{"report_id":"5d784da4-1675-4b5b-ae3a-782e86fd2961","version":6,"status":"done","tags":[],"date":"2025-12-21T00:06:41Z","url":{"schema":"http","addr":"formswft.com","fqdn":"formswft.com","domain":"formswft.com","tld":"com"},"ip":{"addr":"199.191.50.243","port":0,"asn":40034,"as":"CONFLUENCE-NETWORK-INC","country":"British Virgin Islands","country_code":"VG"},"final":{"url":{"schema":"https","addr":"formswft.com/","fqdn":"formswft.com","domain":"formswft.com","tld":"com"},"title":"formswft.com/","dom":{"size":98149,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (15218)","md5":"ad7fc7e02e29d2a29c7e2eadcbecaf61","sha1":"a5a7ee842e549ec8dd101af4419a2044797819cb","sha256":"aab7b68fa856d3fa14e0f0c1e0e4fbfabce1e77d229b4741995510d521243564","sha512":"692c6caa8fd6a722ac56a9fd4cea265249905203fc24b043ce9fabe26f0fe428ad854aba0f7c8b855a0ffbd949e3a03585de0ca1f536c1d94e5b087396682313","ssdeep":"1536:OboBpkSSH3MMQaAFQ9sfeAxflbzpcR+W+moPaBXr75+Z5TY4pPRuvdru/bqi+g+:gIpkSSH3MMQaAFQ9sfeAxfl75TYCJuv9","tlshash":"b7a36b9d3083b03653672495753f29cee27a249b718c8c40faf6d7b5386c9db8912e6c","dom_hash":"domhash3dad8800ac34a2c78ec6825d43e5dab2","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"formswft.com","fqdn":"formswft.com","domain":"formswft.com","tld":"com"},"ip":{"addr":"199.191.50.243","port":0,"asn":40034,"as":"CONFLUENCE-NETWORK-INC","country":"British Virgin Islands","country_code":"VG"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-01-25T00:06:41Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":6}},"detection":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"s.cdn-fileserver.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"s.cdn-fileserver.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-21","alert":"Sinkholed","trigger":"s.cdn-fileserver.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"l.cdn-fileserver.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"l.cdn-fileserver.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-21","alert":"Sinkholed","trigger":"l.cdn-fileserver.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null},"summary":[{"fqdn":"formswft.com","ip":{"addr":"199.191.50.243","port":443,"asn":40034,"as":"CONFLUENCE-NETWORK-INC","country":"British Virgin Islands","country_code":"VG"},"domain_registered":"2020-02-23","domain_rank":0,"first_seen":"2025-12-21T00:06:42.137433Z","last_seen":"2025-12-21T00:06:42.137433Z","alert_count":0,"request_count":2,"received_data":10106,"sent_data":912,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}]},{"fqdn":"s.cdn-fileserver.com","ip":{"addr":"104.21.31.250","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-04-08","domain_rank":1473336,"first_seen":"2025-04-11T18:11:28.393379Z","last_seen":"2025-12-15T01:07:38.96305Z","alert_count":9,"request_count":3,"received_data":45331,"sent_data":1502,"comment":"","tags":null,"fingerprints":[{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]}]},{"fqdn":"msadsscale.microsoft.com","ip":{"addr":"13.107.213.53","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"domain_registered":"1991-05-02","domain_rank":241518,"first_seen":"2025-01-13T10:51:37Z","last_seen":"2025-12-15T12:51:40.317534Z","alert_count":0,"request_count":1,"received_data":73333,"sent_data":456,"comment":"","tags":null,"fingerprints":[{"name":"Azure Front Door","description":"Azure Front Door is a scalable and secure entry point for fast delivery of your global web applications.","website":"https://docs.microsoft.com/en-us/azure/frontdoor/","common_platform_enumeration":"","icon":"Azure.svg","categories":["Load balancers"]},{"name":"Azure","description":"Azure is a cloud computing service for building, testing, deploying, and managing applications and services through Microsoft-managed data centers.","website":"https://azure.microsoft.com","common_platform_enumeration":"","icon":"Azure.svg","categories":["PaaS"]}]},{"fqdn":"s.yimg.com","ip":{"addr":"87.248.119.252","port":443,"asn":203220,"as":"Yahoo-UK Limited","country":"United Kingdom","country_code":"GB"},"domain_registered":"1997-05-14","domain_rank":4553,"first_seen":"2012-05-20T22:45:00Z","last_seen":"2025-12-15T01:07:38.953902Z","alert_count":0,"request_count":1,"received_data":13535,"sent_data":451,"comment":"","tags":null,"fingerprints":[{"name":"Apache Traffic Server","description":"Apache Traffic Server is an open-source caching and proxying server that serves as an HTTP/1.1 and HTTP/2 reverse proxy with caching capabilities, load balancing, request routing, SSL termination, and support for advanced HTTP features.","website":"https://trafficserver.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:traffic_server:*:*:*:*:*:*:*:*","icon":"Apache Traffic Server.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}]},{"fqdn":"l.cdn-fileserver.com","ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-04-08","domain_rank":962880,"first_seen":"2025-04-11T15:28:22.753596Z","last_seen":"2025-12-15T00:44:30.876048Z","alert_count":9,"request_count":3,"received_data":2625,"sent_data":8174,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}]},{"fqdn":"quickresultshunt.com","ip":{"addr":"104.21.4.223","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-02-14","domain_rank":0,"first_seen":"2025-10-23T13:14:51.216401Z","last_seen":"2025-12-17T10:02:44.711782Z","alert_count":0,"request_count":1,"received_data":67744,"sent_data":1263,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"l.cdn-fileserver.com/bql.php?vgd_len=4797\u0026\u0026vgd_l2type=dmola\u0026fp=rmV2ZnpOsJQhZm-7B26Rl_W2WNF3sjQTIfUG-YoeQ5BguINRp_4Yumytnm2LbnHAx-2m8t3KD5XDRoktUrERipYH9DBcVWl3rzqJNYbFEY1qNRZd0OfukN80rHdF9c-RuwnF2AE6sXY%3D\u0026cme=EP_jG0FD33FaT0pnklQ-urEbsTMTx9oEkBrhgh5D2NvTjjMDakIroPEiu96uO_VVI-XTjjKRCCWNcLpyUYWL0zgsZ753xJeI-dWep_CajRUihkgwCBXSGG3tKRvUloYbw1MGFD_FMz52KMvBEoifYor5MdMCbQ-dpLjdiFSy36fze4LBx9UmqhdyKLsHbnvJrK4mTwIohcP0ciSBi6C8L0PYIFymjEtmdm1GMUri2WuowSWMN2f7KGMslzp9YHG_BgjRq3OBwHE%3D%7C%7CWOR44ZnjshyX0FEZj6c52uG8KGTsvju_%7C93q-w6oysg91aq4hh7dv6zzrcNTS6udO%7Ca0AmFUYXmD6Wd-HJzGWGc-a7lJVcJizG0fT4g0ont2Q%3D%7Cb8KlCmE6kTENKxSBIehsQLbXBNKeHPZV%7CosmTBymbz9kxbGaheRo3KrQK2cDoJ3K9T5vSET3WCZ0F6GLSPrd_Uhkdn_fOWZJOZpVvRvpoep31IHhNCp4SsHoUkuMvMmQ_5Z59Sxmomv8Yn9V4Hpy_MHjQdW64K7MPTkqSKO37HihS5mG8dM3WmIMXBT2ZD6nqNx7Ej0CyoXR1a65iTqrkWDf4UH6doe7ZFz7-tnAg5Eb_ojnuHM5bR3qd8v4qoN6Gr9PdUJbkOGnAeqDYaKI76IFjnr9jM1LaL4PUJmeV8cogmXdV1VQP1iCwFvc2P96G2N-9DESMl0nwNK5WED6TvWmCGO5Ak80n3siDWWYtxeOytuBdLAM7fvcrBMvYMH8x03drhl9IsWxuGMVr-YW5wKJ3_WKph8bq4nS6XxlCyL3AYoFFjZMg25dt6qyWJhhl57yF2dG8JFoUCm2j6ENvn3tuZrJW1JvcXivvyBoebZS0iQvd1wxaMyHPvjBs9RlKrumEpdZfl9vt4Ek0PbzenkRYTpFcBQsScYW-83sym56dbzYJioy4YD7bOxHspn9LQiIO4pnokUITYj3SByIlcsj4mDuYpAQd6frrhtOssfzH_DZ5n36oOTrFtms5SbjsoSJaHSLDd1dQ-uU9vl_NwjUf-T7wlHqC%7C\u0026ksu=360\u0026fdkt=658\u0026vgde_kbbh=fuoyxQBuGUBO\u0026kwd[]=Create+Forms+Quickly+Online\u0026kwt[]=658\u0026kbc[]=9523b49b93b21fa35aaf5a6fd2f2d362.d2s\u0026kwp[]=1\u0026kid[]=1704640718\u0026kbc2[]=clid_fz%3D-2%7Cclid_serp%3D-2%7Cakp%3D8%7C5%3D-1%7C6%3D-1%7C16%3D-1%7C19%3D0.00%7Ckus%3D0.5912%7Ckucs%3D5.0000%7Ckcucs%3D5.0000%7Ckcucs2%3D5.0000%7Ckssks%3D5.0000%7Crcid%3D81758%7Cclpr%3D0.907300%7Ccllvl%3D5%7Cokt%3D658%7Cbdkt%3D658%7Cps%3D0.992%7Cps_id%3D0\u0026ktd[]=17174784\u0026kwd[]=Edit+Forms+Online\u0026kwt[]=658\u0026kbc[]=9523b49b93b21fa35aaf5a6fd2f2d362.d2s\u0026kwp[]=2\u0026kid[]=449914417\u0026kbc2[]=clid_fz%3D-2%7Cclid_serp%3D-2%7Cakp%3D11%7C5%3D-1%7C6%3D-1%7C16%3D-1%7C19%3D0.00%7Ckus%3D0.5859%7Ckucs%3D5.0000%7Ckcucs%3D5.0000%7Ckcucs2%3D5.0000%7Ckssks%3D5.0000%7Crcid%3D166390%7Cclpr%3D0.881600%7Ccllvl%3D5%7Cokt%3D658%7Cbdkt%3D658%7Cps%3D0.992%7Cps_id%3D0\u0026ktd[]=17174784\u0026kwd[]=Online+Application+Form\u0026kwt[]=658\u0026kbc[]=9523b49b93b21fa35aaf5a6fd2f2d362.d2s\u0026kwp[]=3\u0026kid[]=351740978\u0026kbc2[]=clid_fz%3D6940%7Cclid_serp%3D13688%7Cakp%3D6%7C5%3D-1%7C6%3D-1%7C16%3D-1%7C19%3D0.00%7Ckus%3D0.5888%7Ckucs%3D5.0000%7Ckcucs%3D5.0000%7Ckcucs2%3D5.0000%7Ckssks%3D5.0000%7Crcid%3D157588%7Cclpr%3D1.000000%7Ccllvl%3D2%7Cokt%3D658%7Cbdkt%3D658%7Cps%3D0.992%7Cps_id%3D0\u0026ktd[]=17174784\u0026kwd[]=Fill+Online+Forms\u0026kwt[]=658\u0026kbc[]=9523b49b93b21fa35aaf5a6fd2f2d362.d2s\u0026kwp[]=4\u0026kid[]=83336599\u0026kbc2[]=clid_fz%3D10498%7Cclid_serp%3D8278%7Cakp%3D10%7C5%3D-1%7C6%3D-1%7C16%3D-1%7C19%3D0.00%7Ckus%3D0.6043%7Ckucs%3D5.0000%7Ckcucs%3D5.0000%7Ckcucs2%3D5.0000%7Ckssks%3D5.0000%7Crcid%3D163437%7Cclpr%3D1.000000%7Ccllvl%3D2%7Cokt%3D658%7Cbdkt%3D658%7Cps%3D0.992%7Cps_id%3D0\u0026ktd[]=9671406556917033414824192\u0026kwd[]=Business+Forms+Online\u0026kwt[]=658\u0026kbc[]=9523b49b93b21fa35aaf5a6fd2f2d362.d2s\u0026kwp[]=5\u0026kid[]=4590718\u0026kbc2[]=clid_fz%3D-2%7Cclid_serp%3D-2%7Cakp%3D4%7C5%3D-1%7C6%3D-1%7C16%3D-1%7C19%3D0.00%7Ckus%3D0.6116%7Ckucs%3D5.0000%7Ckcucs%3D5.0000%7Ckcucs2%3D5.0000%7Ckssks%3D5.0000%7Crcid%3D166390%7Cclpr%3D0.909700%7Ccllvl%3D5%7Cokt%3D658%7Cbdkt%3D658%7Cps%3D0.992%7Cps_id%3D0\u0026ktd[]=9671406556917033414824192\u0026v=1\u0026gdpr=1\u0026geo=59.9%7C10.77\u0026lper=100\u0026lpid=\u0026tsid=1005\u0026hint=\u0026cc=NO\u0026wsip=170763266\u0026bca=0\u0026ugd=4\u0026vgde_setid=Nfu\u0026vgde_chost=+x8NULJQxj7Qwxz7.NmY\u0026cid=8CU458282\u0026vi=1766275581332466995\u0026vsid=DefVid\u0026tdAdd[]=asnum%3D50304\u0026vgde_test_data_struct=%7B%22EO7E8O%22%3Au%7D\u0026vgd_adprefflag=00\u0026vgd_adpref_diff=1010\u0026vgd_fm_lang=EN\u0026vgd_implt=3\u0026vgd_cage=1\u0026vgd_tsce=L1085-S1085\u0026vgd_l3_sc=03\u0026vgd_pdtid=1\u0026vgd_oscar=1\u0026vgd_ctrlid=O_SERP\u0026vgd_nrrv=89734\u0026vgd_nrrmf=8301000480a\u0026vgd_nrrsf=scrr\u0026vgd_cty=oslo\u0026vgd_csovr=0\u0026vgd_ifrmode=03\u0026sbdrId=\u0026verid=\u0026mprpslog=u5eqezZf_lYyULMtqisNS3GSBklJPR0ktL_GEE7r17IchT3FJbdqsw2irgpzIt5OzbEZnBAxPTFMlknbUnwkIS27wnA4ySvL39PgloPtX1JC4-_rcf8iftCAgLhir1p1SYWqU9xvwJfa7NNHFamyEt1k5sNZpcYXYX8mYDFpj3vH20pfHCmtyuxUyqSS1zdG3CzYHfYdQrimvQiJkGrxHA\u0026kbbq=%26asn%3D50304\u0026vgd_ppvi=2151382118167318472\u0026vgd_wlstp=0\u0026vgd_vstrid=DefVid\u0026vgd_scsver=2602\u0026vgd_himglg=K0P0-O0K0-S0\u0026vgd_cache_metadata=%7B%22kbb%22%3Afalse%7D\u0026vgd_cfud=251031\u0026vgd_optout=0\u0026vgd_l2shld=1\u0026vgd_akcip=91.90.42.0\u0026vgd_oreqf=one\u0026vgd_oresf=one\u0026vgd_och=0\u0026vgd_rensize=1280_1024\u0026vgd_scr_h=1024\u0026vgd_scr_w=1280\u0026vgd_col_sch=l\u0026vgd_be=0\u0026vgd_nmerr=1\u0026tdAdd[]=uiparams%3D%3Brend_w%3A1280%3Brend_h%3A1024\u0026vgd_sc=03\u0026hvsid=00001766275581879015326356485759\u0026rc=0\u0026rand=1766275582727\u0026acid=undefined\u0026matm=1766275582728\u0026vgde_ltimesrc=u\u0026vgde_ltime=Fuf\u0026vgde_rtime=XWh\u0026vgde_etm=Ai\u0026vgde_timeObj=%7B%22juJ-JN%22%3Azxjj%2C%22jfjm1O%22%3AXuA%2C%22QNLLQ71L7%22%3AA9%2C%22QNLLLJzOJL%22%3AHH%2C%22QNLLJ-JN%22%3AFi%7D\u0026vgd_lhl=1984\u0026vgd_sbSup=1\u0026vgd_nrrs=89734\u0026vgde_cdeplbl=1E8Mzm7M1e18j1GjJ\u0026vgd_end=1","fqdn":"l.cdn-fileserver.com","domain":"cdn-fileserver.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"2ba5e95642c652c708881ad3c9d8443f","sha1":"5bfcc33bb9cc897546c600206b03d1307bd63a94","sha256":"c787e9dd6dc8ea3c935f5f0f30e3b9e4a3e066b4619bb244f569883f8e318a24","sha512":"8c157fc41fd03bbd47633269b18effb652644e58284f8f85465b0ffba9b5a06544a03ed0655706c96edfa09a64f4f164f6bbc573ac5045000cae03c8b36d046f","ssdeep":"","tlshash":"7e600000000cc030030f0c00c3000300303000c000000c33000f30cc000000c00fc303","size":15,"data":"","first_seen":"2025-03-08T00:25:13.560069Z","last_seen":"2026-04-04T00:32:53.422716Z","times_seen":140599,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"formswft.com/","fqdn":"formswft.com","domain":"formswft.com","tld":"com"},"ip":{"addr":"199.191.50.243","port":443,"asn":40034,"as":"CONFLUENCE-NETWORK-INC","country":"British Virgin Islands","country_code":"VG"},"introduction_type":"scriptElement","is_inline":true,"md5":"ba7235b82c79ec7706166ca3434c9b74","sha1":"23987a6ae1d68cdd900843bd50f3c920873b7796","sha256":"24c1ddf5ab1175e735c207fffa20d9faf6f2a46a9561353eb5fc560cffc7dde1","sha512":"bb1f2cc7c112800719165e8776a1d0afd57495543c2543db5697f88e8bf1664889f4f31ec0c6760fe5604052eaffbaaf8f272c757272d2dc08cad0a1e4cfc738","ssdeep":"192:2PLI7R8Pw5QROM1kmkLGAvoPLI7R8Pw5QROM1kmEaVAj:2PL2C+yAvoPL2Cj6","tlshash":"db020ba250fa9830dace2081debd6ff9fdcd6f26a4ad2c2d48d8c008517d57a0c159f6","size":8515,"data":"","first_seen":"2025-12-21T00:06:48.778403Z","last_seen":"2025-12-21T00:06:48.778403Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"quickresultshunt.com/sr/754870121/SAFEFRAME.html?ule=759\u0026%21%2AcC=%21hr\u0026%21yJ=fcrCfJ1rKnYC.K58CcKfcfMKR1nMMnAcAM55\u0026%2AREI0r=JX%21%2Ac\u00260yJ=\u002688=m6\u00268E0yJ=\u00268J~=6R515\u00268LhX.=\u00268LhXR=%21v~57yhE8\u00268tyJ=GM.fMnGA1\u00268yJ=fFW5GfRfR\u0026Ev8r=wnafG\u0026I0%2A0=\u0026IJv0t=\u0026IYh7887rd0=\u0026JXtC=n\u0026Jr8XXX=\u0026LEE0v=n\u0026NJ0t=n\u0026NJ0t8hvE=\u0026PNJ=5\u0026Pv0rhC=a\u0026Xv0c=a\u0026YJtqJ=\u0026Ycr=\u0026Yr=a\u0026YyJ=\u0026bJ=\u0026bstC=\u0026c0FP=\u0026c8E=pDq4tmNCPSCNCPhmN%2F4%2FDSCSNDcc%29Dht5Ch\u0026cJ%21Xcyh=\u0026cJER=\u0026cJEn=\u0026cJ~=\u0026hE~=\u0026hXrtt=n\u0026htmlsrc=1\u0026kkdd=A%21%7CH%7Cn9A%2A\u0026r8tyJ=\u0026s%2AvE0=a\u0026svL0=a\u0026tpid=\u0026tr%29Pt%2A=LEE0v%3A%2F%2FC%21tXvsCEU8%21X\u0026v8=a.\u0026vYJtqJ=\u0026vv%2AJ=%7B%22vv88%22%3A%22m6%22%2C%22vv8EI%22%3A%22%21v%2A%21%22%2C%22vvy0%22%3A%22%22%2C%22vvv8%22%3A%22a.%22%7D\u0026vy4r=nnG5dAf1\u0026xYyJ=\u0026yvyJ=a\u0026~y=nMAARMGGfn..R5AA11G\u0026eobd=\u0026eoac=RvYbkNvbY\u0026eoch=RvYbkNvbY\u0026ure=1#vgd_sc=03\u0026acl=\u0026aclp=\u0026cl=\u0026clp=\u0026hvsid=00001766275581879015326356485759\u0026l2type=dmola\u0026lp=%7B%22ppvi%22%3A%222151382118167318472%22%2C%22wlstp%22%3A%220%22%7D\u0026matchstring=\u0026pvl=%7B%22nmerr%22%3A%221%22%7D\u0026pvlp=\u0026sbdrId=\u0026verid=\u0026acid=undefined\u0026mprpslog=u5eqezZf_lYyULMtqisNS3GSBklJPR0ktL_GEE7r17IchT3FJbdqsw2irgpzIt5OzbEZnBAxPTFMlknbUnwkIS27wnA4ySvL39PgloPtX1JC4-_rcf8iftCAgLhir1p1SYWqU9xvwJfa7NNHFamyEt1k5sNZpcYXYX8mYDFpj3vH20pfHCmtyuxUyqSS1zdG3CzYHfYdQrimvQiJkGrxHA%3D%3D\u0026tchkpts=%7B%22prel2%22%3A1766275582184%7D\u0026stime=1766275582184\u0026l3d=%257B%2522l2host%2522%253A%2522https%253A%252F%252Fquickresultshunt.com%252Fsr%252F754870121%252FSAFEFRAME.html%253F%252528310NG%253DhMU%252528V%25260N%252528N%253D%25260hkNB%253D%25260sIDddDGLN%253D%25261kdG%253D-5CYO%2526BGcRB%252528%253DS11Nk%25253A%25252F%25252FXUBMknX1mdUM%2526Ft%253D5w%252521%2525213wOOY5..3T%252521%252521vvO%2526GdBth%253D%2526I1F%253D%2526IMGBB%253D5%2526MkNV%253DC%2526Nth%253D%2526Qh%253D%2526QnBX%253D%2526RkNGIX%253DC%2526Rlh%253DT%2526S11Nk%253D5%2526U%252528VX%253DUIG%2526Uth%253DYVGXYhvGJ5sX.JTdXVJYVYwJ3v5ww5%252521V%252521wTT%2526VNpR%253D%2526Vd1%253D24q_BAlXR8XlXRIAl%25252F_%25252F48X8l4VVc4IBTXI%2526Vh13%253D%2526Vh15%253D%2526VhF%253D%2526VhUMVtI%253D%2526d1Nth%253D%2526dBth%253DOw.Yw5O%252521v%2526dSIM.%253D%2526dSIM3%253DUkFTDtI1d%2526dd%253DAx%2526dhF%253Dx3TvT%2526dth%253DYpKTOY3Y3%2526fsth%253D%2526hGdMMM%253D%2526htmlsrc%253D1%2526kd%253DC.%2526kk%252528h%253D%25257B%252522kkdd%252522%25253A%252522Ax%252522%25252C%252522kkd10%252522%25253A%252522Uk%252528U%252522%25252C%252522kktN%252522%25253A%252522%252522%25252C%252522kkkd%252522%25253A%252522C.%252522%25257D%2526kkdd%253D%252521%25257C%252521%25257Cu3Hn%25252AAh9W%2526kshBqh%253D%2526kt_G%253D55OTL%252521Yv%2526lhNB%253D5%2526lhNBdIk1%253D%2526n%252528k1N%253DC%2526nkSN%253DC%2526sG%253DC%2526sVG%253D%2526shBqh%253D%2526sth%253D%2526tkth%253DC%2526tpid%253D%2522%252C%2522be%2522%253A%25220%2522%252C%2522nmerr%2522%253A%25221%2522%257D","fqdn":"quickresultshunt.com","domain":"quickresultshunt.com","tld":"com"},"ip":{"addr":"104.21.4.223","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"fe43622b86a9293f7d94436142bdfdc6","sha1":"01ef22d8f3292bea2b0cfa63e49be5ee758899eb","sha256":"f06061820c8cc9e6d88231bddef898d9ce4a8326f6e00e30e0aca3f924ad3dd4","sha512":"a8cf2feaa0a396472300a52b5d37f123be2249d274c947da255ba4f99a644139d92e010b65461b9575a4e63cddb1e717a085282c435d182186b0e51885f654d5","ssdeep":"","tlshash":"3e70008880202a0000e0080c030323b0238080a88cc28000822ea0033080e030288a8a","size":24,"data":"","first_seen":"2025-03-08T00:25:13.703666Z","last_seen":"2026-04-04T00:32:53.432395Z","times_seen":138342,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"quickresultshunt.com/sr/754870121/SAFEFRAME.html?ule=759\u0026%21%2AcC=%21hr\u0026%21yJ=fcrCfJ1rKnYC.K58CcKfcfMKR1nMMnAcAM55\u0026%2AREI0r=JX%21%2Ac\u00260yJ=\u002688=m6\u00268E0yJ=\u00268J~=6R515\u00268LhX.=\u00268LhXR=%21v~57yhE8\u00268tyJ=GM.fMnGA1\u00268yJ=fFW5GfRfR\u0026Ev8r=wnafG\u0026I0%2A0=\u0026IJv0t=\u0026IYh7887rd0=\u0026JXtC=n\u0026Jr8XXX=\u0026LEE0v=n\u0026NJ0t=n\u0026NJ0t8hvE=\u0026PNJ=5\u0026Pv0rhC=a\u0026Xv0c=a\u0026YJtqJ=\u0026Ycr=\u0026Yr=a\u0026YyJ=\u0026bJ=\u0026bstC=\u0026c0FP=\u0026c8E=pDq4tmNCPSCNCPhmN%2F4%2FDSCSNDcc%29Dht5Ch\u0026cJ%21Xcyh=\u0026cJER=\u0026cJEn=\u0026cJ~=\u0026hE~=\u0026hXrtt=n\u0026htmlsrc=1\u0026kkdd=A%21%7CH%7Cn9A%2A\u0026r8tyJ=\u0026s%2AvE0=a\u0026svL0=a\u0026tpid=\u0026tr%29Pt%2A=LEE0v%3A%2F%2FC%21tXvsCEU8%21X\u0026v8=a.\u0026vYJtqJ=\u0026vv%2AJ=%7B%22vv88%22%3A%22m6%22%2C%22vv8EI%22%3A%22%21v%2A%21%22%2C%22vvy0%22%3A%22%22%2C%22vvv8%22%3A%22a.%22%7D\u0026vy4r=nnG5dAf1\u0026xYyJ=\u0026yvyJ=a\u0026~y=nMAARMGGfn..R5AA11G\u0026eobd=\u0026eoac=RvYbkNvbY\u0026eoch=RvYbkNvbY\u0026ure=1#vgd_sc=03\u0026acl=\u0026aclp=\u0026cl=\u0026clp=\u0026hvsid=00001766275581879015326356485759\u0026l2type=dmola\u0026lp=%7B%22ppvi%22%3A%222151382118167318472%22%2C%22wlstp%22%3A%220%22%7D\u0026matchstring=\u0026pvl=%7B%22nmerr%22%3A%221%22%7D\u0026pvlp=\u0026sbdrId=\u0026verid=\u0026acid=undefined\u0026mprpslog=u5eqezZf_lYyULMtqisNS3GSBklJPR0ktL_GEE7r17IchT3FJbdqsw2irgpzIt5OzbEZnBAxPTFMlknbUnwkIS27wnA4ySvL39PgloPtX1JC4-_rcf8iftCAgLhir1p1SYWqU9xvwJfa7NNHFamyEt1k5sNZpcYXYX8mYDFpj3vH20pfHCmtyuxUyqSS1zdG3CzYHfYdQrimvQiJkGrxHA%3D%3D\u0026tchkpts=%7B%22prel2%22%3A1766275582184%7D\u0026stime=1766275582184\u0026l3d=%257B%2522l2host%2522%253A%2522https%253A%252F%252Fquickresultshunt.com%252Fsr%252F754870121%252FSAFEFRAME.html%253F%252528310NG%253DhMU%252528V%25260N%252528N%253D%25260hkNB%253D%25260sIDddDGLN%253D%25261kdG%253D-5CYO%2526BGcRB%252528%253DS11Nk%25253A%25252F%25252FXUBMknX1mdUM%2526Ft%253D5w%252521%2525213wOOY5..3T%252521%252521vvO%2526GdBth%253D%2526I1F%253D%2526IMGBB%253D5%2526MkNV%253DC%2526Nth%253D%2526Qh%253D%2526QnBX%253D%2526RkNGIX%253DC%2526Rlh%253DT%2526S11Nk%253D5%2526U%252528VX%253DUIG%2526Uth%253DYVGXYhvGJ5sX.JTdXVJYVYwJ3v5ww5%252521V%252521wTT%2526VNpR%253D%2526Vd1%253D24q_BAlXR8XlXRIAl%25252F_%25252F48X8l4VVc4IBTXI%2526Vh13%253D%2526Vh15%253D%2526VhF%253D%2526VhUMVtI%253D%2526d1Nth%253D%2526dBth%253DOw.Yw5O%252521v%2526dSIM.%253D%2526dSIM3%253DUkFTDtI1d%2526dd%253DAx%2526dhF%253Dx3TvT%2526dth%253DYpKTOY3Y3%2526fsth%253D%2526hGdMMM%253D%2526htmlsrc%253D1%2526kd%253DC.%2526kk%252528h%253D%25257B%252522kkdd%252522%25253A%252522Ax%252522%25252C%252522kkd10%252522%25253A%252522Uk%252528U%252522%25252C%252522kktN%252522%25253A%252522%252522%25252C%252522kkkd%252522%25253A%252522C.%252522%25257D%2526kkdd%253D%252521%25257C%252521%25257Cu3Hn%25252AAh9W%2526kshBqh%253D%2526kt_G%253D55OTL%252521Yv%2526lhNB%253D5%2526lhNBdIk1%253D%2526n%252528k1N%253DC%2526nkSN%253DC%2526sG%253DC%2526sVG%253D%2526shBqh%253D%2526sth%253D%2526tkth%253DC%2526tpid%253D%2522%252C%2522be%2522%253A%25220%2522%252C%2522nmerr%2522%253A%25221%2522%257D","fqdn":"quickresultshunt.com","domain":"quickresultshunt.com","tld":"com"},"ip":{"addr":"104.21.4.223","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"e264ba0d29fb3d1d2635ddc6722a3ae2","sha1":"e29efb99432d7acaef30a9b413529b8ec0436f94","sha256":"0d4fe11ec3e1e8490b1fea8809ded83f775e02f62cbd3b319754bccf65423139","sha512":"cb2ca4fc208009beabb4fa1d3311d51db8672b6c5fa82cd0f56cf2b5df43b0b4751212fc672f138252490563f0846bbac5d07011f474ee6eafc6a949bbfd4053","ssdeep":"192:RWzJ07vEceXieBXuy5Y4FDfka5LSH3MMQaAFQ96ZfeA20xflWb:gqvIhLfkeLSH3MMQaAFQ9sfeAnxflI","tlshash":"55d1867e447cc656455d299e3c3c3d8ea8d9364da2cca50fcec2eb98482f9b6de0064c","size":6197,"data":"","first_seen":"2025-12-21T00:06:48.779746Z","last_seen":"2025-12-21T00:06:48.779746Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"quickresultshunt.com/sr/754870121/SAFEFRAME.html?ule=759\u0026%21%2AcC=%21hr\u0026%21yJ=fcrCfJ1rKnYC.K58CcKfcfMKR1nMMnAcAM55\u0026%2AREI0r=JX%21%2Ac\u00260yJ=\u002688=m6\u00268E0yJ=\u00268J~=6R515\u00268LhX.=\u00268LhXR=%21v~57yhE8\u00268tyJ=GM.fMnGA1\u00268yJ=fFW5GfRfR\u0026Ev8r=wnafG\u0026I0%2A0=\u0026IJv0t=\u0026IYh7887rd0=\u0026JXtC=n\u0026Jr8XXX=\u0026LEE0v=n\u0026NJ0t=n\u0026NJ0t8hvE=\u0026PNJ=5\u0026Pv0rhC=a\u0026Xv0c=a\u0026YJtqJ=\u0026Ycr=\u0026Yr=a\u0026YyJ=\u0026bJ=\u0026bstC=\u0026c0FP=\u0026c8E=pDq4tmNCPSCNCPhmN%2F4%2FDSCSNDcc%29Dht5Ch\u0026cJ%21Xcyh=\u0026cJER=\u0026cJEn=\u0026cJ~=\u0026hE~=\u0026hXrtt=n\u0026htmlsrc=1\u0026kkdd=A%21%7CH%7Cn9A%2A\u0026r8tyJ=\u0026s%2AvE0=a\u0026svL0=a\u0026tpid=\u0026tr%29Pt%2A=LEE0v%3A%2F%2FC%21tXvsCEU8%21X\u0026v8=a.\u0026vYJtqJ=\u0026vv%2AJ=%7B%22vv88%22%3A%22m6%22%2C%22vv8EI%22%3A%22%21v%2A%21%22%2C%22vvy0%22%3A%22%22%2C%22vvv8%22%3A%22a.%22%7D\u0026vy4r=nnG5dAf1\u0026xYyJ=\u0026yvyJ=a\u0026~y=nMAARMGGfn..R5AA11G\u0026eobd=\u0026eoac=RvYbkNvbY\u0026eoch=RvYbkNvbY\u0026ure=1#vgd_sc=03\u0026acl=\u0026aclp=\u0026cl=\u0026clp=\u0026hvsid=00001766275581879015326356485759\u0026l2type=dmola\u0026lp=%7B%22ppvi%22%3A%222151382118167318472%22%2C%22wlstp%22%3A%220%22%7D\u0026matchstring=\u0026pvl=%7B%22nmerr%22%3A%221%22%7D\u0026pvlp=\u0026sbdrId=\u0026verid=\u0026acid=undefined\u0026mprpslog=u5eqezZf_lYyULMtqisNS3GSBklJPR0ktL_GEE7r17IchT3FJbdqsw2irgpzIt5OzbEZnBAxPTFMlknbUnwkIS27wnA4ySvL39PgloPtX1JC4-_rcf8iftCAgLhir1p1SYWqU9xvwJfa7NNHFamyEt1k5sNZpcYXYX8mYDFpj3vH20pfHCmtyuxUyqSS1zdG3CzYHfYdQrimvQiJkGrxHA%3D%3D\u0026tchkpts=%7B%22prel2%22%3A1766275582184%7D\u0026stime=1766275582184\u0026l3d=%257B%2522l2host%2522%253A%2522https%253A%252F%252Fquickresultshunt.com%252Fsr%252F754870121%252FSAFEFRAME.html%253F%252528310NG%253DhMU%252528V%25260N%252528N%253D%25260hkNB%253D%25260sIDddDGLN%253D%25261kdG%253D-5CYO%2526BGcRB%252528%253DS11Nk%25253A%25252F%25252FXUBMknX1mdUM%2526Ft%253D5w%252521%2525213wOOY5..3T%252521%252521vvO%2526GdBth%253D%2526I1F%253D%2526IMGBB%253D5%2526MkNV%253DC%2526Nth%253D%2526Qh%253D%2526QnBX%253D%2526RkNGIX%253DC%2526Rlh%253DT%2526S11Nk%253D5%2526U%252528VX%253DUIG%2526Uth%253DYVGXYhvGJ5sX.JTdXVJYVYwJ3v5ww5%252521V%252521wTT%2526VNpR%253D%2526Vd1%253D24q_BAlXR8XlXRIAl%25252F_%25252F48X8l4VVc4IBTXI%2526Vh13%253D%2526Vh15%253D%2526VhF%253D%2526VhUMVtI%253D%2526d1Nth%253D%2526dBth%253DOw.Yw5O%252521v%2526dSIM.%253D%2526dSIM3%253DUkFTDtI1d%2526dd%253DAx%2526dhF%253Dx3TvT%2526dth%253DYpKTOY3Y3%2526fsth%253D%2526hGdMMM%253D%2526htmlsrc%253D1%2526kd%253DC.%2526kk%252528h%253D%25257B%252522kkdd%252522%25253A%252522Ax%252522%25252C%252522kkd10%252522%25253A%252522Uk%252528U%252522%25252C%252522kktN%252522%25253A%252522%252522%25252C%252522kkkd%252522%25253A%252522C.%252522%25257D%2526kkdd%253D%252521%25257C%252521%25257Cu3Hn%25252AAh9W%2526kshBqh%253D%2526kt_G%253D55OTL%252521Yv%2526lhNB%253D5%2526lhNBdIk1%253D%2526n%252528k1N%253DC%2526nkSN%253DC%2526sG%253DC%2526sVG%253D%2526shBqh%253D%2526sth%253D%2526tkth%253DC%2526tpid%253D%2522%252C%2522be%2522%253A%25220%2522%252C%2522nmerr%2522%253A%25221%2522%257D","fqdn":"quickresultshunt.com","domain":"quickresultshunt.com","tld":"com"},"ip":{"addr":"104.21.4.223","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"0c083ebfe6365d43810b89bd9264be4e","sha1":"b45bc23119ecdb596d42798bbad6e56e3904be91","sha256":"384ffbb3de9fd24707567c2e9806fbc2ec29c733ec5b3efef030432526ad0648","sha512":"a9230845509cebd2af1e5c8f08503f21444007945f1db649931e669cb055fa1ff5fce70b81cc302830dd62570524e286d14cf481d60a6ae2b708c4a6f3e383c1","ssdeep":"","tlshash":"bcf0ec6d8fd711603aa1521f725ff2c4b498909b32a3c40af5ecd2444f42a5ea7792fc","size":471,"data":"","first_seen":"2025-12-21T00:06:48.780516Z","last_seen":"2025-12-21T00:06:48.780516Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"quickresultshunt.com/sr/754870121/SAFEFRAME.html?ule=759\u0026%21%2AcC=%21hr\u0026%21yJ=fcrCfJ1rKnYC.K58CcKfcfMKR1nMMnAcAM55\u0026%2AREI0r=JX%21%2Ac\u00260yJ=\u002688=m6\u00268E0yJ=\u00268J~=6R515\u00268LhX.=\u00268LhXR=%21v~57yhE8\u00268tyJ=GM.fMnGA1\u00268yJ=fFW5GfRfR\u0026Ev8r=wnafG\u0026I0%2A0=\u0026IJv0t=\u0026IYh7887rd0=\u0026JXtC=n\u0026Jr8XXX=\u0026LEE0v=n\u0026NJ0t=n\u0026NJ0t8hvE=\u0026PNJ=5\u0026Pv0rhC=a\u0026Xv0c=a\u0026YJtqJ=\u0026Ycr=\u0026Yr=a\u0026YyJ=\u0026bJ=\u0026bstC=\u0026c0FP=\u0026c8E=pDq4tmNCPSCNCPhmN%2F4%2FDSCSNDcc%29Dht5Ch\u0026cJ%21Xcyh=\u0026cJER=\u0026cJEn=\u0026cJ~=\u0026hE~=\u0026hXrtt=n\u0026htmlsrc=1\u0026kkdd=A%21%7CH%7Cn9A%2A\u0026r8tyJ=\u0026s%2AvE0=a\u0026svL0=a\u0026tpid=\u0026tr%29Pt%2A=LEE0v%3A%2F%2FC%21tXvsCEU8%21X\u0026v8=a.\u0026vYJtqJ=\u0026vv%2AJ=%7B%22vv88%22%3A%22m6%22%2C%22vv8EI%22%3A%22%21v%2A%21%22%2C%22vvy0%22%3A%22%22%2C%22vvv8%22%3A%22a.%22%7D\u0026vy4r=nnG5dAf1\u0026xYyJ=\u0026yvyJ=a\u0026~y=nMAARMGGfn..R5AA11G\u0026eobd=\u0026eoac=RvYbkNvbY\u0026eoch=RvYbkNvbY\u0026ure=1#vgd_sc=03\u0026acl=\u0026aclp=\u0026cl=\u0026clp=\u0026hvsid=00001766275581879015326356485759\u0026l2type=dmola\u0026lp=%7B%22ppvi%22%3A%222151382118167318472%22%2C%22wlstp%22%3A%220%22%7D\u0026matchstring=\u0026pvl=%7B%22nmerr%22%3A%221%22%7D\u0026pvlp=\u0026sbdrId=\u0026verid=\u0026acid=undefined\u0026mprpslog=u5eqezZf_lYyULMtqisNS3GSBklJPR0ktL_GEE7r17IchT3FJbdqsw2irgpzIt5OzbEZnBAxPTFMlknbUnwkIS27wnA4ySvL39PgloPtX1JC4-_rcf8iftCAgLhir1p1SYWqU9xvwJfa7NNHFamyEt1k5sNZpcYXYX8mYDFpj3vH20pfHCmtyuxUyqSS1zdG3CzYHfYdQrimvQiJkGrxHA%3D%3D\u0026tchkpts=%7B%22prel2%22%3A1766275582184%7D\u0026stime=1766275582184\u0026l3d=%257B%2522l2host%2522%253A%2522https%253A%252F%252Fquickresultshunt.com%252Fsr%252F754870121%252FSAFEFRAME.html%253F%252528310NG%253DhMU%252528V%25260N%252528N%253D%25260hkNB%253D%25260sIDddDGLN%253D%25261kdG%253D-5CYO%2526BGcRB%252528%253DS11Nk%25253A%25252F%25252FXUBMknX1mdUM%2526Ft%253D5w%252521%2525213wOOY5..3T%252521%252521vvO%2526GdBth%253D%2526I1F%253D%2526IMGBB%253D5%2526MkNV%253DC%2526Nth%253D%2526Qh%253D%2526QnBX%253D%2526RkNGIX%253DC%2526Rlh%253DT%2526S11Nk%253D5%2526U%252528VX%253DUIG%2526Uth%253DYVGXYhvGJ5sX.JTdXVJYVYwJ3v5ww5%252521V%252521wTT%2526VNpR%253D%2526Vd1%253D24q_BAlXR8XlXRIAl%25252F_%25252F48X8l4VVc4IBTXI%2526Vh13%253D%2526Vh15%253D%2526VhF%253D%2526VhUMVtI%253D%2526d1Nth%253D%2526dBth%253DOw.Yw5O%252521v%2526dSIM.%253D%2526dSIM3%253DUkFTDtI1d%2526dd%253DAx%2526dhF%253Dx3TvT%2526dth%253DYpKTOY3Y3%2526fsth%253D%2526hGdMMM%253D%2526htmlsrc%253D1%2526kd%253DC.%2526kk%252528h%253D%25257B%252522kkdd%252522%25253A%252522Ax%252522%25252C%252522kkd10%252522%25253A%252522Uk%252528U%252522%25252C%252522kktN%252522%25253A%252522%252522%25252C%252522kkkd%252522%25253A%252522C.%252522%25257D%2526kkdd%253D%252521%25257C%252521%25257Cu3Hn%25252AAh9W%2526kshBqh%253D%2526kt_G%253D55OTL%252521Yv%2526lhNB%253D5%2526lhNBdIk1%253D%2526n%252528k1N%253DC%2526nkSN%253DC%2526sG%253DC%2526sVG%253D%2526shBqh%253D%2526sth%253D%2526tkth%253DC%2526tpid%253D%2522%252C%2522be%2522%253A%25220%2522%252C%2522nmerr%2522%253A%25221%2522%257D","fqdn":"quickresultshunt.com","domain":"quickresultshunt.com","tld":"com"},"ip":{"addr":"104.21.4.223","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"8c26495cc9a913ac226b28a66a318cbc","sha1":"848cd553ce4cccdeac32082c9376836788cfc970","sha256":"a30ac653ebb26150e222c2c241051021430bf4c316dc86e8a5206e5a2cefb8a1","sha512":"65e260b04ff5937d9fa6f0e2f6227650095ea498348867fe89622442aaab08e7dab18d2dbbff1adf4fc64347007d7c6866931b7e871791581157b2fe3560565b","ssdeep":"768:GK75wr3AU52v4YPgIkRPXBuvdf/rAf1/rnqipO3pSOk+GTtqgVD:b75+Z5TY4pPRuvdru/bqi+gJ","tlshash":"de23d7dc34c2745617672562422f2d4bf17b1a507a4ecc40e5b9e9e63c3c65f8a23e8e","size":47116,"data":"","first_seen":"2025-12-19T10:43:07.805947Z","last_seen":"2025-12-22T14:05:09.049936Z","times_seen":1270,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"quickresultshunt.com/sr/754870121/SAFEFRAME.html?ule=759\u0026%21%2AcC=%21hr\u0026%21yJ=fcrCfJ1rKnYC.K58CcKfcfMKR1nMMnAcAM55\u0026%2AREI0r=JX%21%2Ac\u00260yJ=\u002688=m6\u00268E0yJ=\u00268J~=6R515\u00268LhX.=\u00268LhXR=%21v~57yhE8\u00268tyJ=GM.fMnGA1\u00268yJ=fFW5GfRfR\u0026Ev8r=wnafG\u0026I0%2A0=\u0026IJv0t=\u0026IYh7887rd0=\u0026JXtC=n\u0026Jr8XXX=\u0026LEE0v=n\u0026NJ0t=n\u0026NJ0t8hvE=\u0026PNJ=5\u0026Pv0rhC=a\u0026Xv0c=a\u0026YJtqJ=\u0026Ycr=\u0026Yr=a\u0026YyJ=\u0026bJ=\u0026bstC=\u0026c0FP=\u0026c8E=pDq4tmNCPSCNCPhmN%2F4%2FDSCSNDcc%29Dht5Ch\u0026cJ%21Xcyh=\u0026cJER=\u0026cJEn=\u0026cJ~=\u0026hE~=\u0026hXrtt=n\u0026htmlsrc=1\u0026kkdd=A%21%7CH%7Cn9A%2A\u0026r8tyJ=\u0026s%2AvE0=a\u0026svL0=a\u0026tpid=\u0026tr%29Pt%2A=LEE0v%3A%2F%2FC%21tXvsCEU8%21X\u0026v8=a.\u0026vYJtqJ=\u0026vv%2AJ=%7B%22vv88%22%3A%22m6%22%2C%22vv8EI%22%3A%22%21v%2A%21%22%2C%22vvy0%22%3A%22%22%2C%22vvv8%22%3A%22a.%22%7D\u0026vy4r=nnG5dAf1\u0026xYyJ=\u0026yvyJ=a\u0026~y=nMAARMGGfn..R5AA11G\u0026eobd=\u0026eoac=RvYbkNvbY\u0026eoch=RvYbkNvbY\u0026ure=1#vgd_sc=03\u0026acl=\u0026aclp=\u0026cl=\u0026clp=\u0026hvsid=00001766275581879015326356485759\u0026l2type=dmola\u0026lp=%7B%22ppvi%22%3A%222151382118167318472%22%2C%22wlstp%22%3A%220%22%7D\u0026matchstring=\u0026pvl=%7B%22nmerr%22%3A%221%22%7D\u0026pvlp=\u0026sbdrId=\u0026verid=\u0026acid=undefined\u0026mprpslog=u5eqezZf_lYyULMtqisNS3GSBklJPR0ktL_GEE7r17IchT3FJbdqsw2irgpzIt5OzbEZnBAxPTFMlknbUnwkIS27wnA4ySvL39PgloPtX1JC4-_rcf8iftCAgLhir1p1SYWqU9xvwJfa7NNHFamyEt1k5sNZpcYXYX8mYDFpj3vH20pfHCmtyuxUyqSS1zdG3CzYHfYdQrimvQiJkGrxHA%3D%3D\u0026tchkpts=%7B%22prel2%22%3A1766275582184%7D\u0026stime=1766275582184\u0026l3d=%257B%2522l2host%2522%253A%2522https%253A%252F%252Fquickresultshunt.com%252Fsr%252F754870121%252FSAFEFRAME.html%253F%252528310NG%253DhMU%252528V%25260N%252528N%253D%25260hkNB%253D%25260sIDddDGLN%253D%25261kdG%253D-5CYO%2526BGcRB%252528%253DS11Nk%25253A%25252F%25252FXUBMknX1mdUM%2526Ft%253D5w%252521%2525213wOOY5..3T%252521%252521vvO%2526GdBth%253D%2526I1F%253D%2526IMGBB%253D5%2526MkNV%253DC%2526Nth%253D%2526Qh%253D%2526QnBX%253D%2526RkNGIX%253DC%2526Rlh%253DT%2526S11Nk%253D5%2526U%252528VX%253DUIG%2526Uth%253DYVGXYhvGJ5sX.JTdXVJYVYwJ3v5ww5%252521V%252521wTT%2526VNpR%253D%2526Vd1%253D24q_BAlXR8XlXRIAl%25252F_%25252F48X8l4VVc4IBTXI%2526Vh13%253D%2526Vh15%253D%2526VhF%253D%2526VhUMVtI%253D%2526d1Nth%253D%2526dBth%253DOw.Yw5O%252521v%2526dSIM.%253D%2526dSIM3%253DUkFTDtI1d%2526dd%253DAx%2526dhF%253Dx3TvT%2526dth%253DYpKTOY3Y3%2526fsth%253D%2526hGdMMM%253D%2526htmlsrc%253D1%2526kd%253DC.%2526kk%252528h%253D%25257B%252522kkdd%252522%25253A%252522Ax%252522%25252C%252522kkd10%252522%25253A%252522Uk%252528U%252522%25252C%252522kktN%252522%25253A%252522%252522%25252C%252522kkkd%252522%25253A%252522C.%252522%25257D%2526kkdd%253D%252521%25257C%252521%25257Cu3Hn%25252AAh9W%2526kshBqh%253D%2526kt_G%253D55OTL%252521Yv%2526lhNB%253D5%2526lhNBdIk1%253D%2526n%252528k1N%253DC%2526nkSN%253DC%2526sG%253DC%2526sVG%253D%2526shBqh%253D%2526sth%253D%2526tkth%253DC%2526tpid%253D%2522%252C%2522be%2522%253A%25220%2522%252C%2522nmerr%2522%253A%25221%2522%257D","fqdn":"quickresultshunt.com","domain":"quickresultshunt.com","tld":"com"},"ip":{"addr":"104.21.4.223","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"7ea336f637477485ccd6f9a5b167bd7d","sha1":"8153e4b97c42ab5b73f2f577b43043c8c9283b4b","sha256":"ce4d01ea989bb3b9243f9917fe20a39064135a99b2f3b8cd6832cccb10006b96","sha512":"1ac3fbd0a0c12ef1eacf5dc2a5848e72574bc9ebab4b159fbd080d02b3c49320e5862be0d7404e6ded0c2e2c8c0c43f84d93b966d200007782e282bbab8b3c65","ssdeep":"","tlshash":"c6f0e5b694b3c8285b0f264673ffd684145043e45c05764df1ede49a03e1d4cc0d9eaa","size":481,"data":"","first_seen":"2025-03-08T00:25:13.728891Z","last_seen":"2026-04-04T00:32:53.435478Z","times_seen":138222,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"quickresultshunt.com/sr/754870121/SAFEFRAME.html?ule=759\u0026%21%2AcC=%21hr\u0026%21yJ=fcrCfJ1rKnYC.K58CcKfcfMKR1nMMnAcAM55\u0026%2AREI0r=JX%21%2Ac\u00260yJ=\u002688=m6\u00268E0yJ=\u00268J~=6R515\u00268LhX.=\u00268LhXR=%21v~57yhE8\u00268tyJ=GM.fMnGA1\u00268yJ=fFW5GfRfR\u0026Ev8r=wnafG\u0026I0%2A0=\u0026IJv0t=\u0026IYh7887rd0=\u0026JXtC=n\u0026Jr8XXX=\u0026LEE0v=n\u0026NJ0t=n\u0026NJ0t8hvE=\u0026PNJ=5\u0026Pv0rhC=a\u0026Xv0c=a\u0026YJtqJ=\u0026Ycr=\u0026Yr=a\u0026YyJ=\u0026bJ=\u0026bstC=\u0026c0FP=\u0026c8E=pDq4tmNCPSCNCPhmN%2F4%2FDSCSNDcc%29Dht5Ch\u0026cJ%21Xcyh=\u0026cJER=\u0026cJEn=\u0026cJ~=\u0026hE~=\u0026hXrtt=n\u0026htmlsrc=1\u0026kkdd=A%21%7CH%7Cn9A%2A\u0026r8tyJ=\u0026s%2AvE0=a\u0026svL0=a\u0026tpid=\u0026tr%29Pt%2A=LEE0v%3A%2F%2FC%21tXvsCEU8%21X\u0026v8=a.\u0026vYJtqJ=\u0026vv%2AJ=%7B%22vv88%22%3A%22m6%22%2C%22vv8EI%22%3A%22%21v%2A%21%22%2C%22vvy0%22%3A%22%22%2C%22vvv8%22%3A%22a.%22%7D\u0026vy4r=nnG5dAf1\u0026xYyJ=\u0026yvyJ=a\u0026~y=nMAARMGGfn..R5AA11G\u0026eobd=\u0026eoac=RvYbkNvbY\u0026eoch=RvYbkNvbY\u0026ure=1#vgd_sc=03\u0026acl=\u0026aclp=\u0026cl=\u0026clp=\u0026hvsid=00001766275581879015326356485759\u0026l2type=dmola\u0026lp=%7B%22ppvi%22%3A%222151382118167318472%22%2C%22wlstp%22%3A%220%22%7D\u0026matchstring=\u0026pvl=%7B%22nmerr%22%3A%221%22%7D\u0026pvlp=\u0026sbdrId=\u0026verid=\u0026acid=undefined\u0026mprpslog=u5eqezZf_lYyULMtqisNS3GSBklJPR0ktL_GEE7r17IchT3FJbdqsw2irgpzIt5OzbEZnBAxPTFMlknbUnwkIS27wnA4ySvL39PgloPtX1JC4-_rcf8iftCAgLhir1p1SYWqU9xvwJfa7NNHFamyEt1k5sNZpcYXYX8mYDFpj3vH20pfHCmtyuxUyqSS1zdG3CzYHfYdQrimvQiJkGrxHA%3D%3D\u0026tchkpts=%7B%22prel2%22%3A1766275582184%7D\u0026stime=1766275582184\u0026l3d=%257B%2522l2host%2522%253A%2522https%253A%252F%252Fquickresultshunt.com%252Fsr%252F754870121%252FSAFEFRAME.html%253F%252528310NG%253DhMU%252528V%25260N%252528N%253D%25260hkNB%253D%25260sIDddDGLN%253D%25261kdG%253D-5CYO%2526BGcRB%252528%253DS11Nk%25253A%25252F%25252FXUBMknX1mdUM%2526Ft%253D5w%252521%2525213wOOY5..3T%252521%252521vvO%2526GdBth%253D%2526I1F%253D%2526IMGBB%253D5%2526MkNV%253DC%2526Nth%253D%2526Qh%253D%2526QnBX%253D%2526RkNGIX%253DC%2526Rlh%253DT%2526S11Nk%253D5%2526U%252528VX%253DUIG%2526Uth%253DYVGXYhvGJ5sX.JTdXVJYVYwJ3v5ww5%252521V%252521wTT%2526VNpR%253D%2526Vd1%253D24q_BAlXR8XlXRIAl%25252F_%25252F48X8l4VVc4IBTXI%2526Vh13%253D%2526Vh15%253D%2526VhF%253D%2526VhUMVtI%253D%2526d1Nth%253D%2526dBth%253DOw.Yw5O%252521v%2526dSIM.%253D%2526dSIM3%253DUkFTDtI1d%2526dd%253DAx%2526dhF%253Dx3TvT%2526dth%253DYpKTOY3Y3%2526fsth%253D%2526hGdMMM%253D%2526htmlsrc%253D1%2526kd%253DC.%2526kk%252528h%253D%25257B%252522kkdd%252522%25253A%252522Ax%252522%25252C%252522kkd10%252522%25253A%252522Uk%252528U%252522%25252C%252522kktN%252522%25253A%252522%252522%25252C%252522kkkd%252522%25253A%252522C.%252522%25257D%2526kkdd%253D%252521%25257C%252521%25257Cu3Hn%25252AAh9W%2526kshBqh%253D%2526kt_G%253D55OTL%252521Yv%2526lhNB%253D5%2526lhNBdIk1%253D%2526n%252528k1N%253DC%2526nkSN%253DC%2526sG%253DC%2526sVG%253D%2526shBqh%253D%2526sth%253D%2526tkth%253DC%2526tpid%253D%2522%252C%2522be%2522%253A%25220%2522%252C%2522nmerr%2522%253A%25221%2522%257D","fqdn":"quickresultshunt.com","domain":"quickresultshunt.com","tld":"com"},"ip":{"addr":"104.21.4.223","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"2e8be5ce7a18d21c61ddaa3be3fd99ea","sha1":"7d2e7dcc6e15405e8d20e4287f271756e7f874f3","sha256":"5211c581ce1e9891281e16e8820398ab1f3a835b862b9e168bbffffe8e66ea19","sha512":"202c8e96e23f05dc95606ba0b7b318973a6ce95f22f28d05b4fe3762f335f0db7d989c73f8f0fc4e55cfa2b4c4980bc17433b8132ffba6b6975658322e7eb308","ssdeep":"","tlshash":"a6b02b103d301002007a0183c874c4290136d8f3330044d44b003cec908e440605e74c","size":122,"data":"","first_seen":"2025-04-02T18:01:59.542907Z","last_seen":"2026-04-04T00:32:53.436018Z","times_seen":137848,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null},"http":[{"url":{"schema":"https","addr":"formswft.com/","fqdn":"formswft.com","domain":"formswft.com","tld":"com"},"ip":{"addr":"199.191.50.243","port":443,"asn":40034,"as":"CONFLUENCE-NETWORK-INC","country":"British Virgin Islands","country_code":"VG"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-12-21T00:06:19.021Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"formswft.com","organization":""},"issuer":{"commonName":"ZeroSSL ECC Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Mon, 20 Oct 2025 00:00:00 GMT","end":"Sun, 18 Jan 2026 23:59:59 GMT"},"fingerprint":{"sha1":"73:08:78:49:BE:B1:77:8D:23:FC:E1:A3:C7:FD:7A:19:82:10:CC:E9","sha256":"DE:8E:13:DA:6D:96:A1:E2:3A:83:D5:D8:EA:6C:C6:8F:12:16:F5:3C:AC:39:63:75:B9:B2:70:20:1B:D5:82:C5"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: formswft.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: openresty\r\nDate: Sun, 21 Dec 2025 00:06:13 GMT\r\nContent-Type: text/html\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nx-sc-h: 21-d75s\r\nvia: 1.1 google\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":9418,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (9251)","md5":"cf435bd332fd3b4ee7e45f2524094226","sha1":"329f65b072583eb04cc5eab9aebd6a592a07357d","sha256":"dc6656d7385de64c70ad10d99c13fa176572d11025df1b8de265b3dcd5077b4e","sha512":"8cd1d02487823fc649fefdb7d1a60b24711d6a49bb142acb65d3540c1826f0b87a14ebabebe75eb353d239636d9dac6569e63ce6daa2cb00f29ac4a824f7ac6f","ssdeep":"192:fD7NwwPLI7R8Pw5QROM1kmkLGAvoPLI7R8Pw5QROM1kmEaVAY:ewPL2C+yAvoPL2Cjh","tlshash":"4f121ba240f68c34dace2081dd7d6ff9fd896f26a5ad2c2c8cd8c10811ad67b0c159f6","first_seen":"2025-12-21T00:06:48.771124Z","last_seen":"2025-12-21T00:06:48.771124Z","times_seen":1,"resource_available":false,"data":null}},"time_used":5462,"timings":{"blocked":2458,"dns":282,"connect":123,"send":0,"wait":545,"receive":1,"ssl":2050},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"formswft.com/favicon.ico","fqdn":"formswft.com","domain":"formswft.com","tld":"com"},"ip":{"addr":"199.191.50.243","port":443,"asn":40034,"as":"CONFLUENCE-NETWORK-INC","country":"British Virgin Islands","country_code":"VG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://formswft.com/","date":"2025-12-21T00:06:22.307Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"formswft.com","organization":""},"issuer":{"commonName":"ZeroSSL ECC Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Mon, 20 Oct 2025 00:00:00 GMT","end":"Sun, 18 Jan 2026 23:59:59 GMT"},"fingerprint":{"sha1":"73:08:78:49:BE:B1:77:8D:23:FC:E1:A3:C7:FD:7A:19:82:10:CC:E9","sha256":"DE:8E:13:DA:6D:96:A1:E2:3A:83:D5:D8:EA:6C:C6:8F:12:16:F5:3C:AC:39:63:75:B9:B2:70:20:1B:D5:82:C5"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: formswft.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://formswft.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: openresty\r\nDate: Sun, 21 Dec 2025 00:06:14 GMT\r\nContent-Type: image/x-icon\r\nContent-Length: 198\r\nConnection: keep-alive\r\naccept-ranges: bytes\r\nvia: 1.1 google\r\nCache-Control: public,max-age=604800\r\nAge: 99883\r\nLast-Modified: Tue, 01 Jul 2025 13:38:24 GMT\r\nX-Cache-Status: hit\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]}],"data":{"size":198,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 16x16, 2 colors","md5":"3678cdbd64a22fa30ac1cbd55c172a0d","sha1":"f7eec842b643978bf4170df2ffbee8527df75b11","sha256":"c0b46ef8c31c29febb37a659fbaf512b3144261d023dcfab44da82502feb4e79","sha512":"bee9b34872133f110c73ae6ed24da0f385b54894393eeb5a5c09162665710e9e5db9d997305f249ccf136f6c9a85d1d6b48629a2fb01b8ce9e612279741801c5","ssdeep":"","tlshash":"9fd002833204c456c0080735c055d7f472654d155a95160708003d773c805884c64550","first_seen":"2023-07-30T22:25:04Z","last_seen":"2026-04-04T00:32:53.424658Z","times_seen":67966,"resource_available":false,"data":null}},"time_used":182,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":182,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s.cdn-fileserver.com/__media__/pics/9000/09/593//arrrow.png","fqdn":"s.cdn-fileserver.com","domain":"cdn-fileserver.com","tld":"com"},"ip":{"addr":"104.21.31.250","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://quickresultshunt.com/sr/754870121/SAFEFRAME.html?ule=759\u0026%21%2AcC=%21hr\u0026%21yJ=fcrCfJ1rKnYC.K58CcKfcfMKR1nMMnAcAM55\u0026%2AREI0r=JX%21%2Ac\u00260yJ=\u002688=m6\u00268E0yJ=\u00268J~=6R515\u00268LhX.=\u00268LhXR=%21v~57yhE8\u00268tyJ=GM.fMnGA1\u00268yJ=fFW5GfRfR\u0026Ev8r=wnafG\u0026I0%2A0=\u0026IJv0t=\u0026IYh7887rd0=\u0026JXtC=n\u0026Jr8XXX=\u0026LEE0v=n\u0026NJ0t=n\u0026NJ0t8hvE=\u0026PNJ=5\u0026Pv0rhC=a\u0026Xv0c=a\u0026YJtqJ=\u0026Ycr=\u0026Yr=a\u0026YyJ=\u0026bJ=\u0026bstC=\u0026c0FP=\u0026c8E=pDq4tmNCPSCNCPhmN%2F4%2FDSCSNDcc%29Dht5Ch\u0026cJ%21Xcyh=\u0026cJER=\u0026cJEn=\u0026cJ~=\u0026hE~=\u0026hXrtt=n\u0026htmlsrc=1\u0026kkdd=A%21%7CH%7Cn9A%2A\u0026r8tyJ=\u0026s%2AvE0=a\u0026svL0=a\u0026tpid=\u0026tr%29Pt%2A=LEE0v%3A%2F%2FC%21tXvsCEU8%21X\u0026v8=a.\u0026vYJtqJ=\u0026vv%2AJ=%7B%22vv88%22%3A%22m6%22%2C%22vv8EI%22%3A%22%21v%2A%21%22%2C%22vvy0%22%3A%22%22%2C%22vvv8%22%3A%22a.%22%7D\u0026vy4r=nnG5dAf1\u0026xYyJ=\u0026yvyJ=a\u0026~y=nMAARMGGfn..R5AA11G\u0026eobd=\u0026eoac=RvYbkNvbY\u0026eoch=RvYbkNvbY\u0026ure=1#vgd_sc=03\u0026acl=\u0026aclp=\u0026cl=\u0026clp=\u0026hvsid=00001766275581879015326356485759\u0026l2type=dmola\u0026lp=%7B%22ppvi%22%3A%222151382118167318472%22%2C%22wlstp%22%3A%220%22%7D\u0026matchstring=\u0026pvl=%7B%22nmerr%22%3A%221%22%7D\u0026pvlp=\u0026sbdrId=\u0026verid=\u0026acid=undefined\u0026mprpslog=u5eqezZf_lYyULMtqisNS3GSBklJPR0ktL_GEE7r17IchT3FJbdqsw2irgpzIt5OzbEZnBAxPTFMlknbUnwkIS27wnA4ySvL39PgloPtX1JC4-_rcf8iftCAgLhir1p1SYWqU9xvwJfa7NNHFamyEt1k5sNZpcYXYX8mYDFpj3vH20pfHCmtyuxUyqSS1zdG3CzYHfYdQrimvQiJkGrxHA%3D%3D\u0026tchkpts=%7B%22prel2%22%3A1766275582184%7D\u0026stime=1766275582184\u0026l3d=%257B%2522l2host%2522%253A%2522https%253A%252F%252Fquickresultshunt.com%252Fsr%252F754870121%252FSAFEFRAME.html%253F%252528310NG%253DhMU%252528V%25260N%252528N%253D%25260hkNB%253D%25260sIDddDGLN%253D%25261kdG%253D-5CYO%2526BGcRB%252528%253DS11Nk%25253A%25252F%25252FXUBMknX1mdUM%2526Ft%253D5w%252521%2525213wOOY5..3T%252521%252521vvO%2526GdBth%253D%2526I1F%253D%2526IMGBB%253D5%2526MkNV%253DC%2526Nth%253D%2526Qh%253D%2526QnBX%253D%2526RkNGIX%253DC%2526Rlh%253DT%2526S11Nk%253D5%2526U%252528VX%253DUIG%2526Uth%253DYVGXYhvGJ5sX.JTdXVJYVYwJ3v5ww5%252521V%252521wTT%2526VNpR%253D%2526Vd1%253D24q_BAlXR8XlXRIAl%25252F_%25252F48X8l4VVc4IBTXI%2526Vh13%253D%2526Vh15%253D%2526VhF%253D%2526VhUMVtI%253D%2526d1Nth%253D%2526dBth%253DOw.Yw5O%252521v%2526dSIM.%253D%2526dSIM3%253DUkFTDtI1d%2526dd%253DAx%2526dhF%253Dx3TvT%2526dth%253DYpKTOY3Y3%2526fsth%253D%2526hGdMMM%253D%2526htmlsrc%253D1%2526kd%253DC.%2526kk%252528h%253D%25257B%252522kkdd%252522%25253A%252522Ax%252522%25252C%252522kkd10%252522%25253A%252522Uk%252528U%252522%25252C%252522kktN%252522%25253A%252522%252522%25252C%252522kkkd%252522%25253A%252522C.%252522%25257D%2526kkdd%253D%252521%25257C%252521%25257Cu3Hn%25252AAh9W%2526kshBqh%253D%2526kt_G%253D55OTL%252521Yv%2526lhNB%253D5%2526lhNBdIk1%253D%2526n%252528k1N%253DC%2526nkSN%253DC%2526sG%253DC%2526sVG%253D%2526shBqh%253D%2526sth%253D%2526tkth%253DC%2526tpid%253D%2522%252C%2522be%2522%253A%25220%2522%252C%2522nmerr%2522%253A%25221%2522%257D","date":"2025-12-21T00:06:22.687Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn-fileserver.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 30 Nov 2025 15:48:41 GMT","end":"Sat, 28 Feb 2026 16:47:10 GMT"},"fingerprint":{"sha1":"B6:15:E0:AA:2B:F2:1A:96:0A:90:53:E3:BA:E4:61:85:FA:35:8C:5A","sha256":"AF:0A:96:E0:3A:65:9A:90:80:F1:73:2C:66:E0:90:E6:6B:6C:23:08:E5:9E:AA:0E:52:53:23:5B:14:9A:9B:6E"}}},"request":{"raw":"GET /__media__/pics/9000/09/593//arrrow.png HTTP/1.1\r\nHost: s.cdn-fileserver.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://quickresultshunt.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 21 Dec 2025 00:06:22 GMT\r\ncontent-type: image/png\r\ncontent-length: 283\r\nserver: cloudflare\r\nlast-modified: Thu, 06 Mar 2025 13:05:37 GMT\r\naccept-ranges: bytes\r\ncache-control: public, max-age=604800\r\nvia: 1.1 google\r\nx-cache-status: miss\r\nalt-svc: h3=\":443\"; ma=86400\r\netag: \"11b-62fac2985d568\"\r\nage: 319333\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FH8d%2BR7gpkizF7b%2FipstAXhmGTu2txdR5OLU5w5mq6X02TVbszfMPIVQQoQSXcGoItK4tQkBtNsxc2xiHxIadRsmR9CDmJpQSnMbpW%2B8b5%2BUvBku\"}]}\r\ncf-ray: 9b132217fc6d120a-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]}],"data":{"size":283,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 17 x 27, 8-bit colormap, non-interlaced","md5":"80d42c82a6c37da90210fd60a2f36128","sha1":"554ba7c84d2a27ecf3b1f29d03e62101936b54d8","sha256":"a1626e2d9160a0890a0a8d6e3af9e7095d68a24f9fb5ac8a166000c9a2581e10","sha512":"8ecb032c38176996ee637009833f3399f773b325e4f574fbbd26f93cdb82892c4143c5816543052b3a5123b89ef4b1aaca0407315aab879968085e61a20786b6","ssdeep":"","tlshash":"38d023cb5d512c3dd3615031445810799df2ad602c774182013eb4760f73545c658714","first_seen":"2023-04-06T17:33:21Z","last_seen":"2026-04-04T00:32:53.425384Z","times_seen":148368,"resource_available":false,"data":null}},"time_used":70,"timings":{"blocked":29,"dns":6,"connect":2,"send":0,"wait":9,"receive":2,"ssl":18},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"s.cdn-fileserver.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"s.cdn-fileserver.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-21","alert":"Sinkholed","trigger":"s.cdn-fileserver.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"s.cdn-fileserver.com/__media__/pics/9000/09/593//bg1.png","fqdn":"s.cdn-fileserver.com","domain":"cdn-fileserver.com","tld":"com"},"ip":{"addr":"104.21.31.250","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://quickresultshunt.com/sr/754870121/SAFEFRAME.html?ule=759\u0026%21%2AcC=%21hr\u0026%21yJ=fcrCfJ1rKnYC.K58CcKfcfMKR1nMMnAcAM55\u0026%2AREI0r=JX%21%2Ac\u00260yJ=\u002688=m6\u00268E0yJ=\u00268J~=6R515\u00268LhX.=\u00268LhXR=%21v~57yhE8\u00268tyJ=GM.fMnGA1\u00268yJ=fFW5GfRfR\u0026Ev8r=wnafG\u0026I0%2A0=\u0026IJv0t=\u0026IYh7887rd0=\u0026JXtC=n\u0026Jr8XXX=\u0026LEE0v=n\u0026NJ0t=n\u0026NJ0t8hvE=\u0026PNJ=5\u0026Pv0rhC=a\u0026Xv0c=a\u0026YJtqJ=\u0026Ycr=\u0026Yr=a\u0026YyJ=\u0026bJ=\u0026bstC=\u0026c0FP=\u0026c8E=pDq4tmNCPSCNCPhmN%2F4%2FDSCSNDcc%29Dht5Ch\u0026cJ%21Xcyh=\u0026cJER=\u0026cJEn=\u0026cJ~=\u0026hE~=\u0026hXrtt=n\u0026htmlsrc=1\u0026kkdd=A%21%7CH%7Cn9A%2A\u0026r8tyJ=\u0026s%2AvE0=a\u0026svL0=a\u0026tpid=\u0026tr%29Pt%2A=LEE0v%3A%2F%2FC%21tXvsCEU8%21X\u0026v8=a.\u0026vYJtqJ=\u0026vv%2AJ=%7B%22vv88%22%3A%22m6%22%2C%22vv8EI%22%3A%22%21v%2A%21%22%2C%22vvy0%22%3A%22%22%2C%22vvv8%22%3A%22a.%22%7D\u0026vy4r=nnG5dAf1\u0026xYyJ=\u0026yvyJ=a\u0026~y=nMAARMGGfn..R5AA11G\u0026eobd=\u0026eoac=RvYbkNvbY\u0026eoch=RvYbkNvbY\u0026ure=1#vgd_sc=03\u0026acl=\u0026aclp=\u0026cl=\u0026clp=\u0026hvsid=00001766275581879015326356485759\u0026l2type=dmola\u0026lp=%7B%22ppvi%22%3A%222151382118167318472%22%2C%22wlstp%22%3A%220%22%7D\u0026matchstring=\u0026pvl=%7B%22nmerr%22%3A%221%22%7D\u0026pvlp=\u0026sbdrId=\u0026verid=\u0026acid=undefined\u0026mprpslog=u5eqezZf_lYyULMtqisNS3GSBklJPR0ktL_GEE7r17IchT3FJbdqsw2irgpzIt5OzbEZnBAxPTFMlknbUnwkIS27wnA4ySvL39PgloPtX1JC4-_rcf8iftCAgLhir1p1SYWqU9xvwJfa7NNHFamyEt1k5sNZpcYXYX8mYDFpj3vH20pfHCmtyuxUyqSS1zdG3CzYHfYdQrimvQiJkGrxHA%3D%3D\u0026tchkpts=%7B%22prel2%22%3A1766275582184%7D\u0026stime=1766275582184\u0026l3d=%257B%2522l2host%2522%253A%2522https%253A%252F%252Fquickresultshunt.com%252Fsr%252F754870121%252FSAFEFRAME.html%253F%252528310NG%253DhMU%252528V%25260N%252528N%253D%25260hkNB%253D%25260sIDddDGLN%253D%25261kdG%253D-5CYO%2526BGcRB%252528%253DS11Nk%25253A%25252F%25252FXUBMknX1mdUM%2526Ft%253D5w%252521%2525213wOOY5..3T%252521%252521vvO%2526GdBth%253D%2526I1F%253D%2526IMGBB%253D5%2526MkNV%253DC%2526Nth%253D%2526Qh%253D%2526QnBX%253D%2526RkNGIX%253DC%2526Rlh%253DT%2526S11Nk%253D5%2526U%252528VX%253DUIG%2526Uth%253DYVGXYhvGJ5sX.JTdXVJYVYwJ3v5ww5%252521V%252521wTT%2526VNpR%253D%2526Vd1%253D24q_BAlXR8XlXRIAl%25252F_%25252F48X8l4VVc4IBTXI%2526Vh13%253D%2526Vh15%253D%2526VhF%253D%2526VhUMVtI%253D%2526d1Nth%253D%2526dBth%253DOw.Yw5O%252521v%2526dSIM.%253D%2526dSIM3%253DUkFTDtI1d%2526dd%253DAx%2526dhF%253Dx3TvT%2526dth%253DYpKTOY3Y3%2526fsth%253D%2526hGdMMM%253D%2526htmlsrc%253D1%2526kd%253DC.%2526kk%252528h%253D%25257B%252522kkdd%252522%25253A%252522Ax%252522%25252C%252522kkd10%252522%25253A%252522Uk%252528U%252522%25252C%252522kktN%252522%25253A%252522%252522%25252C%252522kkkd%252522%25253A%252522C.%252522%25257D%2526kkdd%253D%252521%25257C%252521%25257Cu3Hn%25252AAh9W%2526kshBqh%253D%2526kt_G%253D55OTL%252521Yv%2526lhNB%253D5%2526lhNBdIk1%253D%2526n%252528k1N%253DC%2526nkSN%253DC%2526sG%253DC%2526sVG%253D%2526shBqh%253D%2526sth%253D%2526tkth%253DC%2526tpid%253D%2522%252C%2522be%2522%253A%25220%2522%252C%2522nmerr%2522%253A%25221%2522%257D","date":"2025-12-21T00:06:22.715Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn-fileserver.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 30 Nov 2025 15:48:41 GMT","end":"Sat, 28 Feb 2026 16:47:10 GMT"},"fingerprint":{"sha1":"B6:15:E0:AA:2B:F2:1A:96:0A:90:53:E3:BA:E4:61:85:FA:35:8C:5A","sha256":"AF:0A:96:E0:3A:65:9A:90:80:F1:73:2C:66:E0:90:E6:6B:6C:23:08:E5:9E:AA:0E:52:53:23:5B:14:9A:9B:6E"}}},"request":{"raw":"GET /__media__/pics/9000/09/593//bg1.png HTTP/1.1\r\nHost: s.cdn-fileserver.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://quickresultshunt.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 21 Dec 2025 00:06:22 GMT\r\ncontent-type: image/png\r\ncontent-length: 17986\r\nserver: cloudflare\r\naccept-ranges: bytes\r\nvia: 1.1 google\r\ncache-control: public, max-age=604800\r\nlast-modified: Thu, 06 Mar 2025 12:55:21 GMT\r\nage: 164036\r\nx-cache-status: hit\r\nalt-svc: h3=\":443\"; ma=86400\r\netag: \"4642-62fac04c7759a\"\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BMmcQcyDOLJD2%2FciQp%2FGkbxxsowAA%2B7cZLThsspt4IsddKAiJ%2FYs0q%2FxN%2FevA205lo0I7TLlsScKr0oplKq2tWh%2B%2Fd9HY%2Fu%2BBY8TmT5fPzA1Sd9R\"}]}\r\ncf-ray: 9b132217fc70120a-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":17986,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1730 x 988, 4-bit colormap, non-interlaced","md5":"825ccd29ac102fcadaf92b2343d5917b","sha1":"24472e766cfac5b82a73b219796556a0a3702bd6","sha256":"0878fb2875c0ad852de8fb3e8f443afdf3064890f1443b3feccc274382f913cd","sha512":"71b8e7c0813227f5efa4b4e0561978b13672f46ee441bc222ad77aa46a32f0f44a5dab3ef038bb3418190e69dced597a79e77566da01a259f1cd6b5298a08662","ssdeep":"384:/ATpX6Cex7jSxPgvgsODg/B2HgqSSeMjhRNAxB60ZL/HU+HqofTBf:ipX6nx7elggsODg52AqSSJhIxBZZLc8N","tlshash":"8a82bef49ea4241cdde2dfbce09243d635e8fb03481a9c516bcb46c27459ea2782c71d","first_seen":"2023-04-06T22:32:28Z","last_seen":"2026-04-04T00:32:53.429475Z","times_seen":148344,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":11,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"s.cdn-fileserver.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"s.cdn-fileserver.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-21","alert":"Sinkholed","trigger":"s.cdn-fileserver.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"msadsscale.microsoft.com/bingads/telemetryJS.js","fqdn":"msadsscale.microsoft.com","domain":"microsoft.com","tld":"com"},"ip":{"addr":"13.107.213.53","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://quickresultshunt.com/sr/754870121/SAFEFRAME.html?ule=759\u0026%21%2AcC=%21hr\u0026%21yJ=fcrCfJ1rKnYC.K58CcKfcfMKR1nMMnAcAM55\u0026%2AREI0r=JX%21%2Ac\u00260yJ=\u002688=m6\u00268E0yJ=\u00268J~=6R515\u00268LhX.=\u00268LhXR=%21v~57yhE8\u00268tyJ=GM.fMnGA1\u00268yJ=fFW5GfRfR\u0026Ev8r=wnafG\u0026I0%2A0=\u0026IJv0t=\u0026IYh7887rd0=\u0026JXtC=n\u0026Jr8XXX=\u0026LEE0v=n\u0026NJ0t=n\u0026NJ0t8hvE=\u0026PNJ=5\u0026Pv0rhC=a\u0026Xv0c=a\u0026YJtqJ=\u0026Ycr=\u0026Yr=a\u0026YyJ=\u0026bJ=\u0026bstC=\u0026c0FP=\u0026c8E=pDq4tmNCPSCNCPhmN%2F4%2FDSCSNDcc%29Dht5Ch\u0026cJ%21Xcyh=\u0026cJER=\u0026cJEn=\u0026cJ~=\u0026hE~=\u0026hXrtt=n\u0026htmlsrc=1\u0026kkdd=A%21%7CH%7Cn9A%2A\u0026r8tyJ=\u0026s%2AvE0=a\u0026svL0=a\u0026tpid=\u0026tr%29Pt%2A=LEE0v%3A%2F%2FC%21tXvsCEU8%21X\u0026v8=a.\u0026vYJtqJ=\u0026vv%2AJ=%7B%22vv88%22%3A%22m6%22%2C%22vv8EI%22%3A%22%21v%2A%21%22%2C%22vvy0%22%3A%22%22%2C%22vvv8%22%3A%22a.%22%7D\u0026vy4r=nnG5dAf1\u0026xYyJ=\u0026yvyJ=a\u0026~y=nMAARMGGfn..R5AA11G\u0026eobd=\u0026eoac=RvYbkNvbY\u0026eoch=RvYbkNvbY\u0026ure=1#vgd_sc=03\u0026acl=\u0026aclp=\u0026cl=\u0026clp=\u0026hvsid=00001766275581879015326356485759\u0026l2type=dmola\u0026lp=%7B%22ppvi%22%3A%222151382118167318472%22%2C%22wlstp%22%3A%220%22%7D\u0026matchstring=\u0026pvl=%7B%22nmerr%22%3A%221%22%7D\u0026pvlp=\u0026sbdrId=\u0026verid=\u0026acid=undefined\u0026mprpslog=u5eqezZf_lYyULMtqisNS3GSBklJPR0ktL_GEE7r17IchT3FJbdqsw2irgpzIt5OzbEZnBAxPTFMlknbUnwkIS27wnA4ySvL39PgloPtX1JC4-_rcf8iftCAgLhir1p1SYWqU9xvwJfa7NNHFamyEt1k5sNZpcYXYX8mYDFpj3vH20pfHCmtyuxUyqSS1zdG3CzYHfYdQrimvQiJkGrxHA%3D%3D\u0026tchkpts=%7B%22prel2%22%3A1766275582184%7D\u0026stime=1766275582184\u0026l3d=%257B%2522l2host%2522%253A%2522https%253A%252F%252Fquickresultshunt.com%252Fsr%252F754870121%252FSAFEFRAME.html%253F%252528310NG%253DhMU%252528V%25260N%252528N%253D%25260hkNB%253D%25260sIDddDGLN%253D%25261kdG%253D-5CYO%2526BGcRB%252528%253DS11Nk%25253A%25252F%25252FXUBMknX1mdUM%2526Ft%253D5w%252521%2525213wOOY5..3T%252521%252521vvO%2526GdBth%253D%2526I1F%253D%2526IMGBB%253D5%2526MkNV%253DC%2526Nth%253D%2526Qh%253D%2526QnBX%253D%2526RkNGIX%253DC%2526Rlh%253DT%2526S11Nk%253D5%2526U%252528VX%253DUIG%2526Uth%253DYVGXYhvGJ5sX.JTdXVJYVYwJ3v5ww5%252521V%252521wTT%2526VNpR%253D%2526Vd1%253D24q_BAlXR8XlXRIAl%25252F_%25252F48X8l4VVc4IBTXI%2526Vh13%253D%2526Vh15%253D%2526VhF%253D%2526VhUMVtI%253D%2526d1Nth%253D%2526dBth%253DOw.Yw5O%252521v%2526dSIM.%253D%2526dSIM3%253DUkFTDtI1d%2526dd%253DAx%2526dhF%253Dx3TvT%2526dth%253DYpKTOY3Y3%2526fsth%253D%2526hGdMMM%253D%2526htmlsrc%253D1%2526kd%253DC.%2526kk%252528h%253D%25257B%252522kkdd%252522%25253A%252522Ax%252522%25252C%252522kkd10%252522%25253A%252522Uk%252528U%252522%25252C%252522kktN%252522%25253A%252522%252522%25252C%252522kkkd%252522%25253A%252522C.%252522%25257D%2526kkdd%253D%252521%25257C%252521%25257Cu3Hn%25252AAh9W%2526kshBqh%253D%2526kt_G%253D55OTL%252521Yv%2526lhNB%253D5%2526lhNBdIk1%253D%2526n%252528k1N%253DC%2526nkSN%253DC%2526sG%253DC%2526sVG%253D%2526shBqh%253D%2526sth%253D%2526tkth%253DC%2526tpid%253D%2522%252C%2522be%2522%253A%25220%2522%252C%2522nmerr%2522%253A%25221%2522%257D","date":"2025-12-21T00:06:22.933Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"msadsscale.microsoft.com","organization":""},"issuer":{"commonName":"GeoTrust Global TLS RSA4096 SHA256 2022 CA1","organization":"DigiCert, Inc."},"validity":{"start":"Thu, 31 Jul 2025 00:00:00 GMT","end":"Sat, 31 Jan 2026 23:59:59 GMT"},"fingerprint":{"sha1":"34:39:11:D9:81:82:9F:0D:13:FF:7F:59:87:CB:0A:A8:B2:97:4E:0D","sha256":"91:83:F9:25:CC:CC:3E:DE:FD:B5:F0:CA:F2:E0:10:35:CF:D7:DC:52:B9:4B:1E:D2:DC:9B:5B:86:F7:91:A3:E8"}}},"request":{"raw":"GET /bingads/telemetryJS.js HTTP/1.1\r\nHost: msadsscale.microsoft.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://quickresultshunt.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 21 Dec 2025 00:06:22 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding\r\nlast-modified: Wed, 12 Mar 2025 08:06:51 GMT\r\netag: W/\"0x8DD613CD8BAF720\"\r\nx-ms-request-id: 38ad6270-e01e-005d-3910-71c8a8000000\r\nx-ms-version: 2018-03-28\r\naccess-control-expose-headers: content-length\r\naccess-control-allow-origin: *\r\nx-azure-ref: 20251221T000622Z-17f644c5599d8lbphC1SVGgc3800000006rg000000004rvd\r\nx-fd-int-roxy-purgeid: 0\r\nx-cache: TCP_HIT\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Azure Front Door","description":"Azure Front Door is a scalable and secure entry point for fast delivery of your global web applications.","website":"https://docs.microsoft.com/en-us/azure/frontdoor/","common_platform_enumeration":"","icon":"Azure.svg","categories":["Load balancers"]},{"name":"Azure","description":"Azure is a cloud computing service for building, testing, deploying, and managing applications and services through Microsoft-managed data centers.","website":"https://azure.microsoft.com","common_platform_enumeration":"","icon":"Azure.svg","categories":["PaaS"]}],"data":{"size":72824,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65504), with no line terminators","md5":"84bf71fe11d71bedaac885462b1d2940","sha1":"bdcf95799b79eea873329ddbd112eda32f47877e","sha256":"a8d28463855fcf949fb31963246cc6c55ea9baf9c5551b327687dcd6076502f7","sha512":"02d7de1db70f021c17bc184e1e795cc01f63889731f444ca429040f3599dccdb346c68e8e5e69fc81060972b7ccbcebf1e9294e50318957ded8cb0cbeecacb3e","ssdeep":"768:TM4lJgxIU3OPOEUi6UsQ6R1k/Y7/LKF/ZE/4OkeZChQZqeYQYTyCLJV6N//MFgPc:A4voIU+POE3kMMmF/6VbqXQQfI/EgYuo","tlshash":"5a63938df1d1b0f607e7a0e5412f960ae1b72968b45ea8d6e6a1d4e09c7884f1037f7c","first_seen":"2025-03-13T12:39:24.627452Z","last_seen":"2026-04-04T00:32:53.426739Z","times_seen":90913,"resource_available":true,"data":null}},"time_used":193,"timings":{"blocked":49,"dns":55,"connect":20,"send":0,"wait":40,"receive":0,"ssl":25},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s.yimg.com/ds/scripts/selectTier-p1.1.0.js","fqdn":"s.yimg.com","domain":"yimg.com","tld":"com"},"ip":{"addr":"87.248.119.252","port":443,"asn":203220,"as":"Yahoo-UK Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://quickresultshunt.com/sr/754870121/SAFEFRAME.html?ule=759\u0026%21%2AcC=%21hr\u0026%21yJ=fcrCfJ1rKnYC.K58CcKfcfMKR1nMMnAcAM55\u0026%2AREI0r=JX%21%2Ac\u00260yJ=\u002688=m6\u00268E0yJ=\u00268J~=6R515\u00268LhX.=\u00268LhXR=%21v~57yhE8\u00268tyJ=GM.fMnGA1\u00268yJ=fFW5GfRfR\u0026Ev8r=wnafG\u0026I0%2A0=\u0026IJv0t=\u0026IYh7887rd0=\u0026JXtC=n\u0026Jr8XXX=\u0026LEE0v=n\u0026NJ0t=n\u0026NJ0t8hvE=\u0026PNJ=5\u0026Pv0rhC=a\u0026Xv0c=a\u0026YJtqJ=\u0026Ycr=\u0026Yr=a\u0026YyJ=\u0026bJ=\u0026bstC=\u0026c0FP=\u0026c8E=pDq4tmNCPSCNCPhmN%2F4%2FDSCSNDcc%29Dht5Ch\u0026cJ%21Xcyh=\u0026cJER=\u0026cJEn=\u0026cJ~=\u0026hE~=\u0026hXrtt=n\u0026htmlsrc=1\u0026kkdd=A%21%7CH%7Cn9A%2A\u0026r8tyJ=\u0026s%2AvE0=a\u0026svL0=a\u0026tpid=\u0026tr%29Pt%2A=LEE0v%3A%2F%2FC%21tXvsCEU8%21X\u0026v8=a.\u0026vYJtqJ=\u0026vv%2AJ=%7B%22vv88%22%3A%22m6%22%2C%22vv8EI%22%3A%22%21v%2A%21%22%2C%22vvy0%22%3A%22%22%2C%22vvv8%22%3A%22a.%22%7D\u0026vy4r=nnG5dAf1\u0026xYyJ=\u0026yvyJ=a\u0026~y=nMAARMGGfn..R5AA11G\u0026eobd=\u0026eoac=RvYbkNvbY\u0026eoch=RvYbkNvbY\u0026ure=1#vgd_sc=03\u0026acl=\u0026aclp=\u0026cl=\u0026clp=\u0026hvsid=00001766275581879015326356485759\u0026l2type=dmola\u0026lp=%7B%22ppvi%22%3A%222151382118167318472%22%2C%22wlstp%22%3A%220%22%7D\u0026matchstring=\u0026pvl=%7B%22nmerr%22%3A%221%22%7D\u0026pvlp=\u0026sbdrId=\u0026verid=\u0026acid=undefined\u0026mprpslog=u5eqezZf_lYyULMtqisNS3GSBklJPR0ktL_GEE7r17IchT3FJbdqsw2irgpzIt5OzbEZnBAxPTFMlknbUnwkIS27wnA4ySvL39PgloPtX1JC4-_rcf8iftCAgLhir1p1SYWqU9xvwJfa7NNHFamyEt1k5sNZpcYXYX8mYDFpj3vH20pfHCmtyuxUyqSS1zdG3CzYHfYdQrimvQiJkGrxHA%3D%3D\u0026tchkpts=%7B%22prel2%22%3A1766275582184%7D\u0026stime=1766275582184\u0026l3d=%257B%2522l2host%2522%253A%2522https%253A%252F%252Fquickresultshunt.com%252Fsr%252F754870121%252FSAFEFRAME.html%253F%252528310NG%253DhMU%252528V%25260N%252528N%253D%25260hkNB%253D%25260sIDddDGLN%253D%25261kdG%253D-5CYO%2526BGcRB%252528%253DS11Nk%25253A%25252F%25252FXUBMknX1mdUM%2526Ft%253D5w%252521%2525213wOOY5..3T%252521%252521vvO%2526GdBth%253D%2526I1F%253D%2526IMGBB%253D5%2526MkNV%253DC%2526Nth%253D%2526Qh%253D%2526QnBX%253D%2526RkNGIX%253DC%2526Rlh%253DT%2526S11Nk%253D5%2526U%252528VX%253DUIG%2526Uth%253DYVGXYhvGJ5sX.JTdXVJYVYwJ3v5ww5%252521V%252521wTT%2526VNpR%253D%2526Vd1%253D24q_BAlXR8XlXRIAl%25252F_%25252F48X8l4VVc4IBTXI%2526Vh13%253D%2526Vh15%253D%2526VhF%253D%2526VhUMVtI%253D%2526d1Nth%253D%2526dBth%253DOw.Yw5O%252521v%2526dSIM.%253D%2526dSIM3%253DUkFTDtI1d%2526dd%253DAx%2526dhF%253Dx3TvT%2526dth%253DYpKTOY3Y3%2526fsth%253D%2526hGdMMM%253D%2526htmlsrc%253D1%2526kd%253DC.%2526kk%252528h%253D%25257B%252522kkdd%252522%25253A%252522Ax%252522%25252C%252522kkd10%252522%25253A%252522Uk%252528U%252522%25252C%252522kktN%252522%25253A%252522%252522%25252C%252522kkkd%252522%25253A%252522C.%252522%25257D%2526kkdd%253D%252521%25257C%252521%25257Cu3Hn%25252AAh9W%2526kshBqh%253D%2526kt_G%253D55OTL%252521Yv%2526lhNB%253D5%2526lhNBdIk1%253D%2526n%252528k1N%253DC%2526nkSN%253DC%2526sG%253DC%2526sVG%253D%2526shBqh%253D%2526sth%253D%2526tkth%253DC%2526tpid%253D%2522%252C%2522be%2522%253A%25220%2522%252C%2522nmerr%2522%253A%25221%2522%257D","date":"2025-12-21T00:06:22.935Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.yahoo.com","organization":"Yahoo Holdings Inc."},"issuer":{"commonName":"DigiCert SHA2 High Assurance Server CA","organization":"DigiCert Inc"},"validity":{"start":"Wed, 03 Dec 2025 00:00:00 GMT","end":"Wed, 21 Jan 2026 23:59:59 GMT"},"fingerprint":{"sha1":"24:1C:45:0A:5D:1C:D7:ED:7A:D5:E6:FA:55:FD:EE:95:53:AE:FA:77","sha256":"18:A3:9C:6B:4D:4C:7B:B4:54:34:AC:7E:B0:00:DB:9D:89:03:B3:A9:7F:5F:2A:1B:A9:62:49:67:87:3E:F0:8C"}}},"request":{"raw":"GET /ds/scripts/selectTier-p1.1.0.js HTTP/1.1\r\nHost: s.yimg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://quickresultshunt.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-amz-id-2: anjY062hhY4+iY8gDI4UlLjlOwXVYtl4re/mj/UeCoVS6oAR3T4gjGP3NeiBUVVJTmUnCePfLO1Zil1KuXyqYf5tMaccTyBwOo/jZu2vpls=\r\nx-amz-request-id: S037A2X421QTC83Q\r\ndate: Sun, 21 Dec 2025 00:06:07 GMT\r\nlast-modified: Thu, 20 Nov 2025 17:25:39 GMT\r\ncache-control: public,max-age=60\r\nx-amz-version-id: cBEvYraRJPb_oZIzj59OF.PVkaCjFNDl\r\naccept-ranges: bytes\r\ncontent-type: application/javascript\r\nserver: ATS\r\nvary: Origin, Accept-Encoding\r\netag: \"3e822c257ba7fef24f528f4691aeb99b-df\"\r\nage: 17\r\nx-content-type-options: nosniff\r\nreferrer-policy: no-referrer-when-downgrade\r\ncontent-encoding: gzip\r\ncontent-length: 4373\r\nstrict-transport-security: max-age=31536000\r\nats-carp-promotion: 1, 1\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache Traffic Server","description":"Apache Traffic Server is an open-source caching and proxying server that serves as an HTTP/1.1 and HTTP/2 reverse proxy with caching capabilities, load balancing, request routing, SSL termination, and support for advanced HTTP features.","website":"https://trafficserver.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:traffic_server:*:*:*:*:*:*:*:*","icon":"Apache Traffic Server.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":12818,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (12818), with no line terminators","md5":"3e822c257ba7fef24f528f4691aeb99b","sha1":"f819207c02f62baca71d1ebd1c5b3703312f630f","sha256":"3799b25dd5ee04f751d55c8fef57734264b83fa875b4270a2069bb0b42af9e5e","sha512":"84b5a5f85166699f09a77cf3b358be9d4e3d2386b06134dce6321869d6ab6e9517c43dadd25519e72e683a33010c41a233020b7cc799ef275be870890c98bf6c","ssdeep":"384:tKjiEAbREf2vfxpw5LISLJM6IhJocevD5tg:5gfGw9IEm6IhJmng","tlshash":"da42b5d57886b47627ab81a0b53f232532335c36240dd79076498678aa4cf8f9323fec","first_seen":"2025-11-20T17:27:39.740418Z","last_seen":"2026-03-17T16:07:28.498685Z","times_seen":75555,"resource_available":true,"data":null}},"time_used":220,"timings":{"blocked":66,"dns":54,"connect":30,"send":0,"wait":31,"receive":1,"ssl":35},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"l.cdn-fileserver.com/bqi.php?vgd_len=1604\u0026\u0026vgd_aref=0\u0026vgd_tsce=L1085-S1085\u0026vgd_l2type=dmola\u0026vgd_ydspr=0\u0026vgd_cdv=O2494\u0026vgd_cage=1\u0026vgd_pgids=0\u0026vgd_pdtid=1\u0026vgd_oreqf=one\u0026vgd_oresf=one\u0026lf=3\u0026prid=8PR11258V\u0026cid=8CU458282\u0026crid=573871569\u0026requrl=https%3A%2F%2Fformswft.com\u0026vi=1766275581332466995\u0026ugd=4\u0026cc=NO\u0026sc=03\u0026gdpr=1\u0026vgd_acid=undefined\u0026hvsid=00001766275581879015326356485759\u0026cme=EP_jG0FD33FaT0pnklQ-urEbsTMTx9oEkBrhgh5D2NvTjjMDakIroPEiu96uO_VVI-XTjjKRCCWNcLpyUYWL0zgsZ753xJeI-dWep_CajRUihkgwCBXSGG3tKRvUloYbw1MGFD_FMz52KMvBEoifYor5MdMCbQ-dpLjdiFSy36fze4LBx9UmqhdyKLsHbnvJrK4mTwIohcP0ciSBi6C8L0PYIFymjEtmdm1GMUri2WuowSWMN2f7KGMslzp9YHG_BgjRq3OBwHE%3D%7C%7CWOR44ZnjshyX0FEZj6c52uG8KGTsvju_%7C93q-w6oysg91aq4hh7dv6zzrcNTS6udO%7Ca0AmFUYXmD6Wd-HJzGWGc-a7lJVcJizG0fT4g0ont2Q%3D%7Cb8KlCmE6kTENKxSBIehsQLbXBNKeHPZV%7CosmTBymbz9kxbGaheRo3KrQK2cDoJ3K9T5vSET3WCZ0F6GLSPrd_Uhkdn_fOWZJOZpVvRvpoep31IHhNCp4SsHoUkuMvMmQ_5Z59Sxmomv8Yn9V4Hpy_MHjQdW64K7MPTkqSKO37HihS5mG8dM3WmIMXBT2ZD6nqNx7Ej0CyoXR1a65iTqrkWDf4UH6doe7ZFz7-tnAg5Eb_ojnuHM5bR3qd8v4qoN6Gr9PdUJbkOGnAeqDYaKI76IFjnr9jM1LaL4PUJmeV8cogmXdV1VQP1iCwFvc2P96G2N-9DESMl0nwNK5WED6TvWmCGO5Ak80n3siDWWYtxeOytuBdLAM7fvcrBMvYMH8x03drhl9IsWxuGMVr-YW5wKJ3_WKph8bq4nS6XxlCyL3AYoFFjZMg25dt6qyWJhhl57yF2dG8JFoUCm2j6ENvn3tuZrJW1JvcXivvyBoebZS0iQvd1wxaMyHPvjBs9RlKrumEpdZfl9vt4Ek0PbzenkRYTpFcBQsScYW-83sym56dbzYJioy4YD7bOxHspn9LQiIO4pnokUITYj3SByIlcsj4mDuYpAQd6frrhtOssfzH_DZ5n36oOTrFtms5SbjsoSJaHSLDd1dQ-uU9vl_NwjUf-T7wlHqC%7C\u0026fp=rmV2ZnpOsJQhZm-7B26Rl_W2WNF3sjQTIfUG-YoeQ5BguINRp_4Yumytnm2LbnHAx-2m8t3KD5XDRoktUrERipYH9DBcVWl3rzqJNYbFEY1qNRZd0OfukN80rHdF9c-RuwnF2AE6sXY%3D\u0026vgd_rensize=1280_1024\u0026vgd_end=1","fqdn":"l.cdn-fileserver.com","domain":"cdn-fileserver.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://quickresultshunt.com/sr/754870121/SAFEFRAME.html?ule=759\u0026%21%2AcC=%21hr\u0026%21yJ=fcrCfJ1rKnYC.K58CcKfcfMKR1nMMnAcAM55\u0026%2AREI0r=JX%21%2Ac\u00260yJ=\u002688=m6\u00268E0yJ=\u00268J~=6R515\u00268LhX.=\u00268LhXR=%21v~57yhE8\u00268tyJ=GM.fMnGA1\u00268yJ=fFW5GfRfR\u0026Ev8r=wnafG\u0026I0%2A0=\u0026IJv0t=\u0026IYh7887rd0=\u0026JXtC=n\u0026Jr8XXX=\u0026LEE0v=n\u0026NJ0t=n\u0026NJ0t8hvE=\u0026PNJ=5\u0026Pv0rhC=a\u0026Xv0c=a\u0026YJtqJ=\u0026Ycr=\u0026Yr=a\u0026YyJ=\u0026bJ=\u0026bstC=\u0026c0FP=\u0026c8E=pDq4tmNCPSCNCPhmN%2F4%2FDSCSNDcc%29Dht5Ch\u0026cJ%21Xcyh=\u0026cJER=\u0026cJEn=\u0026cJ~=\u0026hE~=\u0026hXrtt=n\u0026htmlsrc=1\u0026kkdd=A%21%7CH%7Cn9A%2A\u0026r8tyJ=\u0026s%2AvE0=a\u0026svL0=a\u0026tpid=\u0026tr%29Pt%2A=LEE0v%3A%2F%2FC%21tXvsCEU8%21X\u0026v8=a.\u0026vYJtqJ=\u0026vv%2AJ=%7B%22vv88%22%3A%22m6%22%2C%22vv8EI%22%3A%22%21v%2A%21%22%2C%22vvy0%22%3A%22%22%2C%22vvv8%22%3A%22a.%22%7D\u0026vy4r=nnG5dAf1\u0026xYyJ=\u0026yvyJ=a\u0026~y=nMAARMGGfn..R5AA11G\u0026eobd=\u0026eoac=RvYbkNvbY\u0026eoch=RvYbkNvbY\u0026ure=1#vgd_sc=03\u0026acl=\u0026aclp=\u0026cl=\u0026clp=\u0026hvsid=00001766275581879015326356485759\u0026l2type=dmola\u0026lp=%7B%22ppvi%22%3A%222151382118167318472%22%2C%22wlstp%22%3A%220%22%7D\u0026matchstring=\u0026pvl=%7B%22nmerr%22%3A%221%22%7D\u0026pvlp=\u0026sbdrId=\u0026verid=\u0026acid=undefined\u0026mprpslog=u5eqezZf_lYyULMtqisNS3GSBklJPR0ktL_GEE7r17IchT3FJbdqsw2irgpzIt5OzbEZnBAxPTFMlknbUnwkIS27wnA4ySvL39PgloPtX1JC4-_rcf8iftCAgLhir1p1SYWqU9xvwJfa7NNHFamyEt1k5sNZpcYXYX8mYDFpj3vH20pfHCmtyuxUyqSS1zdG3CzYHfYdQrimvQiJkGrxHA%3D%3D\u0026tchkpts=%7B%22prel2%22%3A1766275582184%7D\u0026stime=1766275582184\u0026l3d=%257B%2522l2host%2522%253A%2522https%253A%252F%252Fquickresultshunt.com%252Fsr%252F754870121%252FSAFEFRAME.html%253F%252528310NG%253DhMU%252528V%25260N%252528N%253D%25260hkNB%253D%25260sIDddDGLN%253D%25261kdG%253D-5CYO%2526BGcRB%252528%253DS11Nk%25253A%25252F%25252FXUBMknX1mdUM%2526Ft%253D5w%252521%2525213wOOY5..3T%252521%252521vvO%2526GdBth%253D%2526I1F%253D%2526IMGBB%253D5%2526MkNV%253DC%2526Nth%253D%2526Qh%253D%2526QnBX%253D%2526RkNGIX%253DC%2526Rlh%253DT%2526S11Nk%253D5%2526U%252528VX%253DUIG%2526Uth%253DYVGXYhvGJ5sX.JTdXVJYVYwJ3v5ww5%252521V%252521wTT%2526VNpR%253D%2526Vd1%253D24q_BAlXR8XlXRIAl%25252F_%25252F48X8l4VVc4IBTXI%2526Vh13%253D%2526Vh15%253D%2526VhF%253D%2526VhUMVtI%253D%2526d1Nth%253D%2526dBth%253DOw.Yw5O%252521v%2526dSIM.%253D%2526dSIM3%253DUkFTDtI1d%2526dd%253DAx%2526dhF%253Dx3TvT%2526dth%253DYpKTOY3Y3%2526fsth%253D%2526hGdMMM%253D%2526htmlsrc%253D1%2526kd%253DC.%2526kk%252528h%253D%25257B%252522kkdd%252522%25253A%252522Ax%252522%25252C%252522kkd10%252522%25253A%252522Uk%252528U%252522%25252C%252522kktN%252522%25253A%252522%252522%25252C%252522kkkd%252522%25253A%252522C.%252522%25257D%2526kkdd%253D%252521%25257C%252521%25257Cu3Hn%25252AAh9W%2526kshBqh%253D%2526kt_G%253D55OTL%252521Yv%2526lhNB%253D5%2526lhNBdIk1%253D%2526n%252528k1N%253DC%2526nkSN%253DC%2526sG%253DC%2526sVG%253D%2526shBqh%253D%2526sth%253D%2526tkth%253DC%2526tpid%253D%2522%252C%2522be%2522%253A%25220%2522%252C%2522nmerr%2522%253A%25221%2522%257D","date":"2025-12-21T00:06:23.831Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn-fileserver.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 30 Nov 2025 15:48:41 GMT","end":"Sat, 28 Feb 2026 16:47:10 GMT"},"fingerprint":{"sha1":"B6:15:E0:AA:2B:F2:1A:96:0A:90:53:E3:BA:E4:61:85:FA:35:8C:5A","sha256":"AF:0A:96:E0:3A:65:9A:90:80:F1:73:2C:66:E0:90:E6:6B:6C:23:08:E5:9E:AA:0E:52:53:23:5B:14:9A:9B:6E"}}},"request":{"raw":"GET /bqi.php?vgd_len=1604\u0026\u0026vgd_aref=0\u0026vgd_tsce=L1085-S1085\u0026vgd_l2type=dmola\u0026vgd_ydspr=0\u0026vgd_cdv=O2494\u0026vgd_cage=1\u0026vgd_pgids=0\u0026vgd_pdtid=1\u0026vgd_oreqf=one\u0026vgd_oresf=one\u0026lf=3\u0026prid=8PR11258V\u0026cid=8CU458282\u0026crid=573871569\u0026requrl=https%3A%2F%2Fformswft.com\u0026vi=1766275581332466995\u0026ugd=4\u0026cc=NO\u0026sc=03\u0026gdpr=1\u0026vgd_acid=undefined\u0026hvsid=00001766275581879015326356485759\u0026cme=EP_jG0FD33FaT0pnklQ-urEbsTMTx9oEkBrhgh5D2NvTjjMDakIroPEiu96uO_VVI-XTjjKRCCWNcLpyUYWL0zgsZ753xJeI-dWep_CajRUihkgwCBXSGG3tKRvUloYbw1MGFD_FMz52KMvBEoifYor5MdMCbQ-dpLjdiFSy36fze4LBx9UmqhdyKLsHbnvJrK4mTwIohcP0ciSBi6C8L0PYIFymjEtmdm1GMUri2WuowSWMN2f7KGMslzp9YHG_BgjRq3OBwHE%3D%7C%7CWOR44ZnjshyX0FEZj6c52uG8KGTsvju_%7C93q-w6oysg91aq4hh7dv6zzrcNTS6udO%7Ca0AmFUYXmD6Wd-HJzGWGc-a7lJVcJizG0fT4g0ont2Q%3D%7Cb8KlCmE6kTENKxSBIehsQLbXBNKeHPZV%7CosmTBymbz9kxbGaheRo3KrQK2cDoJ3K9T5vSET3WCZ0F6GLSPrd_Uhkdn_fOWZJOZpVvRvpoep31IHhNCp4SsHoUkuMvMmQ_5Z59Sxmomv8Yn9V4Hpy_MHjQdW64K7MPTkqSKO37HihS5mG8dM3WmIMXBT2ZD6nqNx7Ej0CyoXR1a65iTqrkWDf4UH6doe7ZFz7-tnAg5Eb_ojnuHM5bR3qd8v4qoN6Gr9PdUJbkOGnAeqDYaKI76IFjnr9jM1LaL4PUJmeV8cogmXdV1VQP1iCwFvc2P96G2N-9DESMl0nwNK5WED6TvWmCGO5Ak80n3siDWWYtxeOytuBdLAM7fvcrBMvYMH8x03drhl9IsWxuGMVr-YW5wKJ3_WKph8bq4nS6XxlCyL3AYoFFjZMg25dt6qyWJhhl57yF2dG8JFoUCm2j6ENvn3tuZrJW1JvcXivvyBoebZS0iQvd1wxaMyHPvjBs9RlKrumEpdZfl9vt4Ek0PbzenkRYTpFcBQsScYW-83sym56dbzYJioy4YD7bOxHspn9LQiIO4pnokUITYj3SByIlcsj4mDuYpAQd6frrhtOssfzH_DZ5n36oOTrFtms5SbjsoSJaHSLDd1dQ-uU9vl_NwjUf-T7wlHqC%7C\u0026fp=rmV2ZnpOsJQhZm-7B26Rl_W2WNF3sjQTIfUG-YoeQ5BguINRp_4Yumytnm2LbnHAx-2m8t3KD5XDRoktUrERipYH9DBcVWl3rzqJNYbFEY1qNRZd0OfukN80rHdF9c-RuwnF2AE6sXY%3D\u0026vgd_rensize=1280_1024\u0026vgd_end=1 HTTP/1.1\r\nHost: l.cdn-fileserver.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://quickresultshunt.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 21 Dec 2025 00:06:23 GMT\r\ncontent-type: text/javascript\r\naccept-ch: Sec-CH-UA-Full-Version-List, Sec-CH-UA-Full-Version, Sec-CH-UA-Platform-Version\r\naccess-control-allow-origin: *\r\ncache-control: max-age=0, no-cache, no-store\r\nexpires: Sat, 20 Dec 2025 00:06:23 GMT\r\npragma: no-cache\r\nvia: 1.1 google\r\nstrict-transport-security: max-age=63072000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JEoKuBMltttHYGxE%2B6dFpPmwuMmWIfhQTZ0Wf8lbttm%2FXVyfGdkOjO0BQttSpygSR%2FvazAoN8GbxWPr0mwqLh1O0gsES1z%2BR3CPNktbN7iy5AhHw\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9b13221ef90b1525-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":15,"size_decoded":0,"mime_type":"text/javascript","magic":"ASCII text, with no line terminators","md5":"2ba5e95642c652c708881ad3c9d8443f","sha1":"5bfcc33bb9cc897546c600206b03d1307bd63a94","sha256":"c787e9dd6dc8ea3c935f5f0f30e3b9e4a3e066b4619bb244f569883f8e318a24","sha512":"8c157fc41fd03bbd47633269b18effb652644e58284f8f85465b0ffba9b5a06544a03ed0655706c96edfa09a64f4f164f6bbc573ac5045000cae03c8b36d046f","ssdeep":"","tlshash":"7e600000000cc030030f0c00c3000300303000c000000c33000f30cc000000c00fc303","first_seen":"2025-03-08T00:25:13.560069Z","last_seen":"2026-04-04T00:32:53.422716Z","times_seen":140599,"resource_available":true,"data":null}},"time_used":130,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":130,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"l.cdn-fileserver.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"l.cdn-fileserver.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-21","alert":"Sinkholed","trigger":"l.cdn-fileserver.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"l.cdn-fileserver.com/bping.php?wsip=170762370\u0026requrl=https%3A%2F%2Fformswft.com\u0026vgd_l2type=dmola\u0026vgd_oresf=one\u0026vgd_asn=50304\u0026gdpr=1\u0026vgd_cage=37\u0026cid=8CU458282\u0026hvsid=00001766275581879015326356485759\u0026lf=6\u0026r=1766275581881\u0026vgd_rpth=%2Fola\u0026mspa=0\u0026vgd_setup=c21\u0026prid=8PR11258V\u0026sc=03\u0026ssld=%7B%22QQNN%22%3A%22Ia%22%2C%22QQN75%22%3A%22mQjm%22%2C%22QQ8E%22%3A%22%22%2C%22QQQN%22%3A%229A%22%7D\u0026wshp=0\u0026crid=573871569\u0026ugd=4\u0026lper=100\u0026vgd_cdv=O2494\u0026vgd_wlstp=0\u0026vi=1766275581332466995\u0026cc=NO\u0026vgd_tsce=L1085\u0026vgd_oreqf=one\u0026vgd_len=530\u0026vgd_end=1","fqdn":"l.cdn-fileserver.com","domain":"cdn-fileserver.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://formswft.com/","date":"2025-12-21T00:06:22.201Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn-fileserver.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 30 Nov 2025 15:48:41 GMT","end":"Sat, 28 Feb 2026 16:47:10 GMT"},"fingerprint":{"sha1":"B6:15:E0:AA:2B:F2:1A:96:0A:90:53:E3:BA:E4:61:85:FA:35:8C:5A","sha256":"AF:0A:96:E0:3A:65:9A:90:80:F1:73:2C:66:E0:90:E6:6B:6C:23:08:E5:9E:AA:0E:52:53:23:5B:14:9A:9B:6E"}}},"request":{"raw":"GET /bping.php?wsip=170762370\u0026requrl=https%3A%2F%2Fformswft.com\u0026vgd_l2type=dmola\u0026vgd_oresf=one\u0026vgd_asn=50304\u0026gdpr=1\u0026vgd_cage=37\u0026cid=8CU458282\u0026hvsid=00001766275581879015326356485759\u0026lf=6\u0026r=1766275581881\u0026vgd_rpth=%2Fola\u0026mspa=0\u0026vgd_setup=c21\u0026prid=8PR11258V\u0026sc=03\u0026ssld=%7B%22QQNN%22%3A%22Ia%22%2C%22QQN75%22%3A%22mQjm%22%2C%22QQ8E%22%3A%22%22%2C%22QQQN%22%3A%229A%22%7D\u0026wshp=0\u0026crid=573871569\u0026ugd=4\u0026lper=100\u0026vgd_cdv=O2494\u0026vgd_wlstp=0\u0026vi=1766275581332466995\u0026cc=NO\u0026vgd_tsce=L1085\u0026vgd_oreqf=one\u0026vgd_len=530\u0026vgd_end=1 HTTP/1.1\r\nHost: l.cdn-fileserver.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://formswft.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 21 Dec 2025 00:06:22 GMT\r\ncontent-type: image/gif\r\ncontent-length: 43\r\naccept-ch: Sec-CH-UA-Full-Version-List, Sec-CH-UA-Full-Version, Sec-CH-UA-Platform-Version\r\naccess-control-allow-origin: *\r\ncache-control: max-age=0, no-cache, no-store\r\nexpires: Sat, 20 Dec 2025 00:06:22 GMT\r\npragma: no-cache\r\nvia: 1.1 google\r\nstrict-transport-security: max-age=63072000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1VoSO2b9biryeIlrdxJ%2BMc%2FkobET7ajXuSxbIcDYWZLgfQn6h7iyWymexV%2BgC5BB%2FoVrW8gCp3HFCfq7HKyCrQKJjTOo7jBJGQY4vJ0tfPCMYA%3D%3D\"}]}\r\nserver: cloudflare\r\ncf-ray: 9b132214e90a5697-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 87a, 1 x 1","md5":"6f1d74c7168076c7666246504a8c03f2","sha1":"00656377deb1a4393e0cf0055385b08b2b81b46c","sha256":"8ac1703c1c34b2be426deda409d39258f82fae17f13e645f377f337a954aedde","sha512":"e502484faa0dc2a1f23c7f715879db654f29d0af1d6f616467d3d1fc578c2d16fccaacd76c4a5ecae8451dc912323473559d29edbd322fe85b8f1e83a7cdf2f3","ssdeep":"","tlshash":"53900447f1401103d135403007075340070c5030145403050071507ddc1d7553d07410","first_seen":"2025-03-07T21:51:05.009549Z","last_seen":"2026-04-04T00:32:53.427339Z","times_seen":141970,"resource_available":false,"data":null}},"time_used":180,"timings":{"blocked":24,"dns":1,"connect":1,"send":0,"wait":129,"receive":0,"ssl":20},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"l.cdn-fileserver.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"l.cdn-fileserver.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-21","alert":"Sinkholed","trigger":"l.cdn-fileserver.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"quickresultshunt.com/sr/754870121/SAFEFRAME.html?ule=759\u0026%21%2AcC=%21hr\u0026%21yJ=fcrCfJ1rKnYC.K58CcKfcfMKR1nMMnAcAM55\u0026%2AREI0r=JX%21%2Ac\u00260yJ=\u002688=m6\u00268E0yJ=\u00268J~=6R515\u00268LhX.=\u00268LhXR=%21v~57yhE8\u00268tyJ=GM.fMnGA1\u00268yJ=fFW5GfRfR\u0026Ev8r=wnafG\u0026I0%2A0=\u0026IJv0t=\u0026IYh7887rd0=\u0026JXtC=n\u0026Jr8XXX=\u0026LEE0v=n\u0026NJ0t=n\u0026NJ0t8hvE=\u0026PNJ=5\u0026Pv0rhC=a\u0026Xv0c=a\u0026YJtqJ=\u0026Ycr=\u0026Yr=a\u0026YyJ=\u0026bJ=\u0026bstC=\u0026c0FP=\u0026c8E=pDq4tmNCPSCNCPhmN%2F4%2FDSCSNDcc%29Dht5Ch\u0026cJ%21Xcyh=\u0026cJER=\u0026cJEn=\u0026cJ~=\u0026hE~=\u0026hXrtt=n\u0026htmlsrc=1\u0026kkdd=A%21%7CH%7Cn9A%2A\u0026r8tyJ=\u0026s%2AvE0=a\u0026svL0=a\u0026tpid=\u0026tr%29Pt%2A=LEE0v%3A%2F%2FC%21tXvsCEU8%21X\u0026v8=a.\u0026vYJtqJ=\u0026vv%2AJ=%7B%22vv88%22%3A%22m6%22%2C%22vv8EI%22%3A%22%21v%2A%21%22%2C%22vvy0%22%3A%22%22%2C%22vvv8%22%3A%22a.%22%7D\u0026vy4r=nnG5dAf1\u0026xYyJ=\u0026yvyJ=a\u0026~y=nMAARMGGfn..R5AA11G\u0026eobd=\u0026eoac=RvYbkNvbY\u0026eoch=RvYbkNvbY\u0026ure=1#vgd_sc=03\u0026acl=\u0026aclp=\u0026cl=\u0026clp=\u0026hvsid=00001766275581879015326356485759\u0026l2type=dmola\u0026lp=%7B%22ppvi%22%3A%222151382118167318472%22%2C%22wlstp%22%3A%220%22%7D\u0026matchstring=\u0026pvl=%7B%22nmerr%22%3A%221%22%7D\u0026pvlp=\u0026sbdrId=\u0026verid=\u0026acid=undefined\u0026mprpslog=u5eqezZf_lYyULMtqisNS3GSBklJPR0ktL_GEE7r17IchT3FJbdqsw2irgpzIt5OzbEZnBAxPTFMlknbUnwkIS27wnA4ySvL39PgloPtX1JC4-_rcf8iftCAgLhir1p1SYWqU9xvwJfa7NNHFamyEt1k5sNZpcYXYX8mYDFpj3vH20pfHCmtyuxUyqSS1zdG3CzYHfYdQrimvQiJkGrxHA%3D%3D\u0026tchkpts=%7B%22prel2%22%3A1766275582184%7D\u0026stime=1766275582184\u0026l3d=%257B%2522l2host%2522%253A%2522https%253A%252F%252Fquickresultshunt.com%252Fsr%252F754870121%252FSAFEFRAME.html%253F%252528310NG%253DhMU%252528V%25260N%252528N%253D%25260hkNB%253D%25260sIDddDGLN%253D%25261kdG%253D-5CYO%2526BGcRB%252528%253DS11Nk%25253A%25252F%25252FXUBMknX1mdUM%2526Ft%253D5w%252521%2525213wOOY5..3T%252521%252521vvO%2526GdBth%253D%2526I1F%253D%2526IMGBB%253D5%2526MkNV%253DC%2526Nth%253D%2526Qh%253D%2526QnBX%253D%2526RkNGIX%253DC%2526Rlh%253DT%2526S11Nk%253D5%2526U%252528VX%253DUIG%2526Uth%253DYVGXYhvGJ5sX.JTdXVJYVYwJ3v5ww5%252521V%252521wTT%2526VNpR%253D%2526Vd1%253D24q_BAlXR8XlXRIAl%25252F_%25252F48X8l4VVc4IBTXI%2526Vh13%253D%2526Vh15%253D%2526VhF%253D%2526VhUMVtI%253D%2526d1Nth%253D%2526dBth%253DOw.Yw5O%252521v%2526dSIM.%253D%2526dSIM3%253DUkFTDtI1d%2526dd%253DAx%2526dhF%253Dx3TvT%2526dth%253DYpKTOY3Y3%2526fsth%253D%2526hGdMMM%253D%2526htmlsrc%253D1%2526kd%253DC.%2526kk%252528h%253D%25257B%252522kkdd%252522%25253A%252522Ax%252522%25252C%252522kkd10%252522%25253A%252522Uk%252528U%252522%25252C%252522kktN%252522%25253A%252522%252522%25252C%252522kkkd%252522%25253A%252522C.%252522%25257D%2526kkdd%253D%252521%25257C%252521%25257Cu3Hn%25252AAh9W%2526kshBqh%253D%2526kt_G%253D55OTL%252521Yv%2526lhNB%253D5%2526lhNBdIk1%253D%2526n%252528k1N%253DC%2526nkSN%253DC%2526sG%253DC%2526sVG%253D%2526shBqh%253D%2526sth%253D%2526tkth%253DC%2526tpid%253D%2522%252C%2522be%2522%253A%25220%2522%252C%2522nmerr%2522%253A%25221%2522%257D","fqdn":"quickresultshunt.com","domain":"quickresultshunt.com","tld":"com"},"ip":{"addr":"104.21.4.223","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://formswft.com/","date":"2025-12-21T00:06:22.203Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"quickresultshunt.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 26 Nov 2025 16:31:06 GMT","end":"Tue, 24 Feb 2026 17:29:36 GMT"},"fingerprint":{"sha1":"8F:CE:10:43:2E:34:E6:78:DA:98:AB:38:D6:73:52:79:54:CA:C8:E9","sha256":"49:4D:6D:26:A3:6B:E3:2C:17:0B:6F:E4:12:A8:66:82:55:50:CE:51:77:AA:48:7E:09:B4:42:25:30:9A:CB:45"}}},"request":{"raw":"GET /sr/754870121/SAFEFRAME.html?ule=759\u0026%21%2AcC=%21hr\u0026%21yJ=fcrCfJ1rKnYC.K58CcKfcfMKR1nMMnAcAM55\u0026%2AREI0r=JX%21%2Ac\u00260yJ=\u002688=m6\u00268E0yJ=\u00268J~=6R515\u00268LhX.=\u00268LhXR=%21v~57yhE8\u00268tyJ=GM.fMnGA1\u00268yJ=fFW5GfRfR\u0026Ev8r=wnafG\u0026I0%2A0=\u0026IJv0t=\u0026IYh7887rd0=\u0026JXtC=n\u0026Jr8XXX=\u0026LEE0v=n\u0026NJ0t=n\u0026NJ0t8hvE=\u0026PNJ=5\u0026Pv0rhC=a\u0026Xv0c=a\u0026YJtqJ=\u0026Ycr=\u0026Yr=a\u0026YyJ=\u0026bJ=\u0026bstC=\u0026c0FP=\u0026c8E=pDq4tmNCPSCNCPhmN%2F4%2FDSCSNDcc%29Dht5Ch\u0026cJ%21Xcyh=\u0026cJER=\u0026cJEn=\u0026cJ~=\u0026hE~=\u0026hXrtt=n\u0026htmlsrc=1\u0026kkdd=A%21%7CH%7Cn9A%2A\u0026r8tyJ=\u0026s%2AvE0=a\u0026svL0=a\u0026tpid=\u0026tr%29Pt%2A=LEE0v%3A%2F%2FC%21tXvsCEU8%21X\u0026v8=a.\u0026vYJtqJ=\u0026vv%2AJ=%7B%22vv88%22%3A%22m6%22%2C%22vv8EI%22%3A%22%21v%2A%21%22%2C%22vvy0%22%3A%22%22%2C%22vvv8%22%3A%22a.%22%7D\u0026vy4r=nnG5dAf1\u0026xYyJ=\u0026yvyJ=a\u0026~y=nMAARMGGfn..R5AA11G\u0026eobd=\u0026eoac=RvYbkNvbY\u0026eoch=RvYbkNvbY\u0026ure=1 HTTP/1.1\r\nHost: quickresultshunt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://formswft.com/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 21 Dec 2025 00:06:22 GMT\r\ncontent-type: text/html\r\ncache-control: no-store, max-age=0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=i%2BiW8wEpPnOL3tWybqqd9G2g0MWIa35lBPNocA%2Fn6s7I3DBZR20Mc4RD7TPfmwNiBPgGOhpxUQj3cUnIl3PvqFCT5IYmBTTbHmm2TCKmuA0WRA%3D%3D\"}]}\r\nlink: \u003chttps://scripts.clarity.ms/0.8.45/clarity.js\u003e; rel=prefetch, \u003chttps://msadsscale.microsoft.com/bingads/telemetryJS.js\u003e; rel=prefetch, \u003chttps://www.clarity.ms\u003e; rel=dns-prefetch, \u003chttps://s.yimg.com/ds/scripts/selectTier-p1.1.0.js\u003e; rel=prefetch\r\nx-sc-h: 21-rnpl\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: DYNAMIC\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9b132214f9e55690-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":66868,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (46500), with CRLF, LF line terminators","md5":"705b0a8c9a60d4d9e731accd760bc831","sha1":"270455039f74cbcd0143791847e2f94dca02fbc5","sha256":"6afee7af1862e0dad69b2646b1c84f020a66e6f459521e7baf8c733ad4192257","sha512":"35204ecdb394627604e1acca08b7e9d16a7a364b9c96b1e5bfbafe2e948236ca5c3ef6e6792a4bd64a678343372ea9f90e3934718114950a891fab23e5dca23d","ssdeep":"1536:SLBpkSSH3MMQaAFQ9sfeAxflfPR75+Z5TY4pPRuvdru/bqi+gd:SVpkSSH3MMQaAFQ9sfeAxflA5TYCJuvc","tlshash":"b96348dc30c27426177721a2513f2d0ef1ba1555768e8c44e9f9e6a63c3ca9f8a23e4d","first_seen":"2025-12-21T00:06:48.776466Z","last_seen":"2025-12-21T00:06:48.776466Z","times_seen":1,"resource_available":false,"data":null}},"time_used":420,"timings":{"blocked":31,"dns":10,"connect":4,"send":0,"wait":353,"receive":0,"ssl":19},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s.cdn-fileserver.com/__media__/fonts/montserrat_regular/montserrat_regular.woff","fqdn":"s.cdn-fileserver.com","domain":"cdn-fileserver.com","tld":"com"},"ip":{"addr":"104.21.31.250","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://quickresultshunt.com/sr/754870121/SAFEFRAME.html?ule=759\u0026%21%2AcC=%21hr\u0026%21yJ=fcrCfJ1rKnYC.K58CcKfcfMKR1nMMnAcAM55\u0026%2AREI0r=JX%21%2Ac\u00260yJ=\u002688=m6\u00268E0yJ=\u00268J~=6R515\u00268LhX.=\u00268LhXR=%21v~57yhE8\u00268tyJ=GM.fMnGA1\u00268yJ=fFW5GfRfR\u0026Ev8r=wnafG\u0026I0%2A0=\u0026IJv0t=\u0026IYh7887rd0=\u0026JXtC=n\u0026Jr8XXX=\u0026LEE0v=n\u0026NJ0t=n\u0026NJ0t8hvE=\u0026PNJ=5\u0026Pv0rhC=a\u0026Xv0c=a\u0026YJtqJ=\u0026Ycr=\u0026Yr=a\u0026YyJ=\u0026bJ=\u0026bstC=\u0026c0FP=\u0026c8E=pDq4tmNCPSCNCPhmN%2F4%2FDSCSNDcc%29Dht5Ch\u0026cJ%21Xcyh=\u0026cJER=\u0026cJEn=\u0026cJ~=\u0026hE~=\u0026hXrtt=n\u0026htmlsrc=1\u0026kkdd=A%21%7CH%7Cn9A%2A\u0026r8tyJ=\u0026s%2AvE0=a\u0026svL0=a\u0026tpid=\u0026tr%29Pt%2A=LEE0v%3A%2F%2FC%21tXvsCEU8%21X\u0026v8=a.\u0026vYJtqJ=\u0026vv%2AJ=%7B%22vv88%22%3A%22m6%22%2C%22vv8EI%22%3A%22%21v%2A%21%22%2C%22vvy0%22%3A%22%22%2C%22vvv8%22%3A%22a.%22%7D\u0026vy4r=nnG5dAf1\u0026xYyJ=\u0026yvyJ=a\u0026~y=nMAARMGGfn..R5AA11G\u0026eobd=\u0026eoac=RvYbkNvbY\u0026eoch=RvYbkNvbY\u0026ure=1#vgd_sc=03\u0026acl=\u0026aclp=\u0026cl=\u0026clp=\u0026hvsid=00001766275581879015326356485759\u0026l2type=dmola\u0026lp=%7B%22ppvi%22%3A%222151382118167318472%22%2C%22wlstp%22%3A%220%22%7D\u0026matchstring=\u0026pvl=%7B%22nmerr%22%3A%221%22%7D\u0026pvlp=\u0026sbdrId=\u0026verid=\u0026acid=undefined\u0026mprpslog=u5eqezZf_lYyULMtqisNS3GSBklJPR0ktL_GEE7r17IchT3FJbdqsw2irgpzIt5OzbEZnBAxPTFMlknbUnwkIS27wnA4ySvL39PgloPtX1JC4-_rcf8iftCAgLhir1p1SYWqU9xvwJfa7NNHFamyEt1k5sNZpcYXYX8mYDFpj3vH20pfHCmtyuxUyqSS1zdG3CzYHfYdQrimvQiJkGrxHA%3D%3D\u0026tchkpts=%7B%22prel2%22%3A1766275582184%7D\u0026stime=1766275582184\u0026l3d=%257B%2522l2host%2522%253A%2522https%253A%252F%252Fquickresultshunt.com%252Fsr%252F754870121%252FSAFEFRAME.html%253F%252528310NG%253DhMU%252528V%25260N%252528N%253D%25260hkNB%253D%25260sIDddDGLN%253D%25261kdG%253D-5CYO%2526BGcRB%252528%253DS11Nk%25253A%25252F%25252FXUBMknX1mdUM%2526Ft%253D5w%252521%2525213wOOY5..3T%252521%252521vvO%2526GdBth%253D%2526I1F%253D%2526IMGBB%253D5%2526MkNV%253DC%2526Nth%253D%2526Qh%253D%2526QnBX%253D%2526RkNGIX%253DC%2526Rlh%253DT%2526S11Nk%253D5%2526U%252528VX%253DUIG%2526Uth%253DYVGXYhvGJ5sX.JTdXVJYVYwJ3v5ww5%252521V%252521wTT%2526VNpR%253D%2526Vd1%253D24q_BAlXR8XlXRIAl%25252F_%25252F48X8l4VVc4IBTXI%2526Vh13%253D%2526Vh15%253D%2526VhF%253D%2526VhUMVtI%253D%2526d1Nth%253D%2526dBth%253DOw.Yw5O%252521v%2526dSIM.%253D%2526dSIM3%253DUkFTDtI1d%2526dd%253DAx%2526dhF%253Dx3TvT%2526dth%253DYpKTOY3Y3%2526fsth%253D%2526hGdMMM%253D%2526htmlsrc%253D1%2526kd%253DC.%2526kk%252528h%253D%25257B%252522kkdd%252522%25253A%252522Ax%252522%25252C%252522kkd10%252522%25253A%252522Uk%252528U%252522%25252C%252522kktN%252522%25253A%252522%252522%25252C%252522kkkd%252522%25253A%252522C.%252522%25257D%2526kkdd%253D%252521%25257C%252521%25257Cu3Hn%25252AAh9W%2526kshBqh%253D%2526kt_G%253D55OTL%252521Yv%2526lhNB%253D5%2526lhNBdIk1%253D%2526n%252528k1N%253DC%2526nkSN%253DC%2526sG%253DC%2526sVG%253D%2526shBqh%253D%2526sth%253D%2526tkth%253DC%2526tpid%253D%2522%252C%2522be%2522%253A%25220%2522%252C%2522nmerr%2522%253A%25221%2522%257D","date":"2025-12-21T00:06:22.750Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn-fileserver.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 30 Nov 2025 15:48:41 GMT","end":"Sat, 28 Feb 2026 16:47:10 GMT"},"fingerprint":{"sha1":"B6:15:E0:AA:2B:F2:1A:96:0A:90:53:E3:BA:E4:61:85:FA:35:8C:5A","sha256":"AF:0A:96:E0:3A:65:9A:90:80:F1:73:2C:66:E0:90:E6:6B:6C:23:08:E5:9E:AA:0E:52:53:23:5B:14:9A:9B:6E"}}},"request":{"raw":"GET /__media__/fonts/montserrat_regular/montserrat_regular.woff HTTP/1.1\r\nHost: s.cdn-fileserver.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://quickresultshunt.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://quickresultshunt.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\naccept-ranges: bytes\r\ncontent-length: 24744\r\naccess-control-allow-origin: *\r\nedge-control: downstream-ttl=1d\r\nvia: 1.1 google\r\ndate: Sun, 21 Dec 2025 00:06:22 GMT\r\ncache-control: public, max-age=604800\r\nlast-modified: Mon, 16 May 2016 10:39:41 GMT\r\netag: \"60a8-532f33dedf540\"\r\ncontent-type: font/woff\r\nage: 326336\r\nx-cache-status: hit\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dsIaYYN%2F8%2BqdGqaBmYCT5%2FmX4ZI%2BJx87xbfGvieSqYxxmiWI%2Fw7%2FnlC1pAeL4KcNsK9AHmYSTti%2BgwYpj1rtQjK%2FrlNGpddesyzg0qHijX2yySav\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9b1322184cb1b28a-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":24744,"size_decoded":0,"mime_type":"font/woff","magic":"Web Open Font Format, TrueType, length 24744, version 1.0","md5":"987e102655eee6557d9e5de5eda2dbd7","sha1":"9cfb173085bc54a3e7a4f377e5184cba87ad7a67","sha256":"1354d1ffff7cde96f66dd463a7a9d9bc627c2ea55c1a12c7f0b5c63594622c3e","sha512":"bccd46bbc05dc333869797877f2702294f24f697bd5cf8c42210092d74ddb261b301fa1cb09f79ddc2fb1dc5a54acb3aabde5454920ab195fc906cfddf1be75a","ssdeep":"768:Vw0BKrqrg0KoirVY+RpyVvAfeiCONpPkIw31R:q0BKH0Koiu+Tyqfe1cCH31R","tlshash":"80b2d138a2776205f24c16f579030b361dda21ba925e47bb062360ae1db9a4cd18a24f","first_seen":"2025-04-10T23:48:29.909914Z","last_seen":"2026-04-04T00:32:53.421817Z","times_seen":125252,"resource_available":false,"data":null}},"time_used":32,"timings":{"blocked":19,"dns":1,"connect":0,"send":0,"wait":7,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"s.cdn-fileserver.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"s.cdn-fileserver.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-21","alert":"Sinkholed","trigger":"s.cdn-fileserver.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"l.cdn-fileserver.com/bql.php?vgd_len=4797\u0026\u0026vgd_l2type=dmola\u0026fp=rmV2ZnpOsJQhZm-7B26Rl_W2WNF3sjQTIfUG-YoeQ5BguINRp_4Yumytnm2LbnHAx-2m8t3KD5XDRoktUrERipYH9DBcVWl3rzqJNYbFEY1qNRZd0OfukN80rHdF9c-RuwnF2AE6sXY%3D\u0026cme=EP_jG0FD33FaT0pnklQ-urEbsTMTx9oEkBrhgh5D2NvTjjMDakIroPEiu96uO_VVI-XTjjKRCCWNcLpyUYWL0zgsZ753xJeI-dWep_CajRUihkgwCBXSGG3tKRvUloYbw1MGFD_FMz52KMvBEoifYor5MdMCbQ-dpLjdiFSy36fze4LBx9UmqhdyKLsHbnvJrK4mTwIohcP0ciSBi6C8L0PYIFymjEtmdm1GMUri2WuowSWMN2f7KGMslzp9YHG_BgjRq3OBwHE%3D%7C%7CWOR44ZnjshyX0FEZj6c52uG8KGTsvju_%7C93q-w6oysg91aq4hh7dv6zzrcNTS6udO%7Ca0AmFUYXmD6Wd-HJzGWGc-a7lJVcJizG0fT4g0ont2Q%3D%7Cb8KlCmE6kTENKxSBIehsQLbXBNKeHPZV%7CosmTBymbz9kxbGaheRo3KrQK2cDoJ3K9T5vSET3WCZ0F6GLSPrd_Uhkdn_fOWZJOZpVvRvpoep31IHhNCp4SsHoUkuMvMmQ_5Z59Sxmomv8Yn9V4Hpy_MHjQdW64K7MPTkqSKO37HihS5mG8dM3WmIMXBT2ZD6nqNx7Ej0CyoXR1a65iTqrkWDf4UH6doe7ZFz7-tnAg5Eb_ojnuHM5bR3qd8v4qoN6Gr9PdUJbkOGnAeqDYaKI76IFjnr9jM1LaL4PUJmeV8cogmXdV1VQP1iCwFvc2P96G2N-9DESMl0nwNK5WED6TvWmCGO5Ak80n3siDWWYtxeOytuBdLAM7fvcrBMvYMH8x03drhl9IsWxuGMVr-YW5wKJ3_WKph8bq4nS6XxlCyL3AYoFFjZMg25dt6qyWJhhl57yF2dG8JFoUCm2j6ENvn3tuZrJW1JvcXivvyBoebZS0iQvd1wxaMyHPvjBs9RlKrumEpdZfl9vt4Ek0PbzenkRYTpFcBQsScYW-83sym56dbzYJioy4YD7bOxHspn9LQiIO4pnokUITYj3SByIlcsj4mDuYpAQd6frrhtOssfzH_DZ5n36oOTrFtms5SbjsoSJaHSLDd1dQ-uU9vl_NwjUf-T7wlHqC%7C\u0026ksu=360\u0026fdkt=658\u0026vgde_kbbh=fuoyxQBuGUBO\u0026kwd[]=Create+Forms+Quickly+Online\u0026kwt[]=658\u0026kbc[]=9523b49b93b21fa35aaf5a6fd2f2d362.d2s\u0026kwp[]=1\u0026kid[]=1704640718\u0026kbc2[]=clid_fz%3D-2%7Cclid_serp%3D-2%7Cakp%3D8%7C5%3D-1%7C6%3D-1%7C16%3D-1%7C19%3D0.00%7Ckus%3D0.5912%7Ckucs%3D5.0000%7Ckcucs%3D5.0000%7Ckcucs2%3D5.0000%7Ckssks%3D5.0000%7Crcid%3D81758%7Cclpr%3D0.907300%7Ccllvl%3D5%7Cokt%3D658%7Cbdkt%3D658%7Cps%3D0.992%7Cps_id%3D0\u0026ktd[]=17174784\u0026kwd[]=Edit+Forms+Online\u0026kwt[]=658\u0026kbc[]=9523b49b93b21fa35aaf5a6fd2f2d362.d2s\u0026kwp[]=2\u0026kid[]=449914417\u0026kbc2[]=clid_fz%3D-2%7Cclid_serp%3D-2%7Cakp%3D11%7C5%3D-1%7C6%3D-1%7C16%3D-1%7C19%3D0.00%7Ckus%3D0.5859%7Ckucs%3D5.0000%7Ckcucs%3D5.0000%7Ckcucs2%3D5.0000%7Ckssks%3D5.0000%7Crcid%3D166390%7Cclpr%3D0.881600%7Ccllvl%3D5%7Cokt%3D658%7Cbdkt%3D658%7Cps%3D0.992%7Cps_id%3D0\u0026ktd[]=17174784\u0026kwd[]=Online+Application+Form\u0026kwt[]=658\u0026kbc[]=9523b49b93b21fa35aaf5a6fd2f2d362.d2s\u0026kwp[]=3\u0026kid[]=351740978\u0026kbc2[]=clid_fz%3D6940%7Cclid_serp%3D13688%7Cakp%3D6%7C5%3D-1%7C6%3D-1%7C16%3D-1%7C19%3D0.00%7Ckus%3D0.5888%7Ckucs%3D5.0000%7Ckcucs%3D5.0000%7Ckcucs2%3D5.0000%7Ckssks%3D5.0000%7Crcid%3D157588%7Cclpr%3D1.000000%7Ccllvl%3D2%7Cokt%3D658%7Cbdkt%3D658%7Cps%3D0.992%7Cps_id%3D0\u0026ktd[]=17174784\u0026kwd[]=Fill+Online+Forms\u0026kwt[]=658\u0026kbc[]=9523b49b93b21fa35aaf5a6fd2f2d362.d2s\u0026kwp[]=4\u0026kid[]=83336599\u0026kbc2[]=clid_fz%3D10498%7Cclid_serp%3D8278%7Cakp%3D10%7C5%3D-1%7C6%3D-1%7C16%3D-1%7C19%3D0.00%7Ckus%3D0.6043%7Ckucs%3D5.0000%7Ckcucs%3D5.0000%7Ckcucs2%3D5.0000%7Ckssks%3D5.0000%7Crcid%3D163437%7Cclpr%3D1.000000%7Ccllvl%3D2%7Cokt%3D658%7Cbdkt%3D658%7Cps%3D0.992%7Cps_id%3D0\u0026ktd[]=9671406556917033414824192\u0026kwd[]=Business+Forms+Online\u0026kwt[]=658\u0026kbc[]=9523b49b93b21fa35aaf5a6fd2f2d362.d2s\u0026kwp[]=5\u0026kid[]=4590718\u0026kbc2[]=clid_fz%3D-2%7Cclid_serp%3D-2%7Cakp%3D4%7C5%3D-1%7C6%3D-1%7C16%3D-1%7C19%3D0.00%7Ckus%3D0.6116%7Ckucs%3D5.0000%7Ckcucs%3D5.0000%7Ckcucs2%3D5.0000%7Ckssks%3D5.0000%7Crcid%3D166390%7Cclpr%3D0.909700%7Ccllvl%3D5%7Cokt%3D658%7Cbdkt%3D658%7Cps%3D0.992%7Cps_id%3D0\u0026ktd[]=9671406556917033414824192\u0026v=1\u0026gdpr=1\u0026geo=59.9%7C10.77\u0026lper=100\u0026lpid=\u0026tsid=1005\u0026hint=\u0026cc=NO\u0026wsip=170763266\u0026bca=0\u0026ugd=4\u0026vgde_setid=Nfu\u0026vgde_chost=+x8NULJQxj7Qwxz7.NmY\u0026cid=8CU458282\u0026vi=1766275581332466995\u0026vsid=DefVid\u0026tdAdd[]=asnum%3D50304\u0026vgde_test_data_struct=%7B%22EO7E8O%22%3Au%7D\u0026vgd_adprefflag=00\u0026vgd_adpref_diff=1010\u0026vgd_fm_lang=EN\u0026vgd_implt=3\u0026vgd_cage=1\u0026vgd_tsce=L1085-S1085\u0026vgd_l3_sc=03\u0026vgd_pdtid=1\u0026vgd_oscar=1\u0026vgd_ctrlid=O_SERP\u0026vgd_nrrv=89734\u0026vgd_nrrmf=8301000480a\u0026vgd_nrrsf=scrr\u0026vgd_cty=oslo\u0026vgd_csovr=0\u0026vgd_ifrmode=03\u0026sbdrId=\u0026verid=\u0026mprpslog=u5eqezZf_lYyULMtqisNS3GSBklJPR0ktL_GEE7r17IchT3FJbdqsw2irgpzIt5OzbEZnBAxPTFMlknbUnwkIS27wnA4ySvL39PgloPtX1JC4-_rcf8iftCAgLhir1p1SYWqU9xvwJfa7NNHFamyEt1k5sNZpcYXYX8mYDFpj3vH20pfHCmtyuxUyqSS1zdG3CzYHfYdQrimvQiJkGrxHA\u0026kbbq=%26asn%3D50304\u0026vgd_ppvi=2151382118167318472\u0026vgd_wlstp=0\u0026vgd_vstrid=DefVid\u0026vgd_scsver=2602\u0026vgd_himglg=K0P0-O0K0-S0\u0026vgd_cache_metadata=%7B%22kbb%22%3Afalse%7D\u0026vgd_cfud=251031\u0026vgd_optout=0\u0026vgd_l2shld=1\u0026vgd_akcip=91.90.42.0\u0026vgd_oreqf=one\u0026vgd_oresf=one\u0026vgd_och=0\u0026vgd_rensize=1280_1024\u0026vgd_scr_h=1024\u0026vgd_scr_w=1280\u0026vgd_col_sch=l\u0026vgd_be=0\u0026vgd_nmerr=1\u0026tdAdd[]=uiparams%3D%3Brend_w%3A1280%3Brend_h%3A1024\u0026vgd_sc=03\u0026hvsid=00001766275581879015326356485759\u0026rc=0\u0026rand=1766275582727\u0026acid=undefined\u0026matm=1766275582728\u0026vgde_ltimesrc=u\u0026vgde_ltime=Fuf\u0026vgde_rtime=XWh\u0026vgde_etm=Ai\u0026vgde_timeObj=%7B%22juJ-JN%22%3Azxjj%2C%22jfjm1O%22%3AXuA%2C%22QNLLQ71L7%22%3AA9%2C%22QNLLLJzOJL%22%3AHH%2C%22QNLLJ-JN%22%3AFi%7D\u0026vgd_lhl=1984\u0026vgd_sbSup=1\u0026vgd_nrrs=89734\u0026vgde_cdeplbl=1E8Mzm7M1e18j1GjJ\u0026vgd_end=1","fqdn":"l.cdn-fileserver.com","domain":"cdn-fileserver.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://quickresultshunt.com/sr/754870121/SAFEFRAME.html?ule=759\u0026%21%2AcC=%21hr\u0026%21yJ=fcrCfJ1rKnYC.K58CcKfcfMKR1nMMnAcAM55\u0026%2AREI0r=JX%21%2Ac\u00260yJ=\u002688=m6\u00268E0yJ=\u00268J~=6R515\u00268LhX.=\u00268LhXR=%21v~57yhE8\u00268tyJ=GM.fMnGA1\u00268yJ=fFW5GfRfR\u0026Ev8r=wnafG\u0026I0%2A0=\u0026IJv0t=\u0026IYh7887rd0=\u0026JXtC=n\u0026Jr8XXX=\u0026LEE0v=n\u0026NJ0t=n\u0026NJ0t8hvE=\u0026PNJ=5\u0026Pv0rhC=a\u0026Xv0c=a\u0026YJtqJ=\u0026Ycr=\u0026Yr=a\u0026YyJ=\u0026bJ=\u0026bstC=\u0026c0FP=\u0026c8E=pDq4tmNCPSCNCPhmN%2F4%2FDSCSNDcc%29Dht5Ch\u0026cJ%21Xcyh=\u0026cJER=\u0026cJEn=\u0026cJ~=\u0026hE~=\u0026hXrtt=n\u0026htmlsrc=1\u0026kkdd=A%21%7CH%7Cn9A%2A\u0026r8tyJ=\u0026s%2AvE0=a\u0026svL0=a\u0026tpid=\u0026tr%29Pt%2A=LEE0v%3A%2F%2FC%21tXvsCEU8%21X\u0026v8=a.\u0026vYJtqJ=\u0026vv%2AJ=%7B%22vv88%22%3A%22m6%22%2C%22vv8EI%22%3A%22%21v%2A%21%22%2C%22vvy0%22%3A%22%22%2C%22vvv8%22%3A%22a.%22%7D\u0026vy4r=nnG5dAf1\u0026xYyJ=\u0026yvyJ=a\u0026~y=nMAARMGGfn..R5AA11G\u0026eobd=\u0026eoac=RvYbkNvbY\u0026eoch=RvYbkNvbY\u0026ure=1#vgd_sc=03\u0026acl=\u0026aclp=\u0026cl=\u0026clp=\u0026hvsid=00001766275581879015326356485759\u0026l2type=dmola\u0026lp=%7B%22ppvi%22%3A%222151382118167318472%22%2C%22wlstp%22%3A%220%22%7D\u0026matchstring=\u0026pvl=%7B%22nmerr%22%3A%221%22%7D\u0026pvlp=\u0026sbdrId=\u0026verid=\u0026acid=undefined\u0026mprpslog=u5eqezZf_lYyULMtqisNS3GSBklJPR0ktL_GEE7r17IchT3FJbdqsw2irgpzIt5OzbEZnBAxPTFMlknbUnwkIS27wnA4ySvL39PgloPtX1JC4-_rcf8iftCAgLhir1p1SYWqU9xvwJfa7NNHFamyEt1k5sNZpcYXYX8mYDFpj3vH20pfHCmtyuxUyqSS1zdG3CzYHfYdQrimvQiJkGrxHA%3D%3D\u0026tchkpts=%7B%22prel2%22%3A1766275582184%7D\u0026stime=1766275582184\u0026l3d=%257B%2522l2host%2522%253A%2522https%253A%252F%252Fquickresultshunt.com%252Fsr%252F754870121%252FSAFEFRAME.html%253F%252528310NG%253DhMU%252528V%25260N%252528N%253D%25260hkNB%253D%25260sIDddDGLN%253D%25261kdG%253D-5CYO%2526BGcRB%252528%253DS11Nk%25253A%25252F%25252FXUBMknX1mdUM%2526Ft%253D5w%252521%2525213wOOY5..3T%252521%252521vvO%2526GdBth%253D%2526I1F%253D%2526IMGBB%253D5%2526MkNV%253DC%2526Nth%253D%2526Qh%253D%2526QnBX%253D%2526RkNGIX%253DC%2526Rlh%253DT%2526S11Nk%253D5%2526U%252528VX%253DUIG%2526Uth%253DYVGXYhvGJ5sX.JTdXVJYVYwJ3v5ww5%252521V%252521wTT%2526VNpR%253D%2526Vd1%253D24q_BAlXR8XlXRIAl%25252F_%25252F48X8l4VVc4IBTXI%2526Vh13%253D%2526Vh15%253D%2526VhF%253D%2526VhUMVtI%253D%2526d1Nth%253D%2526dBth%253DOw.Yw5O%252521v%2526dSIM.%253D%2526dSIM3%253DUkFTDtI1d%2526dd%253DAx%2526dhF%253Dx3TvT%2526dth%253DYpKTOY3Y3%2526fsth%253D%2526hGdMMM%253D%2526htmlsrc%253D1%2526kd%253DC.%2526kk%252528h%253D%25257B%252522kkdd%252522%25253A%252522Ax%252522%25252C%252522kkd10%252522%25253A%252522Uk%252528U%252522%25252C%252522kktN%252522%25253A%252522%252522%25252C%252522kkkd%252522%25253A%252522C.%252522%25257D%2526kkdd%253D%252521%25257C%252521%25257Cu3Hn%25252AAh9W%2526kshBqh%253D%2526kt_G%253D55OTL%252521Yv%2526lhNB%253D5%2526lhNBdIk1%253D%2526n%252528k1N%253DC%2526nkSN%253DC%2526sG%253DC%2526sVG%253D%2526shBqh%253D%2526sth%253D%2526tkth%253DC%2526tpid%253D%2522%252C%2522be%2522%253A%25220%2522%252C%2522nmerr%2522%253A%25221%2522%257D","date":"2025-12-21T00:06:22.820Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn-fileserver.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 30 Nov 2025 15:48:41 GMT","end":"Sat, 28 Feb 2026 16:47:10 GMT"},"fingerprint":{"sha1":"B6:15:E0:AA:2B:F2:1A:96:0A:90:53:E3:BA:E4:61:85:FA:35:8C:5A","sha256":"AF:0A:96:E0:3A:65:9A:90:80:F1:73:2C:66:E0:90:E6:6B:6C:23:08:E5:9E:AA:0E:52:53:23:5B:14:9A:9B:6E"}}},"request":{"raw":"GET /bql.php?vgd_len=4797\u0026\u0026vgd_l2type=dmola\u0026fp=rmV2ZnpOsJQhZm-7B26Rl_W2WNF3sjQTIfUG-YoeQ5BguINRp_4Yumytnm2LbnHAx-2m8t3KD5XDRoktUrERipYH9DBcVWl3rzqJNYbFEY1qNRZd0OfukN80rHdF9c-RuwnF2AE6sXY%3D\u0026cme=EP_jG0FD33FaT0pnklQ-urEbsTMTx9oEkBrhgh5D2NvTjjMDakIroPEiu96uO_VVI-XTjjKRCCWNcLpyUYWL0zgsZ753xJeI-dWep_CajRUihkgwCBXSGG3tKRvUloYbw1MGFD_FMz52KMvBEoifYor5MdMCbQ-dpLjdiFSy36fze4LBx9UmqhdyKLsHbnvJrK4mTwIohcP0ciSBi6C8L0PYIFymjEtmdm1GMUri2WuowSWMN2f7KGMslzp9YHG_BgjRq3OBwHE%3D%7C%7CWOR44ZnjshyX0FEZj6c52uG8KGTsvju_%7C93q-w6oysg91aq4hh7dv6zzrcNTS6udO%7Ca0AmFUYXmD6Wd-HJzGWGc-a7lJVcJizG0fT4g0ont2Q%3D%7Cb8KlCmE6kTENKxSBIehsQLbXBNKeHPZV%7CosmTBymbz9kxbGaheRo3KrQK2cDoJ3K9T5vSET3WCZ0F6GLSPrd_Uhkdn_fOWZJOZpVvRvpoep31IHhNCp4SsHoUkuMvMmQ_5Z59Sxmomv8Yn9V4Hpy_MHjQdW64K7MPTkqSKO37HihS5mG8dM3WmIMXBT2ZD6nqNx7Ej0CyoXR1a65iTqrkWDf4UH6doe7ZFz7-tnAg5Eb_ojnuHM5bR3qd8v4qoN6Gr9PdUJbkOGnAeqDYaKI76IFjnr9jM1LaL4PUJmeV8cogmXdV1VQP1iCwFvc2P96G2N-9DESMl0nwNK5WED6TvWmCGO5Ak80n3siDWWYtxeOytuBdLAM7fvcrBMvYMH8x03drhl9IsWxuGMVr-YW5wKJ3_WKph8bq4nS6XxlCyL3AYoFFjZMg25dt6qyWJhhl57yF2dG8JFoUCm2j6ENvn3tuZrJW1JvcXivvyBoebZS0iQvd1wxaMyHPvjBs9RlKrumEpdZfl9vt4Ek0PbzenkRYTpFcBQsScYW-83sym56dbzYJioy4YD7bOxHspn9LQiIO4pnokUITYj3SByIlcsj4mDuYpAQd6frrhtOssfzH_DZ5n36oOTrFtms5SbjsoSJaHSLDd1dQ-uU9vl_NwjUf-T7wlHqC%7C\u0026ksu=360\u0026fdkt=658\u0026vgde_kbbh=fuoyxQBuGUBO\u0026kwd[]=Create+Forms+Quickly+Online\u0026kwt[]=658\u0026kbc[]=9523b49b93b21fa35aaf5a6fd2f2d362.d2s\u0026kwp[]=1\u0026kid[]=1704640718\u0026kbc2[]=clid_fz%3D-2%7Cclid_serp%3D-2%7Cakp%3D8%7C5%3D-1%7C6%3D-1%7C16%3D-1%7C19%3D0.00%7Ckus%3D0.5912%7Ckucs%3D5.0000%7Ckcucs%3D5.0000%7Ckcucs2%3D5.0000%7Ckssks%3D5.0000%7Crcid%3D81758%7Cclpr%3D0.907300%7Ccllvl%3D5%7Cokt%3D658%7Cbdkt%3D658%7Cps%3D0.992%7Cps_id%3D0\u0026ktd[]=17174784\u0026kwd[]=Edit+Forms+Online\u0026kwt[]=658\u0026kbc[]=9523b49b93b21fa35aaf5a6fd2f2d362.d2s\u0026kwp[]=2\u0026kid[]=449914417\u0026kbc2[]=clid_fz%3D-2%7Cclid_serp%3D-2%7Cakp%3D11%7C5%3D-1%7C6%3D-1%7C16%3D-1%7C19%3D0.00%7Ckus%3D0.5859%7Ckucs%3D5.0000%7Ckcucs%3D5.0000%7Ckcucs2%3D5.0000%7Ckssks%3D5.0000%7Crcid%3D166390%7Cclpr%3D0.881600%7Ccllvl%3D5%7Cokt%3D658%7Cbdkt%3D658%7Cps%3D0.992%7Cps_id%3D0\u0026ktd[]=17174784\u0026kwd[]=Online+Application+Form\u0026kwt[]=658\u0026kbc[]=9523b49b93b21fa35aaf5a6fd2f2d362.d2s\u0026kwp[]=3\u0026kid[]=351740978\u0026kbc2[]=clid_fz%3D6940%7Cclid_serp%3D13688%7Cakp%3D6%7C5%3D-1%7C6%3D-1%7C16%3D-1%7C19%3D0.00%7Ckus%3D0.5888%7Ckucs%3D5.0000%7Ckcucs%3D5.0000%7Ckcucs2%3D5.0000%7Ckssks%3D5.0000%7Crcid%3D157588%7Cclpr%3D1.000000%7Ccllvl%3D2%7Cokt%3D658%7Cbdkt%3D658%7Cps%3D0.992%7Cps_id%3D0\u0026ktd[]=17174784\u0026kwd[]=Fill+Online+Forms\u0026kwt[]=658\u0026kbc[]=9523b49b93b21fa35aaf5a6fd2f2d362.d2s\u0026kwp[]=4\u0026kid[]=83336599\u0026kbc2[]=clid_fz%3D10498%7Cclid_serp%3D8278%7Cakp%3D10%7C5%3D-1%7C6%3D-1%7C16%3D-1%7C19%3D0.00%7Ckus%3D0.6043%7Ckucs%3D5.0000%7Ckcucs%3D5.0000%7Ckcucs2%3D5.0000%7Ckssks%3D5.0000%7Crcid%3D163437%7Cclpr%3D1.000000%7Ccllvl%3D2%7Cokt%3D658%7Cbdkt%3D658%7Cps%3D0.992%7Cps_id%3D0\u0026ktd[]=9671406556917033414824192\u0026kwd[]=Business+Forms+Online\u0026kwt[]=658\u0026kbc[]=9523b49b93b21fa35aaf5a6fd2f2d362.d2s\u0026kwp[]=5\u0026kid[]=4590718\u0026kbc2[]=clid_fz%3D-2%7Cclid_serp%3D-2%7Cakp%3D4%7C5%3D-1%7C6%3D-1%7C16%3D-1%7C19%3D0.00%7Ckus%3D0.6116%7Ckucs%3D5.0000%7Ckcucs%3D5.0000%7Ckcucs2%3D5.0000%7Ckssks%3D5.0000%7Crcid%3D166390%7Cclpr%3D0.909700%7Ccllvl%3D5%7Cokt%3D658%7Cbdkt%3D658%7Cps%3D0.992%7Cps_id%3D0\u0026ktd[]=9671406556917033414824192\u0026v=1\u0026gdpr=1\u0026geo=59.9%7C10.77\u0026lper=100\u0026lpid=\u0026tsid=1005\u0026hint=\u0026cc=NO\u0026wsip=170763266\u0026bca=0\u0026ugd=4\u0026vgde_setid=Nfu\u0026vgde_chost=+x8NULJQxj7Qwxz7.NmY\u0026cid=8CU458282\u0026vi=1766275581332466995\u0026vsid=DefVid\u0026tdAdd[]=asnum%3D50304\u0026vgde_test_data_struct=%7B%22EO7E8O%22%3Au%7D\u0026vgd_adprefflag=00\u0026vgd_adpref_diff=1010\u0026vgd_fm_lang=EN\u0026vgd_implt=3\u0026vgd_cage=1\u0026vgd_tsce=L1085-S1085\u0026vgd_l3_sc=03\u0026vgd_pdtid=1\u0026vgd_oscar=1\u0026vgd_ctrlid=O_SERP\u0026vgd_nrrv=89734\u0026vgd_nrrmf=8301000480a\u0026vgd_nrrsf=scrr\u0026vgd_cty=oslo\u0026vgd_csovr=0\u0026vgd_ifrmode=03\u0026sbdrId=\u0026verid=\u0026mprpslog=u5eqezZf_lYyULMtqisNS3GSBklJPR0ktL_GEE7r17IchT3FJbdqsw2irgpzIt5OzbEZnBAxPTFMlknbUnwkIS27wnA4ySvL39PgloPtX1JC4-_rcf8iftCAgLhir1p1SYWqU9xvwJfa7NNHFamyEt1k5sNZpcYXYX8mYDFpj3vH20pfHCmtyuxUyqSS1zdG3CzYHfYdQrimvQiJkGrxHA\u0026kbbq=%26asn%3D50304\u0026vgd_ppvi=2151382118167318472\u0026vgd_wlstp=0\u0026vgd_vstrid=DefVid\u0026vgd_scsver=2602\u0026vgd_himglg=K0P0-O0K0-S0\u0026vgd_cache_metadata=%7B%22kbb%22%3Afalse%7D\u0026vgd_cfud=251031\u0026vgd_optout=0\u0026vgd_l2shld=1\u0026vgd_akcip=91.90.42.0\u0026vgd_oreqf=one\u0026vgd_oresf=one\u0026vgd_och=0\u0026vgd_rensize=1280_1024\u0026vgd_scr_h=1024\u0026vgd_scr_w=1280\u0026vgd_col_sch=l\u0026vgd_be=0\u0026vgd_nmerr=1\u0026tdAdd[]=uiparams%3D%3Brend_w%3A1280%3Brend_h%3A1024\u0026vgd_sc=03\u0026hvsid=00001766275581879015326356485759\u0026rc=0\u0026rand=1766275582727\u0026acid=undefined\u0026matm=1766275582728\u0026vgde_ltimesrc=u\u0026vgde_ltime=Fuf\u0026vgde_rtime=XWh\u0026vgde_etm=Ai\u0026vgde_timeObj=%7B%22juJ-JN%22%3Azxjj%2C%22jfjm1O%22%3AXuA%2C%22QNLLQ71L7%22%3AA9%2C%22QNLLLJzOJL%22%3AHH%2C%22QNLLJ-JN%22%3AFi%7D\u0026vgd_lhl=1984\u0026vgd_sbSup=1\u0026vgd_nrrs=89734\u0026vgde_cdeplbl=1E8Mzm7M1e18j1GjJ\u0026vgd_end=1 HTTP/1.1\r\nHost: l.cdn-fileserver.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://quickresultshunt.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 21 Dec 2025 00:06:22 GMT\r\ncontent-type: text/javascript\r\naccept-ch: Sec-CH-UA-Full-Version-List, Sec-CH-UA-Full-Version, Sec-CH-UA-Platform-Version\r\naccess-control-allow-origin: *\r\ncache-control: max-age=0, no-cache, no-store\r\nexpires: Sat, 20 Dec 2025 00:06:22 GMT\r\npragma: no-cache\r\ntiming-allow-origin: *\r\nvia: 1.1 google\r\nstrict-transport-security: max-age=63072000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=C7gpzUkZ%2Fakeuliocu9tqePr%2BPswtQ%2FLw3QVdmrdlRMbBXHEqBnbfh%2Brw4iq7UFbeEIyS74bpdJSgBbfS%2FMgSpdeh9MD3bb0LsZf%2BpUBFTpQNS5o\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9b1322188a701525-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":15,"size_decoded":0,"mime_type":"text/javascript","magic":"ASCII text, with no line terminators","md5":"2ba5e95642c652c708881ad3c9d8443f","sha1":"5bfcc33bb9cc897546c600206b03d1307bd63a94","sha256":"c787e9dd6dc8ea3c935f5f0f30e3b9e4a3e066b4619bb244f569883f8e318a24","sha512":"8c157fc41fd03bbd47633269b18effb652644e58284f8f85465b0ffba9b5a06544a03ed0655706c96edfa09a64f4f164f6bbc573ac5045000cae03c8b36d046f","ssdeep":"","tlshash":"7e600000000cc030030f0c00c3000300303000c000000c33000f30cc000000c00fc303","first_seen":"2025-03-08T00:25:13.560069Z","last_seen":"2026-04-04T00:32:53.422716Z","times_seen":140599,"resource_available":true,"data":null}},"time_used":131,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":131,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"l.cdn-fileserver.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"l.cdn-fileserver.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-21","alert":"Sinkholed","trigger":"l.cdn-fileserver.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}}]}