{"report_id":"5d9bde9d-e3b3-4ad4-b6bc-a09887221257","version":6,"status":"done","tags":[],"date":"2026-04-16T14:49:26Z","url":{"schema":"https","addr":"sphinxdeclic.com","fqdn":"sphinxdeclic.com","domain":"sphinxdeclic.com","tld":"com"},"ip":{"addr":"217.182.188.209","port":0,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"final":{"url":{"schema":"https","addr":"sphinxdeclic.com/sphinxauth/Account/Login?ReturnUrl=%2Fsphinxauth%2Fconnect%2Fauthorize%2Fcallback%3Fresponse_type%3Dcode%26client_id%3Dsphinxonlineclient%26state%3DaGhlR2E5UVBNaHN1clc0SEhEV3NtUEZ4cTRKMFE2a0EzUzNTWWptcTloOFhP;%25252F%26redirect_uri%3Dhttps%253A%252F%252Fsphinxdeclic.com%252Fv5%252Fcallback%26scope%3Dopenid%2520email%2520profile%2520identifiers%2520userprofile%2520roles%2520admin.limits%2520sphinxonline.webapi%2520workspaces%26code_challenge%3DuzFq0qLRNzo889zBS1YbzdZxxtGRBAnTu8FSrBPBPAg%26code_challenge_method%3DS256%26nonce%3DaGhlR2E5UVBNaHN1clc0SEhEV3NtUEZ4cTRKMFE2a0EzUzNTWWptcTloOFhP","fqdn":"sphinxdeclic.com","domain":"sphinxdeclic.com","tld":"com"},"title":"Connection - SphinxDeclic","dom":{"size":12962,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (3022)","md5":"a9ac124debd41ea4377913ec58e8c64a","sha1":"0e1b1f3e84f4ec4aa3f2a2780024152ef4a64886","sha256":"7f62c5d0076ebad3630537b47f804353cf1b30aa930aa97d8f5ac1d3f7bdfa95","sha512":"bd8a9b8bdd0a1db837c6d90784a5ad5fca3b8e38638cfcf6d013911682bccd12bd6d97411814db1633eb4f7d6f249ec50f333f33ca2726c24ff44239bf78cd18","ssdeep":"192:GycDruX8WfXcDL0RV5R8wP44BOUGnx7qCt6ctxX:GNuX8WfXcDQRvR/w4BvmBqoF9","tlshash":"cd42765150f0086949afa2e2659d5b063dd3c327d2074fc8bafc0a948fc6d9f47a32ad","dom_hash":"domhash81a6b5b820971ca1d2a631ab9010b307","first_seen":"2026-04-16T14:49:32.86854Z","last_seen":"2026-04-16T14:49:32.86854Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"sphinxdeclic.com","fqdn":"sphinxdeclic.com","domain":"sphinxdeclic.com","tld":"com"},"ip":{"addr":"217.182.188.209","port":0,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"tags":null,"meta":null,"user":{"user_id":"akbkyowd9geqr98"}},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-05-21T14:49:26Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-16","alert":"Sinkholed","trigger":"sphinxdeclic.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null},"summary":[{"fqdn":"sphinxdeclic.com","ip":{"addr":"217.182.188.209","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"domain_registered":"2012-09-04","domain_rank":2025360,"first_seen":"2017-06-28T14:06:21Z","last_seen":"2026-04-16T06:25:34.752159Z","alert_count":26,"request_count":26,"received_data":2395275,"sent_data":19442,"comment":"","tags":null,"fingerprints":[{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"sphinxdeclic.com/v5/chunk-GWT7RALN.js","fqdn":"sphinxdeclic.com","domain":"sphinxdeclic.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"importedModule","is_inline":false,"md5":"dc91444c85efee25d81f487a19a10835","sha1":"d6febf5486a5241efaa6164bcd11a3230ec880d4","sha256":"8f5a6b8c7c9bff6151433ae8e4416b63832af50b00998ce6814dcf934ae20600","sha512":"0d02c1c55ab9f70782248fb022888e33e04bbf763ecf37da9bf291d865622fc10c8038f24088784f279cd8e3402197bfe97b61894747106513ecb15c0a50508c","ssdeep":"1536:52XM+RfffcfYtOfXWZDCCbTbvbptTfEZbDER:biOfXWgTZbAR","tlshash":"4e43ea5f33626a364bcd8499f8661501e32b0188210c943cbda56eed6f4ce4f537bbb5","size":57775,"data":"","first_seen":"2026-04-16T14:49:32.899066Z","last_seen":"2026-06-10T15:42:17.957003Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sphinxdeclic.com/v5/chunk-FQ347ZTJ.js","fqdn":"sphinxdeclic.com","domain":"sphinxdeclic.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"importedModule","is_inline":false,"md5":"775eaee9b05878822716bea82a8441c1","sha1":"c5862aa4f64b28b91f0f4ab2876174645af2f199","sha256":"5287b65fd725bc0a808ddce8532d8034c797c0754b0629c1cf05a29c811d9685","sha512":"16e1636730e55660fc3aafa3f60f10610eafef35b62486e74e1f5c321f308100271df9d5eb3c55fc86a83884befc3f1e95a349185431a5bea8cf49202d73d2eb","ssdeep":"384:oFclE/d5DLTh3QA9HjYCCt8ljXfA+VULkEXpdXa6bC4HohAX2H4p/bcby:bwCt8ljXfPVULkEZdXa6btoAP/b6y","tlshash":"666245722382f2f448ccc09a58f048446a50779a67081c99ff6859bbe654dc733bfbb9","size":15037,"data":"","first_seen":"2026-04-16T14:49:32.900254Z","last_seen":"2026-06-10T15:42:17.890063Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sphinxdeclic.com/v5/chunk-O6BYDQOJ.js","fqdn":"sphinxdeclic.com","domain":"sphinxdeclic.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"importedModule","is_inline":false,"md5":"a0948c7f3c7e4c0afd0915526eac1589","sha1":"cf5f8630c972339a3b6dc7385632fa52b344d726","sha256":"58cd997f3a67cc9331dbdedf04ea0204831bf04f3e4bf7897499193936d7282d","sha512":"3aed94de3e398477e9a0f40c797d542736a9c5dc6582fd5d62683831160a5f915bf53db26f62d2151cfc8dd0bbbc4d3c13e8a20381b22240c6fea93b7258c9a9","ssdeep":"","tlshash":"e4111e3e348462b30c0f9cec6702e19793ed4159463583a1e13f5c2424f4ca4b14f1bb","size":1000,"data":"","first_seen":"2026-04-16T14:49:32.901415Z","last_seen":"2026-04-16T14:49:32.901415Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sphinxdeclic.com/v5/chunk-KVYO2SMS.js","fqdn":"sphinxdeclic.com","domain":"sphinxdeclic.com","tld":"com"},"ip":{"addr":"217.182.188.209","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"introduction_type":"importedModule","is_inline":false,"md5":"a8cf16f699712769905f32c66fb2379f","sha1":"47cb86866146d1e4bfbf33da821ef27cf3fb8b06","sha256":"00270947aa54e86de55212e457d1b3a9f3f616974770b2b24abba84d0709defe","sha512":"ab4af681b749bac8765ea1bf8db24557d13e1cf7b021840337a23fc2f120b6321596a7913bdb3dc089dd5c4cbb4c291b8f5fe9064e1f588dd0accd94ba4862bf","ssdeep":"","tlshash":"1d01abef6197b0ae0792dd9988235adce3081911034c5eacf0c41a92bd70840b5bfa79","size":793,"data":"","first_seen":"2026-04-16T14:49:32.884843Z","last_seen":"2026-06-10T15:42:17.914183Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sphinxdeclic.com/v5/chunk-C67KPOXT.js","fqdn":"sphinxdeclic.com","domain":"sphinxdeclic.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"importedModule","is_inline":false,"md5":"a251d4e52d6d9bf3c34db51a9f7a2663","sha1":"f675170d141265ae90af5091ff9fba72cd5d49e3","sha256":"c593323a50e9d8ad481578d7f5dbbd3be7b40e5e4a01e04e13ceb7e8cdb44b4a","sha512":"5e01ef22647c5301714636e742fa5772d3994daabe07ebdd130aa56845e2c71ae1e4d335e8b1cc4c432ee47e2dad00424ded250cd376859b97ae14ce9d2b6286","ssdeep":"","tlshash":"085142dbf763b03a438e91edc0ab504ef37815b4067e5410d66598f23a6806d82faf26","size":2767,"data":"","first_seen":"2026-04-16T14:49:32.902456Z","last_seen":"2026-06-10T15:42:17.946997Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sphinxdeclic.com/v5/chunk-QOUSM46W.js","fqdn":"sphinxdeclic.com","domain":"sphinxdeclic.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"importedModule","is_inline":false,"md5":"d927f40a4c38aa6f67f2a20e1d0bcc2d","sha1":"bcbc7a28f9dfb89d4d4d289e7c3b3c9b39e81fee","sha256":"5087d96f72523943236713c540c8b91ed3d10bde36c3043437dbabb16888b86f","sha512":"4f22fdf1497a079ff1ba79536565d66fc423ab190d18a7d96d1388071b4a5d31497f1be777fd8f38a95bba7eaa5fbbc77a5ef45e72955bb3ad35e32a2faf1d21","ssdeep":"3072:qeru6xvP8e979ehFQ7AV6CbEUqs3SczkJ8hEJDD5:p9xn8e9790Q7tCbEUqs3SczmJDF","tlshash":"5a84a8794c124bdda9aac1426a48275ba27cd528b588f30dfdf5c41b2def5e30071ba3","size":392193,"data":"","first_seen":"2026-04-16T14:49:32.903515Z","last_seen":"2026-05-13T09:58:26.836708Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sphinxdeclic.com/v5/chunk-PHHXSQQN.js","fqdn":"sphinxdeclic.com","domain":"sphinxdeclic.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"importedModule","is_inline":false,"md5":"8d7f26b01a3b3a1307788104e5e35465","sha1":"90ff87f8ae67470d4fb181cb7fa03eabff62451c","sha256":"462552d626a9700275d92d53dd159d4b10dfcac2d895c923e78c7cd2948695b8","sha512":"dde81628163f5eac3d58de05fc412586ba6b4cbf462b85e15994a6460ea7eddae2cb0e1ca93c5f751328d6cf27411d8c377e1bf0f37745d435f2ddf22fdb55c7","ssdeep":"768:UTNjASpxG+NXKJKWIutPqyXajUdyt0n6LBELBFfwTM+F3gS9BcPeRQU7Brh:SN9HJa8W5jeNNjycBrh","tlshash":"fd332af9f61125bc93abc4558453210ce22d9065c50682ddf2a89e2c7ae9dc933efb3c","size":54698,"data":"","first_seen":"2026-04-16T14:49:32.904681Z","last_seen":"2026-05-13T09:58:26.778075Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sphinxdeclic.com/sphinxauth/Account/Login?ReturnUrl=%2Fsphinxauth%2Fconnect%2Fauthorize%2Fcallback%3Fresponse_type%3Dcode%26client_id%3Dsphinxonlineclient%26state%3DaGhlR2E5UVBNaHN1clc0SEhEV3NtUEZ4cTRKMFE2a0EzUzNTWWptcTloOFhP;%25252F%26redirect_uri%3Dhttps%253A%252F%252Fsphinxdeclic.com%252Fv5%252Fcallback%26scope%3Dopenid%2520email%2520profile%2520identifiers%2520userprofile%2520roles%2520admin.limits%2520sphinxonline.webapi%2520workspaces%26code_challenge%3DuzFq0qLRNzo889zBS1YbzdZxxtGRBAnTu8FSrBPBPAg%26code_challenge_method%3DS256%26nonce%3DaGhlR2E5UVBNaHN1clc0SEhEV3NtUEZ4cTRKMFE2a0EzUzNTWWptcTloOFhP","fqdn":"sphinxdeclic.com","domain":"sphinxdeclic.com","tld":"com"},"ip":{"addr":"217.182.188.209","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"introduction_type":"scriptElement","is_inline":true,"md5":"16149e2e87d90277ffafb064e8f1952e","sha1":"3a4d6c96689f54bbd256cff713422930faca3aff","sha256":"407e2d11110743b8c502bee59bbdbfcf6f5d83ac049900f3e5bc23f07c71d2d3","sha512":"76e0c8f34b81d7581e56ca4871ae28c2f02ca928c7ac48bb640cbaf80a507d9da843924cffa847edb8780f8c6465c85c01d10577174933188963004de310ea09","ssdeep":"","tlshash":"11f027c9b6e762241e6a71f942c682cba1b84447b3069ca53adc42607f51ae052a3778","size":508,"data":"","first_seen":"2026-04-16T14:49:32.907389Z","last_seen":"2026-04-16T14:49:32.907389Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sphinxdeclic.com/v5/chunk-FOKGZF7R.js","fqdn":"sphinxdeclic.com","domain":"sphinxdeclic.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"importedModule","is_inline":false,"md5":"7c817536e70e4c76037adadb569b3e41","sha1":"64df68ef4e139e3e8afb806533963c12292f5bdd","sha256":"f9c0539eebced7c45bdb3e1517aa34e46a594adfe54f61edbfa0635e94219867","sha512":"3db6e709248c47c92f6d4508ac53db98d943bd1bb7c079a50e1ff4f5c1dde124185a9507a9a34bd79b369953ee9308567bb5a92b6aed2ed0c9c9bdae82d468fb","ssdeep":"","tlshash":"2a31de084b4482fe2ae64774851649b2bc8dc76c29f8dbf6f71ec0b171621ccb2ec859","size":1849,"data":"","first_seen":"2026-04-16T14:49:32.908994Z","last_seen":"2026-07-24T11:12:37.414584Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sphinxdeclic.com/v5/chunk-B7UPAHPQ.js","fqdn":"sphinxdeclic.com","domain":"sphinxdeclic.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"importedModule","is_inline":false,"md5":"174d5aa0bfa24c6048a048716be2dcee","sha1":"46151551f1a0154efc56bbec9ef677c66282ae1f","sha256":"72944025be079e5dbbc29c9de6e631b3fc2420f7043445f26aae3df1e5babcb4","sha512":"b380c1673f50fe2bdbf27c26e00c18e6a8b454c1945262738d7cc182ed6d819ba033b419e841c9b22532185b21e451b34096b25a07985a1c0be3c3b3265a70af","ssdeep":"","tlshash":"1cc080c598d195d5c552143c4e0f46c88574490d562f41cc5341d5022d75ae25479e25","size":174,"data":"","first_seen":"2026-04-16T14:49:32.910657Z","last_seen":"2026-07-24T11:12:37.39593Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sphinxdeclic.com/v5/chunk-NSJGUOD6.js","fqdn":"sphinxdeclic.com","domain":"sphinxdeclic.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"importedModule","is_inline":false,"md5":"7c99f814da41da48fd2783b853eff1bc","sha1":"5051f6cca449d4a02b907c523f5374781bc05910","sha256":"2ff9f6724e3c7bd1a1933c3e66477b968809137e10d5619cf59f706faa7ed763","sha512":"5e50bfd1a85a86114d612e5b958b78207c20f3c6840535bea7cbf62f0b8fd78fd93abd2900f438854745e5227f4a91f60a4c3833dfbf6bbbc3c74bf13ee04ed0","ssdeep":"1536:POWzmxkrUwADEamYqmumXmHmzrmgm8mHI6WhMXYXxTbiVWVIurDj9i9fb8NwUBZp:Rzi0I6W2JVwIulr","tlshash":"e5733b88329171b54f9f8051509f5309f13a7e4a6845dca4f1b3a8d97ca8f9c21f7b2e","size":77275,"data":"","first_seen":"2026-04-16T14:49:32.912141Z","last_seen":"2026-06-10T15:42:17.939486Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sphinxdeclic.com/v5/chunk-URH4C6BD.js","fqdn":"sphinxdeclic.com","domain":"sphinxdeclic.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"importedModule","is_inline":false,"md5":"1b50a337a6dcefe53a0ea19d1f027a43","sha1":"dee2a44ff26a75438272bcb3e79990bf59b81219","sha256":"b6945dd10b64bf8a39bc992de926ec1250373764ef7dce13f5548f1f0df7e208","sha512":"8f4817bef05a8124f308687170ff395ef48e72999de04bd661e3cda6cf963dbea3db6ba3b2e774c89a22002d3cebf927b638805e2dcc61d88108768736341eb3","ssdeep":"6144:nycsBiWniplb0lYOLfiUZYZiUjd71Up5finTVMGBBZ:ntliLojKJChMGfZ","tlshash":"057409963153b73a47ee10b5c46a0141e32a10d98848541c7efc8ae775f9dc8a2ffb7a","size":344954,"data":"","first_seen":"2026-04-16T14:49:32.913601Z","last_seen":"2026-05-13T09:58:26.798444Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sphinxdeclic.com/v5","fqdn":"sphinxdeclic.com","domain":"sphinxdeclic.com","tld":"com"},"ip":{"addr":"217.182.188.209","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"introduction_type":"eventHandler","is_inline":false,"md5":"7c3c3ddeb80438dcbb3d081d2d00e152","sha1":"5a4016732ee72ec77b4f6ab17047bcea6d2ea34d","sha256":"321b4f657afbf8ba49518e6ab4cbad07ea967d0b4c68f71c7deed05ed09c1187","sha512":"b252f7dc795284fe8ce404711809130d8e16670a8e49b271f9a24b04a542a0fccb7a8c7238c12b37db35fe73a2fbf1cdb374468574db4e6d39975a17dca547a3","ssdeep":"","tlshash":"de6000f0003000000003c30000330cf300000c0f00ccc30cfc0000c000c00000000c03","size":16,"data":"","first_seen":"2023-04-10T15:57:29Z","last_seen":"2026-08-08T06:24:55.955621Z","times_seen":348814,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sphinxdeclic.com/v5/chunk-KJG2GFFG.js","fqdn":"sphinxdeclic.com","domain":"sphinxdeclic.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"importedModule","is_inline":false,"md5":"aeea879a0fc2ad5517bc0f354f392278","sha1":"01d877dbfef2861fa4ac008730001ab139112e6f","sha256":"65c160875545106c4dbce9fc28439e2500e8294dcdd3a53f4a6b3586223118bd","sha512":"b17bc0a2703b6901e0b1f29a2a4f2707c5cb179f2ad00d200d61d70d63670acb04f224480cccd4d5fc57ddb1bc869c648e838baf17bf1dca2f9dd92e5b581e5a","ssdeep":"","tlshash":"1001107e3992e931739f25d004970d41e1099c8f420a0022e1c29162bcb122e5efaa87","size":709,"data":"","first_seen":"2026-04-16T14:49:32.91574Z","last_seen":"2026-06-10T15:42:17.887217Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sphinxdeclic.com/v5/chunk-X3LYDDLO.js","fqdn":"sphinxdeclic.com","domain":"sphinxdeclic.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"importedModule","is_inline":false,"md5":"60fadb56f2293d280c0fc788e4bcd645","sha1":"27bd163b2e3a590d9ce28dec8dfc614ee01e0ad3","sha256":"d20e97c0ff60c415c1035162abbae8d4a8d41e55c917ce7a5e3b1019425222bf","sha512":"f0c8a64eba2db7fb3135e9e8309576488b97fc7a95bdb1346017c535885458b988befe8a1166bf7ad29400fd7ce950d06fb0587f33f44fc12fd26f5f3ef2a685","ssdeep":"","tlshash":"f6f0377616edbf7c65b8b08f565449a1fb7904fcb2a0475586269d4902ec206223f70d","size":481,"data":"","first_seen":"2026-04-16T14:49:32.916738Z","last_seen":"2026-06-10T15:42:17.925799Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sphinxdeclic.com/v5/chunk-L5WY7QGD.js","fqdn":"sphinxdeclic.com","domain":"sphinxdeclic.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"importedModule","is_inline":false,"md5":"5e59f2415b64fa3c60b78eba61ac4c11","sha1":"749d4d96b97d66233b9774dfc89da5ce5083e517","sha256":"36c2e052e1a558470194dd7b3313699729271f7880e688cb8de65e7aa07e883c","sha512":"937f4ef8efed3af697c83fd6f918eeebf24cc5c255af2745da1d309aa171597f0e58e2c0d186ac2b43d1f052573bde7159f9b104eccf1ea5a734e8e037b0e197","ssdeep":"","tlshash":"1b2161f7333133fbcfbc01db7376eb45a2a0266460160c04458dea1a2468e4245f2f71","size":1352,"data":"","first_seen":"2026-03-16T17:35:13.403042Z","last_seen":"2026-06-10T15:42:17.901036Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sphinxdeclic.com/v5/chunk-XOUIMG7N.js","fqdn":"sphinxdeclic.com","domain":"sphinxdeclic.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"importedModule","is_inline":false,"md5":"8c15251b33870139cb2685683436702d","sha1":"9d512ea040db7de69c4e35bd7383128144fb0d18","sha256":"7295b0841989af0b89dbd85d13343a4d3a3fbd21a5fcce6598d06600dee2f49c","sha512":"24b077fd3d00129e0bc142132ebfc91a002d6e2b59ff6f16b4805d9caaa6dff2894905e9b81bf361d505b1884c6c5757b2bf4e093233439f1ca51bafb748af3a","ssdeep":"","tlshash":"69e08cd870d6b4a362851270982fe809b63a3c151d1cdc84f690e19dbcf4624d17ad28","size":309,"data":"","first_seen":"2026-04-16T14:49:32.918757Z","last_seen":"2026-07-24T11:12:37.352453Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sphinxdeclic.com/v5/chunk-EJBUHNH2.js","fqdn":"sphinxdeclic.com","domain":"sphinxdeclic.com","tld":"com"},"ip":{"addr":"217.182.188.209","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"introduction_type":"importedModule","is_inline":false,"md5":"c064f99789444506c57e4e30c371b0b0","sha1":"00baf1940f79a0393ab54f3ccd040f2b0a83740e","sha256":"88af96378f99195a97c250a556b13a979717534212f83e6e7fc63663cff3d066","sha512":"b99a933f9d13a992878b1342f8d56e8f0dde49e89f5a320324d448973ae0797e1fb24596f72bea636d6bb8bfb867386ff0d5383b2837d185c1065a72c0ca6196","ssdeep":"","tlshash":"b621df5e2142f174134facee9c2e5d3bc20660ac835951ecf54a8f6722a1a8155bfe3b","size":1440,"data":"","first_seen":"2026-04-16T14:49:32.877391Z","last_seen":"2026-06-10T15:42:17.903073Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sphinxdeclic.com/v5/chunk-U6CS6ADI.js","fqdn":"sphinxdeclic.com","domain":"sphinxdeclic.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"importedModule","is_inline":false,"md5":"86f839f9821e708b2081aa2ed93cd748","sha1":"3c058da78f706de80674ded9aa477e9cf5380f4f","sha256":"46a9478f3f4c02205270693131c20e0eb0b5ba372f19f6ad03cec1fdc20efbee","sha512":"114635f18d2e102daa73ef60235899893063776cda77c28d2e1c55125f00cdf480d9c666767f2da2ca939e63029d2a61df0aaf414b0b909b840622a8e8a8a4c1","ssdeep":"96:G0H6nfAJBgGPFY5n4KFRVLlOXjaTEn3IPLt3AGSr4nONSNCQNM4GxMnq0w:GFfScxV0l4PpK4nOhQNM/Ona","tlshash":"5cb110c6b2d2b46183bf9abad5eb458bb3fe49c41f2c2434e05c91893924369c676f44","size":5295,"data":"","first_seen":"2026-04-16T14:49:32.92055Z","last_seen":"2026-06-10T15:42:17.928799Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sphinxdeclic.com/v5/chunk-OZZCJ4KJ.js","fqdn":"sphinxdeclic.com","domain":"sphinxdeclic.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"importedModule","is_inline":false,"md5":"c5f5ffd71686cbd32e0811ade3510284","sha1":"4ade73da2ae82924b3f13d64d1da3b0b8a296d3f","sha256":"8650d03c25aed817d9bae0d5967e614b60eb5c717c47eaef2321aee07ed87d72","sha512":"316e65609833ae6dd4d07ff569e6c8c09079655c8961a56d33c92afd7446c7410c3691d335e94ce7a1cc3ff70e9d14cddb4751c4f9c248346e03ddbfbf0b835e","ssdeep":"12288:9C/1/m98rvQo1RNNao8ptPjCwuBgClvk04ZoDanmZw41JSiMhX0gSlVWFddgtFDX:9CN/CuU/0gSlVWdVdcyn9R1hW2Sx","tlshash":"04451bab3292b67943dd50b5e8a70504e33a14d6d50c106db6ecc9e666e4ccc32bfb78","size":1184858,"data":"","first_seen":"2026-04-16T14:49:32.923249Z","last_seen":"2026-05-13T09:58:26.88229Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sphinxdeclic.com/v5/chunk-5FM64TH2.js","fqdn":"sphinxdeclic.com","domain":"sphinxdeclic.com","tld":"com"},"ip":{"addr":"217.182.188.209","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"introduction_type":"importedModule","is_inline":false,"md5":"d486bbecd6091fe1ce5f38ab0540a4bc","sha1":"d05ee91226d6930c0dc07f4654e17c356fd762a5","sha256":"dd3bc608c0c44f28dab75b1dee77c8053b6787fdc52a20b58501d381c34c1e29","sha512":"4feaadce8633b0202329ef4c5e22e19b696208ddf94d3ef5cc04023da0f2e4f22f6d972804204236b696700648b957a6e15199856e51804aee1341c247aec3bd","ssdeep":"384:T1tN9DSyDlSt8OTIZDPDyG1zcm9XUY/lNiVWDvNIrzj7:T1f9DSyxK8KSDPDyGzXioNIz7","tlshash":"dfb264b6823561bc33d5cc5a64caf60a483cc0b4c905c59da74c6cadd2daffa21db729","size":23875,"data":"","first_seen":"2026-04-16T14:49:32.925355Z","last_seen":"2026-05-13T09:58:26.816628Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sphinxdeclic.com/v5/chunk-E7NIGDF2.js","fqdn":"sphinxdeclic.com","domain":"sphinxdeclic.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"importedModule","is_inline":false,"md5":"8734d58d0005bc435c57a26ef992564e","sha1":"f5267970e0ac141d363d11101caf0ba892d61bda","sha256":"a60b257e67c6ef9135c609a3676cc92097741902b7b830abfd06be935b610053","sha512":"545c3d8646962b7ad2a802de07c534db3e8a8aac698b532f185450043ae31ce2b3c771c40f398d1d08e6bfbe3e33549fc00e26f8d4803156a938277f416d7510","ssdeep":"384:wWqsDlG5urkbaXX4/h2TRhRdBQTnp2l4aivV6EIB82WqGeCDUgHtdtG99It1Vxv+:bXX4/h2lhhQT0SO46zISU6Xt","tlshash":"3fd2f8665292e2f833da48d4c0194c41f313651b357dc1b4ae99dc6deb60882e2bfb7b","size":29492,"data":"","first_seen":"2026-04-16T14:49:32.926466Z","last_seen":"2026-06-10T15:42:17.880073Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sphinxdeclic.com/v5/chunk-3Y5UHUWY.js","fqdn":"sphinxdeclic.com","domain":"sphinxdeclic.com","tld":"com"},"ip":{"addr":"217.182.188.209","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"introduction_type":"importedModule","is_inline":false,"md5":"a1f1b84c668e5e7b22fa5f8528928508","sha1":"de4a1920a61b97039e9718196c72fbcb8931369e","sha256":"dcc90456dcd4345d750ffbe5faba569b2370818264b89b05a3931bcc7627a120","sha512":"38080e84a1d787c7250d4b4db72c5d576449022ef24cd2db313dfe5f8e05b2fb6cee82809dba29caee59731731e9c23195cb663ddc240bda01fc22d91ba7c3e6","ssdeep":"","tlshash":"1a11659c33c432f2c30764ed03ab6247a7dd56522814076cc0436a5379f4ba080effa1","size":1000,"data":"","first_seen":"2026-04-16T14:49:32.92795Z","last_seen":"2026-04-16T14:49:32.92795Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sphinxdeclic.com/v5/chunk-NT35KDPZ.js","fqdn":"sphinxdeclic.com","domain":"sphinxdeclic.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"importedModule","is_inline":false,"md5":"cd414406d34c790065e963e7c36fd21c","sha1":"e1a8065f69aca1e1eee2f0a6da996a9a19b5efab","sha256":"dadcabeaa26a117d04a2ab4bc7524a0d6866fdda4ac96721e47c6c31f3e7abb6","sha512":"8ae435c17bde2045e19e93a3ea33a3c1e156ee403df9778d89ed17330665d0791ca9a96044713bea86b716375276a7f11497ba32779c5a5cdc0a0ded673e6dcc","ssdeep":"","tlshash":"f9a012499e900a90a3015014810e5b2994644c432b14d0d04007d9910315ea1413c729","size":86,"data":"","first_seen":"2026-04-16T14:49:32.929175Z","last_seen":"2026-07-24T11:12:37.462683Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sphinxdeclic.com/v5/chunk-DVIOWJQG.js","fqdn":"sphinxdeclic.com","domain":"sphinxdeclic.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"importedModule","is_inline":false,"md5":"b58fec668008776e29b98528b0bd54fa","sha1":"13c2fce4d6e1d9071fc5ec28b04974dd707d8389","sha256":"480bd148f9f9c09dd0f95aaebe63edacf5a8844fb6bb8fba71fc3176f227c74d","sha512":"b1dfc5b9d0315919b2b50b9ef17cd2a313e713e0b5c0cccb1503ad322851628261313e5c63717427adcdf8ee67b13a24459c13f183cbbca817f1c716f3be8add","ssdeep":"384:/ygqdIru8QsWHHp+jrKKqfPbO+F25XgbahCfHloEHiXOhxBtu3BmnYHKSxryqRoO:/ygqdWTQsnKKqfPbO+FEVCfH2EHiXOh0","tlshash":"6592d8697297b4218385e0cd547f0045e32de481848ed43cb6ee4bcabd94d19a6fefb2","size":21225,"data":"","first_seen":"2026-04-16T14:49:32.930449Z","last_seen":"2026-05-13T09:58:26.857141Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sphinxdeclic.com/v5/chunk-S2KWEX5D.js","fqdn":"sphinxdeclic.com","domain":"sphinxdeclic.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"importedModule","is_inline":false,"md5":"92dd3afd5f6723e0750eab8d6f5b2dbc","sha1":"770d537ffd7b4f49a2e61b533ada64fec06cd8c7","sha256":"dedd35e24cee72bdcffc6026d02b550bf9336891b1baadd2a9eaa385984afcde","sha512":"ba908faf23cdfc02f9831a95a6f602c6911c9aa3cfc2d70a58ef5e6335610a509f7660651f12e4a2a2fe0af94dd8c93a32d9df73ecf291ea3cd46c602209c918","ssdeep":"6144:3uzgKoHaZrQTR6niuqC9SRpn01F1jAeYtjIz:SjrQTRkL9SRt20eE6","tlshash":"489407e53366707b87de90aa54f61440f36a5489940d042dfa7cd8eb3ea498422fff39","size":440927,"data":"","first_seen":"2026-04-16T14:49:32.9325Z","last_seen":"2026-05-13T09:58:26.872781Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sphinxdeclic.com/v5/chunk-FDGUS7MI.js","fqdn":"sphinxdeclic.com","domain":"sphinxdeclic.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"importedModule","is_inline":false,"md5":"368858c88a33997f482f406b6c8b3074","sha1":"02010e45bbf788733e7797bf23810e7a53dd4965","sha256":"70f7f5204860b7cb86bf2cba0602d63f02e9abf3b753874da79f297d25b1dc6d","sha512":"2c92a165275d7b43ae3bfb47ea441ea09194810f23479b2ee995dd1d0652c203217cbd59258321c2c85feb1927743ce0a452f4578639cb6c3183a12a45037ece","ssdeep":"96:obxXBhtRBXor/3tYC5z58tbb9Hy5encX640VNx0cFG:oY950bZHy5encXf0VNx0Z","tlshash":"8e91509a3384b262071544f8c9230466775d3cc65b5ec0bdb684acc6bce0c34b2bd779","size":4344,"data":"","first_seen":"2026-04-16T14:49:32.933677Z","last_seen":"2026-06-10T15:42:17.924105Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sphinxdeclic.com/v5/chunk-CDNTXTHK.js","fqdn":"sphinxdeclic.com","domain":"sphinxdeclic.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"importedModule","is_inline":false,"md5":"713f8e4594274ce926ab0db63f52a57b","sha1":"798cfb67358c755c805d5e6ca49b5bb15b23cc6d","sha256":"59ce0e146065bd154a41ddc5eb2c289e2087d1a792cff6b20cdbec1235467574","sha512":"4e307193dfb148566706644354c271723cdd443ba6dc1f467614dec3c6d4ed25b60edd9a567a1a1e2cd907b71595ecd37b7a0f201bbff9e54e7a8d078a3a53ce","ssdeep":"96:4fJSQPRpQZ0S+1AkX/iikrd6gGExyu7DaWLwdHdfxeC4mxY0d1AIcBzg:4IQZ9SqrLgGExyu7DaWqxtdYO+Bc","tlshash":"11c1d73a6092327d259bcc9c9922c94047b5091e571917adf23a8c946afcdc823bf77b","size":5774,"data":"","first_seen":"2026-04-16T14:49:32.934897Z","last_seen":"2026-05-13T09:58:26.762349Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sphinxdeclic.com/v5/chunk-RL43VJUZ.js","fqdn":"sphinxdeclic.com","domain":"sphinxdeclic.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"importedModule","is_inline":false,"md5":"03b4c1e3f972b295193ad62f8a52da7d","sha1":"95f93b56b29db5541ae678c4ce620573295d01a2","sha256":"1c7e5c04db62678150983bd7d56e1047e26b5589260b2f7ce565ffb238b34a67","sha512":"101c2d7666df2272937afe04f2c2b3186ad768ef44255da90c9af2d6ed30c8f8775653052b9ec065e0bf7d295664456c1fe6c50adaa23658f11fa188ce484faa","ssdeep":"96:P53RisANHgcO3eTYLGbWDj7aqI7S7VFGYPRskzKixGvlIRKg5SYtxmR00MQXM2kL:PrisAN0OkKbiIOg0cjkQiV2tm","tlshash":"4d02ba79f25862330edd1719863f8592e2172d8f168644ac7a8ce8e03456cc5663b9fa","size":9000,"data":"","first_seen":"2026-04-16T14:49:32.936197Z","last_seen":"2026-06-10T15:42:17.949149Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sphinxdeclic.com/v5/chunk-MAARU66S.js","fqdn":"sphinxdeclic.com","domain":"sphinxdeclic.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"importedModule","is_inline":false,"md5":"35862fa6855b73e634cd295ccb8fd518","sha1":"ccd2ee67939613ef41d66e6632db0d1f58408334","sha256":"224a98bedae9e235140e80a9a4142e17d8d0cb6ae1e9424e377795ae322d034a","sha512":"65077e05a781d2f81adf6cc060e64b4253fbdbbcf9617f5de72a6adf54b0c8131935bd9071bdf51a8dd0466c6db7d03cdb778af68b3701d44dc5e92455fb3613","ssdeep":"","tlshash":"c9e02b9e3789a8314727443c921f28aba21815588a79418091526d9575341d8a17ff9e","size":404,"data":"","first_seen":"2026-04-16T14:49:32.937512Z","last_seen":"2026-06-10T15:42:17.961076Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sphinxdeclic.com/v5/chunk-UYBJIX2U.js","fqdn":"sphinxdeclic.com","domain":"sphinxdeclic.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"importedModule","is_inline":false,"md5":"95beae962977efb5c5e11dc0644b2dd5","sha1":"60279b03a69bb9a60127d1fc9e063fda509a7b83","sha256":"d544e541c5f9c11c8184803a9be72dc065f484d5572f83e25bb5b0e82ab9dfd1","sha512":"3996db4c7c6851c7193dea0946fb0708fcf9214849f46b000a86f6c2137391d8a2f97ad1e040324696ff141770d5d4c6b7430bc7f996dbb5051cc785a4e0f0ea","ssdeep":"3072:UHHVL7M+86fzUO9Aes9dac33CNxUcIY2BmKLIu:E7lVzUaAJ9sZUcIY2BtLIu","tlshash":"060407563311757e43de905ec4b60903e32a2095d90a006cb2a8ddee25edec932ffb79","size":185519,"data":"","first_seen":"2026-04-16T14:49:32.93874Z","last_seen":"2026-05-13T09:58:26.8294Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sphinxdeclic.com/sphinxauth/lib/jquery-validation/dist/jquery.validate.min.js?v=Z7r9qLq0Mq6Bil96bDYymLLgtNQ","fqdn":"sphinxdeclic.com","domain":"sphinxdeclic.com","tld":"com"},"ip":{"addr":"217.182.188.209","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"introduction_type":"scriptElement","is_inline":false,"md5":"a587c22fccaaa47baed94f0a2499082a","sha1":"0962593636d8a14b6b2a489764d42daedf2d3b24","sha256":"d2c861421b248c1d2d94ae3edab1db4aef67eb6b711435a8681abbe8a33d4806","sha512":"a8525bfce4b052f5917d9311bfb8e20093c3d7d4f42edd021efcd416994adf1529e89a6733cadc26e807c23d7d1af638b702af8ef0d1cd74f1e9c0cf7bff8963","ssdeep":"768:NWZ6/8lHJdkMioFpg5SUBQyQEny+L+gxV4Ky47Zr4:F0d3ioFpg5SUBQyQEny+PaKyCx4","tlshash":"feb2a78976d670065e9720f4909ba60b61b66960e008e83c75b8e4d1bef8fcc50f7f78","size":25069,"data":"","first_seen":"2024-08-14T22:01:13Z","last_seen":"2026-08-03T20:12:31.704873Z","times_seen":145,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sphinxdeclic.com/v5/chunk-GKN53OUS.js","fqdn":"sphinxdeclic.com","domain":"sphinxdeclic.com","tld":"com"},"ip":{"addr":"217.182.188.209","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"introduction_type":"importedModule","is_inline":false,"md5":"ef5c92f99cce5d277818f59cea513391","sha1":"13f44d477caadfa9dd74ba4b8b6215d2be221919","sha256":"291e2d2a9d6863c92e6df1ca42d798224e9814a2435546179a451951c5d26328","sha512":"c4a7a6a66940f0e3aacc73ef773825a6330703a75697dca77095a1949cec0a3870dcabf0f270eaa55c49c7fa9a15a692e3b2c41435e055dfc358519d843f5857","ssdeep":"192:xOr/50aWfSqdkM/2uzOa66ZxOdZN518u7M8B9gLBLX:kuSqdP/2uzOa66ZxOdZNv8uI8oLX","tlshash":"f7e100d96f305bbb2ed2485cb3058900850ad480e214c5bfb97abddb92d4ec4e97f678","size":7184,"data":"","first_seen":"2026-04-16T14:49:32.895097Z","last_seen":"2026-06-10T15:42:17.937562Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sphinxdeclic.com/v5/chunk-HEWIVMRA.js","fqdn":"sphinxdeclic.com","domain":"sphinxdeclic.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"importedModule","is_inline":false,"md5":"edf4d2f45ff7386b32efffe4c18abe0d","sha1":"1b50433ff0cf6fcea271740575bb9ed913a70d33","sha256":"88f0d3a8ba5790403c8341163013e825438dcd1dfbbe7bf1d62a1a7d8c9b648e","sha512":"624ef019b430b17695573743db271370e9296c8cc7fcb4f1ad0db2a016b7859286a3f972dc738244ec7e519821cc0369a2ac1e3f2495e83a5fd477182d10ce77","ssdeep":"1536:oEGJo+RXy0C6SVVIcoJCIongh+6UsvPJ/NhMhXMJpI:oRJop0C6SVVIcoJGngo6PrKhXeI","tlshash":"2073c5c673cbf22947a942ec04ad0102f79c6db6544d4c1cf594e8e7b964c9892bbfb8","size":75454,"data":"","first_seen":"2026-04-16T14:49:32.945421Z","last_seen":"2026-06-10T15:42:17.954137Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sphinxdeclic.com/v5/chunk-YJMHOJBG.js","fqdn":"sphinxdeclic.com","domain":"sphinxdeclic.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"importedModule","is_inline":false,"md5":"f8ba72ac96768ddece985d19a2be8fc0","sha1":"1ea1bb64560604bc662490f04707b800093f3d88","sha256":"e702a8a2e93f6265cce08aae017811306c4099b0f67553fa161d4f5fc3f5c327","sha512":"0d5a3d200110298ad069e3a83a4d94fdc68690f7e776f81b35e7af982d88000997d285674165f8548e1606f30bc684bcff6ad865a22763736870c158707d1586","ssdeep":"96:UwayXtLAQCbcwRAJ8cSpttF1kHsoFKmIMyi4hU2w:Uw79JCbXRuMhXMyiEU2w","tlshash":"25b143843651f0b643775c65e09f4e86e23d2811d58ce8a1ceebd0d5f8a4a15ca339db","size":5438,"data":"","first_seen":"2026-04-16T14:49:32.951006Z","last_seen":"2026-06-10T15:42:17.900417Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sphinxdeclic.com/v5/chunk-O6WT7O4C.js","fqdn":"sphinxdeclic.com","domain":"sphinxdeclic.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"importedModule","is_inline":false,"md5":"6f69e9a13f1a33f36ec1637e6c08826e","sha1":"d5f257e04c34d17109ceb9de7aad83b818cb7ad6","sha256":"45219743bf5f9506d995594890cc2238e6c415d70b75cb837ce3fbdee42db117","sha512":"53577bd7e559cf15a00c9eb41345f32cdb7cf41e85af154c176a9127990403a5447bf9c0c044b8a5669d02c87207e17f1745ce2b7b04097a1c4c34376f629354","ssdeep":"1536:S43BuMkpHRzNT69JtA7Awm6S4ycRqsyhTEvcDq:S43BuxxzNTwJa7Awmr4yKqsyhTEEDq","tlshash":"b433e642b395656b47ab9151d07a5203f33854a41309002cf63c96ffa9bdac8f3b6bf6","size":50145,"data":"","first_seen":"2026-04-16T14:49:32.953058Z","last_seen":"2026-06-10T15:42:17.899012Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sphinxdeclic.com/v5/chunk-JNBJGHJE.js","fqdn":"sphinxdeclic.com","domain":"sphinxdeclic.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"importedModule","is_inline":false,"md5":"6bddb1156c7161ff4fe2dd40c668662c","sha1":"e3f1c202194d3de97a9be8355b98350a002fb31c","sha256":"9c8db9cb639712c9355533fabde2a284e347e8fae4641ce427e5cc27427c6f4d","sha512":"b5e6f589f72c2bbfa416b70052eda811a00b858da62b092a63aa8741bd5b6b2968ab6051422d5ce459e5b54dd076b332f499d8e96ceb2d4e5cbbf7d2ec65bf33","ssdeep":"","tlshash":"e141225ab295a0b693875c189037462fd22326541917888df12cace96e1fc4a23f9bb1","size":2270,"data":"","first_seen":"2026-04-16T14:49:32.955526Z","last_seen":"2026-06-10T15:42:17.92679Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sphinxdeclic.com/v5/chunk-DZ7YJOKS.js","fqdn":"sphinxdeclic.com","domain":"sphinxdeclic.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"importedModule","is_inline":false,"md5":"1a29061fa2735976024afdd81f0e37d8","sha1":"289ffe5d98e92f08b6c7cc930e509a64492d0320","sha256":"0c7c4ed2f92c2edc87eb790f28b6f9ebe6d2945157efa5af44b0e87ae033038d","sha512":"75a786cb2fe070d8479ee00c2618b129f0eb6e8f3004364a073aeb5e9ab32232e2f199cb1140d76a7c6d77077d396ac45abe68b2314740e9dd956fa1b8083432","ssdeep":"192:pkBvDJ+HD6tgJyxpKYy5JWxCxpfEJV7zCnSDRuwqpKyEVkkesfyfBsdBvjbIk5Iu:CvwJyxpKYj5PyC21oEq","tlshash":"0e62e897f59d323e47e960b988971559b31c27418b188306f1accd2563a4ac433ffbb9","size":14524,"data":"","first_seen":"2026-04-16T14:49:32.956519Z","last_seen":"2026-05-13T09:58:26.776744Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sphinxdeclic.com/v5/chunk-GSCP3AKA.js","fqdn":"sphinxdeclic.com","domain":"sphinxdeclic.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"importedModule","is_inline":false,"md5":"0cc7fa3b70196b1e4cd413f2c091ae44","sha1":"1fc1a789bee0d2f50371715d9a4c9fade2c5a678","sha256":"2c57ca81ad94eaeee1b4839a7566b30625859c0d5bbd408c59e8f964aa27e40c","sha512":"2dbbb45223ab0f85ba5376426ee17f59d3989fa57e2a4c74b84482dad89a3301758229bf3c2e1f6bd25839e5a0da45c9abe4a2d87fdbe834f3ff09faf73704d9","ssdeep":"384:cndxsaRqCSgiVYAmq6S9qEuC1q9BPfSLb9FZEdWUeQ29sOD:cndxse9SgiVnOSlQyGOD","tlshash":"38d2c857c448693ec4ba82b20c7c2506277c69fc4a54429dfa788c95b2a89cc717fb7f","size":29012,"data":"","first_seen":"2026-04-16T14:49:32.957474Z","last_seen":"2026-05-13T09:58:26.818262Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sphinxdeclic.com/v5/chunk-322EIHMT.js","fqdn":"sphinxdeclic.com","domain":"sphinxdeclic.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"importedModule","is_inline":false,"md5":"0c7253a94b71e78ad58142fb91647028","sha1":"2c543aadbecdd16a4216a56dea1533b3107a0334","sha256":"75cb9eb4569181e18ec0bc163e2725ccd56b7b06cbe8a7772832e78016d09994","sha512":"5625560a514415ddd33e6982c050c2c2f87bae7551506c42a0dcc4233b73f0138fffbc9bf5be39a51ae711b4cb6dc0157b9396a3629e3731610ddcaa5888e2aa","ssdeep":"384:jn9zbLG35ZFw3bFJdhirV4g94CvWB+UhrdmxMRUKI3KtNxWYh1XhJkXtbs/y2qK4:uI3bnE6r6KOWHXhYs/rt+WTS","tlshash":"d6034bbbe502597db3ad8059cea66909476c5058c81cc64af1788d9dbbec8c072bf73c","size":38014,"data":"","first_seen":"2026-04-16T14:49:32.959865Z","last_seen":"2026-05-13T09:58:26.863979Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sphinxdeclic.com/sphinxauth/dist/site.js?v=gWV-LEMoP-75TdLpZ5NljGaJ1jk","fqdn":"sphinxdeclic.com","domain":"sphinxdeclic.com","tld":"com"},"ip":{"addr":"217.182.188.209","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"introduction_type":"scriptElement","is_inline":false,"md5":"973ece3970a047f15bd598ec1be0aba0","sha1":"b8a316ca8cb14c3e059562d9b22d1e647b3829eb","sha256":"26590d6d728870131f0d086c931429d5ca1d030be58f9a1e7a329b291158e197","sha512":"6850436da0c0fef9bb2491f865eb4b8a138b74903d9dfb759608b7afe645bfe3166ad0927c542b51b713200cd1497b27deba61e75d9f0317de6a18732718c1cc","ssdeep":"12288:lOiFbP/j70KUWrE4/589jjbvHeyb7PVZk6W190cvNPBoY:lOiFbP/j70KUWrE4/589jjbvHeyb5ZXo","tlshash":"b9c4c5953a4f212b4a77b36ada3b4109fb3dc17351058198b99d496c2f7081482afffd","size":569614,"data":"","first_seen":"2026-04-16T14:49:32.896283Z","last_seen":"2026-04-16T14:49:32.896283Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sphinxdeclic.com/v5/chunk-RMQGJZI5.js","fqdn":"sphinxdeclic.com","domain":"sphinxdeclic.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"importedModule","is_inline":false,"md5":"299abd0083e84e1f605525f3c0b4aedc","sha1":"dbc5117067e4416b8af573c0a9f150c48a43040b","sha256":"d53f962879bfa078ea9482b163d2f912ff65bd955a4e580fddee80b453934a06","sha512":"976e16a778e68ba663f9f9ebf33fd100477496ddbb616a0397d678b29dd3be0856be7e7a261422759517372cc827013a048574387b1a39577e26356a6b24df06","ssdeep":"","tlshash":"f181a41e72a5f07b868aa0f451290c03e66d0cc42e6e402cf5978cf6758584f97bef7a","size":3832,"data":"","first_seen":"2026-04-16T14:49:32.961316Z","last_seen":"2026-06-10T15:42:17.906302Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sphinxdeclic.com/sphinxauth/lib/jquery-validation-unobtrusive/dist/jquery.validate.unobtrusive.min.js?v=7mitEjshOwQLFnR_35qf1jAAMEU","fqdn":"sphinxdeclic.com","domain":"sphinxdeclic.com","tld":"com"},"ip":{"addr":"217.182.188.209","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"introduction_type":"scriptElement","is_inline":false,"md5":"7e60400801e87f5c95031c4e7fc79168","sha1":"9fbf94e964e7fcc9feabccb7a068d75fe389febb","sha256":"44558558820fb230780ee711e23ab0c535b0d77666b48facead551d8b2666579","sha512":"c6af959bc8c2f78ca73a291ec1a41730490920e069ee202bb372211564967514f73eaf30173e3aa7e64314047b9079d215ffb352fe76077a6b4589db0d1760a2","ssdeep":"96:3dpv+iwGMVxTrFG4j5d+tonIiwfP2TweS4w4tB9GvCbTYcJ8W4LZeSgGT8GHMgHR:zv+iwNxTrFG4j6toIiwf+TwP4tkCbTY9","tlshash":"6bc1838c3609a2a3bdfb31f610afc00bb5765564b0590841b289c5f16efdec69253f5b","size":5831,"data":"","first_seen":"2023-03-14T05:57:32Z","last_seen":"2026-08-07T18:50:14.272094Z","times_seen":840,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sphinxdeclic.com/v5/chunk-VAKDGECH.js","fqdn":"sphinxdeclic.com","domain":"sphinxdeclic.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"importedModule","is_inline":false,"md5":"fcd4cf48e23e1da2c2564a21f161d82c","sha1":"2d53f16896419868fabb86ce98c77e104a71155a","sha256":"5e73af092799d4466bf6a86446d7506f81c5f7d340d30809bdebed5c67fedb19","sha512":"172c81a4882709c5263ea9aaf6a3b19f3cd3b5b0851da4226574d1efc95385ccc304a0854ced154ba018e5e6038e25cd5821e6ddbfc643d94243ef5f9c5ee40d","ssdeep":"6144:FVHB1flo2IsCPgRPGHLiVC2JrRtVUXrd9EiGKb79eQry8v8FykGgY:/HB1flo2HNNC2rRSmi9Dyi8cj","tlshash":"54b42ad9f316362382ef22e6a46b070a5333a8a90945441cbdbc89f7185590937fff79","size":519330,"data":"","first_seen":"2026-04-16T14:49:32.962693Z","last_seen":"2026-06-10T15:42:17.937064Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sphinxdeclic.com/v5/chunk-H2E4SEIJ.js","fqdn":"sphinxdeclic.com","domain":"sphinxdeclic.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"importedModule","is_inline":false,"md5":"4dbe7d5fd3a1bb5617414e2c3d98c1bc","sha1":"1344e9eb3e97a1afeb02b2572fdc9b0e051da939","sha256":"4be04f2ad0559c13aed477e012f188e054b45dc88d5e3bf7f2384e097a84aba5","sha512":"2b9c0de8acdfaad832d6b5a1817ff9c5ca508d8656d231b9a6a2e741521aaecc4f7b34a5bbda647ecfcca4f1c199bb462bbbe76ac34f1c47e0e143531ce8cea7","ssdeep":"","tlshash":"f011a67b2c8802b71d0fe9ef9768ed630ba9044fd12083a0741b4d4a11f60c8b81b2bf","size":1000,"data":"","first_seen":"2026-04-16T14:49:32.963647Z","last_seen":"2026-04-16T14:49:32.963647Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sphinxdeclic.com/v5/chunk-NO7LCK7S.js","fqdn":"sphinxdeclic.com","domain":"sphinxdeclic.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"importedModule","is_inline":false,"md5":"602f4dbdfaf3a14367333cb88612708f","sha1":"f47e59d3f3571adc11aacbd08980cfa2e1157968","sha256":"5f11588a58ca083d8a365b9918caed5320e8e5ce465db03fa020dba350035a27","sha512":"315e12d682ad6fed49e142b488abf9eec6328767113eb0ba3acb44c1f4f8a85ca7df997982069f0b8c5f81cf806e678bc73285c3f58100e7288b927ff060820b","ssdeep":"","tlshash":"9b11baaf540b59f8301b98d8a3354793323134a687a05ef0e84f4e201a2d4cb42faf9e","size":1000,"data":"","first_seen":"2026-04-16T14:49:32.965967Z","last_seen":"2026-04-16T14:49:32.965967Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sphinxdeclic.com/v5/chunk-JNREE5TC.js","fqdn":"sphinxdeclic.com","domain":"sphinxdeclic.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"importedModule","is_inline":false,"md5":"8513cd721d6c1504697035a14d7ad639","sha1":"b21d18521d661a6aaa310f9bdf80e4dd76c21ad6","sha256":"1db80df1f0d0b691c780ae9ad5a60c8ad437be85951ff1568f8acb3f2fbba2cd","sha512":"6024ddd8839084289acd8190a04417cf86c00dd0b9f8ef873170f4c790790dffa9d61b2cb222f2208c6dffb2d9af140db10423f3663878cfda17d314bf4e5dff","ssdeep":"","tlshash":"ad21e049eab1fa7c4d770b544813234a217234964806c42d76bdeff44b95488732de3e","size":1440,"data":"","first_seen":"2026-04-16T14:49:32.967471Z","last_seen":"2026-06-10T15:42:17.942985Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sphinxdeclic.com/v5/polyfills-BUKJMTSU.js","fqdn":"sphinxdeclic.com","domain":"sphinxdeclic.com","tld":"com"},"ip":{"addr":"217.182.188.209","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"introduction_type":"scriptElement","is_inline":false,"md5":"7d372a320cf5e9fad4d137b2b25b1708","sha1":"3e398ac1432e19e38833e6b040476c37db72e6cf","sha256":"dd803763000e3c7603f4ab0ce888794f70466dd3bfa2e1ef33c84fca949ee141","sha512":"bae853d3f7be5eb3ee9a523d001b143535ee094da1b42953be7459e4c7e73931b577711ffaf2c135dd686cd98f16ad339f40fad5904848cddd93cfad28864934","ssdeep":"3072:MPElVtAHWRc3Zqf/su3bQyeF56GX+Xry3WrwDbBhOa3b:Ms3HqZWsuLQyyYhIzBIa3b","tlshash":"f0f3d8cd7792f4e94bf265f9403f8847e3272860980cd06dda9ae5912879d0e40bef79","size":163595,"data":"","first_seen":"2026-04-16T14:49:32.889685Z","last_seen":"2026-06-10T15:42:17.94812Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"sphinxdeclic.com/sphinxauth/Account/Login?ReturnUrl=%2Fsphinxauth%2Fconnect%2Fauthorize%2Fcallback%3Fresponse_type%3Dcode%26client_id%3Dsphinxonlineclient%26state%3DaGhlR2E5UVBNaHN1clc0SEhEV3NtUEZ4cTRKMFE2a0EzUzNTWWptcTloOFhP;%25252F%26redirect_uri%3Dhttps%253A%252F%252Fsphinxdeclic.com%252Fv5%252Fcallback%26scope%3Dopenid%2520email%2520profile%2520identifiers%2520userprofile%2520roles%2520admin.limits%2520sphinxonline.webapi%2520workspaces%26code_challenge%3DuzFq0qLRNzo889zBS1YbzdZxxtGRBAnTu8FSrBPBPAg%26code_challenge_method%3DS256%26nonce%3DaGhlR2E5UVBNaHN1clc0SEhEV3NtUEZ4cTRKMFE2a0EzUzNTWWptcTloOFhP","fqdn":"sphinxdeclic.com","domain":"sphinxdeclic.com","tld":"com"},"ip":{"addr":"217.182.188.209","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-04-16T14:49:05.973Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.sphinxdeclic.com","organization":""},"issuer":{"commonName":"GandiCert","organization":"Gandi SAS"},"validity":{"start":"Tue, 30 Dec 2025 00:00:00 GMT","end":"Sat, 30 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"3B:A1:F2:F4:C9:41:35:51:AF:F6:12:C6:A8:F2:B0:BE:B6:B2:A3:7D","sha256":"3A:01:7B:A2:AB:78:4B:06:84:35:45:3A:DA:0A:74:74:A7:8E:20:4A:7A:A2:E6:59:2F:19:5A:79:2C:2D:08:4A"}}},"request":{"raw":"GET /sphinxauth/Account/Login?ReturnUrl=%2Fsphinxauth%2Fconnect%2Fauthorize%2Fcallback%3Fresponse_type%3Dcode%26client_id%3Dsphinxonlineclient%26state%3DaGhlR2E5UVBNaHN1clc0SEhEV3NtUEZ4cTRKMFE2a0EzUzNTWWptcTloOFhP;%25252F%26redirect_uri%3Dhttps%253A%252F%252Fsphinxdeclic.com%252Fv5%252Fcallback%26scope%3Dopenid%2520email%2520profile%2520identifiers%2520userprofile%2520roles%2520admin.limits%2520sphinxonline.webapi%2520workspaces%26code_challenge%3DuzFq0qLRNzo889zBS1YbzdZxxtGRBAnTu8FSrBPBPAg%26code_challenge_method%3DS256%26nonce%3DaGhlR2E5UVBNaHN1clc0SEhEV3NtUEZ4cTRKMFE2a0EzUzNTWWptcTloOFhP HTTP/1.1\r\nHost: sphinxdeclic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://sphinxdeclic.com/v5\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: cookiesession1=678A3E4DAEE6786C54742F859221776F; LangShaker=en-GB\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nCache-Control: no-store,no-cache\r\nPragma: no-cache\r\nContent-Type: text/html; charset=utf-8\r\nContent-Encoding: gzip\r\nVary: Accept-Encoding\r\nServer: \r\nX-Content-Type-Options: nosniff\r\nX-Frame-Options: SAMEORIGIN\r\nContent-Security-Policy: object-src 'none'; frame-ancestors 'self' https://sphinxdeclic.com/v5/ ; sandbox allow-forms allow-same-origin allow-scripts allow-popups allow-modals allow-popups-to-escape-sandbox; base-uri 'self';\r\nX-Content-Security-Policy: object-src 'none'; frame-ancestors 'self' https://sphinxdeclic.com/v5/ ; sandbox allow-forms allow-same-origin allow-scripts allow-popups allow-modals allow-popups-to-escape-sandbox; base-uri 'self';\r\nReferrer-Policy: no-referrer\r\nSet-Cookie: sso.af=CfDJ8KTx70Uy8cpEsYrm-qyJnHBPF3GV1QAVwOlpEYYS7DEtNtjKug4oLj8te1dfsjnUV8dsMuF7S4Br6iBUT9LYNEF_o9o1T5O0mbdwjtAj5e5MLrcMYiuROmEzNdOyYCOf_HrfuTIo9bj244AulymmJVM; path=/sphinxauth; secure; samesite=strict; httponly\nsso.td=CfDJ8KTx70Uy8cpEsYrm-qyJnHArIrYQR-ILooLCz3W6DyGw0QXgiHUYWILCw5FIucQ8aYkCrXl0q26yO1G7VjgDkEUTfptzwL7Ixjyr4DODmdFtRkGPYNQu6FageRJmeM3E7JjLJPSlZgDTjnlJDodHNriw-cf5IrVB5yU3_80igf5GEp1OuzoAxO86uH_YRPSqbg; path=/sphinxauth; secure; samesite=lax; httponly\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains\r\nDate: Thu, 16 Apr 2026 14:49:05 GMT\r\nContent-Length: 4958\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":13003,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (3022), with CRLF line terminators","md5":"fa4b548cc76ef8c2f53d813b906d9feb","sha1":"27883e212611ea7e5aeea2a06bae0b4f4f705b4f","sha256":"69f2a1e3eaf1e523ac5ddc75e66413849ce3f36e5b142ae677173a4591f95155","sha512":"12d4b1b4eff320ef7ced23534a96ae9337685bdd96deff5a7cd01b331d6aee4375bd90c022e29a70aa839839c3ac3c1105e76bc1e6c3fb7eeb24815bdce90d29","ssdeep":"192:3knxYzT4hKWycDL0RV5RNo2LZi+VBLenx7wtjEtrt:3xH4IWycDQRvRlHVBiBaip","tlshash":"f742625160e00c294abfa3e265595b49fdd38313c2074fc87afc27978fb6d4a46a329d","first_seen":"2026-04-16T14:49:32.870692Z","last_seen":"2026-04-16T14:49:32.870692Z","times_seen":1,"resource_available":false,"data":null}},"time_used":59,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":58,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-16","alert":"Sinkholed","trigger":"sphinxdeclic.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sphinxdeclic.com/sphinxauth/images/backgrounds/bg_base.png?v=fiIzZ9i39RJBodPpRdhL1tbXLec","fqdn":"sphinxdeclic.com","domain":"sphinxdeclic.com","tld":"com"},"ip":{"addr":"217.182.188.209","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sphinxdeclic.com/sphinxauth/Account/Login?ReturnUrl=%2Fsphinxauth%2Fconnect%2Fauthorize%2Fcallback%3Fresponse_type%3Dcode%26client_id%3Dsphinxonlineclient%26state%3DaGhlR2E5UVBNaHN1clc0SEhEV3NtUEZ4cTRKMFE2a0EzUzNTWWptcTloOFhP;%25252F%26redirect_uri%3Dhttps%253A%252F%252Fsphinxdeclic.com%252Fv5%252Fcallback%26scope%3Dopenid%2520email%2520profile%2520identifiers%2520userprofile%2520roles%2520admin.limits%2520sphinxonline.webapi%2520workspaces%26code_challenge%3DuzFq0qLRNzo889zBS1YbzdZxxtGRBAnTu8FSrBPBPAg%26code_challenge_method%3DS256%26nonce%3DaGhlR2E5UVBNaHN1clc0SEhEV3NtUEZ4cTRKMFE2a0EzUzNTWWptcTloOFhP","date":"2026-04-16T14:49:06.271Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.sphinxdeclic.com","organization":""},"issuer":{"commonName":"GandiCert","organization":"Gandi SAS"},"validity":{"start":"Tue, 30 Dec 2025 00:00:00 GMT","end":"Sat, 30 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"3B:A1:F2:F4:C9:41:35:51:AF:F6:12:C6:A8:F2:B0:BE:B6:B2:A3:7D","sha256":"3A:01:7B:A2:AB:78:4B:06:84:35:45:3A:DA:0A:74:74:A7:8E:20:4A:7A:A2:E6:59:2F:19:5A:79:2C:2D:08:4A"}}},"request":{"raw":"GET /sphinxauth/images/backgrounds/bg_base.png?v=fiIzZ9i39RJBodPpRdhL1tbXLec HTTP/1.1\r\nHost: sphinxdeclic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sphinxdeclic.com/sphinxauth/dist/site.css?v=UnNmutK1UwbZxmQQ1n8oWOfNVjY\r\nCookie: sso.af=CfDJ8KTx70Uy8cpEsYrm-qyJnHBPF3GV1QAVwOlpEYYS7DEtNtjKug4oLj8te1dfsjnUV8dsMuF7S4Br6iBUT9LYNEF_o9o1T5O0mbdwjtAj5e5MLrcMYiuROmEzNdOyYCOf_HrfuTIo9bj244AulymmJVM; sso.td=CfDJ8KTx70Uy8cpEsYrm-qyJnHArIrYQR-ILooLCz3W6DyGw0QXgiHUYWILCw5FIucQ8aYkCrXl0q26yO1G7VjgDkEUTfptzwL7Ixjyr4DODmdFtRkGPYNQu6FageRJmeM3E7JjLJPSlZgDTjnlJDodHNriw-cf5IrVB5yU3_80igf5GEp1OuzoAxO86uH_YRPSqbg; cookiesession1=678A3E4DAEE6786C54742F859221776F; LangShaker=en-GB\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Length: 524704\r\nContent-Type: image/png\r\nLast-Modified: Tue, 25 Mar 2025 12:01:35 GMT\r\nAccept-Ranges: bytes\r\nETag: \"1db9d7da7d03820\"\r\nServer: \r\nStrict-Transport-Security: max-age=31536000; includeSubDomains\r\nX-Content-Type-Options: nosniff\r\nDate: Thu, 16 Apr 2026 14:49:05 GMT\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":524704,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1996 x 2160, 4-bit colormap, non-interlaced","md5":"ee70ae90c7412848691bf5b3f5e639c7","sha1":"0a886b355fc982d9e745669cca79cd266b16b142","sha256":"d34fc80a0b0c5acd869803650ebf8bc1da8c8276e04999bb999fe11d4663d14e","sha512":"48f3451d424071d2269a2a4fce37733b02624b14163ccc7ba2c2656f8ff4d444b697ef489bfea26e891ddaf50dc52a1dfc206718b965dc04474d6f0d2e7efac7","ssdeep":"12288:xixUbtlEZkEskOv95hta9IZcFJLHmGOTuchzTliG:GScZXslLhcIoWTumFJ","tlshash":"a5b42382d931837952d1645f4373ef60ceecb1aa4a8a4e01ea936bda4dc210d560df7f","first_seen":"2026-04-16T14:49:32.871943Z","last_seen":"2026-04-16T14:49:32.871943Z","times_seen":1,"resource_available":false,"data":null}},"time_used":260,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":64,"receive":196,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-16","alert":"Sinkholed","trigger":"sphinxdeclic.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sphinxdeclic.com/favicon.ico","fqdn":"sphinxdeclic.com","domain":"sphinxdeclic.com","tld":"com"},"ip":{"addr":"217.182.188.209","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sphinxdeclic.com/sphinxauth/Account/Login?ReturnUrl=%2Fsphinxauth%2Fconnect%2Fauthorize%2Fcallback%3Fresponse_type%3Dcode%26client_id%3Dsphinxonlineclient%26state%3DaGhlR2E5UVBNaHN1clc0SEhEV3NtUEZ4cTRKMFE2a0EzUzNTWWptcTloOFhP;%25252F%26redirect_uri%3Dhttps%253A%252F%252Fsphinxdeclic.com%252Fv5%252Fcallback%26scope%3Dopenid%2520email%2520profile%2520identifiers%2520userprofile%2520roles%2520admin.limits%2520sphinxonline.webapi%2520workspaces%26code_challenge%3DuzFq0qLRNzo889zBS1YbzdZxxtGRBAnTu8FSrBPBPAg%26code_challenge_method%3DS256%26nonce%3DaGhlR2E5UVBNaHN1clc0SEhEV3NtUEZ4cTRKMFE2a0EzUzNTWWptcTloOFhP","date":"2026-04-16T14:49:06.516Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.sphinxdeclic.com","organization":""},"issuer":{"commonName":"GandiCert","organization":"Gandi SAS"},"validity":{"start":"Tue, 30 Dec 2025 00:00:00 GMT","end":"Sat, 30 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"3B:A1:F2:F4:C9:41:35:51:AF:F6:12:C6:A8:F2:B0:BE:B6:B2:A3:7D","sha256":"3A:01:7B:A2:AB:78:4B:06:84:35:45:3A:DA:0A:74:74:A7:8E:20:4A:7A:A2:E6:59:2F:19:5A:79:2C:2D:08:4A"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: sphinxdeclic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: cookiesession1=678A3E4DAEE6786C54742F859221776F; LangShaker=en-GB\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Type: image/x-icon\r\nLast-Modified: Thu, 11 Jul 2024 15:58:10 GMT\r\nAccept-Ranges: bytes\r\nETag: \"8bacd920abd3da1:0\"\r\nServer: \r\nStrict-Transport-Security: max-age=31536000; includeSubDomains\r\nX-Content-Type-Options: nosniff\r\nDate: Thu, 16 Apr 2026 14:49:05 GMT\r\nContent-Length: 68670\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":68670,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, -127x-128, 32 bits/pixel","md5":"c1bb9bb5820e89ba9834584ebfc98020","sha1":"b2460ad8b166d3dc6ce41989860ba8616a082029","sha256":"add2f0792e66452fc6b88b6ef5932892c2e66d1015c9f3daceaac15b2987f76e","sha512":"c2e4d1c80e1b9a4a81c76d85d0d909ff4c9a77c4fe563b6b75606a94d64e0fcd1979c9035547dbaa345955fdeab0461d969465272b4df5c0442daea0595dd671","ssdeep":"384:kwFZqpuquc/lzPLZOzRlHVF3tBOFDC5jIhFkAcEZggZFtiN+ltfvO4YJz8ogvNeq:tRlHVF3tBOFQeKxaltWJ8t","tlshash":"22633376da8f62fdc0d584fbe66c06d238e18c223b285861273a373968f94c87d4d653","first_seen":"2025-05-20T07:15:49.019506Z","last_seen":"2026-04-16T14:49:32.87312Z","times_seen":2,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":32,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-16","alert":"Sinkholed","trigger":"sphinxdeclic.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sphinxdeclic.com/sphinxauth/fonts/raleway-latin.woff2?v=qZoSXpWoCm_QR-eBH-azOoeA0Lk","fqdn":"sphinxdeclic.com","domain":"sphinxdeclic.com","tld":"com"},"ip":{"addr":"217.182.188.209","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://sphinxdeclic.com/sphinxauth/Account/Login?ReturnUrl=%2Fsphinxauth%2Fconnect%2Fauthorize%2Fcallback%3Fresponse_type%3Dcode%26client_id%3Dsphinxonlineclient%26state%3DaGhlR2E5UVBNaHN1clc0SEhEV3NtUEZ4cTRKMFE2a0EzUzNTWWptcTloOFhP;%25252F%26redirect_uri%3Dhttps%253A%252F%252Fsphinxdeclic.com%252Fv5%252Fcallback%26scope%3Dopenid%2520email%2520profile%2520identifiers%2520userprofile%2520roles%2520admin.limits%2520sphinxonline.webapi%2520workspaces%26code_challenge%3DuzFq0qLRNzo889zBS1YbzdZxxtGRBAnTu8FSrBPBPAg%26code_challenge_method%3DS256%26nonce%3DaGhlR2E5UVBNaHN1clc0SEhEV3NtUEZ4cTRKMFE2a0EzUzNTWWptcTloOFhP","date":"2026-04-16T14:49:06.558Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.sphinxdeclic.com","organization":""},"issuer":{"commonName":"GandiCert","organization":"Gandi SAS"},"validity":{"start":"Tue, 30 Dec 2025 00:00:00 GMT","end":"Sat, 30 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"3B:A1:F2:F4:C9:41:35:51:AF:F6:12:C6:A8:F2:B0:BE:B6:B2:A3:7D","sha256":"3A:01:7B:A2:AB:78:4B:06:84:35:45:3A:DA:0A:74:74:A7:8E:20:4A:7A:A2:E6:59:2F:19:5A:79:2C:2D:08:4A"}}},"request":{"raw":"GET /sphinxauth/fonts/raleway-latin.woff2?v=qZoSXpWoCm_QR-eBH-azOoeA0Lk HTTP/1.1\r\nHost: sphinxdeclic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sphinxdeclic.com/sphinxauth/dist/site.css?v=UnNmutK1UwbZxmQQ1n8oWOfNVjY\r\nCookie: sso.af=CfDJ8KTx70Uy8cpEsYrm-qyJnHBPF3GV1QAVwOlpEYYS7DEtNtjKug4oLj8te1dfsjnUV8dsMuF7S4Br6iBUT9LYNEF_o9o1T5O0mbdwjtAj5e5MLrcMYiuROmEzNdOyYCOf_HrfuTIo9bj244AulymmJVM; sso.td=CfDJ8KTx70Uy8cpEsYrm-qyJnHArIrYQR-ILooLCz3W6DyGw0QXgiHUYWILCw5FIucQ8aYkCrXl0q26yO1G7VjgDkEUTfptzwL7Ixjyr4DODmdFtRkGPYNQu6FageRJmeM3E7JjLJPSlZgDTjnlJDodHNriw-cf5IrVB5yU3_80igf5GEp1OuzoAxO86uH_YRPSqbg; cookiesession1=678A3E4DAEE6786C54742F859221776F; LangShaker=en-GB\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Length: 20444\r\nContent-Type: font/woff2\r\nLast-Modified: Fri, 01 Apr 2022 13:51:48 GMT\r\nAccept-Ranges: bytes\r\nETag: \"1d845cfa1a67ddc\"\r\nServer: \r\nStrict-Transport-Security: max-age=31536000; includeSubDomains\r\nX-Content-Type-Options: nosniff\r\nDate: Thu, 16 Apr 2026 14:49:05 GMT\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":20444,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 20444, version 1.0","md5":"2075794c8e9e7e48e5fbf1b2313e7adf","sha1":"3161545d2626bf3c5704100087021daea6865528","sha256":"3650de8bc2dd8352b01aa49e9f0ae225098e86a31da32b04d81abb76b598d0d6","sha512":"5340278442667c2027cc5d13e56b25256fe1457a2468c4b8e81b32ffd869449402ba82743c8a974fdf025de9584db5eb10a40c8e0a239c87997b2c346a3a20db","ssdeep":"384:YAXnOaAUmTgLxBq8xmmvrnUdbwsGpbIamnmFiS8BRZcvCqWclvuT:3n2sF5mmvtsGpPmnqhsRZqRk","tlshash":"d092e15ba541d9e6c451a3300dbacb24e4886222c693870d34663c7b58ffdc15abbff5","first_seen":"2023-05-04T00:42:52Z","last_seen":"2026-08-07T15:38:56.043887Z","times_seen":424,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":30,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-16","alert":"Sinkholed","trigger":"sphinxdeclic.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sphinxdeclic.com/v5","fqdn":"sphinxdeclic.com","domain":"sphinxdeclic.com","tld":"com"},"ip":{"addr":"217.182.188.209","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-04-16T14:49:04.158Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.sphinxdeclic.com","organization":""},"issuer":{"commonName":"GandiCert","organization":"Gandi SAS"},"validity":{"start":"Tue, 30 Dec 2025 00:00:00 GMT","end":"Sat, 30 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"3B:A1:F2:F4:C9:41:35:51:AF:F6:12:C6:A8:F2:B0:BE:B6:B2:A3:7D","sha256":"3A:01:7B:A2:AB:78:4B:06:84:35:45:3A:DA:0A:74:74:A7:8E:20:4A:7A:A2:E6:59:2F:19:5A:79:2C:2D:08:4A"}}},"request":{"raw":"GET /v5 HTTP/1.1\r\nHost: sphinxdeclic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: cookiesession1=678A3E4DAEE6786C54742F859221776F\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nCache-Control: no-cache, max-age=0\r\nContent-Type: text/html\r\nContent-Encoding: br\r\nLast-Modified: Mon, 13 Apr 2026 14:45:44 GMT\r\nAccept-Ranges: bytes\r\nETag: \"1dccb5434ee07ec\"\r\nVary: Accept-Encoding\r\nServer: \r\nStrict-Transport-Security: max-age=31536000; includeSubDomains\r\nX-Content-Type-Options: nosniff\r\nX-XSS-Protection: 1; mode=block\r\nX-Frame-Options: SameOrigin\r\nReferrer-Policy: no-referrer-when-downgrade\r\nContent-Security-Policy: default-src 'self' wss: https://sphinxdeclic.com;script-src 'self' 'unsafe-inline' 'unsafe-eval' https://sphinxdeclic.com https://js.userflow.com;style-src 'self' 'unsafe-inline' https://cdnjs.cloudflare.com https://js.userflow.com https://fonts.googleapis.com;img-src 'self' data: http: https:;frame-src 'self' blob: https://sphinxdeclic.com https://sphinxdeclic.com/tiny/ https://player.vimeo.com https://infos.lesphinx.eu https://www.youtube.com https://www.youtube-nocookie.com https://cdn.userflow.com;font-src 'self' data: https://cdnjs.cloudflare.com https://fonts.gstatic.com;connect-src 'self' wss: https://sphinxdeclic.com https://sphinxdeclic.com/exportservice/ https://js.userflow.com https://www.youtube.com https://www.youtube-nocookie.com\r\nDate: Thu, 16 Apr 2026 14:49:03 GMT\r\ncontent-length: 7496\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":23532,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (20444), with CRLF line terminators","md5":"572ecd838a450fc4c329e0d3253f73b6","sha1":"acb1d7c6669e660d2886033b8eb891e316182e36","sha256":"28c6c2d5c2510117ebccad3d088e6fc41459544770450b832a71e3e004cf5157","sha512":"2cc11479d2d199eb66a2e79f32c40c294e03c72b2a50504a5076739e1c055bc7ed0d5a43e5b48de1b16f74cc0759c4089a96cbfdc31a37c1d4f70492087c94bd","ssdeep":"192:wIb4nrNzp76tD2SPNO4lGvfKssr43KiQwu9ws44+PHTHCH8HsHlHVDHAw6EJ72d+:wI0nrNwt7r7IEJ7Uw/q78djHlonrs","tlshash":"d6b22d34f803e1a76333483f6cd5fc868a466487c5340e4ab99f2a157b8b1d79293bd6","first_seen":"2026-04-16T14:49:32.875157Z","last_seen":"2026-04-16T14:49:32.875157Z","times_seen":1,"resource_available":false,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-16","alert":"Sinkholed","trigger":"sphinxdeclic.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sphinxdeclic.com/config/images/logos/_Declic_v5_logo_platform_100.png","fqdn":"sphinxdeclic.com","domain":"sphinxdeclic.com","tld":"com"},"ip":{"addr":"217.182.188.209","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sphinxdeclic.com/sphinxauth/Account/Login?ReturnUrl=%2Fsphinxauth%2Fconnect%2Fauthorize%2Fcallback%3Fresponse_type%3Dcode%26client_id%3Dsphinxonlineclient%26state%3DaGhlR2E5UVBNaHN1clc0SEhEV3NtUEZ4cTRKMFE2a0EzUzNTWWptcTloOFhP;%25252F%26redirect_uri%3Dhttps%253A%252F%252Fsphinxdeclic.com%252Fv5%252Fcallback%26scope%3Dopenid%2520email%2520profile%2520identifiers%2520userprofile%2520roles%2520admin.limits%2520sphinxonline.webapi%2520workspaces%26code_challenge%3DuzFq0qLRNzo889zBS1YbzdZxxtGRBAnTu8FSrBPBPAg%26code_challenge_method%3DS256%26nonce%3DaGhlR2E5UVBNaHN1clc0SEhEV3NtUEZ4cTRKMFE2a0EzUzNTWWptcTloOFhP","date":"2026-04-16T14:49:06.097Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.sphinxdeclic.com","organization":""},"issuer":{"commonName":"GandiCert","organization":"Gandi SAS"},"validity":{"start":"Tue, 30 Dec 2025 00:00:00 GMT","end":"Sat, 30 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"3B:A1:F2:F4:C9:41:35:51:AF:F6:12:C6:A8:F2:B0:BE:B6:B2:A3:7D","sha256":"3A:01:7B:A2:AB:78:4B:06:84:35:45:3A:DA:0A:74:74:A7:8E:20:4A:7A:A2:E6:59:2F:19:5A:79:2C:2D:08:4A"}}},"request":{"raw":"GET /config/images/logos/_Declic_v5_logo_platform_100.png HTTP/1.1\r\nHost: sphinxdeclic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: cookiesession1=678A3E4DAEE6786C54742F859221776F; LangShaker=en-GB\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Type: image/png\r\nLast-Modified: Wed, 10 Jul 2024 09:21:18 GMT\r\nAccept-Ranges: bytes\r\nETag: \"0fb1685aad2da1:0\"\r\nServer: \r\nStrict-Transport-Security: max-age=31536000; includeSubDomains\r\nX-Content-Type-Options: nosniff\r\nDate: Thu, 16 Apr 2026 14:49:05 GMT\r\nContent-Length: 10987\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10987,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced","md5":"dd6b383167e4fe9e8e27ae7756d3ba8e","sha1":"b048b35a8a57e81038b6888222df9450802036a2","sha256":"bb6b438aefc215227ff579cdf8cd7918f50e2a1d4f64cf3dd471eb79f971cb76","sha512":"eafd172b0bf3779f24a0a84ad09c6d7e05afd75916a424ad7386091409bd7db9fee9505f8b6a1062cf55bcf38d1a9e4eea0400492f108a9cd5909614b7dc83f1","ssdeep":"192:ISScgGKlxmSmYycr92jTtnsowgUmBfBh8+ywco729ooyqhNQ1LRmKY21Q7Pm5xQZ:PSckDmS0chyTtsowgvB+JEoyqLCt1N4","tlshash":"2c32bf7f9b3294e871cacb10252223811956336e2bb6b441f7974fb2b664b2f31a3053","first_seen":"2026-04-16T14:49:32.876342Z","last_seen":"2026-04-16T14:49:32.876342Z","times_seen":1,"resource_available":false,"data":null}},"time_used":135,"timings":{"blocked":105,"dns":0,"connect":0,"send":0,"wait":29,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-16","alert":"Sinkholed","trigger":"sphinxdeclic.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sphinxdeclic.com/v5/chunk-EJBUHNH2.js","fqdn":"sphinxdeclic.com","domain":"sphinxdeclic.com","tld":"com"},"ip":{"addr":"217.182.188.209","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://sphinxdeclic.com/v5","date":"2026-04-16T14:49:04.495Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.sphinxdeclic.com","organization":""},"issuer":{"commonName":"GandiCert","organization":"Gandi SAS"},"validity":{"start":"Tue, 30 Dec 2025 00:00:00 GMT","end":"Sat, 30 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"3B:A1:F2:F4:C9:41:35:51:AF:F6:12:C6:A8:F2:B0:BE:B6:B2:A3:7D","sha256":"3A:01:7B:A2:AB:78:4B:06:84:35:45:3A:DA:0A:74:74:A7:8E:20:4A:7A:A2:E6:59:2F:19:5A:79:2C:2D:08:4A"}}},"request":{"raw":"GET /v5/chunk-EJBUHNH2.js HTTP/1.1\r\nHost: sphinxdeclic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://sphinxdeclic.com/v5/main-PF24PWUP.js\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: cookiesession1=678A3E4DAEE6786C54742F859221776F\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Type: text/javascript\r\nContent-Encoding: gzip\r\nLast-Modified: Mon, 13 Apr 2026 14:45:44 GMT\r\nAccept-Ranges: bytes\r\nETag: \"1dccb5434ee59a0\"\r\nVary: Accept-Encoding\r\nServer: \r\nStrict-Transport-Security: max-age=31536000; includeSubDomains\r\nX-Content-Type-Options: nosniff\r\nX-XSS-Protection: 1; mode=block\r\nX-Frame-Options: SameOrigin\r\nReferrer-Policy: no-referrer-when-downgrade\r\nContent-Security-Policy: default-src 'self' wss: https://sphinxdeclic.com;script-src 'self' 'unsafe-inline' 'unsafe-eval' https://sphinxdeclic.com https://js.userflow.com;style-src 'self' 'unsafe-inline' https://cdnjs.cloudflare.com https://js.userflow.com https://fonts.googleapis.com;img-src 'self' data: http: https:;frame-src 'self' blob: https://sphinxdeclic.com https://sphinxdeclic.com/tiny/ https://player.vimeo.com https://infos.lesphinx.eu https://www.youtube.com https://www.youtube-nocookie.com https://cdn.userflow.com;font-src 'self' data: https://cdnjs.cloudflare.com https://fonts.gstatic.com;connect-src 'self' wss: https://sphinxdeclic.com https://sphinxdeclic.com/exportservice/ https://js.userflow.com https://www.youtube.com https://www.youtube-nocookie.com\r\nDate: Thu, 16 Apr 2026 14:49:03 GMT\r\nContent-Length: 776\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1440,"size_decoded":0,"mime_type":"text/javascript","magic":"Java source, ASCII text, with very long lines (1439)","md5":"c064f99789444506c57e4e30c371b0b0","sha1":"00baf1940f79a0393ab54f3ccd040f2b0a83740e","sha256":"88af96378f99195a97c250a556b13a979717534212f83e6e7fc63663cff3d066","sha512":"b99a933f9d13a992878b1342f8d56e8f0dde49e89f5a320324d448973ae0797e1fb24596f72bea636d6bb8bfb867386ff0d5383b2837d185c1065a72c0ca6196","ssdeep":"","tlshash":"b621df5e2142f174134facee9c2e5d3bc20660ac835951ecf54a8f6722a1a8155bfe3b","first_seen":"2026-04-16T14:49:32.877391Z","last_seen":"2026-06-10T15:42:17.903073Z","times_seen":7,"resource_available":true,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-16","alert":"Sinkholed","trigger":"sphinxdeclic.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sphinxdeclic.com/sphinxauth/dist/styles.css?v=sKLT6hkMXiuLDoywUeWbCKf5cdY","fqdn":"sphinxdeclic.com","domain":"sphinxdeclic.com","tld":"com"},"ip":{"addr":"217.182.188.209","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://sphinxdeclic.com/sphinxauth/Account/Login?ReturnUrl=%2Fsphinxauth%2Fconnect%2Fauthorize%2Fcallback%3Fresponse_type%3Dcode%26client_id%3Dsphinxonlineclient%26state%3DaGhlR2E5UVBNaHN1clc0SEhEV3NtUEZ4cTRKMFE2a0EzUzNTWWptcTloOFhP;%25252F%26redirect_uri%3Dhttps%253A%252F%252Fsphinxdeclic.com%252Fv5%252Fcallback%26scope%3Dopenid%2520email%2520profile%2520identifiers%2520userprofile%2520roles%2520admin.limits%2520sphinxonline.webapi%2520workspaces%26code_challenge%3DuzFq0qLRNzo889zBS1YbzdZxxtGRBAnTu8FSrBPBPAg%26code_challenge_method%3DS256%26nonce%3DaGhlR2E5UVBNaHN1clc0SEhEV3NtUEZ4cTRKMFE2a0EzUzNTWWptcTloOFhP","date":"2026-04-16T14:49:06.095Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.sphinxdeclic.com","organization":""},"issuer":{"commonName":"GandiCert","organization":"Gandi SAS"},"validity":{"start":"Tue, 30 Dec 2025 00:00:00 GMT","end":"Sat, 30 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"3B:A1:F2:F4:C9:41:35:51:AF:F6:12:C6:A8:F2:B0:BE:B6:B2:A3:7D","sha256":"3A:01:7B:A2:AB:78:4B:06:84:35:45:3A:DA:0A:74:74:A7:8E:20:4A:7A:A2:E6:59:2F:19:5A:79:2C:2D:08:4A"}}},"request":{"raw":"GET /sphinxauth/dist/styles.css?v=sKLT6hkMXiuLDoywUeWbCKf5cdY HTTP/1.1\r\nHost: sphinxdeclic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: sso.af=CfDJ8KTx70Uy8cpEsYrm-qyJnHBPF3GV1QAVwOlpEYYS7DEtNtjKug4oLj8te1dfsjnUV8dsMuF7S4Br6iBUT9LYNEF_o9o1T5O0mbdwjtAj5e5MLrcMYiuROmEzNdOyYCOf_HrfuTIo9bj244AulymmJVM; sso.td=CfDJ8KTx70Uy8cpEsYrm-qyJnHArIrYQR-ILooLCz3W6DyGw0QXgiHUYWILCw5FIucQ8aYkCrXl0q26yO1G7VjgDkEUTfptzwL7Ixjyr4DODmdFtRkGPYNQu6FageRJmeM3E7JjLJPSlZgDTjnlJDodHNriw-cf5IrVB5yU3_80igf5GEp1OuzoAxO86uH_YRPSqbg; cookiesession1=678A3E4DAEE6786C54742F859221776F; LangShaker=en-GB\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nCache-Control: max-age=31536000,immutable\r\nContent-Type: text/css; charset=UTF-8\r\nContent-Encoding: gzip\r\nLast-Modified: Tue, 09 Sep 2025 07:31:16 GMT\r\nETag: \"sKLT6hkMXiuLDoywUeWbCKf5cdY\"\r\nVary: Accept-Encoding\r\nServer: \r\nX-Content-Type-Options: nosniff\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains\r\nDate: Thu, 16 Apr 2026 14:49:05 GMT\r\nContent-Length: 87019\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":327395,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (32124), with CRLF line terminators","md5":"4d5876f28a2c198b817354c99fbecfd5","sha1":"70a729795247ce50f8c58d096166fc0ee12a8729","sha256":"ecd275623539c130ee837aac19e9d6d6f8b0bedbae74aff67f0e15d8c1d44d3e","sha512":"f74080e32d07e9fa2b7e4caafb0a5a5419803c0d11e886e81d686a3b502727f58ba5a1cc7d893a56f14f619415137706884ae99e35dae1b2cd025feeb77df9f7","ssdeep":"3072:8iSLC2709gMGFiyPG9gtGg9JfWD9kVkpz600I4ln87:kB09JGFiZgt59Jfepz600I4lng","tlshash":"236464e5f04420e9ab73c10beb80bbbc55baf769d6110d69f01b6b1c0ac67d50592fac","first_seen":"2026-04-16T14:49:32.878536Z","last_seen":"2026-04-16T14:49:32.878536Z","times_seen":1,"resource_available":false,"data":null}},"time_used":113,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":51,"receive":62,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-16","alert":"Sinkholed","trigger":"sphinxdeclic.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sphinxdeclic.com/sphinxauth/dist/site.css?v=UnNmutK1UwbZxmQQ1n8oWOfNVjY","fqdn":"sphinxdeclic.com","domain":"sphinxdeclic.com","tld":"com"},"ip":{"addr":"217.182.188.209","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://sphinxdeclic.com/sphinxauth/Account/Login?ReturnUrl=%2Fsphinxauth%2Fconnect%2Fauthorize%2Fcallback%3Fresponse_type%3Dcode%26client_id%3Dsphinxonlineclient%26state%3DaGhlR2E5UVBNaHN1clc0SEhEV3NtUEZ4cTRKMFE2a0EzUzNTWWptcTloOFhP;%25252F%26redirect_uri%3Dhttps%253A%252F%252Fsphinxdeclic.com%252Fv5%252Fcallback%26scope%3Dopenid%2520email%2520profile%2520identifiers%2520userprofile%2520roles%2520admin.limits%2520sphinxonline.webapi%2520workspaces%26code_challenge%3DuzFq0qLRNzo889zBS1YbzdZxxtGRBAnTu8FSrBPBPAg%26code_challenge_method%3DS256%26nonce%3DaGhlR2E5UVBNaHN1clc0SEhEV3NtUEZ4cTRKMFE2a0EzUzNTWWptcTloOFhP","date":"2026-04-16T14:49:06.097Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.sphinxdeclic.com","organization":""},"issuer":{"commonName":"GandiCert","organization":"Gandi SAS"},"validity":{"start":"Tue, 30 Dec 2025 00:00:00 GMT","end":"Sat, 30 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"3B:A1:F2:F4:C9:41:35:51:AF:F6:12:C6:A8:F2:B0:BE:B6:B2:A3:7D","sha256":"3A:01:7B:A2:AB:78:4B:06:84:35:45:3A:DA:0A:74:74:A7:8E:20:4A:7A:A2:E6:59:2F:19:5A:79:2C:2D:08:4A"}}},"request":{"raw":"GET /sphinxauth/dist/site.css?v=UnNmutK1UwbZxmQQ1n8oWOfNVjY HTTP/1.1\r\nHost: sphinxdeclic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: sso.af=CfDJ8KTx70Uy8cpEsYrm-qyJnHBPF3GV1QAVwOlpEYYS7DEtNtjKug4oLj8te1dfsjnUV8dsMuF7S4Br6iBUT9LYNEF_o9o1T5O0mbdwjtAj5e5MLrcMYiuROmEzNdOyYCOf_HrfuTIo9bj244AulymmJVM; sso.td=CfDJ8KTx70Uy8cpEsYrm-qyJnHArIrYQR-ILooLCz3W6DyGw0QXgiHUYWILCw5FIucQ8aYkCrXl0q26yO1G7VjgDkEUTfptzwL7Ixjyr4DODmdFtRkGPYNQu6FageRJmeM3E7JjLJPSlZgDTjnlJDodHNriw-cf5IrVB5yU3_80igf5GEp1OuzoAxO86uH_YRPSqbg; cookiesession1=678A3E4DAEE6786C54742F859221776F; LangShaker=en-GB\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nCache-Control: max-age=31536000,immutable\r\nContent-Type: text/css; charset=UTF-8\r\nContent-Encoding: gzip\r\nLast-Modified: Mon, 19 Jan 2026 15:45:33 GMT\r\nETag: \"UnNmutK1UwbZxmQQ1n8oWOfNVjY\"\r\nVary: Accept-Encoding\r\nServer: \r\nX-Content-Type-Options: nosniff\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains\r\nDate: Thu, 16 Apr 2026 14:49:05 GMT\r\nContent-Length: 7749\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":24020,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (24020), with no line terminators","md5":"d6de8609d52164c794208568c6f8d41e","sha1":"ebb87c47576f3b08753d6dcc4f453daaf0874324","sha256":"f3fc5698901bec1d79f2801fad6d66cdf8baf2ed0b6461c0a2c681cd63864588","sha512":"4180cc33182686e371550e3b5454f6466e5c8c108ba0e1589ee1683193a0e9d58001520be21eff8d0ee53f95f79e33f792630be60198a5b91963b0bffd40ee4c","ssdeep":"384:HZcZ5LHnMDMfMDMar9wHb+/t5ERAsOL/R/e/i/hvTXNMKglNT:BqeL/R/e/i/haT","tlshash":"c3b2c831f5483029b0abc56ab0d1bd95b1389512d6234fbef97b79a0cfc61da1b13748","first_seen":"2026-04-16T14:49:32.879469Z","last_seen":"2026-04-16T14:49:32.879469Z","times_seen":1,"resource_available":false,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-16","alert":"Sinkholed","trigger":"sphinxdeclic.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sphinxdeclic.com/sphinxauth/lib/fortawesome/fontawesome-free/webfonts/fa-solid-900.woff2?v=1uPJb4LrZSEYNSEPut2GY_6nO2E","fqdn":"sphinxdeclic.com","domain":"sphinxdeclic.com","tld":"com"},"ip":{"addr":"217.182.188.209","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://sphinxdeclic.com/sphinxauth/Account/Login?ReturnUrl=%2Fsphinxauth%2Fconnect%2Fauthorize%2Fcallback%3Fresponse_type%3Dcode%26client_id%3Dsphinxonlineclient%26state%3DaGhlR2E5UVBNaHN1clc0SEhEV3NtUEZ4cTRKMFE2a0EzUzNTWWptcTloOFhP;%25252F%26redirect_uri%3Dhttps%253A%252F%252Fsphinxdeclic.com%252Fv5%252Fcallback%26scope%3Dopenid%2520email%2520profile%2520identifiers%2520userprofile%2520roles%2520admin.limits%2520sphinxonline.webapi%2520workspaces%26code_challenge%3DuzFq0qLRNzo889zBS1YbzdZxxtGRBAnTu8FSrBPBPAg%26code_challenge_method%3DS256%26nonce%3DaGhlR2E5UVBNaHN1clc0SEhEV3NtUEZ4cTRKMFE2a0EzUzNTWWptcTloOFhP","date":"2026-04-16T14:49:06.287Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.sphinxdeclic.com","organization":""},"issuer":{"commonName":"GandiCert","organization":"Gandi SAS"},"validity":{"start":"Tue, 30 Dec 2025 00:00:00 GMT","end":"Sat, 30 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"3B:A1:F2:F4:C9:41:35:51:AF:F6:12:C6:A8:F2:B0:BE:B6:B2:A3:7D","sha256":"3A:01:7B:A2:AB:78:4B:06:84:35:45:3A:DA:0A:74:74:A7:8E:20:4A:7A:A2:E6:59:2F:19:5A:79:2C:2D:08:4A"}}},"request":{"raw":"GET /sphinxauth/lib/fortawesome/fontawesome-free/webfonts/fa-solid-900.woff2?v=1uPJb4LrZSEYNSEPut2GY_6nO2E HTTP/1.1\r\nHost: sphinxdeclic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sphinxdeclic.com/sphinxauth/dist/styles.css?v=sKLT6hkMXiuLDoywUeWbCKf5cdY\r\nCookie: sso.af=CfDJ8KTx70Uy8cpEsYrm-qyJnHBPF3GV1QAVwOlpEYYS7DEtNtjKug4oLj8te1dfsjnUV8dsMuF7S4Br6iBUT9LYNEF_o9o1T5O0mbdwjtAj5e5MLrcMYiuROmEzNdOyYCOf_HrfuTIo9bj244AulymmJVM; sso.td=CfDJ8KTx70Uy8cpEsYrm-qyJnHArIrYQR-ILooLCz3W6DyGw0QXgiHUYWILCw5FIucQ8aYkCrXl0q26yO1G7VjgDkEUTfptzwL7Ixjyr4DODmdFtRkGPYNQu6FageRJmeM3E7JjLJPSlZgDTjnlJDodHNriw-cf5IrVB5yU3_80igf5GEp1OuzoAxO86uH_YRPSqbg; cookiesession1=678A3E4DAEE6786C54742F859221776F; LangShaker=en-GB\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Length: 156496\r\nContent-Type: font/woff2\r\nLast-Modified: Wed, 29 May 2024 13:18:19 GMT\r\nAccept-Ranges: bytes\r\nETag: \"1dab1caac1fbcd0\"\r\nServer: \r\nStrict-Transport-Security: max-age=31536000; includeSubDomains\r\nX-Content-Type-Options: nosniff\r\nDate: Thu, 16 Apr 2026 14:49:05 GMT\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":156496,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 156496, version 773.768","md5":"6c4eee562650e53cee32496bdfbe534b","sha1":"1aae708e3b94ee981b452a918d28ed037fbb5e18","sha256":"9fc85f3a4544ab0d570c7f8f9bbb88db8d92c359b2707580ea8b07c75673eae2","sha512":"ebcb5a2e2a908228f77ecd03b45491778cad73ddc39fa3a6334b129aaf9fa36c16c0307aeaad74d77f616b5b34aac52d91e9f4816945253dc9a826ddd71f4d12","ssdeep":"3072:OvM6gZMLmY8uGpjVnlooQ+GQs8jic0f/KkMdE:OU65LoP5QSsuic0f/cdE","tlshash":"8ce31200d620498d9978fd5b2a1fa1ffa7a939c95ed210bad3c30cb93257143bbc2556","first_seen":"2023-12-02T04:06:15Z","last_seen":"2026-08-08T06:29:28.917913Z","times_seen":49784,"resource_available":false,"data":null}},"time_used":119,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":36,"receive":83,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-16","alert":"Sinkholed","trigger":"sphinxdeclic.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sphinxdeclic.com/","fqdn":"sphinxdeclic.com","domain":"sphinxdeclic.com","tld":"com"},"ip":{"addr":"217.182.188.209","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-04-16T14:49:03.853Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.sphinxdeclic.com","organization":""},"issuer":{"commonName":"GandiCert","organization":"Gandi SAS"},"validity":{"start":"Tue, 30 Dec 2025 00:00:00 GMT","end":"Sat, 30 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"3B:A1:F2:F4:C9:41:35:51:AF:F6:12:C6:A8:F2:B0:BE:B6:B2:A3:7D","sha256":"3A:01:7B:A2:AB:78:4B:06:84:35:45:3A:DA:0A:74:74:A7:8E:20:4A:7A:A2:E6:59:2F:19:5A:79:2C:2D:08:4A"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: sphinxdeclic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Type: text/html\r\nContent-Encoding: gzip\r\nLast-Modified: Wed, 07 May 2025 09:40:54 GMT\r\nAccept-Ranges: bytes\r\nETag: \"6df8df2034bfdb1:0\"\r\nVary: Accept-Encoding\r\nServer: \r\nStrict-Transport-Security: max-age=31536000; includeSubDomains\r\nX-Content-Type-Options: nosniff\r\nDate: Thu, 16 Apr 2026 14:49:03 GMT\r\nContent-Length: 436\r\nSet-Cookie: cookiesession1=678A3E4DAEE6786C54742F859221776F;Expires=Fri, 16 Apr 2027 14:49:03 GMT;Path=/;Secure;HttpOnly\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":496,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"39b580896921dcb85c46a3531bd37f7c","sha1":"e095ef42ebc782f50dea66b80108bbdef160ea35","sha256":"19bfa183480ec564fee706d53f9260feffe29d54d4fdb9655f5b9b463079ebbf","sha512":"aa3df82977102abeb9b2544dffb0c679964b72cfd6cd66d8a4dd5ebbca219c36ae7e1b3387300024b0115e159b6e4b3200b95cafd466636bcf2d87f18012fde9","ssdeep":"","tlshash":"c2f0597a50411d078362ab7524e3f26988826583b5850b5ce55030eb68c6305c0137a7","first_seen":"2026-04-16T14:49:32.881179Z","last_seen":"2026-04-16T14:49:32.881179Z","times_seen":1,"resource_available":false,"data":null}},"time_used":252,"timings":{"blocked":102,"dns":1,"connect":26,"send":0,"wait":43,"receive":0,"ssl":77},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-16","alert":"Sinkholed","trigger":"sphinxdeclic.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sphinxdeclic.com/sphinxauth/connect/authorize?response_type=code\u0026client_id=sphinxonlineclient\u0026state=aGhlR2E5UVBNaHN1clc0SEhEV3NtUEZ4cTRKMFE2a0EzUzNTWWptcTloOFhP%3B%252F\u0026redirect_uri=https%3A%2F%2Fsphinxdeclic.com%2Fv5%2Fcallback\u0026scope=openid%20email%20profile%20identifiers%20userprofile%20roles%20admin.limits%20sphinxonline.webapi%20workspaces\u0026code_challenge=uzFq0qLRNzo889zBS1YbzdZxxtGRBAnTu8FSrBPBPAg\u0026code_challenge_method=S256\u0026nonce=aGhlR2E5UVBNaHN1clc0SEhEV3NtUEZ4cTRKMFE2a0EzUzNTWWptcTloOFhP","fqdn":"sphinxdeclic.com","domain":"sphinxdeclic.com","tld":"com"},"ip":{"addr":"217.182.188.209","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-04-16T14:49:05.936Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.sphinxdeclic.com","organization":""},"issuer":{"commonName":"GandiCert","organization":"Gandi SAS"},"validity":{"start":"Tue, 30 Dec 2025 00:00:00 GMT","end":"Sat, 30 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"3B:A1:F2:F4:C9:41:35:51:AF:F6:12:C6:A8:F2:B0:BE:B6:B2:A3:7D","sha256":"3A:01:7B:A2:AB:78:4B:06:84:35:45:3A:DA:0A:74:74:A7:8E:20:4A:7A:A2:E6:59:2F:19:5A:79:2C:2D:08:4A"}}},"request":{"raw":"GET /sphinxauth/connect/authorize?response_type=code\u0026client_id=sphinxonlineclient\u0026state=aGhlR2E5UVBNaHN1clc0SEhEV3NtUEZ4cTRKMFE2a0EzUzNTWWptcTloOFhP%3B%252F\u0026redirect_uri=https%3A%2F%2Fsphinxdeclic.com%2Fv5%2Fcallback\u0026scope=openid%20email%20profile%20identifiers%20userprofile%20roles%20admin.limits%20sphinxonline.webapi%20workspaces\u0026code_challenge=uzFq0qLRNzo889zBS1YbzdZxxtGRBAnTu8FSrBPBPAg\u0026code_challenge_method=S256\u0026nonce=aGhlR2E5UVBNaHN1clc0SEhEV3NtUEZ4cTRKMFE2a0EzUzNTWWptcTloOFhP HTTP/1.1\r\nHost: sphinxdeclic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://sphinxdeclic.com/v5\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: cookiesession1=678A3E4DAEE6786C54742F859221776F; LangShaker=en-GB\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 302 Found\r\nLocation: https://sphinxdeclic.com/sphinxauth/Account/Login?ReturnUrl=%2Fsphinxauth%2Fconnect%2Fauthorize%2Fcallback%3Fresponse_type%3Dcode%26client_id%3Dsphinxonlineclient%26state%3DaGhlR2E5UVBNaHN1clc0SEhEV3NtUEZ4cTRKMFE2a0EzUzNTWWptcTloOFhP;%25252F%26redirect_uri%3Dhttps%253A%252F%252Fsphinxdeclic.com%252Fv5%252Fcallback%26scope%3Dopenid%2520email%2520profile%2520identifiers%2520userprofile%2520roles%2520admin.limits%2520sphinxonline.webapi%2520workspaces%26code_challenge%3DuzFq0qLRNzo889zBS1YbzdZxxtGRBAnTu8FSrBPBPAg%26code_challenge_method%3DS256%26nonce%3DaGhlR2E5UVBNaHN1clc0SEhEV3NtUEZ4cTRKMFE2a0EzUzNTWWptcTloOFhP\r\nServer: \r\nStrict-Transport-Security: max-age=31536000; includeSubDomains\r\nX-Content-Type-Options: nosniff\r\nDate: Thu, 16 Apr 2026 14:49:05 GMT\r\ncontent-length: 0\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":13003,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-08T06:24:33.301952Z","times_seen":17774380,"resource_available":true,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-16","alert":"Sinkholed","trigger":"sphinxdeclic.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sphinxdeclic.com/v5/main-PF24PWUP.js","fqdn":"sphinxdeclic.com","domain":"sphinxdeclic.com","tld":"com"},"ip":{"addr":"217.182.188.209","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://sphinxdeclic.com/v5","date":"2026-04-16T14:49:04.233Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.sphinxdeclic.com","organization":""},"issuer":{"commonName":"GandiCert","organization":"Gandi SAS"},"validity":{"start":"Tue, 30 Dec 2025 00:00:00 GMT","end":"Sat, 30 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"3B:A1:F2:F4:C9:41:35:51:AF:F6:12:C6:A8:F2:B0:BE:B6:B2:A3:7D","sha256":"3A:01:7B:A2:AB:78:4B:06:84:35:45:3A:DA:0A:74:74:A7:8E:20:4A:7A:A2:E6:59:2F:19:5A:79:2C:2D:08:4A"}}},"request":{"raw":"GET /v5/main-PF24PWUP.js HTTP/1.1\r\nHost: sphinxdeclic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://sphinxdeclic.com/v5\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: cookiesession1=678A3E4DAEE6786C54742F859221776F\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Type: text/javascript\r\nContent-Encoding: gzip\r\nLast-Modified: Mon, 13 Apr 2026 14:45:44 GMT\r\nAccept-Ranges: bytes\r\nETag: \"1dccb5434ecfcaa\"\r\nVary: Accept-Encoding\r\nServer: \r\nStrict-Transport-Security: max-age=31536000; includeSubDomains\r\nX-Content-Type-Options: nosniff\r\nX-XSS-Protection: 1; mode=block\r\nX-Frame-Options: SameOrigin\r\nReferrer-Policy: no-referrer-when-downgrade\r\nContent-Security-Policy: default-src 'self' wss: https://sphinxdeclic.com;script-src 'self' 'unsafe-inline' 'unsafe-eval' https://sphinxdeclic.com https://js.userflow.com;style-src 'self' 'unsafe-inline' https://cdnjs.cloudflare.com https://js.userflow.com https://fonts.googleapis.com;img-src 'self' data: http: https:;frame-src 'self' blob: https://sphinxdeclic.com https://sphinxdeclic.com/tiny/ https://player.vimeo.com https://infos.lesphinx.eu https://www.youtube.com https://www.youtube-nocookie.com https://cdn.userflow.com;font-src 'self' data: https://cdnjs.cloudflare.com https://fonts.gstatic.com;connect-src 'self' wss: https://sphinxdeclic.com https://sphinxdeclic.com/exportservice/ https://js.userflow.com https://www.youtube.com https://www.youtube-nocookie.com\r\nDate: Thu, 16 Apr 2026 14:49:03 GMT\r\nContent-Length: 71904\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":172202,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (30634)","md5":"3904257aa4c8f0b7a34531ca50602e9a","sha1":"fec8bd4376e6bf6aadc480566b5956fc9730b1ea","sha256":"a7e71b69b17c3483c3f472418f1505e8df1f7522896f6e084c5093d68892f4c2","sha512":"4b69888d2e7941ad2b2a5a4f40d5dd916e54fb2a668be70f5d55d7166e2bc727d2ed1a9e213b221d00fa63408ba161947f89000eb2f02800ab6c8ee659e162c7","ssdeep":"3072:c9M+eWs8EtXV0nrIpxUGdwYISIOO/RdCW:as8kXmrIzFdwY9+R","tlshash":"17f34aa632927866c3ef12e580bf0101b13a5a49b48c046df598e5ef79b4c4463fbf76","first_seen":"2026-04-16T14:49:32.883615Z","last_seen":"2026-04-16T14:49:32.883615Z","times_seen":1,"resource_available":false,"data":null}},"time_used":262,"timings":{"blocked":76,"dns":0,"connect":25,"send":0,"wait":53,"receive":53,"ssl":53},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-16","alert":"Sinkholed","trigger":"sphinxdeclic.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sphinxdeclic.com/v5/chunk-3Y5UHUWY.js","fqdn":"sphinxdeclic.com","domain":"sphinxdeclic.com","tld":"com"},"ip":{"addr":"217.182.188.209","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://sphinxdeclic.com/v5","date":"2026-04-16T14:49:04.588Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.sphinxdeclic.com","organization":""},"issuer":{"commonName":"GandiCert","organization":"Gandi SAS"},"validity":{"start":"Tue, 30 Dec 2025 00:00:00 GMT","end":"Sat, 30 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"3B:A1:F2:F4:C9:41:35:51:AF:F6:12:C6:A8:F2:B0:BE:B6:B2:A3:7D","sha256":"3A:01:7B:A2:AB:78:4B:06:84:35:45:3A:DA:0A:74:74:A7:8E:20:4A:7A:A2:E6:59:2F:19:5A:79:2C:2D:08:4A"}}},"request":{"raw":"GET /v5/chunk-3Y5UHUWY.js HTTP/1.1\r\nHost: sphinxdeclic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://sphinxdeclic.com/v5/main-PF24PWUP.js\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: cookiesession1=678A3E4DAEE6786C54742F859221776F\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-08T06:24:33.301952Z","times_seen":17774380,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-16","alert":"Sinkholed","trigger":"sphinxdeclic.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sphinxdeclic.com/v5/chunk-KVYO2SMS.js","fqdn":"sphinxdeclic.com","domain":"sphinxdeclic.com","tld":"com"},"ip":{"addr":"217.182.188.209","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://sphinxdeclic.com/v5","date":"2026-04-16T14:49:04.488Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.sphinxdeclic.com","organization":""},"issuer":{"commonName":"GandiCert","organization":"Gandi SAS"},"validity":{"start":"Tue, 30 Dec 2025 00:00:00 GMT","end":"Sat, 30 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"3B:A1:F2:F4:C9:41:35:51:AF:F6:12:C6:A8:F2:B0:BE:B6:B2:A3:7D","sha256":"3A:01:7B:A2:AB:78:4B:06:84:35:45:3A:DA:0A:74:74:A7:8E:20:4A:7A:A2:E6:59:2F:19:5A:79:2C:2D:08:4A"}}},"request":{"raw":"GET /v5/chunk-KVYO2SMS.js HTTP/1.1\r\nHost: sphinxdeclic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://sphinxdeclic.com/v5/main-PF24PWUP.js\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: cookiesession1=678A3E4DAEE6786C54742F859221776F\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Type: text/javascript\r\nContent-Encoding: gzip\r\nLast-Modified: Mon, 13 Apr 2026 14:45:44 GMT\r\nAccept-Ranges: bytes\r\nETag: \"1dccb5434ee5f19\"\r\nVary: Accept-Encoding\r\nServer: \r\nStrict-Transport-Security: max-age=31536000; includeSubDomains\r\nX-Content-Type-Options: nosniff\r\nX-XSS-Protection: 1; mode=block\r\nX-Frame-Options: SameOrigin\r\nReferrer-Policy: no-referrer-when-downgrade\r\nContent-Security-Policy: default-src 'self' wss: https://sphinxdeclic.com;script-src 'self' 'unsafe-inline' 'unsafe-eval' https://sphinxdeclic.com https://js.userflow.com;style-src 'self' 'unsafe-inline' https://cdnjs.cloudflare.com https://js.userflow.com https://fonts.googleapis.com;img-src 'self' data: http: https:;frame-src 'self' blob: https://sphinxdeclic.com https://sphinxdeclic.com/tiny/ https://player.vimeo.com https://infos.lesphinx.eu https://www.youtube.com https://www.youtube-nocookie.com https://cdn.userflow.com;font-src 'self' data: https://cdnjs.cloudflare.com https://fonts.gstatic.com;connect-src 'self' wss: https://sphinxdeclic.com https://sphinxdeclic.com/exportservice/ https://js.userflow.com https://www.youtube.com https://www.youtube-nocookie.com\r\nDate: Thu, 16 Apr 2026 14:49:03 GMT\r\nContent-Length: 451\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":793,"size_decoded":0,"mime_type":"text/javascript","magic":"Java source, ASCII text, with very long lines (792)","md5":"a8cf16f699712769905f32c66fb2379f","sha1":"47cb86866146d1e4bfbf33da821ef27cf3fb8b06","sha256":"00270947aa54e86de55212e457d1b3a9f3f616974770b2b24abba84d0709defe","sha512":"ab4af681b749bac8765ea1bf8db24557d13e1cf7b021840337a23fc2f120b6321596a7913bdb3dc089dd5c4cbb4c291b8f5fe9064e1f588dd0accd94ba4862bf","ssdeep":"","tlshash":"1d01abef6197b0ae0792dd9988235adce3081911034c5eacf0c41a92bd70840b5bfa79","first_seen":"2026-04-16T14:49:32.884843Z","last_seen":"2026-06-10T15:42:17.914183Z","times_seen":7,"resource_available":true,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-16","alert":"Sinkholed","trigger":"sphinxdeclic.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sphinxdeclic.com/sphinxauth/images/backgrounds/img_declic.png?v=9zN74tUDn8i73OnYUKa82B3ai9U","fqdn":"sphinxdeclic.com","domain":"sphinxdeclic.com","tld":"com"},"ip":{"addr":"217.182.188.209","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sphinxdeclic.com/sphinxauth/Account/Login?ReturnUrl=%2Fsphinxauth%2Fconnect%2Fauthorize%2Fcallback%3Fresponse_type%3Dcode%26client_id%3Dsphinxonlineclient%26state%3DaGhlR2E5UVBNaHN1clc0SEhEV3NtUEZ4cTRKMFE2a0EzUzNTWWptcTloOFhP;%25252F%26redirect_uri%3Dhttps%253A%252F%252Fsphinxdeclic.com%252Fv5%252Fcallback%26scope%3Dopenid%2520email%2520profile%2520identifiers%2520userprofile%2520roles%2520admin.limits%2520sphinxonline.webapi%2520workspaces%26code_challenge%3DuzFq0qLRNzo889zBS1YbzdZxxtGRBAnTu8FSrBPBPAg%26code_challenge_method%3DS256%26nonce%3DaGhlR2E5UVBNaHN1clc0SEhEV3NtUEZ4cTRKMFE2a0EzUzNTWWptcTloOFhP","date":"2026-04-16T14:49:06.272Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.sphinxdeclic.com","organization":""},"issuer":{"commonName":"GandiCert","organization":"Gandi SAS"},"validity":{"start":"Tue, 30 Dec 2025 00:00:00 GMT","end":"Sat, 30 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"3B:A1:F2:F4:C9:41:35:51:AF:F6:12:C6:A8:F2:B0:BE:B6:B2:A3:7D","sha256":"3A:01:7B:A2:AB:78:4B:06:84:35:45:3A:DA:0A:74:74:A7:8E:20:4A:7A:A2:E6:59:2F:19:5A:79:2C:2D:08:4A"}}},"request":{"raw":"GET /sphinxauth/images/backgrounds/img_declic.png?v=9zN74tUDn8i73OnYUKa82B3ai9U HTTP/1.1\r\nHost: sphinxdeclic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sphinxdeclic.com/sphinxauth/dist/site.css?v=UnNmutK1UwbZxmQQ1n8oWOfNVjY\r\nCookie: sso.af=CfDJ8KTx70Uy8cpEsYrm-qyJnHBPF3GV1QAVwOlpEYYS7DEtNtjKug4oLj8te1dfsjnUV8dsMuF7S4Br6iBUT9LYNEF_o9o1T5O0mbdwjtAj5e5MLrcMYiuROmEzNdOyYCOf_HrfuTIo9bj244AulymmJVM; sso.td=CfDJ8KTx70Uy8cpEsYrm-qyJnHArIrYQR-ILooLCz3W6DyGw0QXgiHUYWILCw5FIucQ8aYkCrXl0q26yO1G7VjgDkEUTfptzwL7Ixjyr4DODmdFtRkGPYNQu6FageRJmeM3E7JjLJPSlZgDTjnlJDodHNriw-cf5IrVB5yU3_80igf5GEp1OuzoAxO86uH_YRPSqbg; cookiesession1=678A3E4DAEE6786C54742F859221776F; LangShaker=en-GB\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Length: 179313\r\nContent-Type: image/png\r\nLast-Modified: Mon, 20 Jan 2025 15:22:05 GMT\r\nAccept-Ranges: bytes\r\nETag: \"1db6b4f0fda30f1\"\r\nServer: \r\nStrict-Transport-Security: max-age=31536000; includeSubDomains\r\nX-Content-Type-Options: nosniff\r\nDate: Thu, 16 Apr 2026 14:49:05 GMT\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":179313,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 955 x 611, 8-bit/color RGBA, non-interlaced","md5":"ac23309e7017f1deb1dcd35234669af3","sha1":"aa72fd10f9e965ff7e7e3c030ca0d0b05396c99c","sha256":"b0252bea812c45c5850df335b0bd3c8ee9ef7de5d569e197b9fd5e576cfacbb1","sha512":"c70192b0484f9a402949f2b74f774cf0fd4217607eb4425c9fc661b436c2467c882d8e92004b7b65c3a517642eca98b33a60e92acc039058b0bfbf1cba2b5cb1","ssdeep":"3072:sCHIzu4zTQB6s+orTfrKTTfINilml6nB/mV1nRhLDCH99DltejWhSsgsAOIUy0:sCHqu4TQMs+oPTakr6nK1n7eH9hv6WJZ","tlshash":"7804124a298fcc5cee8927a97095a5b1a9c2112b0dbbef15f2d1fa10e01f537e53340a","first_seen":"2025-03-12T15:32:11.398617Z","last_seen":"2026-04-16T14:49:32.885908Z","times_seen":2,"resource_available":false,"data":null}},"time_used":143,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":63,"receive":80,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-16","alert":"Sinkholed","trigger":"sphinxdeclic.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sphinxdeclic.com/v5/assets/img/logos/sphinx-primary-short.png","fqdn":"sphinxdeclic.com","domain":"sphinxdeclic.com","tld":"com"},"ip":{"addr":"217.182.188.209","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sphinxdeclic.com/v5","date":"2026-04-16T14:49:04.236Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.sphinxdeclic.com","organization":""},"issuer":{"commonName":"GandiCert","organization":"Gandi SAS"},"validity":{"start":"Tue, 30 Dec 2025 00:00:00 GMT","end":"Sat, 30 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"3B:A1:F2:F4:C9:41:35:51:AF:F6:12:C6:A8:F2:B0:BE:B6:B2:A3:7D","sha256":"3A:01:7B:A2:AB:78:4B:06:84:35:45:3A:DA:0A:74:74:A7:8E:20:4A:7A:A2:E6:59:2F:19:5A:79:2C:2D:08:4A"}}},"request":{"raw":"GET /v5/assets/img/logos/sphinx-primary-short.png HTTP/1.1\r\nHost: sphinxdeclic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://sphinxdeclic.com/v5\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: cookiesession1=678A3E4DAEE6786C54742F859221776F\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Length: 3586\r\nContent-Type: image/png\r\nLast-Modified: Fri, 15 Sep 2023 12:42:03 GMT\r\nAccept-Ranges: bytes\r\nETag: \"1d9e7d206f4d182\"\r\nServer: \r\nStrict-Transport-Security: max-age=31536000; includeSubDomains\r\nX-Content-Type-Options: nosniff\r\nX-XSS-Protection: 1; mode=block\r\nX-Frame-Options: SameOrigin\r\nReferrer-Policy: no-referrer-when-downgrade\r\nContent-Security-Policy: default-src 'self' wss: https://sphinxdeclic.com;script-src 'self' 'unsafe-inline' 'unsafe-eval' https://sphinxdeclic.com https://js.userflow.com;style-src 'self' 'unsafe-inline' https://cdnjs.cloudflare.com https://js.userflow.com https://fonts.googleapis.com;img-src 'self' data: http: https:;frame-src 'self' blob: https://sphinxdeclic.com https://sphinxdeclic.com/tiny/ https://player.vimeo.com https://infos.lesphinx.eu https://www.youtube.com https://www.youtube-nocookie.com https://cdn.userflow.com;font-src 'self' data: https://cdnjs.cloudflare.com https://fonts.gstatic.com;connect-src 'self' wss: https://sphinxdeclic.com https://sphinxdeclic.com/exportservice/ https://js.userflow.com https://www.youtube.com https://www.youtube-nocookie.com\r\nDate: Thu, 16 Apr 2026 14:49:03 GMT\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3586,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 133 x 107, 8-bit/color RGBA, non-interlaced","md5":"154984a95a9a0c2cbf32c419c4924df5","sha1":"1364639c56076d0e2058c784b16750d27d6a6f64","sha256":"6a3cd3c300ca60d2b79f152e92cd9fde418f6f1470864bf33650b2ffcb43fe2a","sha512":"82f01c87699cf215aa476c328d4bf58d33bb1ac7dca8f465e3da715f01dc370be42d37453950ee90a3291d93492d75ac74c819349743ed894a171c5e6c4de946","ssdeep":"","tlshash":"65716d827ac8da1f1749aa45e0527ec198ebbaf2018991f85d8e1c186ee411c94e553a","first_seen":"2025-05-20T07:15:49.002474Z","last_seen":"2026-07-24T11:12:37.360878Z","times_seen":9,"resource_available":false,"data":null}},"time_used":212,"timings":{"blocked":80,"dns":1,"connect":26,"send":0,"wait":47,"receive":1,"ssl":54},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-16","alert":"Sinkholed","trigger":"sphinxdeclic.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sphinxdeclic.com/sphinxauth/images/backgrounds/bg_sphinx.png?v=7VGFnCvRqI9X3uJD4b8yxIIbtLo","fqdn":"sphinxdeclic.com","domain":"sphinxdeclic.com","tld":"com"},"ip":{"addr":"217.182.188.209","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sphinxdeclic.com/sphinxauth/Account/Login?ReturnUrl=%2Fsphinxauth%2Fconnect%2Fauthorize%2Fcallback%3Fresponse_type%3Dcode%26client_id%3Dsphinxonlineclient%26state%3DaGhlR2E5UVBNaHN1clc0SEhEV3NtUEZ4cTRKMFE2a0EzUzNTWWptcTloOFhP;%25252F%26redirect_uri%3Dhttps%253A%252F%252Fsphinxdeclic.com%252Fv5%252Fcallback%26scope%3Dopenid%2520email%2520profile%2520identifiers%2520userprofile%2520roles%2520admin.limits%2520sphinxonline.webapi%2520workspaces%26code_challenge%3DuzFq0qLRNzo889zBS1YbzdZxxtGRBAnTu8FSrBPBPAg%26code_challenge_method%3DS256%26nonce%3DaGhlR2E5UVBNaHN1clc0SEhEV3NtUEZ4cTRKMFE2a0EzUzNTWWptcTloOFhP","date":"2026-04-16T14:49:06.268Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.sphinxdeclic.com","organization":""},"issuer":{"commonName":"GandiCert","organization":"Gandi SAS"},"validity":{"start":"Tue, 30 Dec 2025 00:00:00 GMT","end":"Sat, 30 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"3B:A1:F2:F4:C9:41:35:51:AF:F6:12:C6:A8:F2:B0:BE:B6:B2:A3:7D","sha256":"3A:01:7B:A2:AB:78:4B:06:84:35:45:3A:DA:0A:74:74:A7:8E:20:4A:7A:A2:E6:59:2F:19:5A:79:2C:2D:08:4A"}}},"request":{"raw":"GET /sphinxauth/images/backgrounds/bg_sphinx.png?v=7VGFnCvRqI9X3uJD4b8yxIIbtLo HTTP/1.1\r\nHost: sphinxdeclic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sphinxdeclic.com/sphinxauth/dist/site.css?v=UnNmutK1UwbZxmQQ1n8oWOfNVjY\r\nCookie: sso.af=CfDJ8KTx70Uy8cpEsYrm-qyJnHBPF3GV1QAVwOlpEYYS7DEtNtjKug4oLj8te1dfsjnUV8dsMuF7S4Br6iBUT9LYNEF_o9o1T5O0mbdwjtAj5e5MLrcMYiuROmEzNdOyYCOf_HrfuTIo9bj244AulymmJVM; sso.td=CfDJ8KTx70Uy8cpEsYrm-qyJnHArIrYQR-ILooLCz3W6DyGw0QXgiHUYWILCw5FIucQ8aYkCrXl0q26yO1G7VjgDkEUTfptzwL7Ixjyr4DODmdFtRkGPYNQu6FageRJmeM3E7JjLJPSlZgDTjnlJDodHNriw-cf5IrVB5yU3_80igf5GEp1OuzoAxO86uH_YRPSqbg; cookiesession1=678A3E4DAEE6786C54742F859221776F; LangShaker=en-GB\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Length: 31178\r\nContent-Type: image/png\r\nLast-Modified: Mon, 20 Jan 2025 15:22:05 GMT\r\nAccept-Ranges: bytes\r\nETag: \"1db6b4f0fd8f54a\"\r\nServer: \r\nStrict-Transport-Security: max-age=31536000; includeSubDomains\r\nX-Content-Type-Options: nosniff\r\nDate: Thu, 16 Apr 2026 14:49:05 GMT\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":31178,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 922 x 1080, 8-bit/color RGBA, non-interlaced","md5":"84b6243d5d2017ab8f3fe38055450dd7","sha1":"add6e9928f1548d1a738db9b91bc802d6bfb43ec","sha256":"b77f6eed4fc5147fb23b76d20ce458aab56e2b2cc792280c979cfbbab20b210d","sha512":"1c15b4ae23361b7d56c495a2cf6345173fdd79a630c49d5f690493ff0bee34d5ad8308c34e9f564ae30f878017b36267e0ef6d0ff020121ccdbc089b2bdd2bf1","ssdeep":"768:OBdJ4zewuJj7uzCr6Zj3tw/DAfEZTegtwpg2V:OBdJom85wraEp4p9","tlshash":"3be2f116556fdc10c12603f6903855b611370ffbb2a3923de5208f71c95fd299f83a92","first_seen":"2025-03-12T15:32:11.395545Z","last_seen":"2026-04-16T14:49:32.88854Z","times_seen":2,"resource_available":false,"data":null}},"time_used":32,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":30,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-16","alert":"Sinkholed","trigger":"sphinxdeclic.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sphinxdeclic.com/v5/polyfills-BUKJMTSU.js","fqdn":"sphinxdeclic.com","domain":"sphinxdeclic.com","tld":"com"},"ip":{"addr":"217.182.188.209","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://sphinxdeclic.com/v5","date":"2026-04-16T14:49:04.230Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.sphinxdeclic.com","organization":""},"issuer":{"commonName":"GandiCert","organization":"Gandi SAS"},"validity":{"start":"Tue, 30 Dec 2025 00:00:00 GMT","end":"Sat, 30 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"3B:A1:F2:F4:C9:41:35:51:AF:F6:12:C6:A8:F2:B0:BE:B6:B2:A3:7D","sha256":"3A:01:7B:A2:AB:78:4B:06:84:35:45:3A:DA:0A:74:74:A7:8E:20:4A:7A:A2:E6:59:2F:19:5A:79:2C:2D:08:4A"}}},"request":{"raw":"GET /v5/polyfills-BUKJMTSU.js HTTP/1.1\r\nHost: sphinxdeclic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://sphinxdeclic.com/v5\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: cookiesession1=678A3E4DAEE6786C54742F859221776F\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Type: text/javascript\r\nContent-Encoding: gzip\r\nLast-Modified: Mon, 13 Apr 2026 14:45:44 GMT\r\nAccept-Ranges: bytes\r\nETag: \"1dccb5434ec230b\"\r\nVary: Accept-Encoding\r\nServer: \r\nStrict-Transport-Security: max-age=31536000; includeSubDomains\r\nX-Content-Type-Options: nosniff\r\nX-XSS-Protection: 1; mode=block\r\nX-Frame-Options: SameOrigin\r\nReferrer-Policy: no-referrer-when-downgrade\r\nContent-Security-Policy: default-src 'self' wss: https://sphinxdeclic.com;script-src 'self' 'unsafe-inline' 'unsafe-eval' https://sphinxdeclic.com https://js.userflow.com;style-src 'self' 'unsafe-inline' https://cdnjs.cloudflare.com https://js.userflow.com https://fonts.googleapis.com;img-src 'self' data: http: https:;frame-src 'self' blob: https://sphinxdeclic.com https://sphinxdeclic.com/tiny/ https://player.vimeo.com https://infos.lesphinx.eu https://www.youtube.com https://www.youtube-nocookie.com https://cdn.userflow.com;font-src 'self' data: https://cdnjs.cloudflare.com https://fonts.gstatic.com;connect-src 'self' wss: https://sphinxdeclic.com https://sphinxdeclic.com/exportservice/ https://js.userflow.com https://www.youtube.com https://www.youtube-nocookie.com\r\nDate: Thu, 16 Apr 2026 14:49:03 GMT\r\nContent-Length: 83083\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":163595,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"7d372a320cf5e9fad4d137b2b25b1708","sha1":"3e398ac1432e19e38833e6b040476c37db72e6cf","sha256":"dd803763000e3c7603f4ab0ce888794f70466dd3bfa2e1ef33c84fca949ee141","sha512":"bae853d3f7be5eb3ee9a523d001b143535ee094da1b42953be7459e4c7e73931b577711ffaf2c135dd686cd98f16ad339f40fad5904848cddd93cfad28864934","ssdeep":"3072:MPElVtAHWRc3Zqf/su3bQyeF56GX+Xry3WrwDbBhOa3b:Ms3HqZWsuLQyyYhIzBIa3b","tlshash":"f0f3d8cd7792f4e94bf265f9403f8847e3272860980cd06dda9ae5912879d0e40bef79","first_seen":"2026-04-16T14:49:32.889685Z","last_seen":"2026-06-10T15:42:17.94812Z","times_seen":7,"resource_available":true,"data":null}},"time_used":105,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":50,"receive":55,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-16","alert":"Sinkholed","trigger":"sphinxdeclic.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sphinxdeclic.com/v5/media/KFOmCnqEu92Fr1Mu4mxK-AQMYFA4H.woff2","fqdn":"sphinxdeclic.com","domain":"sphinxdeclic.com","tld":"com"},"ip":{"addr":"217.182.188.209","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://sphinxdeclic.com/v5","date":"2026-04-16T14:49:04.240Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.sphinxdeclic.com","organization":""},"issuer":{"commonName":"GandiCert","organization":"Gandi SAS"},"validity":{"start":"Tue, 30 Dec 2025 00:00:00 GMT","end":"Sat, 30 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"3B:A1:F2:F4:C9:41:35:51:AF:F6:12:C6:A8:F2:B0:BE:B6:B2:A3:7D","sha256":"3A:01:7B:A2:AB:78:4B:06:84:35:45:3A:DA:0A:74:74:A7:8E:20:4A:7A:A2:E6:59:2F:19:5A:79:2C:2D:08:4A"}}},"request":{"raw":"GET /v5/media/KFOmCnqEu92Fr1Mu4mxK-AQMYFA4H.woff2 HTTP/1.1\r\nHost: sphinxdeclic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nReferer: https://sphinxdeclic.com/v5\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: cookiesession1=678A3E4DAEE6786C54742F859221776F\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Length: 15344\r\nContent-Type: font/woff2\r\nLast-Modified: Mon, 13 Apr 2026 14:45:44 GMT\r\nAccept-Ranges: bytes\r\nETag: \"1dccb5434ee67f0\"\r\nServer: \r\nStrict-Transport-Security: max-age=31536000; includeSubDomains\r\nX-Content-Type-Options: nosniff\r\nX-XSS-Protection: 1; mode=block\r\nX-Frame-Options: SameOrigin\r\nReferrer-Policy: no-referrer-when-downgrade\r\nContent-Security-Policy: default-src 'self' wss: https://sphinxdeclic.com;script-src 'self' 'unsafe-inline' 'unsafe-eval' https://sphinxdeclic.com https://js.userflow.com;style-src 'self' 'unsafe-inline' https://cdnjs.cloudflare.com https://js.userflow.com https://fonts.googleapis.com;img-src 'self' data: http: https:;frame-src 'self' blob: https://sphinxdeclic.com https://sphinxdeclic.com/tiny/ https://player.vimeo.com https://infos.lesphinx.eu https://www.youtube.com https://www.youtube-nocookie.com https://cdn.userflow.com;font-src 'self' data: https://cdnjs.cloudflare.com https://fonts.gstatic.com;connect-src 'self' wss: https://sphinxdeclic.com https://sphinxdeclic.com/exportservice/ https://js.userflow.com https://www.youtube.com https://www.youtube-nocookie.com\r\nDate: Thu, 16 Apr 2026 14:49:03 GMT\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":15344,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 15344, version 1.0","md5":"5d4aeb4e5f5ef754e307d7ffaef688bd","sha1":"06db651cdf354c64a7383ea9c77024ef4fb4cef8","sha256":"3e253b66056519aa065b00a453bac37ac5ed8f3e6fe7b542e93a9dcdcc11d0bc","sha512":"7eb7c301df79d35a6a521fae9d3dccc0a695d3480b4d34c7d262dd0c67abec8437ed40e2920625e98aaeafba1d908dec69c3b07494ec7c29307de49e91c2ef48","ssdeep":"384:ctE5KIuhGO+DSdXwye6i9Xm81v4vMHCbppV0pr3Ll9/w:cqrVO++tw/9CICFbQLlxw","tlshash":"5162e16aef76dc7e4f1af1361c01b45404462290ba6155eff00d6e1d4eed1aff461392","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-08T06:06:44.186565Z","times_seen":544288,"resource_available":false,"data":null}},"time_used":247,"timings":{"blocked":73,"dns":0,"connect":0,"send":0,"wait":91,"receive":28,"ssl":55},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-16","alert":"Sinkholed","trigger":"sphinxdeclic.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sphinxdeclic.com/v5/chunk-GKN53OUS.js","fqdn":"sphinxdeclic.com","domain":"sphinxdeclic.com","tld":"com"},"ip":{"addr":"217.182.188.209","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://sphinxdeclic.com/v5","date":"2026-04-16T14:49:04.485Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.sphinxdeclic.com","organization":""},"issuer":{"commonName":"GandiCert","organization":"Gandi SAS"},"validity":{"start":"Tue, 30 Dec 2025 00:00:00 GMT","end":"Sat, 30 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"3B:A1:F2:F4:C9:41:35:51:AF:F6:12:C6:A8:F2:B0:BE:B6:B2:A3:7D","sha256":"3A:01:7B:A2:AB:78:4B:06:84:35:45:3A:DA:0A:74:74:A7:8E:20:4A:7A:A2:E6:59:2F:19:5A:79:2C:2D:08:4A"}}},"request":{"raw":"GET /v5/chunk-GKN53OUS.js HTTP/1.1\r\nHost: sphinxdeclic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://sphinxdeclic.com/v5/main-PF24PWUP.js\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: cookiesession1=678A3E4DAEE6786C54742F859221776F\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Type: text/javascript\r\nContent-Encoding: gzip\r\nLast-Modified: Mon, 13 Apr 2026 14:45:44 GMT\r\nAccept-Ranges: bytes\r\nETag: \"1dccb5434ee4010\"\r\nVary: Accept-Encoding\r\nServer: \r\nStrict-Transport-Security: max-age=31536000; includeSubDomains\r\nX-Content-Type-Options: nosniff\r\nX-XSS-Protection: 1; mode=block\r\nX-Frame-Options: SameOrigin\r\nReferrer-Policy: no-referrer-when-downgrade\r\nContent-Security-Policy: default-src 'self' wss: https://sphinxdeclic.com;script-src 'self' 'unsafe-inline' 'unsafe-eval' https://sphinxdeclic.com https://js.userflow.com;style-src 'self' 'unsafe-inline' https://cdnjs.cloudflare.com https://js.userflow.com https://fonts.googleapis.com;img-src 'self' data: http: https:;frame-src 'self' blob: https://sphinxdeclic.com https://sphinxdeclic.com/tiny/ https://player.vimeo.com https://infos.lesphinx.eu https://www.youtube.com https://www.youtube-nocookie.com https://cdn.userflow.com;font-src 'self' data: https://cdnjs.cloudflare.com https://fonts.gstatic.com;connect-src 'self' wss: https://sphinxdeclic.com https://sphinxdeclic.com/exportservice/ https://js.userflow.com https://www.youtube.com https://www.youtube-nocookie.com\r\nDate: Thu, 16 Apr 2026 14:49:03 GMT\r\nContent-Length: 3103\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7184,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (7183)","md5":"ef5c92f99cce5d277818f59cea513391","sha1":"13f44d477caadfa9dd74ba4b8b6215d2be221919","sha256":"291e2d2a9d6863c92e6df1ca42d798224e9814a2435546179a451951c5d26328","sha512":"c4a7a6a66940f0e3aacc73ef773825a6330703a75697dca77095a1949cec0a3870dcabf0f270eaa55c49c7fa9a15a692e3b2c41435e055dfc358519d843f5857","ssdeep":"192:xOr/50aWfSqdkM/2uzOa66ZxOdZN518u7M8B9gLBLX:kuSqdP/2uzOa66ZxOdZNv8uI8oLX","tlshash":"f7e100d96f305bbb2ed2485cb3058900850ad480e214c5bfb97abddb92d4ec4e97f678","first_seen":"2026-04-16T14:49:32.895097Z","last_seen":"2026-06-10T15:42:17.937562Z","times_seen":7,"resource_available":true,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-16","alert":"Sinkholed","trigger":"sphinxdeclic.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sphinxdeclic.com/sphinxauth/dist/site.js?v=gWV-LEMoP-75TdLpZ5NljGaJ1jk","fqdn":"sphinxdeclic.com","domain":"sphinxdeclic.com","tld":"com"},"ip":{"addr":"217.182.188.209","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://sphinxdeclic.com/sphinxauth/Account/Login?ReturnUrl=%2Fsphinxauth%2Fconnect%2Fauthorize%2Fcallback%3Fresponse_type%3Dcode%26client_id%3Dsphinxonlineclient%26state%3DaGhlR2E5UVBNaHN1clc0SEhEV3NtUEZ4cTRKMFE2a0EzUzNTWWptcTloOFhP;%25252F%26redirect_uri%3Dhttps%253A%252F%252Fsphinxdeclic.com%252Fv5%252Fcallback%26scope%3Dopenid%2520email%2520profile%2520identifiers%2520userprofile%2520roles%2520admin.limits%2520sphinxonline.webapi%2520workspaces%26code_challenge%3DuzFq0qLRNzo889zBS1YbzdZxxtGRBAnTu8FSrBPBPAg%26code_challenge_method%3DS256%26nonce%3DaGhlR2E5UVBNaHN1clc0SEhEV3NtUEZ4cTRKMFE2a0EzUzNTWWptcTloOFhP","date":"2026-04-16T14:49:06.091Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.sphinxdeclic.com","organization":""},"issuer":{"commonName":"GandiCert","organization":"Gandi SAS"},"validity":{"start":"Tue, 30 Dec 2025 00:00:00 GMT","end":"Sat, 30 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"3B:A1:F2:F4:C9:41:35:51:AF:F6:12:C6:A8:F2:B0:BE:B6:B2:A3:7D","sha256":"3A:01:7B:A2:AB:78:4B:06:84:35:45:3A:DA:0A:74:74:A7:8E:20:4A:7A:A2:E6:59:2F:19:5A:79:2C:2D:08:4A"}}},"request":{"raw":"GET /sphinxauth/dist/site.js?v=gWV-LEMoP-75TdLpZ5NljGaJ1jk HTTP/1.1\r\nHost: sphinxdeclic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: sso.af=CfDJ8KTx70Uy8cpEsYrm-qyJnHBPF3GV1QAVwOlpEYYS7DEtNtjKug4oLj8te1dfsjnUV8dsMuF7S4Br6iBUT9LYNEF_o9o1T5O0mbdwjtAj5e5MLrcMYiuROmEzNdOyYCOf_HrfuTIo9bj244AulymmJVM; sso.td=CfDJ8KTx70Uy8cpEsYrm-qyJnHArIrYQR-ILooLCz3W6DyGw0QXgiHUYWILCw5FIucQ8aYkCrXl0q26yO1G7VjgDkEUTfptzwL7Ixjyr4DODmdFtRkGPYNQu6FageRJmeM3E7JjLJPSlZgDTjnlJDodHNriw-cf5IrVB5yU3_80igf5GEp1OuzoAxO86uH_YRPSqbg; cookiesession1=678A3E4DAEE6786C54742F859221776F; LangShaker=en-GB\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nCache-Control: max-age=31536000,immutable\r\nContent-Type: text/javascript; charset=UTF-8\r\nContent-Encoding: gzip\r\nLast-Modified: Wed, 19 Feb 2025 16:03:14 GMT\r\nETag: \"gWV-LEMoP-75TdLpZ5NljGaJ1jk\"\r\nVary: Accept-Encoding\r\nServer: \r\nX-Content-Type-Options: nosniff\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains\r\nDate: Thu, 16 Apr 2026 14:49:05 GMT\r\ncontent-length: 202097\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":569614,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"973ece3970a047f15bd598ec1be0aba0","sha1":"b8a316ca8cb14c3e059562d9b22d1e647b3829eb","sha256":"26590d6d728870131f0d086c931429d5ca1d030be58f9a1e7a329b291158e197","sha512":"6850436da0c0fef9bb2491f865eb4b8a138b74903d9dfb759608b7afe645bfe3166ad0927c542b51b713200cd1497b27deba61e75d9f0317de6a18732718c1cc","ssdeep":"12288:lOiFbP/j70KUWrE4/589jjbvHeyb7PVZk6W190cvNPBoY:lOiFbP/j70KUWrE4/589jjbvHeyb5ZXo","tlshash":"b9c4c5953a4f212b4a77b36ada3b4109fb3dc17351058198b99d496c2f7081482afffd","first_seen":"2026-04-16T14:49:32.896283Z","last_seen":"2026-04-16T14:49:32.896283Z","times_seen":1,"resource_available":true,"data":null}},"time_used":97,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":60,"receive":37,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-16","alert":"Sinkholed","trigger":"sphinxdeclic.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sphinxdeclic.com/sphinxauth/fonts/raleway-latin.woff2?v=qZoSXpWoCm_QR-eBH-azOoeA0Lk","fqdn":"sphinxdeclic.com","domain":"sphinxdeclic.com","tld":"com"},"ip":{"addr":"217.182.188.209","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://sphinxdeclic.com/sphinxauth/Account/Login?ReturnUrl=%2Fsphinxauth%2Fconnect%2Fauthorize%2Fcallback%3Fresponse_type%3Dcode%26client_id%3Dsphinxonlineclient%26state%3DaGhlR2E5UVBNaHN1clc0SEhEV3NtUEZ4cTRKMFE2a0EzUzNTWWptcTloOFhP;%25252F%26redirect_uri%3Dhttps%253A%252F%252Fsphinxdeclic.com%252Fv5%252Fcallback%26scope%3Dopenid%2520email%2520profile%2520identifiers%2520userprofile%2520roles%2520admin.limits%2520sphinxonline.webapi%2520workspaces%26code_challenge%3DuzFq0qLRNzo889zBS1YbzdZxxtGRBAnTu8FSrBPBPAg%26code_challenge_method%3DS256%26nonce%3DaGhlR2E5UVBNaHN1clc0SEhEV3NtUEZ4cTRKMFE2a0EzUzNTWWptcTloOFhP","date":"2026-04-16T14:49:06.276Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.sphinxdeclic.com","organization":""},"issuer":{"commonName":"GandiCert","organization":"Gandi SAS"},"validity":{"start":"Tue, 30 Dec 2025 00:00:00 GMT","end":"Sat, 30 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"3B:A1:F2:F4:C9:41:35:51:AF:F6:12:C6:A8:F2:B0:BE:B6:B2:A3:7D","sha256":"3A:01:7B:A2:AB:78:4B:06:84:35:45:3A:DA:0A:74:74:A7:8E:20:4A:7A:A2:E6:59:2F:19:5A:79:2C:2D:08:4A"}}},"request":{"raw":"GET /sphinxauth/fonts/raleway-latin.woff2?v=qZoSXpWoCm_QR-eBH-azOoeA0Lk HTTP/1.1\r\nHost: sphinxdeclic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sphinxdeclic.com/sphinxauth/dist/site.css?v=UnNmutK1UwbZxmQQ1n8oWOfNVjY\r\nCookie: sso.af=CfDJ8KTx70Uy8cpEsYrm-qyJnHBPF3GV1QAVwOlpEYYS7DEtNtjKug4oLj8te1dfsjnUV8dsMuF7S4Br6iBUT9LYNEF_o9o1T5O0mbdwjtAj5e5MLrcMYiuROmEzNdOyYCOf_HrfuTIo9bj244AulymmJVM; sso.td=CfDJ8KTx70Uy8cpEsYrm-qyJnHArIrYQR-ILooLCz3W6DyGw0QXgiHUYWILCw5FIucQ8aYkCrXl0q26yO1G7VjgDkEUTfptzwL7Ixjyr4DODmdFtRkGPYNQu6FageRJmeM3E7JjLJPSlZgDTjnlJDodHNriw-cf5IrVB5yU3_80igf5GEp1OuzoAxO86uH_YRPSqbg; cookiesession1=678A3E4DAEE6786C54742F859221776F; LangShaker=en-GB\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Length: 20444\r\nContent-Type: font/woff2\r\nLast-Modified: Fri, 01 Apr 2022 13:51:48 GMT\r\nAccept-Ranges: bytes\r\nETag: \"1d845cfa1a67ddc\"\r\nServer: \r\nStrict-Transport-Security: max-age=31536000; includeSubDomains\r\nX-Content-Type-Options: nosniff\r\nDate: Thu, 16 Apr 2026 14:49:05 GMT\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":20444,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 20444, version 1.0","md5":"2075794c8e9e7e48e5fbf1b2313e7adf","sha1":"3161545d2626bf3c5704100087021daea6865528","sha256":"3650de8bc2dd8352b01aa49e9f0ae225098e86a31da32b04d81abb76b598d0d6","sha512":"5340278442667c2027cc5d13e56b25256fe1457a2468c4b8e81b32ffd869449402ba82743c8a974fdf025de9584db5eb10a40c8e0a239c87997b2c346a3a20db","ssdeep":"384:YAXnOaAUmTgLxBq8xmmvrnUdbwsGpbIamnmFiS8BRZcvCqWclvuT:3n2sF5mmvtsGpPmnqhsRZqRk","tlshash":"d092e15ba541d9e6c451a3300dbacb24e4886222c693870d34663c7b58ffdc15abbff5","first_seen":"2023-05-04T00:42:52Z","last_seen":"2026-08-07T15:38:56.043887Z","times_seen":424,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":33,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-16","alert":"Sinkholed","trigger":"sphinxdeclic.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sphinxdeclic.com/v5/chunk-5FM64TH2.js","fqdn":"sphinxdeclic.com","domain":"sphinxdeclic.com","tld":"com"},"ip":{"addr":"217.182.188.209","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://sphinxdeclic.com/v5","date":"2026-04-16T14:49:04.500Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.sphinxdeclic.com","organization":""},"issuer":{"commonName":"GandiCert","organization":"Gandi SAS"},"validity":{"start":"Tue, 30 Dec 2025 00:00:00 GMT","end":"Sat, 30 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"3B:A1:F2:F4:C9:41:35:51:AF:F6:12:C6:A8:F2:B0:BE:B6:B2:A3:7D","sha256":"3A:01:7B:A2:AB:78:4B:06:84:35:45:3A:DA:0A:74:74:A7:8E:20:4A:7A:A2:E6:59:2F:19:5A:79:2C:2D:08:4A"}}},"request":{"raw":"GET /v5/chunk-5FM64TH2.js HTTP/1.1\r\nHost: sphinxdeclic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://sphinxdeclic.com/v5/main-PF24PWUP.js\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: cookiesession1=678A3E4DAEE6786C54742F859221776F\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-08T06:24:33.301952Z","times_seen":17774380,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-16","alert":"Sinkholed","trigger":"sphinxdeclic.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sphinxdeclic.com/sphinxauth/lib/jquery-validation-unobtrusive/dist/jquery.validate.unobtrusive.min.js?v=7mitEjshOwQLFnR_35qf1jAAMEU","fqdn":"sphinxdeclic.com","domain":"sphinxdeclic.com","tld":"com"},"ip":{"addr":"217.182.188.209","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://sphinxdeclic.com/sphinxauth/Account/Login?ReturnUrl=%2Fsphinxauth%2Fconnect%2Fauthorize%2Fcallback%3Fresponse_type%3Dcode%26client_id%3Dsphinxonlineclient%26state%3DaGhlR2E5UVBNaHN1clc0SEhEV3NtUEZ4cTRKMFE2a0EzUzNTWWptcTloOFhP;%25252F%26redirect_uri%3Dhttps%253A%252F%252Fsphinxdeclic.com%252Fv5%252Fcallback%26scope%3Dopenid%2520email%2520profile%2520identifiers%2520userprofile%2520roles%2520admin.limits%2520sphinxonline.webapi%2520workspaces%26code_challenge%3DuzFq0qLRNzo889zBS1YbzdZxxtGRBAnTu8FSrBPBPAg%26code_challenge_method%3DS256%26nonce%3DaGhlR2E5UVBNaHN1clc0SEhEV3NtUEZ4cTRKMFE2a0EzUzNTWWptcTloOFhP","date":"2026-04-16T14:49:06.100Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.sphinxdeclic.com","organization":""},"issuer":{"commonName":"GandiCert","organization":"Gandi SAS"},"validity":{"start":"Tue, 30 Dec 2025 00:00:00 GMT","end":"Sat, 30 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"3B:A1:F2:F4:C9:41:35:51:AF:F6:12:C6:A8:F2:B0:BE:B6:B2:A3:7D","sha256":"3A:01:7B:A2:AB:78:4B:06:84:35:45:3A:DA:0A:74:74:A7:8E:20:4A:7A:A2:E6:59:2F:19:5A:79:2C:2D:08:4A"}}},"request":{"raw":"GET /sphinxauth/lib/jquery-validation-unobtrusive/dist/jquery.validate.unobtrusive.min.js?v=7mitEjshOwQLFnR_35qf1jAAMEU HTTP/1.1\r\nHost: sphinxdeclic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: sso.af=CfDJ8KTx70Uy8cpEsYrm-qyJnHBPF3GV1QAVwOlpEYYS7DEtNtjKug4oLj8te1dfsjnUV8dsMuF7S4Br6iBUT9LYNEF_o9o1T5O0mbdwjtAj5e5MLrcMYiuROmEzNdOyYCOf_HrfuTIo9bj244AulymmJVM; sso.td=CfDJ8KTx70Uy8cpEsYrm-qyJnHArIrYQR-ILooLCz3W6DyGw0QXgiHUYWILCw5FIucQ8aYkCrXl0q26yO1G7VjgDkEUTfptzwL7Ixjyr4DODmdFtRkGPYNQu6FageRJmeM3E7JjLJPSlZgDTjnlJDodHNriw-cf5IrVB5yU3_80igf5GEp1OuzoAxO86uH_YRPSqbg; cookiesession1=678A3E4DAEE6786C54742F859221776F; LangShaker=en-GB\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nCache-Control: max-age=31536000,immutable\r\nContent-Type: text/javascript; charset=UTF-8\r\nContent-Encoding: gzip\r\nLast-Modified: Fri, 16 Sep 2022 14:13:44 GMT\r\nETag: \"7mitEjshOwQLFnR_35qf1jAAMEU\"\r\nVary: Accept-Encoding\r\nServer: \r\nX-Content-Type-Options: nosniff\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains\r\nDate: Thu, 16 Apr 2026 14:49:05 GMT\r\nContent-Length: 2971\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5831,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (5545), with CRLF line terminators","md5":"7e60400801e87f5c95031c4e7fc79168","sha1":"9fbf94e964e7fcc9feabccb7a068d75fe389febb","sha256":"44558558820fb230780ee711e23ab0c535b0d77666b48facead551d8b2666579","sha512":"c6af959bc8c2f78ca73a291ec1a41730490920e069ee202bb372211564967514f73eaf30173e3aa7e64314047b9079d215ffb352fe76077a6b4589db0d1760a2","ssdeep":"96:3dpv+iwGMVxTrFG4j5d+tonIiwfP2TweS4w4tB9GvCbTYcJ8W4LZeSgGT8GHMgHR:zv+iwNxTrFG4j6toIiwf+TwP4tkCbTY9","tlshash":"6bc1838c3609a2a3bdfb31f610afc00bb5765564b0590841b289c5f16efdec69253f5b","first_seen":"2023-03-14T05:57:32Z","last_seen":"2026-08-07T18:50:14.272094Z","times_seen":840,"resource_available":true,"data":null}},"time_used":53,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":53,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-16","alert":"Sinkholed","trigger":"sphinxdeclic.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sphinxdeclic.com/sphinxauth/lib/jquery-validation/dist/jquery.validate.min.js?v=Z7r9qLq0Mq6Bil96bDYymLLgtNQ","fqdn":"sphinxdeclic.com","domain":"sphinxdeclic.com","tld":"com"},"ip":{"addr":"217.182.188.209","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://sphinxdeclic.com/sphinxauth/Account/Login?ReturnUrl=%2Fsphinxauth%2Fconnect%2Fauthorize%2Fcallback%3Fresponse_type%3Dcode%26client_id%3Dsphinxonlineclient%26state%3DaGhlR2E5UVBNaHN1clc0SEhEV3NtUEZ4cTRKMFE2a0EzUzNTWWptcTloOFhP;%25252F%26redirect_uri%3Dhttps%253A%252F%252Fsphinxdeclic.com%252Fv5%252Fcallback%26scope%3Dopenid%2520email%2520profile%2520identifiers%2520userprofile%2520roles%2520admin.limits%2520sphinxonline.webapi%2520workspaces%26code_challenge%3DuzFq0qLRNzo889zBS1YbzdZxxtGRBAnTu8FSrBPBPAg%26code_challenge_method%3DS256%26nonce%3DaGhlR2E5UVBNaHN1clc0SEhEV3NtUEZ4cTRKMFE2a0EzUzNTWWptcTloOFhP","date":"2026-04-16T14:49:06.098Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.sphinxdeclic.com","organization":""},"issuer":{"commonName":"GandiCert","organization":"Gandi SAS"},"validity":{"start":"Tue, 30 Dec 2025 00:00:00 GMT","end":"Sat, 30 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"3B:A1:F2:F4:C9:41:35:51:AF:F6:12:C6:A8:F2:B0:BE:B6:B2:A3:7D","sha256":"3A:01:7B:A2:AB:78:4B:06:84:35:45:3A:DA:0A:74:74:A7:8E:20:4A:7A:A2:E6:59:2F:19:5A:79:2C:2D:08:4A"}}},"request":{"raw":"GET /sphinxauth/lib/jquery-validation/dist/jquery.validate.min.js?v=Z7r9qLq0Mq6Bil96bDYymLLgtNQ HTTP/1.1\r\nHost: sphinxdeclic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: sso.af=CfDJ8KTx70Uy8cpEsYrm-qyJnHBPF3GV1QAVwOlpEYYS7DEtNtjKug4oLj8te1dfsjnUV8dsMuF7S4Br6iBUT9LYNEF_o9o1T5O0mbdwjtAj5e5MLrcMYiuROmEzNdOyYCOf_HrfuTIo9bj244AulymmJVM; sso.td=CfDJ8KTx70Uy8cpEsYrm-qyJnHArIrYQR-ILooLCz3W6DyGw0QXgiHUYWILCw5FIucQ8aYkCrXl0q26yO1G7VjgDkEUTfptzwL7Ixjyr4DODmdFtRkGPYNQu6FageRJmeM3E7JjLJPSlZgDTjnlJDodHNriw-cf5IrVB5yU3_80igf5GEp1OuzoAxO86uH_YRPSqbg; cookiesession1=678A3E4DAEE6786C54742F859221776F; LangShaker=en-GB\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nCache-Control: max-age=31536000,immutable\r\nContent-Type: text/javascript; charset=UTF-8\r\nContent-Encoding: gzip\r\nLast-Modified: Mon, 08 Apr 2024 07:02:35 GMT\r\nETag: \"Z7r9qLq0Mq6Bil96bDYymLLgtNQ\"\r\nVary: Accept-Encoding\r\nServer: \r\nX-Content-Type-Options: nosniff\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains\r\nDate: Thu, 16 Apr 2026 14:49:05 GMT\r\nContent-Length: 11324\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":25070,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (24926), with CRLF line terminators","md5":"a587c22fccaaa47baed94f0a2499082a","sha1":"0962593636d8a14b6b2a489764d42daedf2d3b24","sha256":"d2c861421b248c1d2d94ae3edab1db4aef67eb6b711435a8681abbe8a33d4806","sha512":"a8525bfce4b052f5917d9311bfb8e20093c3d7d4f42edd021efcd416994adf1529e89a6733cadc26e807c23d7d1af638b702af8ef0d1cd74f1e9c0cf7bff8963","ssdeep":"768:NWZ6/8lHJdkMioFpg5SUBQyQEny+L+gxV4Ky47Zr4:F0d3ioFpg5SUBQyQEny+PaKyCx4","tlshash":"feb2a78976d670065e9720f4909ba60b61b66960e008e83c75b8e4d1bef8fcc50f7f78","first_seen":"2024-08-14T22:01:13Z","last_seen":"2026-08-03T20:12:31.704873Z","times_seen":145,"resource_available":true,"data":null}},"time_used":53,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":52,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-16","alert":"Sinkholed","trigger":"sphinxdeclic.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}}]}