccf85cec778e1e5b4a03ca4104d3abfe0","first_seen":"2025-03-05T15:14:17.166896Z","last_seen":"2025-03-10T03:04:00.568193Z","times_seen":69,"resource_available":true,"data":null}},"time_used":495,"timings":{"blocked":207,"dns":77,"connect":56,"send":0,"wait":75,"receive":0,"ssl":74},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-03-08","alert":"Sinkholed","trigger":"naupsithizeekee.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zapsauwhouteeks.com/5/8088205/?oo=1\u0026js_build=iclick-v1.1101.0\u0026dmn=naupsithizeekee.com\u0026tt=2\u0026ix=0","fqdn":"zapsauwhouteeks.com","domain":"zapsauwhouteeks.com","tld":"com"},"ip":{"addr":"139.45.197.242","port":443,"asn":9002,"as":"RETN Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"","requested_by":"https://fileditchfiles.me/file.php?f=/b52/bunsnQMZVBhKKGwVWcTb.zip","date":"2025-03-08T13:57:01.371Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"zapsauwhouteeks.com","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Tue, 04 Mar 2025 13:29:14 GMT","end":"Mon, 02 Jun 2025 13:29:13 GMT"},"fingerprint":{"sha1":"F9:44:14:F8:EE:0A:16:8E:65:5B:FD:98:6E:D9:48:06:FB:BD:86:C8","sha256":"E0:87:99:3B:69:A8:61:DC:EA:1C:C2:4E:52:B9:FE:9A:62:37:3B:D1:83:A4:A5:4D:91:7F:3A:10:58:69:C2:7D"}}},"request":{"raw":"POST /5/8088205/?oo=1\u0026js_build=iclick-v1.1101.0\u0026dmn=naupsithizeekee.com\u0026tt=2\u0026ix=0 HTTP/1.1\r\nHost: zapsauwhouteeks.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 5621\r\nOrigin: https://fileditchfiles.me\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fileditchfiles.me/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":5621,"data":"{\"sync\":\"L\\u001bRR\\u001f\\u001c\u0026\\u001c\\u0014\\u0005g\\u001f\\u001cK\\u0012\\u0003\\u0001\\u0005P\\u000eL_\\u0003\\u0001l\\u0004%+?JY@J\\u0000[\\u0003C\\u0006\\u0002\\u001d\\u001fD\\u0007\\u001dR\\u001b\\u001f\\u0014\\b\\u0012[RW/]\\u001a\\u0018\\u001bMH\\u001c\\u001b\\u0002\\u0016T\\\\\\u001b\\u001bGL\\u0015FCXY@O\\u001e[\\u0003PXV[^\\u0016\\u0019\\u0005\\u0015\\u0003\\u0002\\u0006HPUJ\\u0002\\u000bOKC\\bSR^GPC\\u0007\\u0005\\u0015\\u0003\\u0002\\u0006HPUJ\\u0002\\u001a\\u001aSI\\u0015C\\u001d\\u0017IH\\u0004BO^A\\u0011\\fJH[\\u001f\\u0013\\u0001\\u001aSI\\u0015C\\u0019\\u000f\\u0003P\\u000e_]\\u0005\\r\\u001f\\u0014\\t\\f[RDR\\n]U\\u001b\\u0012\\u001dLQC\\u0006V]\\u001b\\u001b@W\\rFCYGZ\\bE[M\\u00125\\n\\u000e\\u0006Q\\r\\u0019R]\\u0011\\fJH[\\u0002\\u0006\\u0017YKC\\u001b,\\u0005\\u0014\\u0002\\u001eX\\u000fB\\u0002\\u0017\\u0003\\u0016R3\\u0010\\u0006\\u0011\\rO\\u001aYw5J_[\\\\\\u0004UM`P]\\u0000N_Y\\u0010CV\\u0003I\\u000bO[[]_\\\\\\u0004GMp\\\\P]\\u0015KKXDR\\bXI\\bA,\\u0007\\u0019\\u0017R\\u0001\\u0015\\u0018\\b\\u0000\\u0002TT[DW\\fHKC\\bMH\\u001e\\u000fP\\u000eL\\u0004YMVD\\u0014\\u0005\\u0015E\\u0005\\u0006^D\\u000fP\\u0004\\u001d\\u000b\\u0019H]\\u001d=~\\u0002ZX\\u000e\\u0001\\u000b\\u0006\\u0014\\u000e\\u0015\\u0019\\u001d_L\\u001c\\u0007\\u000e\\u0005Q\\u001cW^JcA\\r\\u0017\\u001c\\u0010\\u0010V\\b\\u0015\\u0014\\u0011\\u000e\\bF\\u0004]\\u000b\\u001aRK\\t_\\t40S\\u001c\\fL\\f\\u000bW\\u0000\\u0006C\\u001b\\u0016RC\\u001b^\\\\DS\\b^\\u0010\\u001b%+\\u0003\\u0000\\u0017M\\u0004\\u0018\\u0000\\n\\u001e\\u0019\\u001e\\tQ\\u0014E_\\u001f\\u0013\\u001c\\u001aO\\u000bK90\\u0002CFL\\u001e\\u001bPLWYL_ZVF\\u001d\\u001a\\u0013@\\u0002K[\\u0015C\\u001a\\u0002IH\\u0016\\u0006\\u0019CI@\\fUK\\u001f\\u0001\\u0019\\u0007\\\\\\u0000\\rZ\\t\\f\\u0007\\u0007\\u0017G@\\u0000R\\u0016U_\\u0016\\u0001W\\u0018\\u001d\\u0012\\u0007\\u000fD\\u0016\\u0003_\\\\D\\u0010A\\u0000\\u001eYh~l,\u0026\\u0011#\u003e%O?.Z5\\b@\\u0011\\u001bDLA\\u0015WT\\u0014@TUJ\\u0001\\u0018\\u001aS[l5)LGPZ\\fO\\r\\b\\u001f\\u0014\\u0014\\u0005\\tJO@t\\u0000\\u0017L\\u0019J\\u0016SDkXY\\u0015\\u0015\\u0011F\\u000eFCXY@]\\u001f\\u0018UCP]\\\\^\\u0016\\u0006\\u000e\\u0015\\u0003\\u0007\\u000eVF\\u001d\\u0005WX\\u0015XU\\u001b\\u0013\\u001e\\u001aIH\\u0019_A\\u0015Z[i\\u0015\\u0006\\u0013JOR\\u0014K\\u0017NCP_GPC\\nO\\r_RZ\\t\\u0001UJ\\u001a\\u0011[\\u0019\\f\\u001b[H\\\"\\u0002\\u001cA\\u0016MO\\u0001\\u0005iLP[DW\\nQ\\r\\u001d\\\\\\u000fHT\\r\\u0013X\\u001d\\b\\u001b\\u001bP^%\\u000b\\u001b\\u0002*\\u000bV\\r\\u001cACPCZ^\\u0016\\u0019\\u0004YfXS\\u0003\\u0017\u0026\\u0004\\u0010\\f_\\u001d\\u0011\\u001b[X\\\\Y^\\u0016\\r\\u0002[VAi\\u001e\\u0001\\t\\u001c\\u001d@\\u0002[M\\u0015C\\u001c\\u000b\\u0005\\u0016[\\u001cO\\r\\u001b\\u0011\\u001aX\\u0003\\u0018\\u0005\\u0010\\u0012Y\\r\\n\\u001b[ZBI\\u001cXLW\\u0015\\\\]\\u001b/7[DW\\fT\\u001a[\\u0003C\\u000f\\u0000F'gB\\bY\\u001b\\u001f\\u0014\\u0019\\u000b\\u0015\\u0007\\u0007=_\\b\\u0014L\\u0015HTI\\u0001F\\t\\u000f\\u0015\\u0015\\u0011F\\u001c\\b[RW@\\u0014K\\u001aU\\u0015HT\\u0010\\u000f\\u0018L\\u001d[XGP\\u0015\\u0016\\u00147\\u0011\\u0007L\\f\\u001aM\\u000e\\u0018LQ\\t\\u0016\\u0007\\u001ehX]R\\b\\u000b\\u0010\\fWX^\\b\\u0015J\\u0004FL\\u0002\\u0001k\\u001a\\u001f^]VX\\u000eFC\\u000e\\u0014\\u000eK\\fU\\u001b\\b\\u00191\\b\\u001aF\\u0001\\u0000^L^iBR\u0026\\u0007\\u0007=V\\f\\u000e\\\\\\u0013HT\\r\\u0013X\\u001d\\b\\u001b\\u001bZE%\\u0007\\u0011\\u001a\\u001a\\u000fQ\\u001c\\u0014\\u001b[\\f\\u000f\\u0007\\u0001QBO^JlS\\u001e\\u0003\\u001cJO\\u0004Y\\u0005\\n\\\\MH\\u0007\\u0018-S\\u000b\\u000e\\\\V\\u0011\\f\\u000e\\u0016\\f\\rY@Q\\u001a\u0026N\\u0004\\b1\\u0000\\u001b@LWQX_E\\u001fH[\\u0001\\u0006=O\\f\\u001bf\\n\\u0003\\u001a4D\\u0004X2XKlX\\u001f\\u0013\\u001c\\u001aWX^\\b\\u0015J\\u0004FL\\u0002\\u0001k\\n\\bDRGY\\n;\\n\\t\\u0013\\u0003J\\u0000[\\u0003\\u0007\\u000b\\u0002\\u0018\\u0017\\u0018L\\u0004DfP^\\b\\u000b\\u0014\\u0001\\u0000\\u000fg\\u0006\\t\\\\\\u0013\\u000bLQ\\u0014U\\u0002\\u001eRD\\u001f\\u0014\\u0014\\u0001\\nJO@\\n_M\\u000eV]Y\\\\A\\u0005LA\\u0015Z__\\u001f\\n\\r7\\u001c\\u0006\\u001aS[L\\u000f\\u0001\\u0000\\u0004\\u0005ZLA\\u0015XUP\\u0013\\b\\u0010\\t\\u0001\\u0007g\\u0000\\u001d\\u001b[HLGP@\\u001c\\fQ_ZU%\\u0017\\u0016\\u001d\\u0007\\u0001]6\\u0010]CPLI^\\u0016\\u000f\\tA\\\\AB\\u0013\\u0017\\u001c\\u001a*\\u000b\\\\KC\\u001bCFL\\b\\u0013Y\\u001e\\f^^]i\\u0013\\u0000[RW@\\u0014K\\u001aL\\u0012\\u001e\\u0001\\u0006-]\\n2\\u0006\\u001b\\t\\u0014XH[\\u000b\\u0000\\u0011L\\u0006\\u0014f\\b\\u000e1YP\\u000eLO\\u001b\\u001bPZ\\u0013\\u0007\\u00127\\u001c\\u0006\\u001aS[\\u001bMH\\r\\u0004\\u0001@LW\\u0015\\u001b\\u001f\\u0014\\u0017\\u0001\\r\\u0000\\u001a\\u0006\\u001aS[S\\u0012\\u001e\\u000f\\fP\\u0018L\\u001fhLZRX^[JY@W\\b\u0026P\\u0005HTIP\\u0018L\\fS]ZB\\u0013\\u000b\\u0017\\t\\u0019=Q\\r\\n\\u001b[13\\u0016\",\"async\":\"L\\u001b[_\\u001e\\u0000\\u001c\\u0006*\\u000b^\\u001b\\u0018T\\u0004HT[^\\u0016\\f\\fC\\u001b\\tMX\\r\\n7\\u0017\\u0003LKC\\tMH\\r\\u0003\\u0013F\\t\\u0004Y^\\u0011\\fJH[\\u000b\\u001d\\u0003J\\u000e\\u0010W\\u00065\\u001a\\u0002\\u001fQLW\\u0007\\u0015\\u0011R\\u0013\\u0017\\u001a\\u0000\\u0014\\u0010_\\u0000\\u0017^\u003e\\u001e\\u0007\\u0006\\u0017\\u0016T]\\u001b\\u001b_S\\f\\u0001\\u0015JOREE[Z\\r\\u0003\\u000b\\u0005\\u0006k\\u0007\\t\\u0015\\u0003\\u0011C\\u0014\\u000f\\u0017\\u0007\\u0002\\f\\u001aE[X\\u0007\\f\\u0007\\u0007\\u001bU\\u001a\\bhPW\\u0014@F[DW\\u0016J\\b\\u001f_\\b\\t1\\u0018\\u001dA\\u001c\\u000eRfZRX^[JY@Y\\r\\u000f\\\\\\u0013\\u001e\\u0007\\u0018\\u0017F1\\u0004S\\u001b\\t\\u0014XH[\\u000b\\u0014\\u000fH\\b\\u0010^\\u000f5\\u0007\\u000fP\\u000eLO\\u001b\\u001bPC\\t\\u0010\\u0016\\u0005*\\u000b\\\\6H\\u001b[HLGPW\\u001b\\u001eCV^i\\u0013\\u0000\u0026ZWX\\u001aKU\\u001b\\u0002\\u0006\\u0007\\b\\u0019k\\u0007\\t\\u0015\\u0003\\u0011\\u0014VF\\u001a\\u0007\\u0006\\u0016\\u001aS[\\u001bMH\\u0003\\u000e\\u0006\\\\\\u0001\\t\\u0015\\u0003\\u0011\\\\\\t\\u0010\\u0018\\u000fWN\\u001a\\u001b\u0026L\\b\\u000eLQP\\u0016BOXXl_\\u001eFCJWN\\u001a\\b\\u001d]\\b\\u001e\\u0007\\u0004\\u001cU\\u00022^]@\\u0014@?$\\u0015\",\"quality_options\":{\"hil\":1,\"jsp\":1,\"ng\":false,\"ix\":false,\"pt\":false,\"np\":false,\"nw\":true,\"nb\":true,\"sw\":1280,\"sh\":1024,\"pl\":\"https://fileditchfiles.me/file.php?f=/b52/bunsnQMZVBhKKGwVWcTb.zip\",\"wy\":0,\"wx\":0,\"ww\":1280,\"wh\":1024,\"cw\":1280,\"wiw\":1280,\"wih\":1024,\"wfc\":0,\"sah\":1024,\"navlng\":\"en-US\",\"drf\":\"\",\"wgl\":\"llvmpipe\",\"tb\":false,\"btz\":\"UTC\",\"bto\":0,\"pnt\":0,\"pnrc\":0,\"bml\":0,\"bmi\":false,\"vsbl\":true},\"client_hints\":{}}"}},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 08 Mar 2025 13:57:01 GMT\r\ncontent-type: application/json\r\nx-trace-id: 7e83d259a8764c12cc1e63e55e6a55ef\r\nlink: \u003chttps://my.rtmark.net\u003e; rel=\"preconnect dns-prefetch\"\r\naccept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version\r\naccess-control-allow-origin: https://fileditchfiles.me\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace, favicon\r\naccess-control-max-age: 86400\r\ntiming-allow-origin: *\r\nset-cookie: OAID=008186ac58cf47b2f1f0544eb57bbba2; expires=Sun, 08 Mar 2026 13:57:01 GMT; path=/; secure; SameSite=None\noaidts=1741442221; expires=Sun, 08 Mar 2026 13:57:01 GMT; path=/; secure; SameSite=None\nsyncedCookie=; expires=Tue, 10 Nov 2009 23:00:00 GMT\r\npragma: no-cache, no-cache\r\ncache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0, no-store, no-cache, must-revalidate, max-age=0\r\nexpires: Tue, 11 Jan 1994 10:00:00 GMT, Mon, 26 Jul 1997 05:00:00 GMT\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":4000,"size_decoded":0,"mime_type":"application/json","magic":"troff or preprocessor input, ASCII text, with very long lines (4004), with no line terminators","md5":"5e80a8f5ccf0f662b9507d684e1ce88a","sha1":"10d3b20f6076d9a3d2645e15d6a634faec3c02a8","sha256":"597130f4a989f3e6d31004e8b745f5aadadfd6580ba3edc90f97e03f83cf84e1","sha512":"9ad1281a8278cd1320d310c313427751c0d13e754a5dfa0ad2c35fb4eca5b85bd01656c617e2c23803deb131cf7c7f4c2552fb6cfe8fc6bc789cefa802ed334b","ssdeep":"","tlshash":"0b81d8218fe27d4dd89bc6599e38f22c806fd0e1939d92998f74ef4d7990383087b694","first_seen":"2025-03-08T13:57:21.766955Z","last_seen":"2025-03-08T13:57:21.766955Z","times_seen":1,"resource_available":false,"data":null}},"time_used":740,"timings":{"blocked":325,"dns":68,"connect":82,"send":0,"wait":89,"receive":0,"ssl":172},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-03-08","alert":"Sinkholed","trigger":"zapsauwhouteeks.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"my.rtmark.net/gid.js?userId=008186ac58cf47b2f1f0544eb57bbba2","fqdn":"my.rtmark.net","domain":"rtmark.net","tld":"net"},"ip":{"addr":"104.18.41.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://fileditchfiles.me/file.php?f=/b52/bunsnQMZVBhKKGwVWcTb.zip","date":"2025-03-08T13:57:01.910Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"my.rtmark.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 04 Mar 2025 10:39:32 GMT","end":"Mon, 02 Jun 2025 11:39:29 GMT"},"fingerprint":{"sha1":"03:52:6A:BD:35:83:43:81:AF:25:BB:A3:26:97:D1:78:25:73:A4:C9","sha256":"BE:A3:DE:EC:B8:DA:3D:65:72:D0:DD:CE:EE:A7:03:0A:27:55:8D:DC:F8:42:1A:06:E6:47:A5:6E:11:98:65:3A"}}},"request":{"raw":"GET /gid.js?userId=008186ac58cf47b2f1f0544eb57bbba2 HTTP/1.1\r\nHost: my.rtmark.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://fileditchfiles.me\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fileditchfiles.me/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET","post_data":{"size":1843,"data":"e=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\u0026cri=RXjj1vTsSd\u0026sf=0\u0026dc=\u0026cp=15\u0026gtm=-\u0026gac=-\u0026tb=1\u0026ws=1280x1024\u0026wos=1280x1024\u0026ver=13\u0026fi=\u0026ti=15070\u0026mo=0\u0026pn=16681\u0026spn=1611\u0026fp=2001\u0026snt=1"}},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 08 Mar 2025 13:57:02 GMT\r\ncontent-type: application/json; charset=utf-8\r\naccess-control-allow-origin: https://fileditchfiles.me\r\naccess-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE\r\naccess-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, Authorization,X-CSRF-Token\r\naccess-control-expose-headers: Authorization\r\naccess-control-allow-credentials: true\r\ntiming-allow-origin: *, *\r\nset-cookie: ID=008186ac58cf47b2f1f0544eb57bbba2; expires=Sun, 08 Mar 2026 13:57:02 GMT; secure; SameSite=None\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\ncf-ray: 91d2d6e06aba0b51-OSL\r\ncontent-encoding: gzip\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":65,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"troff or preprocessor input, ASCII text, with no line terminators","md5":"f4c008ca313b96fecfd9e445cde5a6de","sha1":"74c800ef5c8c501f73a1286087298954e63d9aaa","sha256":"36626780d32f1ab62bc56c7b3d7b212379cfd88e3f9ead19533f34f167fa2bc7","sha512":"3e5caf2e775d14b51e774fb7d8b075e12721413eecbfa60cd78eda0c255d3cd18660a9f3db94d34be86990dac1f2ac394678825f29808a6019c4c4ac7c752473","ssdeep":"","tlshash":"14a022b23a0a83cbf082bec22a3b2c023a03e0802208380083e2000202c23be0c32b0c","first_seen":"2025-03-08T13:57:21.767708Z","last_seen":"2025-03-08T13:57:21.767708Z","times_seen":1,"resource_available":false,"data":null}},"time_used":507,"timings":{"blocked":204,"dns":69,"connect":58,"send":0,"wait":98,"receive":0,"ssl":74},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zapsauwhouteeks.com/?rb=QuJbwmUiMp4Q1DY6Ydt4rJmX52RnBra5OCsXweTkyvWSps6-pV8omG8GdQ-cx0_oxOUF845CtVV83jy7T-EnvKWIWpQd9xbW6svudXhofCgiCvW1y7bHwgryHaa2PDE9Sd4zd1GESR9JiL57DKfM6kMAnA9IOtm72lPcCQ1j5z19OsSmnaRybiKRkHuXX3SHkBp3v4MX9KaL6FZq9F6DEnHDkBngvoSnREJhKZ46E44KKeG6S3vl4VTRV6VMiPplPDZpHD6S6fkFKAs5yU6DHklUI9DAZklEMuwG2PIrmDH3sDt-\u0026request_ab2=0\u0026zoneid=8088205\u0026js_build=iclick-v1.1101.0\u0026jsp=1\u0026fs=0\u0026cf=0\u0026sw=1280\u0026sh=1024\u0026wih=1024\u0026wiw=1280\u0026ww=1280\u0026wh=1024\u0026sah=1024\u0026wx=0\u0026wy=0\u0026cw=1280\u0026wfc=0\u0026pl=https%3A%2F%2Ffileditchfiles.me%2Ffile.php%3Ff%3D%2Fb52%2FbunsnQMZVBhKKGwVWcTb.zip\u0026drf=\u0026np=1\u0026pt=0\u0026nb=1\u0026ng=0\u0026ix=0\u0026nw=1\u0026tb=false\u0026btz=UTC\u0026bto=0\u0026tt=2\u0026wgl=llvmpipe\u0026js_build=iclick-v1.1101.0\u0026navlng=en-US\u0026vsbl=true\u0026pnt=0\u0026pnrc=0\u0026bs=8c03764a-455a-40eb-9254-da0c38dc7ff2\u0026wasm=1\u0026userId=008186ac58cf47b2f1f0544eb57bbba2\u0026m=link","fqdn":"zapsauwhouteeks.com","domain":"zapsauwhouteeks.com","tld":"com"},"ip":{"addr":"139.45.197.242","port":443,"asn":9002,"as":"RETN Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"","requested_by":"https://fileditchfiles.me/file.php?f=/b52/bunsnQMZVBhKKGwVWcTb.zip","date":"2025-03-08T13:57:02.250Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"zapsauwhouteeks.com","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Tue, 04 Mar 2025 13:29:14 GMT","end":"Mon, 02 Jun 2025 13:29:13 GMT"},"fingerprint":{"sha1":"F9:44:14:F8:EE:0A:16:8E:65:5B:FD:98:6E:D9:48:06:FB:BD:86:C8","sha256":"E0:87:99:3B:69:A8:61:DC:EA:1C:C2:4E:52:B9:FE:9A:62:37:3B:D1:83:A4:A5:4D:91:7F:3A:10:58:69:C2:7D"}}},"request":{"raw":"GET /?rb=QuJbwmUiMp4Q1DY6Ydt4rJmX52RnBra5OCsXweTkyvWSps6-pV8omG8GdQ-cx0_oxOUF845CtVV83jy7T-EnvKWIWpQd9xbW6svudXhofCgiCvW1y7bHwgryHaa2PDE9Sd4zd1GESR9JiL57DKfM6kMAnA9IOtm72lPcCQ1j5z19OsSmnaRybiKRkHuXX3SHkBp3v4MX9KaL6FZq9F6DEnHDkBngvoSnREJhKZ46E44KKeG6S3vl4VTRV6VMiPplPDZpHD6S6fkFKAs5yU6DHklUI9DAZklEMuwG2PIrmDH3sDt-\u0026request_ab2=0\u0026zoneid=8088205\u0026js_build=iclick-v1.1101.0\u0026jsp=1\u0026fs=0\u0026cf=0\u0026sw=1280\u0026sh=1024\u0026wih=1024\u0026wiw=1280\u0026ww=1280\u0026wh=1024\u0026sah=1024\u0026wx=0\u0026wy=0\u0026cw=1280\u0026wfc=0\u0026pl=https%3A%2F%2Ffileditchfiles.me%2Ffile.php%3Ff%3D%2Fb52%2FbunsnQMZVBhKKGwVWcTb.zip\u0026drf=\u0026np=1\u0026pt=0\u0026nb=1\u0026ng=0\u0026ix=0\u0026nw=1\u0026tb=false\u0026btz=UTC\u0026bto=0\u0026tt=2\u0026wgl=llvmpipe\u0026js_build=iclick-v1.1101.0\u0026navlng=en-US\u0026vsbl=true\u0026pnt=0\u0026pnrc=0\u0026bs=8c03764a-455a-40eb-9254-da0c38dc7ff2\u0026wasm=1\u0026userId=008186ac58cf47b2f1f0544eb57bbba2\u0026m=link HTTP/1.1\r\nHost: zapsauwhouteeks.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://fileditchfiles.me/\r\nOrigin: https://fileditchfiles.me\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: OAID=008186ac58cf47b2f1f0544eb57bbba2; oaidts=1741442221\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET","post_data":{"size":1840,"data":"e=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\u0026cri=RXjj1vTsSd\u0026sf=0\u0026dc=\u0026cp=3\u0026gtm=-\u0026gac=-\u0026tb=1\u0026ws=1280x1024\u0026wos=1280x1024\u0026ver=13\u0026fi=\u0026ti=3018\u0026mo=0\u0026pn=4629\u0026spn=1611\u0026fp=2001\u0026snt=1"}},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 08 Mar 2025 13:57:02 GMT\r\ncontent-type: application/json\r\nx-trace-id: 164b31326c4b72569298a3d690c50dbd\r\naccept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version\r\naccess-control-allow-origin: https://fileditchfiles.me\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace, favicon\r\naccess-control-max-age: 86400\r\npragma: no-cache\r\ncache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0\r\nexpires: Tue, 11 Jan 1994 10:00:00 GMT\r\nset-cookie: OAID=008186ac58cf47b2f1f0544eb57bbba2; expires=Sun, 08 Mar 2026 13:57:02 GMT; path=/; secure; SameSite=None\noaidts=1741442222; expires=Sun, 08 Mar 2026 13:57:02 GMT; path=/; secure; SameSite=None\nsyncedCookie=true; expires=Sat, 15 Mar 2025 13:57:02 GMT; path=/; secure; SameSite=None\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ntiming-allow-origin: *, *\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":3096,"size_decoded":0,"mime_type":"application/json","magic":"troff or preprocessor input, ASCII text, with very long lines (3125), with no line terminators","md5":"f4264c8638710362b4acbec427b3e537","sha1":"24fb20902a41b3a81559f1c5cda6e6193e865943","sha256":"cbdaa5ec011e7ef1c1dab6ed626218acc1f47bb96cc933aba89b158a637e1b46","sha512":"ba7d9f4a747885a3996cd04b0bec988455ea63c7954aae78feada6d12ee6b31661135d261c43a77586aada45b8442f98dac1626787c7b09e49c0c94f16b971b7","ssdeep":"","tlshash":"b1514c62091de803b85e76e9fc658c6c6fc0fe492d80949f46765646ca9c7b43e43e8c","first_seen":"2025-03-08T13:57:21.768588Z","last_seen":"2025-03-08T13:57:21.768588Z","times_seen":1,"resource_available":false,"data":null}},"time_used":240,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":239,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-03-08","alert":"Sinkholed","trigger":"zapsauwhouteeks.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"img.icons8.com/ios-filled/50/ffffff/share.png","fqdn":"img.icons8.com","domain":"icons8.com","tld":"com"},"ip":{"addr":"185.76.9.27","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"","requested_by":"https://fileditchfiles.me/file.php?f=/b52/bunsnQMZVBhKKGwVWcTb.zip","date":"2025-03-08T13:57:00.259Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1004834818.rsc.cdn77.org","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Mon, 20 Jan 2025 10:49:54 GMT","end":"Sun, 20 Apr 2025 10:49:53 GMT"},"fingerprint":{"sha1":"32:1A:BB:9F:2B:6F:41:BE:81:0C:43:7D:84:A7:CC:39:7F:AF:37:18","sha256":"C0:B0:6D:4D:A4:27:D5:F1:F9:8B:CB:E6:B6:EC:BD:2F:C6:B7:B1:BA:D6:E8:05:01:62:7F:7D:F4:D5:91:C0:9C"}}},"request":{"raw":"GET /ios-filled/50/ffffff/share.png HTTP/1.1\r\nHost: img.icons8.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fileditchfiles.me/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 08 Mar 2025 13:57:00 GMT\r\ncontent-type: image/png\r\ncontent-length: 817\r\naccess-control-allow-origin: *\r\nicon-id: 7701\r\nicon-size: 50\r\nicon-format: png\r\nlast-modified: Thu, 30 Jan 2025 01:22:17\r\nversion: 0.0.29\r\nfrom-mongo-cache: false\r\nfrom-redis-cache: false\r\nnot-found-platform: false\r\ncache-control: public, max-age=302400\r\nstrict-transport-security: max-age=15724800; includeSubDomains\r\nx-77-nzt: EwwBuUwJGwHX+3YAAAwBuUwKAQH3RAEAAAwBnJIhJwG35QAAAA\r\nx-77-nzt-ray: fdb54123674ca27fac4ccc6788e08f1e\r\nx-77-cache: HIT\r\nx-77-age: 30459\r\nserver: CDN77-Turbo\r\nx-77-pop: stockholmSE\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":817,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 50 x 50, 8-bit/color RGBA, non-interlaced","md5":"11fa9544fa0c7cf6adc6b9d2a439d804","sha1":"838357fd1ed0fe5a1f2486a8abd810c031407c67","sha256":"e6f4f8852621b134c5c759f58d42ea7640ed1a8f028bef7460bc871051dcc776","sha512":"7ce59c963ca3b5aa596e3ab10eae60a5ee60fb0960b51b5535aac7e7e4261f1eb680dff348793199ba3752131624ed9f3a372ce8acd60aa4e12de876e67dc6e5","ssdeep":"","tlshash":"d701468ff3015313d061e99d2a04dca6914f3294255195bb4457923cbe4aa55e97b483","first_seen":"2025-02-27T21:35:04.712241Z","last_seen":"2026-01-12T01:00:43.713371Z","times_seen":37,"resource_available":false,"data":null}},"time_used":517,"timings":{"blocked":223,"dns":79,"connect":66,"send":0,"wait":63,"receive":1,"ssl":82},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fileditchfiles.me/share.js","fqdn":"fileditchfiles.me","domain":"fileditchfiles.me","tld":"me"},"ip":{"addr":"172.67.68.142","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://fileditchfiles.me/file.php?f=/b52/bunsnQMZVBhKKGwVWcTb.zip","date":"2025-03-08T13:57:00.262Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fileditchfiles.me","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Feb 2025 04:58:22 GMT","end":"Thu, 29 May 2025 05:58:02 GMT"},"fingerprint":{"sha1":"93:D3:B0:A7:31:57:A3:FB:52:4E:E9:B8:86:EF:03:25:28:EC:36:98","sha256":"A8:6E:94:77:D7:D5:E8:E3:41:D7:B3:4A:FE:C1:38:FA:F9:CC:B5:68:48:7C:30:81:3A:F0:22:A1:9C:BB:F3:39"}}},"request":{"raw":"GET /share.js HTTP/1.1\r\nHost: fileditchfiles.me\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fileditchfiles.me/file.php?f=/b52/bunsnQMZVBhKKGwVWcTb.zip\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 08 Mar 2025 13:57:00 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 05 Feb 2025 10:33:35 GMT\r\netag: W/\"67a33e7f-371\"\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=wgtiwKmFu4IZPVOrGGDunN4HMRjSdOF9oaZeL5cKMpLFne9xqj%2FjsfzqbYi7%2BFF4WoCpds43AEWYgvx9UN%2By7QjwV%2FHW4TR6eBExmJVE4fhWptR5KH30objERj3xK1N3Th%2Fe\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 91d2d6d4cb43b50f-OSL\r\ncontent-encoding: br\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=59055\u0026min_rtt=56252\u0026rtt_var=7597\u0026sent=13\u0026recv=16\u0026lost=0\u0026retrans=0\u0026sent_bytes=5369\u0026recv_bytes=1310\u0026delivery_rate=106572\u0026cwnd=257\u0026unsent_bytes=0\u0026cid=94440639aea7d7f5\u0026ts=539\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":881,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (918), with no line terminators","md5":"0b78190664cad2e1f9e832a6f321944a","sha1":"9c50d9df3cf3d09f3b11dc0a525f9a680e5cc375","sha256":"2d04ee60287ce7fd4bb0b5092d903f777fbbb2b294dfdefd13e869d307c702f3","sha512":"f4964e493ece7df27d2bf3754924a3cb6d99fb356aa918100ee60338fa6a28d4f43c75ecc2bb55be3ee08f255c55868d35763b69f7a9579bcebbd616ffcbbd52","ssdeep":"","tlshash":"c51168af712d08390f03ede797e363167016b200a591d2e17d8e520e03c971182f6aec","first_seen":"2025-02-27T21:35:04.720586Z","last_seen":"2025-04-03T04:45:40.858176Z","times_seen":13,"resource_available":false,"data":null}},"time_used":95,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":95,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"anal.ketaiptv.me/api/event","fqdn":"anal.ketaiptv.me","domain":"ketaiptv.me","tld":"me"},"ip":{"addr":"62.133.61.167","port":443,"asn":215540,"as":"Global Connectivity Solutions Llp","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"","requested_by":"https://fileditchfiles.me/file.php?f=/b52/bunsnQMZVBhKKGwVWcTb.zip","date":"2025-03-08T13:57:00.956Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"anal.ketaiptv.me","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Tue, 31 Dec 2024 12:32:24 GMT","end":"Mon, 31 Mar 2025 12:32:23 GMT"},"fingerprint":{"sha1":"4E:88:40:29:A1:04:8A:7B:26:EF:AF:54:99:93:8E:34:0B:D0:F5:8C","sha256":"CC:0D:AD:B3:C6:5A:DD:D5:CA:D6:0A:EB:AB:AF:B2:9D:57:3A:12:75:B4:27:2C:25:10:45:48:2E:61:5F:44:FB"}}},"request":{"raw":"POST /api/event HTTP/1.1\r\nHost: anal.ketaiptv.me\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain\r\nContent-Length: 142\r\nOrigin: https://fileditchfiles.me\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fileditchfiles.me/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":142,"data":"{\"n\":\"pageview\",\"u\":\"https://fileditchfiles.me/b52/bunsnQMZVBhKKGwVWcTb.zip?f=/b52/bunsnQMZVBhKKGwVWcTb.zip\",\"d\":\"fileditchfiles.me\",\"r\":null}"}},"response":{"raw":"HTTP/1.1 202 Accepted\r\nServer: nginx/1.18.0\r\nDate: Sat, 08 Mar 2025 13:57:01 GMT\r\nContent-Type: text/plain; charset=utf-8\r\nContent-Length: 2\r\nConnection: keep-alive\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: \r\ncache-control: max-age=0, private, must-revalidate\r\nx-request-id: GCrYeUOwbMQOXd8KkziS\r\n\r\n","headers":null,"cookies":null,"status_code":"202","status_text":"Accepted","fingerprints":null,"data":{"size":2,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"444bcb3a3fcf8389296c49467f27e1d6","sha1":"7a85f4764bbd6daf1c3545efbbf0f279a6dc0beb","sha256":"2689367b205c16ce32ed4200942b8b8b1e262dfc70d9bc9fbc77c49699a4f1df","sha512":"9fbbbb5a0f329f9782e2356fa41d89cf9b3694327c1a934d6af2a9df2d7f936ce83717fb513196a4ce5548471708cd7134c2ae99b3c357bcabb2eafc7b9b7570","ssdeep":"","tlshash":"c710000000000000300000000000000000000000000000000000000000000c0000c000","first_seen":"2023-03-08T02:32:37Z","last_seen":"2026-04-04T04:42:53.837355Z","times_seen":390758,"resource_available":true,"data":null}},"time_used":618,"timings":{"blocked":250,"dns":76,"connect":86,"send":0,"wait":115,"receive":2,"ssl":86},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fileditchfiles.me/favicon.ico","fqdn":"fileditchfiles.me","domain":"fileditchfiles.me","tld":"me"},"ip":{"addr":"172.67.68.142","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://fileditchfiles.me/file.php?f=/b52/bunsnQMZVBhKKGwVWcTb.zip","date":"2025-03-08T13:57:01.237Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fileditchfiles.me","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Feb 2025 04:58:22 GMT","end":"Thu, 29 May 2025 05:58:02 GMT"},"fingerprint":{"sha1":"93:D3:B0:A7:31:57:A3:FB:52:4E:E9:B8:86:EF:03:25:28:EC:36:98","sha256":"A8:6E:94:77:D7:D5:E8:E3:41:D7:B3:4A:FE:C1:38:FA:F9:CC:B5:68:48:7C:30:81:3A:F0:22:A1:9C:BB:F3:39"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: fileditchfiles.me\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fileditchfiles.me/file.php?f=/b52/bunsnQMZVBhKKGwVWcTb.zip\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET","post_data":{"size":1848,"data":"e=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\u0026cri=tl4ZGhlamS\u0026sf=0\u0026dc=\u0026cp=3\u0026gtm=-\u0026gac=-\u0026tb=1\u0026ws=1280x1024\u0026wos=1280x1024\u0026ver=13\u0026fi=\u0026ti=3046\u0026mo=0\u0026pn=4954\u0026spn=1907\u0026fp=1072\u0026snt=1"}},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 08 Mar 2025 13:57:01 GMT\r\ncontent-type: image/x-icon\r\nlast-modified: Wed, 19 May 2021 01:07:22 GMT\r\netag: W/\"60a464ca-13e\"\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=Q8BYjQMYYUYejckr3InjptNS4PUkuj9ovi4uEhpXRrV2nh5ch%2FprUnzSmPSjsTIAyMCiNdXd%2F9MsRloAC2oz9vCLpy%2FCwlD27lQObeYdSz%2FJZ8eSN%2FQZI7jH8fL5xwHjK1MX\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 91d2d6daea92b50f-OSL\r\ncontent-encoding: br\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=58144\u0026min_rtt=56252\u0026rtt_var=4578\u0026sent=16\u0026recv=20\u0026lost=0\u0026retrans=0\u0026sent_bytes=6262\u0026recv_bytes=1412\u0026delivery_rate=106572\u0026cwnd=257\u0026unsent_bytes=0\u0026cid=94440639aea7d7f5\u0026ts=1521\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":318,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 16x16, 16 colors, 4 bits/pixel","md5":"46548be83892cf8a7c9537575a860381","sha1":"0dab338312d709941ebc83e9a327e2780f1ef1f4","sha256":"5b7d584f6738c18ebaab9f043cfb69863531beb3ddc545cd576f84858b38ce28","sha512":"3039b497820c52c55fba1c6c229a61c3e24d8961bc70a4d20a52754622ac1c2ea632436039781178391cfbc3465b272118ce8daf71f7558faf05d20f331b0239","ssdeep":"","tlshash":"5ae0487121e0cce8c880653848bbc6e9350c44b28c94fd3b81233efe38302e808eb6e4","first_seen":"2023-05-16T11:09:16Z","last_seen":"2026-04-01T18:07:31.775233Z","times_seen":59,"resource_available":false,"data":null}},"time_used":97,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":97,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}
