{"report_id":"5f18c15b-e220-49c0-b2e9-014944c4d296","version":0,"status":"done","tags":[],"date":"2026-09-11T10:18:23Z","url":{"schema":"http","addr":"vavada3-inkz.top/","fqdn":"vavada3-inkz.top","domain":"vavada3-inkz.top","tld":"top"},"ip":{"addr":"172.67.193.205","port":0,"asn":13335,"as":"Cloudflare, Inc.","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"vavada3-inkz.top/","fqdn":"vavada3-inkz.top","domain":"vavada3-inkz.top","tld":"top"},"title":"Вавада Казино зеркало – вход Vavada kz | Вавада Казахстан","dom":{"size":81151,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (6883)","md5":"c34c4fd0fad6e584fa271c2b7ba79736","sha1":"2ea0a01f3e91534cc02c95e617091510ebd20ccb","sha256":"ab237126a449bea0de9a7aeb5419be10ead1458cef8c784d4b35a6a0dd5677ff","sha512":"bff6fecaa78bd4d4a629ddc08460d593501ecb3d93fc431b874926e1b9e6d44780a5d4b7a748e6dc9309c96cfdb97d1b601f3951a2ca1c4af699dfb394220784","ssdeep":"1536:DZ5F4g5A4WR2vngSq2fa8p3Rzs/SnNUO6M2X34k:G8pm/SnSZ","tlshash":"6883a61655b600895507e2659be7bb6b3f30c403ca26cd69be8c6b8cdf85f90a97370c","dom_hash":"domhash8da094903b304aca29a58ab239e29df1","first_seen":"2026-09-11T10:18:27.311314Z","last_seen":"2026-09-11T10:18:27.311314Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"vavada3-inkz.top/","fqdn":"vavada3-inkz.top","domain":"vavada3-inkz.top","tld":"top"},"ip":{"addr":"172.67.193.205","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-10-16T10:18:23Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-11","alert":"Phishing Block","trigger":"vavada3-inkz.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"vavada3-inkz.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"vavada3-inkz.top","ip":{"addr":"104.21.84.140","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-09-08","domain_rank":0,"first_seen":"2026-09-11T10:18:24.078419Z","last_seen":"2026-09-11T10:18:24.078419Z","alert_count":32,"request_count":16,"received_data":334596,"sent_data":8602,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Gravatar","description":"Gravatar is a service for providing globally unique avatars.","website":"https://gravatar.com","common_platform_enumeration":"","icon":"Gravatar.png","categories":["Miscellaneous"]},{"name":"AMP","description":"AMP, originally created by Google, is an open-source HTML framework developed by the AMP open-source Project. AMP is designed to help webpages load faster.","website":"https://www.amp.dev","common_platform_enumeration":"","icon":"Accelerated-Mobile-Pages.svg","categories":["JavaScript frameworks"]}]},{"fqdn":"cdn.ampproject.org","ip":{"addr":"142.250.178.65","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2015-08-31","domain_rank":3289,"first_seen":"2015-10-09T04:27:01Z","last_seen":"2026-09-08T02:21:50.880385Z","alert_count":0,"request_count":5,"received_data":416587,"sent_data":2421,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"secure.gravatar.com","ip":{"addr":"192.0.73.2","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"domain_registered":"2004-07-15","domain_rank":16323,"first_seen":"2012-05-22T05:36:38Z","last_seen":"2026-09-08T17:59:19.789325Z","alert_count":0,"request_count":5,"received_data":9820,"sent_data":2935,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"vavada3-inkz.top/51220a3d-7b32-448b-b7d7-1b67ae1694a0","fqdn":"vavada3-inkz.top","domain":"vavada3-inkz.top","tld":"top"},"ip":{"addr":"104.21.84.140","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"","is_inline":false,"md5":"9b0e50a6838ca6ed0f69e16455e2e4d8","sha1":"bca05a1256c932b0772c1a036554a86e884c81ea","sha256":"3e809128662bc9ef24642d14fa740be213ef8b1404dde38d5110712c794ab41c","sha512":"a6afa855137c8f0b5e767fa8564ec5532f6b1c660cd2b025ec79864ae7bd28c730401f1fb2b8f0f8e695257ac8b181cb47c7f627bc9561cfd2aef0d082457406","ssdeep":"768:Rz0GxCxt2x8f9vD5JV1wAcz7PX7ywwJtFidG+9BuX75T28yl7UVmcyD/o4PHfEG:RAII+vuX75TxydUAcyDpPHJ","tlshash":"72330ab8b2a6a06e834350f4402f3009e67f2d6a744ac83cf635d9d56db4d9a81b7f35","size":52042,"data":"","first_seen":"2026-08-27T20:08:06.982816Z","last_seen":"2026-09-11T12:15:00.367455Z","times_seen":39,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.ampproject.org/rtv/012608131752000/v0/amp-auto-lightbox-0.1.js","fqdn":"cdn.ampproject.org","domain":"ampproject.org","tld":"org"},"ip":{"addr":"142.250.178.65","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"3f6cecb06196fedf1dc5c1f2b62452f2","sha1":"40623362e2c944c779f6cb22bf0ed33614092f9c","sha256":"d9f2a23aed96b04e277640598b3cc20c88432b11ebbad1cb6830c4e18ec1728b","sha512":"8127cd80ca3794c81818700de641545e15e687aeab24057d412c4b66f3f9856beae9817204f3744a8a83b7004806e22fc3b621eb38ee74c74de770d01b2be36b","ssdeep":"96:/KoAosPGpV3yMDc0jGAM+G0mj1hVXxSZ4tqSKN0OV0TjLRkiGj0ldmq43bDjHI:/KqswV3yv0jGAFCPX/tqKyWp4M0rDTI","tlshash":"bff196dc7ac2b83a5753b4b780af414fa23bb94620ad9120d120f0d83cb995ed633e5c","size":7798,"data":"","first_seen":"2026-08-27T02:29:06.993751Z","last_seen":"2026-09-11T12:15:00.302804Z","times_seen":193,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.ampproject.org/v0.js","fqdn":"cdn.ampproject.org","domain":"ampproject.org","tld":"org"},"ip":{"addr":"142.250.178.65","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"7a97c7f9bd1c9bc283d4fa7229eac9a5","sha1":"2f1e03cfa54ed1273f238d1dd29c789f38f31a85","sha256":"8829f20e39153e59529590c5bd33e322d0047402a975d79bca976595e220d0e5","sha512":"d1acb22d2735e373d0e4b9f0a123322f91c3410548e7d72220d9d895da804f94f0aaeacfa2c4bf069ce1bcf5cf42012646e5811e087bbde88af15d0311402171","ssdeep":"6144:1mUSltOu6O7eHkarAYXX3aerh5nbAHXv4:kPikaUArPnbAH/4","tlshash":"5654949db246b0724793b074803f150ae33ba955644a812cf56dead67cbcd8aa037f7c","size":284578,"data":"","first_seen":"2026-08-27T02:29:06.998096Z","last_seen":"2026-09-11T12:15:00.251617Z","times_seen":213,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.ampproject.org/v0/amp-bind-latest.js","fqdn":"cdn.ampproject.org","domain":"ampproject.org","tld":"org"},"ip":{"addr":"142.250.178.65","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"aaf12f529684741da0445e5a3f001575","sha1":"bf5e064bf6eaded5162cae3177c91ce8011d0392","sha256":"9bdde2bcef71d14162962f2204a91b6ba0edea45b24a3e5681a7bbd3624dde71","sha512":"911674373e7754c576b6de2b551f5b841e44e9eaf5b0ea06ceff7b4566789e6d128af26f8f4a3b96a3972ef31d5601556476765dd8a0ab259db48166a2061614","ssdeep":"768:kOCpy2qXDz7pegZVUjIqS8vnCJW3fpyE25Q9Ywc:kY2qXDz7pe8VUjIjkCJKpyC7c","tlshash":"5c33b599f292b07647936475813f600ae33f3959600fc524e06ae9c2bcb9d59a277f3c","size":51560,"data":"","first_seen":"2026-08-27T20:08:06.840325Z","last_seen":"2026-09-11T12:15:00.278549Z","times_seen":39,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.ampproject.org/rtv/012608131752000/v0/amp-loader-0.1.js","fqdn":"cdn.ampproject.org","domain":"ampproject.org","tld":"org"},"ip":{"addr":"142.250.178.65","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"29a9ffc92cff2b8ce134c2b286a315d4","sha1":"30d88681d5bf4ac25195905670c04defb2537ff1","sha256":"3bf3d119bd059ea12070169cf17adbbf4f4a90091b0c175df836e71debe5f451","sha512":"0d279c9bd160ba7f9f22d2d2d3eaaaee56e4244b03cd79a3713f5aeb7fbcf0a8439e2fe5d4ce0ea5abc0fbc2f3065644d19d54dad3b0b6aba58ae5a36dd6dc7f","ssdeep":"192:5fQHMOgzKBbnnRrVG4oPPaorO2tHnBAHzMb5F4g5A4WR2vN:l0g2BbnnHOBMzMb5F4g5A4WR2vN","tlshash":"a142a424a54ba2ac130351b484fab906757ecd4fb8104035f0018edecf99e48bd7ba6e","size":12715,"data":"","first_seen":"2026-08-27T02:29:06.990958Z","last_seen":"2026-09-11T12:15:00.321672Z","times_seen":191,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":[{"level":"info","text":"Powered by AMP ⚡ HTML – Version 2608131752000https://vavada3-inkz.top/","filename":"https://cdn.ampproject.org/v0.js","line_number":2,"column_number":283307}]},"http":[{"url":{"schema":"https","addr":"vavada3-inkz.top/media/2018/12/book-of-ra-deluxe-1-218x145.jpg","fqdn":"vavada3-inkz.top","domain":"vavada3-inkz.top","tld":"top"},"ip":{"addr":"104.21.84.140","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vavada3-inkz.top/","date":"2026-09-11T10:17:46.576Z","timestamp":1789121866576,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vavada3-inkz.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 08 Sep 2026 20:57:27 GMT","end":"Mon, 07 Dec 2026 21:56:06 GMT"},"fingerprint":{"sha1":"33:E8:D0:28:E1:C9:3C:2F:7B:25:AF:60:7C:59:57:2C:DF:C7:8C:0A","sha256":"6B:25:F5:8C:E5:92:7E:2F:E2:5D:18:13:0E:94:F7:F0:74:5A:5D:DF:60:CC:08:8C:5F:7B:40:CF:E3:28:56:F4"}}},"request":{"raw":"GET /media/2018/12/book-of-ra-deluxe-1-218x145.jpg HTTP/1.1\r\nHost: vavada3-inkz.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://vavada3-inkz.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 11 Sep 2026 10:17:46 GMT\r\ncontent-type: image/jpeg\r\nserver-timing: cfExtPri\r\nlast-modified: Fri, 22 Aug 2025 13:11:41 GMT\r\npriority: u=4,i\r\netag: \"68a86c8d-1d22\"\r\nexpires: Wed, 10 Mar 2027 10:10:38 GMT\r\ncache-control: max-age=15552000\r\naccept-ranges: bytes\r\nage: 428\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZNDJgxlgCY07Jj1w2UYj2hSZ5zQBer%2BFs58Hhyih06utm9RuBBuL605vi5wcRll4u0gur7KGM%2BwaTXi%2FfpnhowDY4gTfyJJQr7CL1oaAB%2BSLVDshjFXIaGDOzsdkgyNrvlCv\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a395ecb21f2d4e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 7458\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7458,"size_decoded":8199,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 218x145, components 3","md5":"f2bfa7268a0ef7fd680e3263e1b74c65","sha1":"eadd436811a588e23f9d2a54f5d35a5db76db867","sha256":"66f42e8554cfefcee07f9c574e46dcc6ab54d265068d311484647589d252f8b8","sha512":"33f205b905eaead8e416e678f5bc5091d02b36315b6dda8cc933ccdce6f446c03fd91c801acbb95b344de4fe90e6a891955ef9f0266aebabced1019d7fa2eddb","ssdeep":"192:MvqouPDXcJ+v3z5ixn9Ni5uNdCEoOjvQcbwsQhPT2Nr3:ZoubMJ+b04OQc0hQ","tlshash":"3df1bf505b186849d0724fbaf897340e6f29f614572757bb3a34ec8151b43c1ec2abb8","first_seen":"2026-09-11T10:11:15.627457Z","last_seen":"2026-09-11T10:18:27.312425Z","times_seen":2,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-11","alert":"Phishing Block","trigger":"vavada3-inkz.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"vavada3-inkz.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vavada3-inkz.top/media/2018/12/ultra-hot-1-218x145.jpg","fqdn":"vavada3-inkz.top","domain":"vavada3-inkz.top","tld":"top"},"ip":{"addr":"104.21.84.140","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vavada3-inkz.top/","date":"2026-09-11T10:17:46.580Z","timestamp":1789121866580,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vavada3-inkz.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 08 Sep 2026 20:57:27 GMT","end":"Mon, 07 Dec 2026 21:56:06 GMT"},"fingerprint":{"sha1":"33:E8:D0:28:E1:C9:3C:2F:7B:25:AF:60:7C:59:57:2C:DF:C7:8C:0A","sha256":"6B:25:F5:8C:E5:92:7E:2F:E2:5D:18:13:0E:94:F7:F0:74:5A:5D:DF:60:CC:08:8C:5F:7B:40:CF:E3:28:56:F4"}}},"request":{"raw":"GET /media/2018/12/ultra-hot-1-218x145.jpg HTTP/1.1\r\nHost: vavada3-inkz.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://vavada3-inkz.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 11 Sep 2026 10:17:46 GMT\r\ncontent-type: image/jpeg\r\nserver-timing: cfExtPri\r\nlast-modified: Fri, 22 Aug 2025 10:08:45 GMT\r\npriority: u=4,i\r\netag: \"68a841ad-21c0\"\r\nexpires: Wed, 10 Mar 2027 10:10:38 GMT\r\ncache-control: max-age=15552000\r\naccept-ranges: bytes\r\nage: 428\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vQby%2BCNx71FbHmGh49AAYLQigT5S9pyUBjObVn5rzbIb%2BJXG%2FMPjHkkj2KkpiKDJLnkG7q7Yea%2BUfcUPDTKEvM%2F1C6EoOoTue6gEpYmvqF7LT2cimgn1LRvNvUOLLIuwo0Vb\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a395ecb21f334e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 8640\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8640,"size_decoded":9383,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 218x145, components 3","md5":"2d77b150a2cc69c3c7ff064892ec5e5e","sha1":"1ddb9e9b97f82460d1f9af9925f7baac261341fb","sha256":"a1de7c6f900a61ea5962551fbeb078769fa2d08d8523e8369a2eaa8273139580","sha512":"ce5beb160b8609ed99acd0f598e8525472a99c495783a18f6abe36e42fb6e47835004803cd0aa2bd87aa54cd3f2e45831f7e88360f34615618c07466a2072191","ssdeep":"192:MhsYGh7d8lFwFEPEzjJZ49yUg0zutbucQ93EgDTX9qsiCwCu0:0PGhWFwSEzjJ+MU9gbucWZTBLwCu0","tlshash":"7f02bf125b072ec3d4621c7ec22de5b8f4814e1a975853291331dabf9e5e2f89bc572c","first_seen":"2026-09-11T10:11:15.64513Z","last_seen":"2026-09-11T10:18:27.313215Z","times_seen":2,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"vavada3-inkz.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-11","alert":"Phishing Block","trigger":"vavada3-inkz.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vavada3-inkz.top/media/2018/12/pharaohs-gold-III-1-218x145.jpg","fqdn":"vavada3-inkz.top","domain":"vavada3-inkz.top","tld":"top"},"ip":{"addr":"104.21.84.140","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vavada3-inkz.top/","date":"2026-09-11T10:17:46.585Z","timestamp":1789121866585,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vavada3-inkz.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 08 Sep 2026 20:57:27 GMT","end":"Mon, 07 Dec 2026 21:56:06 GMT"},"fingerprint":{"sha1":"33:E8:D0:28:E1:C9:3C:2F:7B:25:AF:60:7C:59:57:2C:DF:C7:8C:0A","sha256":"6B:25:F5:8C:E5:92:7E:2F:E2:5D:18:13:0E:94:F7:F0:74:5A:5D:DF:60:CC:08:8C:5F:7B:40:CF:E3:28:56:F4"}}},"request":{"raw":"GET /media/2018/12/pharaohs-gold-III-1-218x145.jpg HTTP/1.1\r\nHost: vavada3-inkz.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://vavada3-inkz.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 11 Sep 2026 10:17:46 GMT\r\ncontent-type: image/jpeg\r\nserver-timing: cfExtPri\r\nlast-modified: Fri, 22 Aug 2025 10:04:04 GMT\r\npriority: u=4,i\r\netag: \"68a84094-2a33\"\r\nexpires: Wed, 10 Mar 2027 10:10:38 GMT\r\ncache-control: max-age=15552000\r\naccept-ranges: bytes\r\nage: 428\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4HehMPQaC4fQ7lx5x6Q7zCJLeHp80onfZR5OqgOyfKah9bFMaiCGMIOFek1gJHEUvl01mo7ELeqAHrJly2VPlxWF1nCOq2VHYh5s%2FviUna2OcAX7r0hVF4zfXzD5QUMy%2BKAj\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a395ecb22f3e4e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 10803\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10803,"size_decoded":11541,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 218x145, components 3","md5":"c4b593146394739e00f219065526803f","sha1":"ca40139d8e4b1f64b24bba5772f2f9fa92be4966","sha256":"04110dd31837118b03ade771ac7547323141d95d8ab8af40d1471f454d623698","sha512":"b9bf893786bb3504b7de647229788ac7aeb389e1aec7af33c88b2d66c476b877eb909a003286aa036156ab14705f6ec334f268e00619d0bc757d763638c8b1c4","ssdeep":"192:MsfW0cUJ1yizTtjz8z8Z24dH7wZj7wu3xGq9PDXPDbI2lC0RzL:BO0c+17tjmRY70j/3zRDnI2l5dL","tlshash":"e722bf07bb0df613c62f0eb7633f5f60a6583168c3610506ba34eeb826307d95647ba8","first_seen":"2026-09-11T10:11:15.608851Z","last_seen":"2026-09-11T10:18:27.313961Z","times_seen":2,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-11","alert":"Phishing Block","trigger":"vavada3-inkz.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"vavada3-inkz.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vavada3-inkz.top/media/2018/12/pharaohs-gold-II-1-218x145.jpg","fqdn":"vavada3-inkz.top","domain":"vavada3-inkz.top","tld":"top"},"ip":{"addr":"104.21.84.140","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vavada3-inkz.top/","date":"2026-09-11T10:17:46.587Z","timestamp":1789121866587,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vavada3-inkz.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 08 Sep 2026 20:57:27 GMT","end":"Mon, 07 Dec 2026 21:56:06 GMT"},"fingerprint":{"sha1":"33:E8:D0:28:E1:C9:3C:2F:7B:25:AF:60:7C:59:57:2C:DF:C7:8C:0A","sha256":"6B:25:F5:8C:E5:92:7E:2F:E2:5D:18:13:0E:94:F7:F0:74:5A:5D:DF:60:CC:08:8C:5F:7B:40:CF:E3:28:56:F4"}}},"request":{"raw":"GET /media/2018/12/pharaohs-gold-II-1-218x145.jpg HTTP/1.1\r\nHost: vavada3-inkz.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://vavada3-inkz.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 11 Sep 2026 10:17:46 GMT\r\ncontent-type: image/jpeg\r\nserver-timing: cfExtPri\r\nlast-modified: Fri, 22 Aug 2025 10:05:44 GMT\r\npriority: u=4,i\r\netag: \"68a840f8-2de3\"\r\nexpires: Wed, 10 Mar 2027 10:10:38 GMT\r\ncache-control: max-age=15552000\r\naccept-ranges: bytes\r\nage: 428\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NO6ZwYM7rm7gooWh%2B%2F7xFW8GB9fLtOlAJOQUZetg3hobrW%2FCoUTSBdQUpaHQ6Hd7HL%2B7RII3pfbjg5MQiVFPnnBtEzxFt94IXMNsuaEGIYxotm%2B16xR3%2Bm152WBWoBv8rxDX\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a395ecb22f414e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 11747\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11747,"size_decoded":12493,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 218x145, components 3","md5":"96bfb75e8f4f9b89473ed62d2a13da15","sha1":"0059dddef5ed1fb1d27d1f8d06410c2f00d297dc","sha256":"f33ca1ccc367215d54e964ba882cdba08f9206750b9041c7076839500d2e040e","sha512":"d82568b731d145f9134d58493f8464db1b3a152d3272c5fb71c840ecbfeb640008e6ef5a2ea33ad612425f79fdd1dd3821d8c747c608bcf9b2fdc875947577e2","ssdeep":"192:Mv7tAehC57Ff8iq2VqmXYIHVXPHqfJU8/wonNM1D8CE30ZtxVgXwdSzjR:87yehC57FELmX7HtKRUO8tx6wcV","tlshash":"8332be0e3f87e763db93cd70281e53711c1bab31520a5cb74b79d40ca968de6a9d12d1","first_seen":"2026-09-11T10:11:15.610775Z","last_seen":"2026-09-11T10:18:27.314636Z","times_seen":2,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"vavada3-inkz.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-11","alert":"Phishing Block","trigger":"vavada3-inkz.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vavada3-inkz.top/media/2018/12/crazy-monkey-2-1-218x145.jpg","fqdn":"vavada3-inkz.top","domain":"vavada3-inkz.top","tld":"top"},"ip":{"addr":"104.21.84.140","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vavada3-inkz.top/","date":"2026-09-11T10:17:46.592Z","timestamp":1789121866592,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vavada3-inkz.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 08 Sep 2026 20:57:27 GMT","end":"Mon, 07 Dec 2026 21:56:06 GMT"},"fingerprint":{"sha1":"33:E8:D0:28:E1:C9:3C:2F:7B:25:AF:60:7C:59:57:2C:DF:C7:8C:0A","sha256":"6B:25:F5:8C:E5:92:7E:2F:E2:5D:18:13:0E:94:F7:F0:74:5A:5D:DF:60:CC:08:8C:5F:7B:40:CF:E3:28:56:F4"}}},"request":{"raw":"GET /media/2018/12/crazy-monkey-2-1-218x145.jpg HTTP/1.1\r\nHost: vavada3-inkz.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://vavada3-inkz.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 11 Sep 2026 10:17:46 GMT\r\ncontent-type: image/jpeg\r\nserver-timing: cfExtPri\r\nlast-modified: Fri, 22 Aug 2025 10:08:30 GMT\r\npriority: u=4,i\r\netag: \"68a8419e-3014\"\r\nexpires: Wed, 10 Mar 2027 10:10:38 GMT\r\ncache-control: max-age=15552000\r\naccept-ranges: bytes\r\nage: 428\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tN1Y%2Be2o8AYQZOe02G8SiWqkIGP12kR8UQO47QO3TKMKLDEca7nT0JSHhpb7fmUuoYBQ1ArZlwJHt5MF2TVpVbYr%2BccudFmLELwop55RDE8fCADtlGVyG1O2DR2n8IUtd0sd\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a395ecb23f554e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 12308\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12308,"size_decoded":13046,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 218x145, components 3","md5":"6d9c8a5d45058f7e433c1ee37e335af0","sha1":"c37a8b3dc94a0e1d2cfa1d0dd4d89c4714ed8ee0","sha256":"b635864c306dd602849c2d3f07e619952b3c84f2464d8b9297b319ed96d0e011","sha512":"bfd6d8060620eda71fca1f509493f8637aff2ac69ad470c9a714869e03ffde067805a26c3007e79c66a1372204f6c6526cb3b585be7f96eb583a0ea1e182cf7e","ssdeep":"384:vZTGK6iRx2Xx6zOGmosvSefJU3264EHMKpAaeL:vZTGiRk2OVtvSefiL4EHALL","tlshash":"3c42d180abce9c4de5514e3c9f6598015ec1fe44c7971a0be0bac4b4e04f2d4d0d9af1","first_seen":"2026-09-11T10:11:15.635295Z","last_seen":"2026-09-11T10:18:27.315259Z","times_seen":2,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"vavada3-inkz.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-11","alert":"Phishing Block","trigger":"vavada3-inkz.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.ampproject.org/rtv/012608131752000/ww.js","fqdn":"cdn.ampproject.org","domain":"ampproject.org","tld":"org"},"ip":{"addr":"142.250.178.65","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://vavada3-inkz.top/","date":"2026-09-11T10:17:46.623Z","timestamp":1789121866623,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"misc-sni.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:38:16 GMT","end":"Mon, 02 Nov 2026 08:38:15 GMT"},"fingerprint":{"sha1":"AE:D6:10:E9:DB:A2:42:50:C0:20:C4:C1:09:2D:9F:96:AF:F9:86:49","sha256":"EE:D8:87:FA:17:4F:B1:29:17:91:8C:1F:96:8C:D7:E8:8B:2B:2B:80:80:30:E8:2B:2D:DB:57:D8:19:0F:F8:CC"}}},"request":{"raw":"GET /rtv/012608131752000/ww.js HTTP/1.1\r\nHost: cdn.ampproject.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/plain\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://vavada3-inkz.top/\r\nOrigin: https://vavada3-inkz.top\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\ncontent-encoding: br\r\naccess-control-allow-origin: *\r\ncontent-security-policy: default-src * blob: data:; script-src blob: https://cdn.ampproject.org/lts/ https://cdn.ampproject.org/rtv/ https://cdn.ampproject.org/sw/ https://cdn.ampproject.org/v0.js https://cdn.ampproject.org/v0.mjs https://cdn.ampproject.org/v0/ https://cdn.ampproject.org/viewer/; object-src 'none'; style-src 'unsafe-inline' https://cdn.ampproject.org/rtv/ https://cdn.materialdesignicons.com https://cdnjs.cloudflare.com/ajax/libs/font-awesome/ https://cloud.typography.com https://fast.fonts.net https://fonts.googleapis.com https://maxcdn.bootstrapcdn.com https://p.typekit.net https://pro.fontawesome.com https://use.fontawesome.com https://use.typekit.net; report-uri https://csp.withgoogle.com/csp/amp\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"amphtml-china-available\"\r\nreport-to: {\"group\":\"amphtml-china-available\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/amphtml-china-available\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 14438\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 05 Sep 2026 03:16:06 GMT\r\nexpires: Sun, 05 Sep 2027 03:16:06 GMT\r\ncache-control: public, max-age=31536000\r\netag: \"1bafa8cbdc472c68\"\r\ncontent-type: text/javascript; charset=UTF-8\r\nvary: Accept-Encoding\r\nage: 543700\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":51975,"size_decoded":16016,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (51862)","md5":"8f0281632810ba084636ece1e88c4e92","sha1":"16f38619ac89c9a2fe43f7c6cd5eec22f2a76e1a","sha256":"72a6656ce922a742f6396fbe5d945b82a485ba5de737dd0ce552ad0a39326c84","sha512":"01f0e4d4bfefa5cf346953965d31405752b8c62cfe73a75555cc5088de5e05cb23ae0ed3ebea7dca02c74802d2c17a55502893096bc364d72a2894ecf7395833","ssdeep":"768:Rz0GxCxt2x8f9vD5JV1wAcz7PX7ywwJtFidG+9BuX75T28yl7UVmcyD/o4PHfG:RAII+vuX75TxydUAcyDpPHe","tlshash":"da330ab8b2a6a06e834350f4402f3009e67f2d6a744ac83cf635d9d56db4d9a81b7f35","first_seen":"2026-08-27T20:08:06.902423Z","last_seen":"2026-09-11T12:15:00.287404Z","times_seen":39,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vavada3-inkz.top/wp-content/plugins/accelerated-mobile-pages/templates/design-manager/swift/fonts/icomoon.ttf","fqdn":"vavada3-inkz.top","domain":"vavada3-inkz.top","tld":"top"},"ip":{"addr":"104.21.84.140","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://vavada3-inkz.top/","date":"2026-09-11T10:17:46.258Z","timestamp":1789121866258,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vavada3-inkz.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 08 Sep 2026 20:57:27 GMT","end":"Mon, 07 Dec 2026 21:56:06 GMT"},"fingerprint":{"sha1":"33:E8:D0:28:E1:C9:3C:2F:7B:25:AF:60:7C:59:57:2C:DF:C7:8C:0A","sha256":"6B:25:F5:8C:E5:92:7E:2F:E2:5D:18:13:0E:94:F7:F0:74:5A:5D:DF:60:CC:08:8C:5F:7B:40:CF:E3:28:56:F4"}}},"request":{"raw":"GET /wp-content/plugins/accelerated-mobile-pages/templates/design-manager/swift/fonts/icomoon.ttf HTTP/1.1\r\nHost: vavada3-inkz.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://vavada3-inkz.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 11 Sep 2026 10:17:46 GMT\r\ncontent-type: font/ttf\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=u1men9xz%2FWzDDH0jycrLjfK2%2FcUu%2B2Njm8j%2FjkAl4F2b4c4YR6rM8LsfOpXzoH%2F4QGw7eEyUWS%2FPogIr%2BD7HDhUkfXgrhr3F2DNrrkjsFlJp45qV3daZV1YS%2FjCRT9Pa0zUa\"}]}\r\npriority: u=2,i=?0\r\nlast-modified: Tue, 06 Aug 2024 09:28:29 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"1d1d4-61f006a96e940\"\r\nage: 428\r\ncache-control: max-age=2678400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a395ecb01ecb4e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":119252,"size_decoded":60574,"mime_type":"font/ttf","magic":"TrueType Font data, 11 tables, 1st \"OS/2\", 14 names, Macintosh, type 1 string, icomoon    ","md5":"aff324aa50b50c4bb7f35f8630358ea1","sha1":"ebe67ea209b696c051279d375f4e543552f9a1bd","sha256":"30e5d95572f44e8f0bf3bd87e7320c65e1d58bd05d332a2d6dc288b5aa54454e","sha512":"debb1b2d713ef6ece6a13409ab070e6b9100aad75a099010a06e904ba70188c00c13d167964119b9219d1aad63cbe0fe537ca9b34f0913bee80fb0e743e81d62","ssdeep":"3072:SRhOqFBl8NZ/32JZClTTKMIj2ibfJ/p+KxFszxui8A75NhoWRgFxhrOP:ST0lTKJ2iVExV8ATHaxhrOP","tlshash":"9cc33a23dba7de4ec5278bfb492211a04dcd9d21d63f478663853c15fc6e4f48d88a89","first_seen":"2023-05-29T14:33:18Z","last_seen":"2026-09-11T10:18:27.316599Z","times_seen":194,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"vavada3-inkz.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-11","alert":"Phishing Block","trigger":"vavada3-inkz.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.ampproject.org/rtv/012608131752000/v0/amp-loader-0.1.js","fqdn":"cdn.ampproject.org","domain":"ampproject.org","tld":"org"},"ip":{"addr":"142.250.178.65","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://vavada3-inkz.top/","date":"2026-09-11T10:17:46.544Z","timestamp":1789121866544,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"misc-sni.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:38:16 GMT","end":"Mon, 02 Nov 2026 08:38:15 GMT"},"fingerprint":{"sha1":"AE:D6:10:E9:DB:A2:42:50:C0:20:C4:C1:09:2D:9F:96:AF:F9:86:49","sha256":"EE:D8:87:FA:17:4F:B1:29:17:91:8C:1F:96:8C:D7:E8:8B:2B:2B:80:80:30:E8:2B:2D:DB:57:D8:19:0F:F8:CC"}}},"request":{"raw":"GET /rtv/012608131752000/v0/amp-loader-0.1.js HTTP/1.1\r\nHost: cdn.ampproject.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://vavada3-inkz.top\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://vavada3-inkz.top/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\ncontent-encoding: br\r\naccess-control-allow-origin: *\r\ncontent-security-policy: default-src * blob: data:; script-src blob: https://cdn.ampproject.org/lts/ https://cdn.ampproject.org/rtv/ https://cdn.ampproject.org/sw/ https://cdn.ampproject.org/v0.js https://cdn.ampproject.org/v0.mjs https://cdn.ampproject.org/v0/ https://cdn.ampproject.org/viewer/; object-src 'none'; style-src 'unsafe-inline' https://cdn.ampproject.org/rtv/ https://cdn.materialdesignicons.com https://cdnjs.cloudflare.com/ajax/libs/font-awesome/ https://cloud.typography.com https://fast.fonts.net https://fonts.googleapis.com https://maxcdn.bootstrapcdn.com https://p.typekit.net https://pro.fontawesome.com https://use.fontawesome.com https://use.typekit.net; report-uri https://csp.withgoogle.com/csp/amp\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"amphtml-china-available\"\r\nreport-to: {\"group\":\"amphtml-china-available\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/amphtml-china-available\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 3927\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 09 Sep 2026 23:12:15 GMT\r\nexpires: Thu, 09 Sep 2027 23:12:15 GMT\r\ncache-control: public, max-age=31536000\r\nage: 126331\r\netag: \"95eaf7f7c94c8366\"\r\ncontent-type: text/javascript; charset=UTF-8\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":12715,"size_decoded":5504,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (12600)","md5":"29a9ffc92cff2b8ce134c2b286a315d4","sha1":"30d88681d5bf4ac25195905670c04defb2537ff1","sha256":"3bf3d119bd059ea12070169cf17adbbf4f4a90091b0c175df836e71debe5f451","sha512":"0d279c9bd160ba7f9f22d2d2d3eaaaee56e4244b03cd79a3713f5aeb7fbcf0a8439e2fe5d4ce0ea5abc0fbc2f3065644d19d54dad3b0b6aba58ae5a36dd6dc7f","ssdeep":"192:5fQHMOgzKBbnnRrVG4oPPaorO2tHnBAHzMb5F4g5A4WR2vN:l0g2BbnnHOBMzMb5F4g5A4WR2vN","tlshash":"a142a424a54ba2ac130351b484fab906757ecd4fb8104035f0018edecf99e48bd7ba6e","first_seen":"2026-08-27T02:29:06.990958Z","last_seen":"2026-09-11T12:15:00.321672Z","times_seen":191,"resource_available":true,"data":null}},"time_used":55,"timings":{"blocked":-1,"dns":0,"connect":38,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vavada3-inkz.top/media/2018/12/ultra-hot-deluxe-1-218x145.jpg","fqdn":"vavada3-inkz.top","domain":"vavada3-inkz.top","tld":"top"},"ip":{"addr":"104.21.84.140","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vavada3-inkz.top/","date":"2026-09-11T10:17:46.575Z","timestamp":1789121866575,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vavada3-inkz.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 08 Sep 2026 20:57:27 GMT","end":"Mon, 07 Dec 2026 21:56:06 GMT"},"fingerprint":{"sha1":"33:E8:D0:28:E1:C9:3C:2F:7B:25:AF:60:7C:59:57:2C:DF:C7:8C:0A","sha256":"6B:25:F5:8C:E5:92:7E:2F:E2:5D:18:13:0E:94:F7:F0:74:5A:5D:DF:60:CC:08:8C:5F:7B:40:CF:E3:28:56:F4"}}},"request":{"raw":"GET /media/2018/12/ultra-hot-deluxe-1-218x145.jpg HTTP/1.1\r\nHost: vavada3-inkz.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://vavada3-inkz.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 11 Sep 2026 10:17:46 GMT\r\ncontent-type: image/jpeg\r\nserver-timing: cfExtPri\r\nlast-modified: Fri, 22 Aug 2025 10:04:53 GMT\r\npriority: u=4,i\r\netag: \"68a840c5-269d\"\r\nexpires: Wed, 10 Mar 2027 10:10:38 GMT\r\ncache-control: max-age=15552000\r\naccept-ranges: bytes\r\nage: 428\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FvruH23S15lg1vqVBPprVAk%2BAlJNErW0u%2FisYUjgDlmsbLysSOaBRlo0exQTPV3hR%2Bd9hLaet9idxZedWaZt9Dz3ufH%2FII7mlGnnD5U%2BxwshuCUUp2MEkr1zPDpdWN7ibPHo\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a395ecb21f2c4e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 9885\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9885,"size_decoded":10628,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 218x145, components 3","md5":"e72e43837d495cef537327f9ff8293a8","sha1":"70013a99ee89640277bc81b1998f89b82e2e4a14","sha256":"a2e16f7d7e6c458afd0200a5e435faaae81b75ee7cdbec0e68fdd3353b549515","sha512":"1b9ceea9a98431ab61640867ea576625ab67f0e7422e8ddbb8f319586b7c62ad6b3da00b22682dda654bf7067fa23633c564763ccd27b5beef4f16955c53e3c4","ssdeep":"192:MmCO9vMYqkAAH1QJzwclGTs816jRnzNK9XkHhxxM2mQlAgyl0QwMqSArklzz0/C:RN9tV4zbgP16jRnz+0pM2oaMs+zmC","tlshash":"2612af7453b1e5dde1e42e38a4ae61204c90fe79737467a25c76e3112de80cae9e12e3","first_seen":"2026-09-11T10:11:15.643642Z","last_seen":"2026-09-11T10:18:27.317581Z","times_seen":2,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-11","alert":"Phishing Block","trigger":"vavada3-inkz.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"vavada3-inkz.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vavada3-inkz.top/media/2018/12/unicorn-magic-1-218x145.jpg","fqdn":"vavada3-inkz.top","domain":"vavada3-inkz.top","tld":"top"},"ip":{"addr":"104.21.84.140","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vavada3-inkz.top/","date":"2026-09-11T10:17:46.589Z","timestamp":1789121866589,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vavada3-inkz.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 08 Sep 2026 20:57:27 GMT","end":"Mon, 07 Dec 2026 21:56:06 GMT"},"fingerprint":{"sha1":"33:E8:D0:28:E1:C9:3C:2F:7B:25:AF:60:7C:59:57:2C:DF:C7:8C:0A","sha256":"6B:25:F5:8C:E5:92:7E:2F:E2:5D:18:13:0E:94:F7:F0:74:5A:5D:DF:60:CC:08:8C:5F:7B:40:CF:E3:28:56:F4"}}},"request":{"raw":"GET /media/2018/12/unicorn-magic-1-218x145.jpg HTTP/1.1\r\nHost: vavada3-inkz.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://vavada3-inkz.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 11 Sep 2026 10:17:46 GMT\r\ncontent-type: image/jpeg\r\nserver-timing: cfExtPri\r\nlast-modified: Fri, 22 Aug 2025 10:04:33 GMT\r\npriority: u=4,i\r\netag: \"68a840b1-3234\"\r\nexpires: Wed, 10 Mar 2027 10:10:38 GMT\r\ncache-control: max-age=15552000\r\naccept-ranges: bytes\r\nage: 428\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oV2axO5Q43Fxnxt9pbcyvBIulDxoJPPCD4Fy5O3oAc%2Fga%2F3txME%2BSnYkJP7bNr9W7pdvLceW9gVkcihFG%2Fz%2FpsNWayXtE36tbmyoOOQVoxVoSph2NGwl3gNqQBSr9npr6oMT\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a395ecb22f474e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 12852\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12852,"size_decoded":13596,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 218x145, components 3","md5":"54886a2cebe26188bf8b0f5333943fb0","sha1":"8b7ea589480c4b1d1bdafbd339cd5c81b752353f","sha256":"0a7ac19f556241c7d831c05cb7d9845234fbf742d213e196834acfed618c7e53","sha512":"4bec880426976c073725384f8ea0b01746cf3fe2e33bf22c2672e373169883f722e966f31b6738fdef5e92ee608ada61c8cfb6dfda911cf0f47f746459ff61f0","ssdeep":"384:lLkKHF5/F2drWRhgt8QfsS/wSKHvh0Sp0nd:lLk8DqrahgKYRzKHTW","tlshash":"ff42c037e1c3c8a2d84a3c34d7403a7e530ddf595d53d34948b5de8aa2ba8dc6906b5c","first_seen":"2026-09-11T10:11:15.639385Z","last_seen":"2026-09-11T10:18:27.3183Z","times_seen":2,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"vavada3-inkz.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-11","alert":"Phishing Block","trigger":"vavada3-inkz.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vavada3-inkz.top/media/2018/12/lucky-ladys-charm-1-218x145.jpg","fqdn":"vavada3-inkz.top","domain":"vavada3-inkz.top","tld":"top"},"ip":{"addr":"104.21.84.140","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vavada3-inkz.top/","date":"2026-09-11T10:17:46.590Z","timestamp":1789121866590,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vavada3-inkz.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 08 Sep 2026 20:57:27 GMT","end":"Mon, 07 Dec 2026 21:56:06 GMT"},"fingerprint":{"sha1":"33:E8:D0:28:E1:C9:3C:2F:7B:25:AF:60:7C:59:57:2C:DF:C7:8C:0A","sha256":"6B:25:F5:8C:E5:92:7E:2F:E2:5D:18:13:0E:94:F7:F0:74:5A:5D:DF:60:CC:08:8C:5F:7B:40:CF:E3:28:56:F4"}}},"request":{"raw":"GET /media/2018/12/lucky-ladys-charm-1-218x145.jpg HTTP/1.1\r\nHost: vavada3-inkz.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://vavada3-inkz.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 11 Sep 2026 10:17:46 GMT\r\ncontent-type: image/jpeg\r\nserver-timing: cfExtPri\r\nlast-modified: Fri, 22 Aug 2025 10:07:59 GMT\r\npriority: u=4,i\r\netag: \"68a8417f-2632\"\r\nexpires: Wed, 10 Mar 2027 10:10:38 GMT\r\ncache-control: max-age=15552000\r\naccept-ranges: bytes\r\nage: 428\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=C3qbyGLKypKmjfdDhc3%2F3cK5bOFs8I7vfYCqsf4UFXpW4Oa%2BiCFOO1aa9SSdbOkEUfQpyJvqcKIetvKWIyRAhyZTmvUvkSjs%2BXmqiZimcHmTkBX97Opb7KRAgyLtrX5URCUW\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a395ecb22f4d4e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 9778\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9778,"size_decoded":10517,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 218x145, components 3","md5":"f2c04482f707f7cc3c5986c05b854eb3","sha1":"977c74efc2dbf2bafb9b5f581f63c19c7a77c057","sha256":"cf400fc852211dfbe5c0d5f4ed603c4ea905cb12f74306f6d8b111d57db7efe7","sha512":"64b5470f773046a28013a82d6e642324865b9e1968707cf718e357e2f2c149d6bdb4646e8e7fe90600b9dbe61f4fb07b3f479d783223279d53f91b7cd1341c6c","ssdeep":"192:Mhx01BL1LUoSkZ33ezPcioiMSxMBj6JMo8c1qHJqLT6ipQVL4T1Fwv:P1LGc3ezPTKeW6+oz1i036iG8Fwv","tlshash":"ac12bfa6c381e006ce296d7e0c01bd16bda9fd36de5883c96c79d98115609e08c617fc","first_seen":"2026-09-11T10:11:15.641438Z","last_seen":"2026-09-11T10:18:27.318961Z","times_seen":2,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"vavada3-inkz.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-11","alert":"Phishing Block","trigger":"vavada3-inkz.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vavada3-inkz.top/media/2018/12/crazy-monkey-1-218x145.jpg","fqdn":"vavada3-inkz.top","domain":"vavada3-inkz.top","tld":"top"},"ip":{"addr":"104.21.84.140","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vavada3-inkz.top/","date":"2026-09-11T10:17:46.591Z","timestamp":1789121866591,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vavada3-inkz.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 08 Sep 2026 20:57:27 GMT","end":"Mon, 07 Dec 2026 21:56:06 GMT"},"fingerprint":{"sha1":"33:E8:D0:28:E1:C9:3C:2F:7B:25:AF:60:7C:59:57:2C:DF:C7:8C:0A","sha256":"6B:25:F5:8C:E5:92:7E:2F:E2:5D:18:13:0E:94:F7:F0:74:5A:5D:DF:60:CC:08:8C:5F:7B:40:CF:E3:28:56:F4"}}},"request":{"raw":"GET /media/2018/12/crazy-monkey-1-218x145.jpg HTTP/1.1\r\nHost: vavada3-inkz.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://vavada3-inkz.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 11 Sep 2026 10:17:46 GMT\r\ncontent-type: image/jpeg\r\nserver-timing: cfExtPri\r\nlast-modified: Fri, 22 Aug 2025 10:05:29 GMT\r\npriority: u=4,i\r\netag: \"68a840e9-2eb9\"\r\nexpires: Wed, 10 Mar 2027 10:10:38 GMT\r\ncache-control: max-age=15552000\r\naccept-ranges: bytes\r\nage: 428\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Y%2Bc5js%2F2ZVtcx0tZncTZIhiXq92%2FcTTjuMGB198W6nxQtxqOCJMT0R7szsIC%2BaEfp%2F%2Fdmx4BWhZ7T1xHUCezE3k7Oo0XnoNdzHWrh7Ht6Alj2VKdUCObMD3EhPEFGLPrT13V\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a395ecb22f514e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 11961\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11961,"size_decoded":12707,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 218x145, components 3","md5":"67f9405d1e47de69cb3e99509d07aad5","sha1":"4594f5ae5699a3311c1c5d2c41c5214a84281a87","sha256":"b4782e7711458837bbaee8e43f12eaa912d781e43bb5969cfc913178be5edbb1","sha512":"4f10498316c9cb4f091f2a8e762e0ad7bbd61354af45014c9d77b68856536d8be1560da76f768146e45190853cbc7c1774113984b42e37de12ff518cd1a2dfe6","ssdeep":"192:MSpQiCHTeGls7DaP1i1yGbMS5Ajhr+kMNfmx2zNKDV8v602FElRPbyOB1xZc2jp:rQis1s7uU1yGx5fk+1sC0ybyOJZcOp","tlshash":"c732c0f0e752e815f77c0f7c8e3ad1c786ac411952058ba33771fcab4b293c865a5561","first_seen":"2026-09-11T10:11:15.612339Z","last_seen":"2026-09-11T10:18:27.319468Z","times_seen":2,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-11","alert":"Phishing Block","trigger":"vavada3-inkz.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"vavada3-inkz.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vavada3-inkz.top/","fqdn":"vavada3-inkz.top","domain":"vavada3-inkz.top","tld":"top"},"ip":{"addr":"104.21.84.140","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-11T10:17:45.588Z","timestamp":1789121865588,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vavada3-inkz.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 08 Sep 2026 20:57:27 GMT","end":"Mon, 07 Dec 2026 21:56:06 GMT"},"fingerprint":{"sha1":"33:E8:D0:28:E1:C9:3C:2F:7B:25:AF:60:7C:59:57:2C:DF:C7:8C:0A","sha256":"6B:25:F5:8C:E5:92:7E:2F:E2:5D:18:13:0E:94:F7:F0:74:5A:5D:DF:60:CC:08:8C:5F:7B:40:CF:E3:28:56:F4"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: vavada3-inkz.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 11 Sep 2026 10:17:45 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=I3NT1r3XNyO0KTDdnvj6gNrf61H5%2BNxUvoTAdzwf37jpDaqfh5i3PKQEg%2BcFMzP%2Fi1Dn75F3r3Ci3H9HBomY08fVi%2B%2FGsmaztgdKB%2FqjL0qgSNxjgVyw1till8LYnDcKMVto\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: zstd\r\ncf-ray: a395ecac19d95687-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Gravatar","description":"Gravatar is a service for providing globally unique avatars.","website":"https://gravatar.com","common_platform_enumeration":"","icon":"Gravatar.png","categories":["Miscellaneous"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"AMP","description":"AMP, originally created by Google, is an open-source HTML framework developed by the AMP open-source Project. AMP is designed to help webpages load faster.","website":"https://www.amp.dev","common_platform_enumeration":"","icon":"Accelerated-Mobile-Pages.svg","categories":["JavaScript frameworks"]}],"data":{"size":60938,"size_decoded":12332,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (424)","md5":"abbfd2c1c608b0c6e39172215264a213","sha1":"6d6bac64096e56377e395271ef31c37b0e48705d","sha256":"79a18b055b103313e397f779778492004c0765f0ec64ece336ca2e940cfe2846","sha512":"98a0885e9563ecafb2d30a7a3f509823a51440ee1f884cbe31c50286a93863753e9d60e2768980b4bc878b0ec8b623fc20baab1291c3ca732d5b5e3556abd456","ssdeep":"768:U31c1gSqe5fwrTFqFTFg1Y17zsF6h3aAoUy6rIXjTv:3gSq2fa8p3RzsGavUy6rIXjTv","tlshash":"0853871656f305955907f0b99ffb6b0a3764c017c60bdd687f9ca3488f8aaa489a370c","first_seen":"2026-09-11T10:11:15.619237Z","last_seen":"2026-09-11T10:18:27.320061Z","times_seen":2,"resource_available":false,"data":null}},"time_used":181,"timings":{"blocked":-1,"dns":10,"connect":1,"send":0,"wait":154,"receive":0,"ssl":16},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-11","alert":"Phishing Block","trigger":"vavada3-inkz.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"vavada3-inkz.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vavada3-inkz.top/favicon.ico","fqdn":"vavada3-inkz.top","domain":"vavada3-inkz.top","tld":"top"},"ip":{"addr":"104.21.84.140","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vavada3-inkz.top/","date":"2026-09-11T10:17:46.515Z","timestamp":1789121866515,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vavada3-inkz.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 08 Sep 2026 20:57:27 GMT","end":"Mon, 07 Dec 2026 21:56:06 GMT"},"fingerprint":{"sha1":"33:E8:D0:28:E1:C9:3C:2F:7B:25:AF:60:7C:59:57:2C:DF:C7:8C:0A","sha256":"6B:25:F5:8C:E5:92:7E:2F:E2:5D:18:13:0E:94:F7:F0:74:5A:5D:DF:60:CC:08:8C:5F:7B:40:CF:E3:28:56:F4"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: vavada3-inkz.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://vavada3-inkz.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 11 Sep 2026 10:17:46 GMT\r\ncontent-type: image/vnd.microsoft.icon\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9FBcjGCGrMkWD2MpQ2PTWrqfxuZQgvRe4tJkeKp0S9gZTvdgci9lRvxg5OG%2BcFnfHKe2GPahToxJQgcEnh66%2BTlqBKrXXhd48ETVbnu7AdRpS08zEPr%2BpWjaXMWAG3L2%2FERp\"}]}\r\npriority: u=6,i=?0\r\nlast-modified: Sat, 08 Oct 2022 19:31:29 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"1b6a-5ea8af9176640\"\r\nage: 428\r\ncache-control: max-age=2678400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a395ecb1bf234e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7018,"size_decoded":1472,"mime_type":"image/vnd.microsoft.icon","magic":"MS Windows icon resource - 1 icon, 35x47, 32 bits/pixel","md5":"ff6ef3a968017259399de45ecdbf0bb5","sha1":"b84dc644857ed68474b6dbc58aaa26432d12b4bd","sha256":"74d3f62d0f67119d4b9d8e63a99eccff53ba16fd28d18cf99efec2995ac4230f","sha512":"85f9dc671edc1bd88e87dc08f7843caae3c58b10728375fc0a59d5af8212e84c0b99da7d7bee2cda34087ebf531f820a08125457e9398876df299ecae2c5b949","ssdeep":"48:eTaFpxPi86fl1fK7qntAF0buXcgf4qJFgmjWjWj+EEefNr:gQfPi86dYeO6bIf4qJCEEkr","tlshash":"82e1a88e7745228fdd060e30cd0be78c8a10e81c6bd446df3b901c07b66f225e54322e","first_seen":"2023-05-12T10:24:16Z","last_seen":"2026-09-11T10:18:27.320578Z","times_seen":591,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-11","alert":"Phishing Block","trigger":"vavada3-inkz.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"vavada3-inkz.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vavada3-inkz.top/assets/Vavada-logo.png","fqdn":"vavada3-inkz.top","domain":"vavada3-inkz.top","tld":"top"},"ip":{"addr":"104.21.84.140","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vavada3-inkz.top/","date":"2026-09-11T10:17:46.573Z","timestamp":1789121866573,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vavada3-inkz.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 08 Sep 2026 20:57:27 GMT","end":"Mon, 07 Dec 2026 21:56:06 GMT"},"fingerprint":{"sha1":"33:E8:D0:28:E1:C9:3C:2F:7B:25:AF:60:7C:59:57:2C:DF:C7:8C:0A","sha256":"6B:25:F5:8C:E5:92:7E:2F:E2:5D:18:13:0E:94:F7:F0:74:5A:5D:DF:60:CC:08:8C:5F:7B:40:CF:E3:28:56:F4"}}},"request":{"raw":"GET /assets/Vavada-logo.png HTTP/1.1\r\nHost: vavada3-inkz.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://vavada3-inkz.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 11 Sep 2026 10:17:46 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Fri, 23 Aug 2024 14:42:16 GMT\r\npriority: u=4,i\r\netag: \"66c89fc8-2872\"\r\nexpires: Wed, 10 Mar 2027 10:10:37 GMT\r\ncache-control: max-age=15552000\r\naccept-ranges: bytes\r\nage: 428\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oeWiKfFaVWd2ZM%2FCyk208sjJbqKE5YANbKQbl48Adxvb9FerasRVPNyZC0pTad94%2BGVqqZ8aW%2FNVUjScdB9CQYj%2B53OzlATAuoENGQfwdz5oEgafepq0xEEDIy0E7%2FDYZxw8\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a395ecb21f2b4e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 10354\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10354,"size_decoded":11097,"mime_type":"image/png","magic":"PNG image data, 712 x 110, 8-bit/color RGBA, non-interlaced","md5":"39aee9945795f4a71e0ee0b7bf1c1aa6","sha1":"ba4130edcfca76cb6b09006f8180aa830d2ac1a9","sha256":"f23a502fef3261a7f3b524ce62368f0470814c7f2b68665f9e9cdbbb9e2efc9a","sha512":"161b9341c16b035938a3fbafef6b080e3afe7c39eeabd450fedbe00cab1fb568210169a88e1a2e2534b550b1f2a357f9929de5e47fa4f16616d3177605c49c7e","ssdeep":"192:+dgFSFkn8JP2SyaLrIVYIIRZg3J6vKA09Yto1jXicxNHxIKuOQYpjcZ3fLWuQ:otWn8JP2sIexc3JPAQp1jXioRvQYpwZc","tlshash":"91229e61e7068de0078df74838eedfbb5b3f09c18ec44c6b6c55181315906f98a6a2c7","first_seen":"2026-09-11T10:11:15.625521Z","last_seen":"2026-09-11T10:18:27.321045Z","times_seen":2,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-11","alert":"Phishing Block","trigger":"vavada3-inkz.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"vavada3-inkz.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vavada3-inkz.top/media/2018/12/sharky-1-218x145.jpg","fqdn":"vavada3-inkz.top","domain":"vavada3-inkz.top","tld":"top"},"ip":{"addr":"104.21.84.140","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vavada3-inkz.top/","date":"2026-09-11T10:17:46.583Z","timestamp":1789121866583,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vavada3-inkz.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 08 Sep 2026 20:57:27 GMT","end":"Mon, 07 Dec 2026 21:56:06 GMT"},"fingerprint":{"sha1":"33:E8:D0:28:E1:C9:3C:2F:7B:25:AF:60:7C:59:57:2C:DF:C7:8C:0A","sha256":"6B:25:F5:8C:E5:92:7E:2F:E2:5D:18:13:0E:94:F7:F0:74:5A:5D:DF:60:CC:08:8C:5F:7B:40:CF:E3:28:56:F4"}}},"request":{"raw":"GET /media/2018/12/sharky-1-218x145.jpg HTTP/1.1\r\nHost: vavada3-inkz.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://vavada3-inkz.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 11 Sep 2026 10:17:46 GMT\r\ncontent-type: image/jpeg\r\nserver-timing: cfExtPri\r\nlast-modified: Fri, 22 Aug 2025 10:05:11 GMT\r\npriority: u=4,i\r\netag: \"68a840d7-269d\"\r\nexpires: Wed, 10 Mar 2027 10:10:38 GMT\r\ncache-control: max-age=15552000\r\naccept-ranges: bytes\r\nage: 428\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2Fqi09BbP9TFYYW86NVrsve0rDUjxa%2Femai2pp8qzRYSRp7A5ouaTOhesHmxhYHWLBy4GzWZuKlQpeGJryZJiewxQQOrfBNBS3BZkK2uWWZfNte%2BEAw0SX2BKl2rli48IRiW5\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a395ecb22f354e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 9885\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9885,"size_decoded":10624,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 218x145, components 3","md5":"3a7f6597f3329cfff4e6e1cf259e53a6","sha1":"11a8060b23a238486f93f2108982dc2eb4cbc7f5","sha256":"633399c9cd15ccfb7d804791f6064c3a3d598944c5205d9f530d5b98cfe4b73d","sha512":"e0227eca0ae91c3b5ee8e837b45d83c0c416deecb5c9de1a0a9dcc15e4ee9166b9fc53ac6b3e797b59e0c3ca017b7f8730c60bdd14978bc05c80e4f593a92baa","ssdeep":"192:M44g04vYUTjRSw1nDSyQkmqfoMhGorDn84G5LK69VbZ8mc/AoFCLSTuER1TgY:lNT11DHXrD84G5G6bd3cIMCV23","tlshash":"c612bfc36b568244f961ae72532b1d74dba00e8da0254f5f363cfbb1a1bc2f619d3124","first_seen":"2026-09-11T10:11:15.633412Z","last_seen":"2026-09-11T10:18:27.321668Z","times_seen":2,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-11","alert":"Phishing Block","trigger":"vavada3-inkz.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"vavada3-inkz.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"secure.gravatar.com/avatar/c08d649981cd596a31d7e7f327bda736?s=96\u0026d=mm\u0026r=g","fqdn":"secure.gravatar.com","domain":"gravatar.com","tld":"com"},"ip":{"addr":"192.0.73.2","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vavada3-inkz.top/","date":"2026-09-11T10:17:46.594Z","timestamp":1789121866594,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gravatar.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 08 Aug 2026 19:44:01 GMT","end":"Fri, 06 Nov 2026 19:44:00 GMT"},"fingerprint":{"sha1":"86:B2:B5:BD:E6:C8:83:9B:F1:DE:00:67:71:60:BE:EA:7F:18:5F:1E","sha256":"63:76:6D:63:14:95:BB:B9:B1:53:01:FD:6D:6A:F9:E6:77:4A:85:77:AB:09:8A:4A:8E:47:48:DF:85:8F:93:CF"}}},"request":{"raw":"GET /avatar/c08d649981cd596a31d7e7f327bda736?s=96\u0026d=mm\u0026r=g HTTP/1.1\r\nHost: secure.gravatar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://vavada3-inkz.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 11 Sep 2026 10:17:49 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 1387\r\nlast-modified: Wed, 11 Jan 1984 08:00:00 GMT\r\nlink: \u003chttps://gravatar.com/avatar/c08d649981cd596a31d7e7f327bda736?s=96\u0026d=mm\u0026r=g\u003e; rel=\"canonical\"\r\naccess-control-allow-origin: *\r\ncontent-disposition: inline; filename=\"c08d649981cd596a31d7e7f327bda736.jpg\"\r\naccept-ranges: bytes\r\nexpires: Fri, 11 Sep 2026 10:22:49 GMT\r\ncache-control: max-age=300\r\nalt-svc: clear\r\nx-nc: HIT arn 36\r\nserver-timing: a8c-cdn, dc;desc=arn, cache;desc=HIT;dur=1.0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1387,"size_decoded":1964,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90\", baseline, precision 8, 96x96, components 3","md5":"38d05c31efcc7acd24922c81ec7a5d4f","sha1":"9daf33b9473abafabe8c7c1825d57b180942d97e","sha256":"7eebb88caab2d1528e0af6d8d9cfb1ff3c48050b6aa163e5aee5b66d9e3f1586","sha512":"12262650b409f0bc0bbbaad682e3ab511155440ffc8f22b7d3277f5998e79e5c2701ad938b4655bde6d46293a229e89b83c72d1e403ab9594b98b22f6895a9ba","ssdeep":"","tlshash":"cb21b327d34243d07c3f886ba2473f8a80fe3e88b8d0108b19f046a2f332ad0494d198","first_seen":"2025-02-24T06:47:26.753159Z","last_seen":"2026-09-11T10:18:27.322261Z","times_seen":2144,"resource_available":false,"data":null}},"time_used":3300,"timings":{"blocked":-1,"dns":0,"connect":8,"send":0,"wait":8,"receive":0,"ssl":3283},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"secure.gravatar.com/avatar/6d32a23bffce13fc7e611669ac7793ee?s=96\u0026d=mm\u0026r=g","fqdn":"secure.gravatar.com","domain":"gravatar.com","tld":"com"},"ip":{"addr":"192.0.73.2","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vavada3-inkz.top/","date":"2026-09-11T10:17:46.597Z","timestamp":1789121866597,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gravatar.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 08 Aug 2026 19:44:01 GMT","end":"Fri, 06 Nov 2026 19:44:00 GMT"},"fingerprint":{"sha1":"86:B2:B5:BD:E6:C8:83:9B:F1:DE:00:67:71:60:BE:EA:7F:18:5F:1E","sha256":"63:76:6D:63:14:95:BB:B9:B1:53:01:FD:6D:6A:F9:E6:77:4A:85:77:AB:09:8A:4A:8E:47:48:DF:85:8F:93:CF"}}},"request":{"raw":"GET /avatar/6d32a23bffce13fc7e611669ac7793ee?s=96\u0026d=mm\u0026r=g HTTP/1.1\r\nHost: secure.gravatar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://vavada3-inkz.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 11 Sep 2026 10:17:50 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 1387\r\nlast-modified: Wed, 11 Jan 1984 08:00:00 GMT\r\nlink: \u003chttps://gravatar.com/avatar/6d32a23bffce13fc7e611669ac7793ee?s=96\u0026d=mm\u0026r=g\u003e; rel=\"canonical\"\r\naccess-control-allow-origin: *\r\ncontent-disposition: inline; filename=\"6d32a23bffce13fc7e611669ac7793ee.jpg\"\r\naccept-ranges: bytes\r\nexpires: Fri, 11 Sep 2026 10:22:50 GMT\r\ncache-control: max-age=300\r\nalt-svc: clear\r\nx-nc: HIT arn 36\r\nserver-timing: a8c-cdn, dc;desc=arn, cache;desc=HIT;dur=0.0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1387,"size_decoded":1964,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90\", baseline, precision 8, 96x96, components 3","md5":"38d05c31efcc7acd24922c81ec7a5d4f","sha1":"9daf33b9473abafabe8c7c1825d57b180942d97e","sha256":"7eebb88caab2d1528e0af6d8d9cfb1ff3c48050b6aa163e5aee5b66d9e3f1586","sha512":"12262650b409f0bc0bbbaad682e3ab511155440ffc8f22b7d3277f5998e79e5c2701ad938b4655bde6d46293a229e89b83c72d1e403ab9594b98b22f6895a9ba","ssdeep":"","tlshash":"cb21b327d34243d07c3f886ba2473f8a80fe3e88b8d0108b19f046a2f332ad0494d198","first_seen":"2025-02-24T06:47:26.753159Z","last_seen":"2026-09-11T10:18:27.322261Z","times_seen":2144,"resource_available":false,"data":null}},"time_used":3477,"timings":{"blocked":-1,"dns":0,"connect":9,"send":0,"wait":8,"receive":0,"ssl":3459},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"secure.gravatar.com/avatar/ec60680a20d81185a6cb2a7ac02d4de7?s=96\u0026d=mm\u0026r=g","fqdn":"secure.gravatar.com","domain":"gravatar.com","tld":"com"},"ip":{"addr":"192.0.73.2","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vavada3-inkz.top/","date":"2026-09-11T10:17:46.598Z","timestamp":1789121866598,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gravatar.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 08 Aug 2026 19:44:01 GMT","end":"Fri, 06 Nov 2026 19:44:00 GMT"},"fingerprint":{"sha1":"86:B2:B5:BD:E6:C8:83:9B:F1:DE:00:67:71:60:BE:EA:7F:18:5F:1E","sha256":"63:76:6D:63:14:95:BB:B9:B1:53:01:FD:6D:6A:F9:E6:77:4A:85:77:AB:09:8A:4A:8E:47:48:DF:85:8F:93:CF"}}},"request":{"raw":"GET /avatar/ec60680a20d81185a6cb2a7ac02d4de7?s=96\u0026d=mm\u0026r=g HTTP/1.1\r\nHost: secure.gravatar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://vavada3-inkz.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 11 Sep 2026 10:17:50 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 1387\r\nlast-modified: Wed, 11 Jan 1984 08:00:00 GMT\r\nlink: \u003chttps://gravatar.com/avatar/ec60680a20d81185a6cb2a7ac02d4de7?s=96\u0026d=mm\u0026r=g\u003e; rel=\"canonical\"\r\naccess-control-allow-origin: *\r\ncontent-disposition: inline; filename=\"ec60680a20d81185a6cb2a7ac02d4de7.jpg\"\r\naccept-ranges: bytes\r\nexpires: Fri, 11 Sep 2026 10:22:50 GMT\r\ncache-control: max-age=300\r\nalt-svc: clear\r\nx-nc: HIT arn 36\r\nserver-timing: a8c-cdn, dc;desc=arn, cache;desc=HIT;dur=0.0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1387,"size_decoded":1964,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90\", baseline, precision 8, 96x96, components 3","md5":"38d05c31efcc7acd24922c81ec7a5d4f","sha1":"9daf33b9473abafabe8c7c1825d57b180942d97e","sha256":"7eebb88caab2d1528e0af6d8d9cfb1ff3c48050b6aa163e5aee5b66d9e3f1586","sha512":"12262650b409f0bc0bbbaad682e3ab511155440ffc8f22b7d3277f5998e79e5c2701ad938b4655bde6d46293a229e89b83c72d1e403ab9594b98b22f6895a9ba","ssdeep":"","tlshash":"cb21b327d34243d07c3f886ba2473f8a80fe3e88b8d0108b19f046a2f332ad0494d198","first_seen":"2025-02-24T06:47:26.753159Z","last_seen":"2026-09-11T10:18:27.322261Z","times_seen":2144,"resource_available":false,"data":null}},"time_used":3474,"timings":{"blocked":-1,"dns":0,"connect":9,"send":0,"wait":8,"receive":0,"ssl":3454},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"secure.gravatar.com/avatar/2ca8eb54cd12f27859fbc02694b39bc3?s=96\u0026d=mm\u0026r=g","fqdn":"secure.gravatar.com","domain":"gravatar.com","tld":"com"},"ip":{"addr":"192.0.73.2","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vavada3-inkz.top/","date":"2026-09-11T10:17:46.600Z","timestamp":1789121866600,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gravatar.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 08 Aug 2026 19:44:01 GMT","end":"Fri, 06 Nov 2026 19:44:00 GMT"},"fingerprint":{"sha1":"86:B2:B5:BD:E6:C8:83:9B:F1:DE:00:67:71:60:BE:EA:7F:18:5F:1E","sha256":"63:76:6D:63:14:95:BB:B9:B1:53:01:FD:6D:6A:F9:E6:77:4A:85:77:AB:09:8A:4A:8E:47:48:DF:85:8F:93:CF"}}},"request":{"raw":"GET /avatar/2ca8eb54cd12f27859fbc02694b39bc3?s=96\u0026d=mm\u0026r=g HTTP/1.1\r\nHost: secure.gravatar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://vavada3-inkz.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 11 Sep 2026 10:17:50 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 1387\r\nlast-modified: Wed, 11 Jan 1984 08:00:00 GMT\r\nlink: \u003chttps://gravatar.com/avatar/2ca8eb54cd12f27859fbc02694b39bc3?s=96\u0026d=mm\u0026r=g\u003e; rel=\"canonical\"\r\naccess-control-allow-origin: *\r\ncontent-disposition: inline; filename=\"2ca8eb54cd12f27859fbc02694b39bc3.jpg\"\r\naccept-ranges: bytes\r\nexpires: Fri, 11 Sep 2026 10:22:50 GMT\r\ncache-control: max-age=300\r\nalt-svc: clear\r\nx-nc: HIT arn 36\r\nserver-timing: a8c-cdn, dc;desc=arn, cache;desc=HIT;dur=1.0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1387,"size_decoded":1964,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90\", baseline, precision 8, 96x96, components 3","md5":"38d05c31efcc7acd24922c81ec7a5d4f","sha1":"9daf33b9473abafabe8c7c1825d57b180942d97e","sha256":"7eebb88caab2d1528e0af6d8d9cfb1ff3c48050b6aa163e5aee5b66d9e3f1586","sha512":"12262650b409f0bc0bbbaad682e3ab511155440ffc8f22b7d3277f5998e79e5c2701ad938b4655bde6d46293a229e89b83c72d1e403ab9594b98b22f6895a9ba","ssdeep":"","tlshash":"cb21b327d34243d07c3f886ba2473f8a80fe3e88b8d0108b19f046a2f332ad0494d198","first_seen":"2025-02-24T06:47:26.753159Z","last_seen":"2026-09-11T10:18:27.322261Z","times_seen":2144,"resource_available":false,"data":null}},"time_used":3493,"timings":{"blocked":-1,"dns":0,"connect":12,"send":0,"wait":9,"receive":0,"ssl":3471},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.ampproject.org/v0.js","fqdn":"cdn.ampproject.org","domain":"ampproject.org","tld":"org"},"ip":{"addr":"142.250.178.65","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://vavada3-inkz.top/","date":"2026-09-11T10:17:46.260Z","timestamp":1789121866260,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"misc-sni.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:38:16 GMT","end":"Mon, 02 Nov 2026 08:38:15 GMT"},"fingerprint":{"sha1":"AE:D6:10:E9:DB:A2:42:50:C0:20:C4:C1:09:2D:9F:96:AF:F9:86:49","sha256":"EE:D8:87:FA:17:4F:B1:29:17:91:8C:1F:96:8C:D7:E8:8B:2B:2B:80:80:30:E8:2B:2D:DB:57:D8:19:0F:F8:CC"}}},"request":{"raw":"GET /v0.js HTTP/1.1\r\nHost: cdn.ampproject.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://vavada3-inkz.top/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\ncontent-type: text/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\ncontent-security-policy: default-src * blob: data:; script-src blob: https://cdn.ampproject.org/lts/ https://cdn.ampproject.org/rtv/ https://cdn.ampproject.org/sw/ https://cdn.ampproject.org/v0.js https://cdn.ampproject.org/v0.mjs https://cdn.ampproject.org/v0/ https://cdn.ampproject.org/viewer/; object-src 'none'; style-src 'unsafe-inline' https://cdn.ampproject.org/rtv/ https://cdn.materialdesignicons.com https://cdnjs.cloudflare.com/ajax/libs/font-awesome/ https://cloud.typography.com https://fast.fonts.net https://fonts.googleapis.com https://maxcdn.bootstrapcdn.com https://p.typekit.net https://pro.fontawesome.com https://use.fontawesome.com https://use.typekit.net; report-uri https://csp.withgoogle.com/csp/amp\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"amphtml-china-available\"\r\nreport-to: {\"group\":\"amphtml-china-available\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/amphtml-china-available\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 73084\r\ndate: Fri, 11 Sep 2026 10:17:46 GMT\r\nexpires: Fri, 11 Sep 2026 10:17:46 GMT\r\ncache-control: private, max-age=3000, stale-while-revalidate=1206600\r\netag: \"75269fc1352e4d45\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":284578,"size_decoded":74698,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (64627)","md5":"7a97c7f9bd1c9bc283d4fa7229eac9a5","sha1":"2f1e03cfa54ed1273f238d1dd29c789f38f31a85","sha256":"8829f20e39153e59529590c5bd33e322d0047402a975d79bca976595e220d0e5","sha512":"d1acb22d2735e373d0e4b9f0a123322f91c3410548e7d72220d9d895da804f94f0aaeacfa2c4bf069ce1bcf5cf42012646e5811e087bbde88af15d0311402171","ssdeep":"6144:1mUSltOu6O7eHkarAYXX3aerh5nbAHXv4:kPikaUArPnbAH/4","tlshash":"5654949db246b0724793b074803f150ae33ba955644a812cf56dead67cbcd8aa037f7c","first_seen":"2026-08-27T02:29:06.998096Z","last_seen":"2026-09-11T12:15:00.251617Z","times_seen":213,"resource_available":true,"data":null}},"time_used":106,"timings":{"blocked":-1,"dns":0,"connect":15,"send":0,"wait":27,"receive":30,"ssl":34},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vavada3-inkz.top/media/2018/12/odysseus-1-218x145.jpg","fqdn":"vavada3-inkz.top","domain":"vavada3-inkz.top","tld":"top"},"ip":{"addr":"104.21.84.140","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vavada3-inkz.top/","date":"2026-09-11T10:17:46.578Z","timestamp":1789121866578,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vavada3-inkz.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 08 Sep 2026 20:57:27 GMT","end":"Mon, 07 Dec 2026 21:56:06 GMT"},"fingerprint":{"sha1":"33:E8:D0:28:E1:C9:3C:2F:7B:25:AF:60:7C:59:57:2C:DF:C7:8C:0A","sha256":"6B:25:F5:8C:E5:92:7E:2F:E2:5D:18:13:0E:94:F7:F0:74:5A:5D:DF:60:CC:08:8C:5F:7B:40:CF:E3:28:56:F4"}}},"request":{"raw":"GET /media/2018/12/odysseus-1-218x145.jpg HTTP/1.1\r\nHost: vavada3-inkz.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://vavada3-inkz.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 11 Sep 2026 10:17:46 GMT\r\ncontent-type: image/jpeg\r\nserver-timing: cfExtPri\r\nlast-modified: Fri, 22 Aug 2025 10:08:14 GMT\r\npriority: u=4,i\r\netag: \"68a8418e-2549\"\r\nexpires: Wed, 10 Mar 2027 10:10:38 GMT\r\ncache-control: max-age=15552000\r\naccept-ranges: bytes\r\nage: 428\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gDSnSgNb9ClVxtIszbCmbcTZ4NBOjews9pxwfJSYfZYMRV3EoXK2dYGYeRIxfo3ojd5%2Bjt9KFD2V6I3EFYz8F%2FZKx1xZenRNwb9Y7pzHljyU%2B2Wgo4WLW8bcIhFL4muPTX1u\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a395ecb21f2f4e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 9545\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9545,"size_decoded":10284,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 218x145, components 3","md5":"a2b407f142ac395f0d5c714b6f47d214","sha1":"572553a2beb1f50878f4699f7c6a8ac656c6fa38","sha256":"bdd030c8345cfeb15ee480babd0951b94ff96f06873e855e937e47dfbf37310f","sha512":"5e27ab68982e0be3bc7de52ef34e5d3a7722a7d281034b56d2b3d508661f4caa4adfb3fa3852e3ff137ae309fdd651afb8dedc178acf425d9df87700bcf26a3d","ssdeep":"192:MmPZqcXzBuP601fcIt9uRkA9P+6cW8LQiRImbnW6Y9lmo:BZqcX1o1cIt9uRkAoW4TRPDD+P","tlshash":"5312ae009607989bdf913d3f6835c6306695f9209aa93a0a7d7cf0b6cd6c1eac85a7d0","first_seen":"2026-09-11T10:11:15.63025Z","last_seen":"2026-09-11T10:18:27.323324Z","times_seen":2,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-11","alert":"Phishing Block","trigger":"vavada3-inkz.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"vavada3-inkz.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vavada3-inkz.top/media/2018/12/lucky-ladys-charm-deluxe-1-218x145.jpg","fqdn":"vavada3-inkz.top","domain":"vavada3-inkz.top","tld":"top"},"ip":{"addr":"104.21.84.140","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vavada3-inkz.top/","date":"2026-09-11T10:17:46.588Z","timestamp":1789121866588,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vavada3-inkz.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 08 Sep 2026 20:57:27 GMT","end":"Mon, 07 Dec 2026 21:56:06 GMT"},"fingerprint":{"sha1":"33:E8:D0:28:E1:C9:3C:2F:7B:25:AF:60:7C:59:57:2C:DF:C7:8C:0A","sha256":"6B:25:F5:8C:E5:92:7E:2F:E2:5D:18:13:0E:94:F7:F0:74:5A:5D:DF:60:CC:08:8C:5F:7B:40:CF:E3:28:56:F4"}}},"request":{"raw":"GET /media/2018/12/lucky-ladys-charm-deluxe-1-218x145.jpg HTTP/1.1\r\nHost: vavada3-inkz.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://vavada3-inkz.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 11 Sep 2026 10:17:46 GMT\r\ncontent-type: image/jpeg\r\nserver-timing: cfExtPri\r\nlast-modified: Fri, 22 Aug 2025 10:07:16 GMT\r\npriority: u=4,i\r\netag: \"68a84154-292a\"\r\nexpires: Wed, 10 Mar 2027 10:10:38 GMT\r\ncache-control: max-age=15552000\r\naccept-ranges: bytes\r\nage: 428\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fhfh7tHI5NjlpLnqLTbu4fUH6aym4E59wMYBVuOA1bNSZL3%2FwdJcHTAPXKO%2Bb2f%2FE4Y70T2BfaK7d5YdJXzdq7Qw7iX0iFMOdmC18v5KEoPHCqMRT%2FsqVM78aD7IrVnOmpM9\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a395ecb22f454e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 10538\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10538,"size_decoded":11280,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 218x145, components 3","md5":"51e55f6ae05f87659908baec42a80166","sha1":"f8409b216bcb8ab504ee474690863c20aa7a599e","sha256":"9440df6d778807afe051f385ee74d410bf5018064e6b3256d5909d348100705f","sha512":"be216bf2b8aedafacbd3f769f013e49939520f7d6d4b43c6b05e99f2911c1848fae5a022ba819c81ec72d7e33a699a6bf59db08d62991edb94bfc47b12216564","ssdeep":"192:MMtlPc55odnBciRR2/vUgiEXjkwSa962RHBxudK5QSJozoNGQATexLtivAuW:hG55Ociz2HU9Vwv9vZBxoSQSJSjnFW","tlshash":"af229ded9a49228ef4315dbc5e460263c8a5e220cf829f2aa039fd5bfe701952d09496","first_seen":"2026-09-11T10:11:15.637714Z","last_seen":"2026-09-11T10:18:27.324562Z","times_seen":2,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"vavada3-inkz.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-11","alert":"Phishing Block","trigger":"vavada3-inkz.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"secure.gravatar.com/avatar/2431710c5f136d8bae5854b44f23b753?s=96\u0026d=mm\u0026r=g","fqdn":"secure.gravatar.com","domain":"gravatar.com","tld":"com"},"ip":{"addr":"192.0.73.2","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vavada3-inkz.top/","date":"2026-09-11T10:17:46.595Z","timestamp":1789121866595,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gravatar.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 08 Aug 2026 19:44:01 GMT","end":"Fri, 06 Nov 2026 19:44:00 GMT"},"fingerprint":{"sha1":"86:B2:B5:BD:E6:C8:83:9B:F1:DE:00:67:71:60:BE:EA:7F:18:5F:1E","sha256":"63:76:6D:63:14:95:BB:B9:B1:53:01:FD:6D:6A:F9:E6:77:4A:85:77:AB:09:8A:4A:8E:47:48:DF:85:8F:93:CF"}}},"request":{"raw":"GET /avatar/2431710c5f136d8bae5854b44f23b753?s=96\u0026d=mm\u0026r=g HTTP/1.1\r\nHost: secure.gravatar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://vavada3-inkz.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 11 Sep 2026 10:17:50 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 1387\r\nlast-modified: Wed, 11 Jan 1984 08:00:00 GMT\r\nlink: \u003chttps://gravatar.com/avatar/2431710c5f136d8bae5854b44f23b753?s=96\u0026d=mm\u0026r=g\u003e; rel=\"canonical\"\r\naccess-control-allow-origin: *\r\ncontent-disposition: inline; filename=\"2431710c5f136d8bae5854b44f23b753.jpg\"\r\naccept-ranges: bytes\r\nexpires: Fri, 11 Sep 2026 10:22:50 GMT\r\ncache-control: max-age=300\r\nalt-svc: clear\r\nx-nc: HIT arn 36\r\nserver-timing: a8c-cdn, dc;desc=arn, cache;desc=HIT;dur=0.0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1387,"size_decoded":1964,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90\", baseline, precision 8, 96x96, components 3","md5":"38d05c31efcc7acd24922c81ec7a5d4f","sha1":"9daf33b9473abafabe8c7c1825d57b180942d97e","sha256":"7eebb88caab2d1528e0af6d8d9cfb1ff3c48050b6aa163e5aee5b66d9e3f1586","sha512":"12262650b409f0bc0bbbaad682e3ab511155440ffc8f22b7d3277f5998e79e5c2701ad938b4655bde6d46293a229e89b83c72d1e403ab9594b98b22f6895a9ba","ssdeep":"","tlshash":"cb21b327d34243d07c3f886ba2473f8a80fe3e88b8d0108b19f046a2f332ad0494d198","first_seen":"2025-02-24T06:47:26.753159Z","last_seen":"2026-09-11T10:18:27.322261Z","times_seen":2144,"resource_available":false,"data":null}},"time_used":3500,"timings":{"blocked":-1,"dns":0,"connect":9,"send":0,"wait":8,"receive":0,"ssl":3480},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.ampproject.org/rtv/012608131752000/v0/amp-auto-lightbox-0.1.js","fqdn":"cdn.ampproject.org","domain":"ampproject.org","tld":"org"},"ip":{"addr":"142.250.178.65","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://vavada3-inkz.top/","date":"2026-09-11T10:17:46.667Z","timestamp":1789121866667,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"misc-sni.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:38:16 GMT","end":"Mon, 02 Nov 2026 08:38:15 GMT"},"fingerprint":{"sha1":"AE:D6:10:E9:DB:A2:42:50:C0:20:C4:C1:09:2D:9F:96:AF:F9:86:49","sha256":"EE:D8:87:FA:17:4F:B1:29:17:91:8C:1F:96:8C:D7:E8:8B:2B:2B:80:80:30:E8:2B:2D:DB:57:D8:19:0F:F8:CC"}}},"request":{"raw":"GET /rtv/012608131752000/v0/amp-auto-lightbox-0.1.js HTTP/1.1\r\nHost: cdn.ampproject.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://vavada3-inkz.top\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://vavada3-inkz.top/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\ncontent-encoding: br\r\naccess-control-allow-origin: *\r\ncontent-security-policy: default-src * blob: data:; script-src blob: https://cdn.ampproject.org/lts/ https://cdn.ampproject.org/rtv/ https://cdn.ampproject.org/sw/ https://cdn.ampproject.org/v0.js https://cdn.ampproject.org/v0.mjs https://cdn.ampproject.org/v0/ https://cdn.ampproject.org/viewer/; object-src 'none'; style-src 'unsafe-inline' https://cdn.ampproject.org/rtv/ https://cdn.materialdesignicons.com https://cdnjs.cloudflare.com/ajax/libs/font-awesome/ https://cloud.typography.com https://fast.fonts.net https://fonts.googleapis.com https://maxcdn.bootstrapcdn.com https://p.typekit.net https://pro.fontawesome.com https://use.fontawesome.com https://use.typekit.net; report-uri https://csp.withgoogle.com/csp/amp\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"amphtml-china-available\"\r\nreport-to: {\"group\":\"amphtml-china-available\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/amphtml-china-available\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 2965\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 09 Sep 2026 23:12:01 GMT\r\nexpires: Thu, 09 Sep 2027 23:12:01 GMT\r\ncache-control: public, max-age=31536000\r\nage: 126345\r\netag: \"4f47ed7f85abdf35\"\r\ncontent-type: text/javascript; charset=UTF-8\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7798,"size_decoded":4542,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (7676)","md5":"3f6cecb06196fedf1dc5c1f2b62452f2","sha1":"40623362e2c944c779f6cb22bf0ed33614092f9c","sha256":"d9f2a23aed96b04e277640598b3cc20c88432b11ebbad1cb6830c4e18ec1728b","sha512":"8127cd80ca3794c81818700de641545e15e687aeab24057d412c4b66f3f9856beae9817204f3744a8a83b7004806e22fc3b621eb38ee74c74de770d01b2be36b","ssdeep":"96:/KoAosPGpV3yMDc0jGAM+G0mj1hVXxSZ4tqSKN0OV0TjLRkiGj0ldmq43bDjHI:/KqswV3yv0jGAFCPX/tqKyWp4M0rDTI","tlshash":"bff196dc7ac2b83a5753b4b780af414fa23bb94620ad9120d120f0d83cb995ed633e5c","first_seen":"2026-08-27T02:29:06.993751Z","last_seen":"2026-09-11T12:15:00.302804Z","times_seen":193,"resource_available":true,"data":null}},"time_used":18,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":17,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.ampproject.org/v0/amp-bind-latest.js","fqdn":"cdn.ampproject.org","domain":"ampproject.org","tld":"org"},"ip":{"addr":"142.250.178.65","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://vavada3-inkz.top/","date":"2026-09-11T10:17:46.263Z","timestamp":1789121866263,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"misc-sni.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:38:16 GMT","end":"Mon, 02 Nov 2026 08:38:15 GMT"},"fingerprint":{"sha1":"AE:D6:10:E9:DB:A2:42:50:C0:20:C4:C1:09:2D:9F:96:AF:F9:86:49","sha256":"EE:D8:87:FA:17:4F:B1:29:17:91:8C:1F:96:8C:D7:E8:8B:2B:2B:80:80:30:E8:2B:2D:DB:57:D8:19:0F:F8:CC"}}},"request":{"raw":"GET /v0/amp-bind-latest.js HTTP/1.1\r\nHost: cdn.ampproject.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://vavada3-inkz.top/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\ncontent-type: text/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\ncontent-security-policy: default-src * blob: data:; script-src blob: https://cdn.ampproject.org/lts/ https://cdn.ampproject.org/rtv/ https://cdn.ampproject.org/sw/ https://cdn.ampproject.org/v0.js https://cdn.ampproject.org/v0.mjs https://cdn.ampproject.org/v0/ https://cdn.ampproject.org/viewer/; object-src 'none'; style-src 'unsafe-inline' https://cdn.ampproject.org/rtv/ https://cdn.materialdesignicons.com https://cdnjs.cloudflare.com/ajax/libs/font-awesome/ https://cloud.typography.com https://fast.fonts.net https://fonts.googleapis.com https://maxcdn.bootstrapcdn.com https://p.typekit.net https://pro.fontawesome.com https://use.fontawesome.com https://use.typekit.net; report-uri https://csp.withgoogle.com/csp/amp\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"amphtml-china-available\"\r\nreport-to: {\"group\":\"amphtml-china-available\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/amphtml-china-available\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 16349\r\ndate: Fri, 11 Sep 2026 10:17:46 GMT\r\nexpires: Fri, 11 Sep 2026 10:17:46 GMT\r\ncache-control: private, max-age=604800, stale-while-revalidate=604800\r\netag: \"35f574683059a441\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":51560,"size_decoded":17964,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (51437)","md5":"aaf12f529684741da0445e5a3f001575","sha1":"bf5e064bf6eaded5162cae3177c91ce8011d0392","sha256":"9bdde2bcef71d14162962f2204a91b6ba0edea45b24a3e5681a7bbd3624dde71","sha512":"911674373e7754c576b6de2b551f5b841e44e9eaf5b0ea06ceff7b4566789e6d128af26f8f4a3b96a3972ef31d5601556476765dd8a0ab259db48166a2061614","ssdeep":"768:kOCpy2qXDz7pegZVUjIqS8vnCJW3fpyE25Q9Ywc:kY2qXDz7pe8VUjIjkCJKpyC7c","tlshash":"5c33b599f292b07647936475813f600ae33f3959600fc524e06ae9c2bcb9d59a277f3c","first_seen":"2026-08-27T20:08:06.840325Z","last_seen":"2026-09-11T12:15:00.278549Z","times_seen":39,"resource_available":true,"data":null}},"time_used":92,"timings":{"blocked":-1,"dns":0,"connect":16,"send":0,"wait":29,"receive":16,"ssl":30},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}