{"report_id":"60ea7040-6d7e-43e3-9a10-89891ead1e0c","version":0,"status":"done","tags":[],"date":"2026-09-10T19:38:51Z","url":{"schema":"http","addr":"gorvulikent-app.com/","fqdn":"gorvulikent-app.com","domain":"gorvulikent-app.com","tld":"com"},"ip":{"addr":"104.21.30.124","port":0,"asn":13335,"as":"Cloudflare, Inc.","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"gorvulikent-app.com/","fqdn":"gorvulikent-app.com","domain":"gorvulikent-app.com","tld":"com"},"title":"Gorvulikent - Plateforme de Trading | Site Officiel \u0026 Avis client","dom":{"size":170867,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (1939)","md5":"b079c8657bb06c8f1171913e7432734c","sha1":"8443622c68e81b451b8012c4faba530340267136","sha256":"0d5964d0c877e768da14cfecca204a1bb1fd2f004c2ff1a64f724a17d05953c3","sha512":"7b8f93698da314d00ab09511235e7b334f911ccf032fc8c5ff5b2d0cec37405374e7c016ac56b31f19c5ea3d4884adc40590a39c2e7e0429c314c56571eebc9b","ssdeep":"1536:jkPp88E2KksSbNc1ZsXrBjdr3JwqqqqNqqqqfqqqq2qqqqzqqqqo42f7ttdMwb:5rSuAUttiI","tlshash":"fdf3181561b6292d500792f0fba6bb19a23cc143e50fc66cb69c56a01fc7fe4ec676c8","dom_hash":"domhash56bfd7dbec3bd139e8de6092e07e0f3e","first_seen":"2026-09-10T19:38:57.20311Z","last_seen":"2026-09-10T19:38:57.20311Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"gorvulikent-app.com/","fqdn":"gorvulikent-app.com","domain":"gorvulikent-app.com","tld":"com"},"ip":{"addr":"104.21.30.124","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-10-15T19:38:51Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":6}},"detection":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"gorvulikent-app.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-10","alert":"Phishing Block","trigger":"gorvulikent-app.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"gorvulikent-app.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"gorvulikent-app.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"gorvulikent-app.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"hetrsir.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"gorvulikent-app.com","ip":{"addr":"104.21.30.124","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":70,"request_count":14,"received_data":544602,"sent_data":6689,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP:8.3.17","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}]},{"fqdn":"hetrsir.info","ip":{"addr":"104.21.70.229","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2024-02-27","domain_rank":0,"first_seen":"2025-10-03T11:57:16.03478Z","last_seen":"2026-04-29T19:33:00.372153Z","alert_count":3,"request_count":3,"received_data":9140,"sent_data":1657,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"gorvulikent-app.com/js/keitaro-tracker.js","fqdn":"gorvulikent-app.com","domain":"gorvulikent-app.com","tld":"com"},"ip":{"addr":"104.21.30.124","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"daf31ec89cec2f4e2ddeaaf36e918033","sha1":"e178d51b5819936af58c8eb174c7afea70fe76e4","sha256":"1f3f087040c9a4b05b177a4abcc97916fc12af45a3c957c42dccb4fafa34139e","sha512":"125d9d3490151394342010f2c3e45f3303b02a85972fb1cf8b7c976af0f65e63be7f45f3c95e3c9866f79178a96adedb11b7a163170f915f8b26add73f3815d6","ssdeep":"192:cmpxQlI3qZ0VbPaLuEkM1DwE2Xg+MQCyNItQCw79tyH+brREpIErWbvpp7dQr95w:vQleWuL0nH4B","tlshash":"7c322d5d3cf3a0b55a23307c8bbf81183a799403200add50bd0db655afa9d6946b6fdc","size":11794,"data":"","first_seen":"2026-09-10T19:38:57.246225Z","last_seen":"2026-09-20T10:24:20.755864Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gorvulikent-app.com/js/intlTelInput.min.js","fqdn":"gorvulikent-app.com","domain":"gorvulikent-app.com","tld":"com"},"ip":{"addr":"104.21.30.124","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"6eb09b87575184fbf793b6c76b0b3b5a","sha1":"8449eed53e8d70da2dc33f361fdb93275062233a","sha256":"31a653d3eef4fee8a0f663943e6da108d433da1103312e7ecca6fabea7dc7048","sha512":"b50af2b637df4d7184d2178cae587fadff4bf1d3fde94e54ee5ad90c31a8dc397143e3763910374388b5facee882bc5db06ca15f18b8049c2fbc9804a4730a5d","ssdeep":"768:LCg3rXNC+I4SAGFdGcUNm//OjJqLRIyH16v4rEIr32Cq+R:Bk3GcL//LL1TEIrGCZ","tlshash":"58e208edb3516633acad91b164bb12476ebf34005684989c787dcdc81eecec960b6b34","size":32951,"data":"","first_seen":"2024-02-27T18:01:35Z","last_seen":"2026-09-20T10:24:20.753788Z","times_seen":113,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gorvulikent-app.com/js/intlTelInput-utils.js","fqdn":"gorvulikent-app.com","domain":"gorvulikent-app.com","tld":"com"},"ip":{"addr":"104.21.30.124","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9ca8f21908a2aad7182bad4a10cce478","sha1":"89170581c7099479bc6659554c767298738c4ec5","sha256":"c3e86718e42d1424af1544109482ff4ba7443cfc1349106485a2853ab7040b69","sha512":"57bf31817e106ec9d330eb9f279e245b362919ba6bbaa4355939187062a4fa70cb79567bc8075b9958960fe82c48a4d937a05a2509645b7d81205a78ac0f1cc3","ssdeep":"3072:hHS30w8yAJjFs3OwPss3MwPgmAu9I2xVM8Mq8WXnWcBpUsA56kmLNTg/QKWVk/tA:hHS3qzBwfxVM8Mq88uA","tlshash":"7e44e1ebd63c9737a1d97b35968eb3cd5a8cbca3c848567826c3b54f52788e0706c205","size":257451,"data":"","first_seen":"2024-01-30T04:35:53Z","last_seen":"2026-09-20T10:24:20.754423Z","times_seen":314,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gorvulikent-app.com/js/send.js?v=3.3.13","fqdn":"gorvulikent-app.com","domain":"gorvulikent-app.com","tld":"com"},"ip":{"addr":"104.21.30.124","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"94672d7eadb211f0da36dc7fa88c515c","sha1":"531221f77086d3b53891ffb2453d2e02fadf38ac","sha256":"4a333d4231adb1e2113681eb8453a2dfbf737edaf919258d30132748306c145d","sha512":"31c518502b441fda6a89161419392b4d5bcc7ea893c87bfecdff2be8786d8ab2aa9b043ca1fb39a76a1aab7e893392d9d6b61620b1d8e1d112f1d7638825dcbb","ssdeep":"192:zKO0ZOYYb3YodG0axlK+b/SCMIUY7q/JafR2qyCHCmRUMhCNm/:zKva1naeCMUv0juhOm/","tlshash":"d862a4adacf321b95a77b1bd8bdf9509326560130408c9207d1c5a15efe8dbc6eb0bd8","size":14988,"data":"","first_seen":"2026-09-10T19:38:57.218779Z","last_seen":"2026-09-20T10:24:20.750275Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gorvulikent-app.com/js/deferred-load.js","fqdn":"gorvulikent-app.com","domain":"gorvulikent-app.com","tld":"com"},"ip":{"addr":"104.21.30.124","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"5242ff08228efcadaa301f204bd01d05","sha1":"733e6c4522b5b226b8dd223a3f145839e0e6301e","sha256":"c19363a73ff87d9a57b82a88439777c2bd520b16663194062a2d181cab8b9386","sha512":"cdb83c0b50f7f2fb48ee4180380bcb429d90e232ae6440c477cf47c428c42fc5950fd034f769d6ea150b75665d7798ab920f6ea7ea2886eb29ab639875c95594","ssdeep":"","tlshash":"bc21ad0c0dd2d475861320bb6a7bd398b6b154132015dc56389dca58ef20ffe99baed8","size":1257,"data":"","first_seen":"2026-09-10T19:38:57.240011Z","last_seen":"2026-09-20T10:24:20.75822Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gorvulikent-app.com/js/lucide-deferred.js","fqdn":"gorvulikent-app.com","domain":"gorvulikent-app.com","tld":"com"},"ip":{"addr":"104.21.30.124","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"47718b2fbcf880a3da6417b3053801b6","sha1":"b177ef96f53bd3732d6bf99c6419aea273479019","sha256":"9a66ae28bcb027ba34c6653dc31494ceba3eea91c3dce3bc7af89e64530e0e2e","sha512":"18f733a9de8f9aeafff10bfe848f54d29f4a5259fd82bc549903f35e680c327ca54cc3a1fd4c60bddd495ba80b196979cc1ad15933d9313f856aa41de26519e0","ssdeep":"192:r90jbQLxahKNSKBirKJMIX5MK15I2UfbMFaCq15R4Lo3:ra//rSXyeQbXC4L","tlshash":"e902bc3d8f8e226e8913e24dca17f0415f2c52b1b7caf81274edc572cb9642dc567aa4","size":8855,"data":"","first_seen":"2026-09-10T19:38:57.242624Z","last_seen":"2026-09-20T10:24:20.745669Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hetrsir.info/js/k.min.js","fqdn":"hetrsir.info","domain":"hetrsir.info","tld":"info"},"ip":{"addr":"104.21.70.229","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"1b04cf07b5f3feff818eb63dd6f351d2","sha1":"6e9f127c3e13fedfbf40e9c459c159c1ce63c59d","sha256":"99e99b3f49fc92d97a1bddd1ac43923d99bf51bff48c316a94dcd039218daff6","sha512":"525d8eacec0212c1df9d8d6b3d34dafc8527768a093a0eff2564f56c31cc043dbe6b95666e2e5ef2cc9bc5b1359f253fe7ae72f7f778c547d2dab3daf0326356","ssdeep":"192:kXGi1dfVz97mZBcmVPjnxiycVpByuMygKp:kWmdZfmVPjnxiByZyg8","tlshash":"18e175602540dcbd98e285361cafe52d7b679e2b3449450d7c58eec22f2ce07096bb79","size":6864,"data":"","first_seen":"2023-03-08T02:35:14Z","last_seen":"2026-09-20T10:24:20.749368Z","times_seen":305,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hetrsir.info/55SKkh3Q?return=jsonp\u0026\u0026se_referrer=\u0026default_keyword=Gorvulikent%20-%20Plateforme%20de%20Trading%20%7C%20Site%20Officiel%20%26%20Avis%20client\u0026landing_url=gorvulikent-app.com%2F","fqdn":"hetrsir.info","domain":"hetrsir.info","tld":"info"},"ip":{"addr":"104.21.70.229","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"3d6cc7dcfb8aa273af870652d1f220b1","sha1":"5f909aa34ab2db2bdad00a0f3289b5584c10f194","sha256":"d39bd1bf8a72f1fde2ea3b326b1fa4b220022d3a14b822492172a362d11fc74f","sha512":"0419f15962c951eeac693c0224bff0d42d75023157435e051c0229bfbfcfe0414c5a693d365439a14579fba2fd1d9281bd3dd91752feb1bb293017d92f33361a","ssdeep":"","tlshash":"15a0020444d10654578059e28c88d9c6179f416bcb91493b16051ed91ace13087211e6","size":60,"data":"","first_seen":"2026-09-10T19:38:57.226778Z","last_seen":"2026-09-10T19:38:57.226778Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gorvulikent-app.com/","fqdn":"gorvulikent-app.com","domain":"gorvulikent-app.com","tld":"com"},"ip":{"addr":"104.21.30.124","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"278727ae233a04e89b812f6980da2eb8","sha1":"ffc89aac2cb6ed453f50d41e9af52f508831d662","sha256":"22117225e284b6d906cc4e11d996350fec9606420f164a14b910a85a54593718","sha512":"a2a2b655744ee32bdb23c380ced46ee510167f5206009160f37b92f7cdef9a6289a248acb56be914ef3c354f465a4754b6dc7d23a52729fd4e5cf2e1c0f7e7da","ssdeep":"","tlshash":"db61312858c7b17a2b23b5644f3fbd417d74006b5c03e8103c8cea69cf2d41a89aaecc","size":3192,"data":"","first_seen":"2026-09-10T19:38:57.250206Z","last_seen":"2026-09-20T10:24:20.759735Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gorvulikent-app.com/","fqdn":"gorvulikent-app.com","domain":"gorvulikent-app.com","tld":"com"},"ip":{"addr":"104.21.30.124","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"dc5ba4eada200fd2bca9b4548a42a90a","sha1":"8b46be4cae3686db3cf7b0793948aa461726dd03","sha256":"b7c9e0029c1322039f174629c1df6176c328b1095d5654b50b2ad92bd87bf918","sha512":"1e6627215f8324763a96a9649eaaf07e0a166f71988c4d1a714dc1a3a6406b5e59b0fa5273091473cc107cb1f1107afccde58fd8baecf46755bc833265c17bb9","ssdeep":"","tlshash":"a111ce0ca8d7a475912330bf077fe38932b2060b501bc4123e8d9640ff21abd8979eac","size":927,"data":"","first_seen":"2026-09-10T19:38:57.252224Z","last_seen":"2026-09-20T10:24:20.760501Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gorvulikent-app.com/","fqdn":"gorvulikent-app.com","domain":"gorvulikent-app.com","tld":"com"},"ip":{"addr":"104.21.30.124","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"ab2823f06af06b9ff6de216adedb6abb","sha1":"d579fd361b63460135a8d3fe9412fe47bd65396f","sha256":"9a306c7764cde66ec12c91c681d9de48dc35b662d3fdd795b103289bcc86c493","sha512":"85b526be18da5eb836074bf1067c3a6f8779e6fe3f52ff888b5084703a7ce784e88bdd1837e82dab074535115f4228c790fbf25d12df1a05b9bd53c6c81b334f","ssdeep":"384:5y04qWjXCcDLB4mi86q4miT3+t0kWQu0QTrpyhpIPd4v5y+xsW:C6ttyy/+xsW","tlshash":"9082a59a20f32439447b71fd2b5ba65a713890037146cc9479cccf406fdab64aaf66ec","size":17922,"data":"","first_seen":"2026-09-10T19:38:57.254126Z","last_seen":"2026-09-10T19:38:57.254126Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gorvulikent-app.com/","fqdn":"gorvulikent-app.com","domain":"gorvulikent-app.com","tld":"com"},"ip":{"addr":"104.21.30.124","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"91d9625ccc4832749472223550ae78ff","sha1":"caac720e0c3d3568062d6da5b80ad0ebc6c9dd3c","sha256":"20f9a3a4ca1b5ddaa82ff100dd102bf89e48bd389c02a7ff33684cc8575e02f6","sha512":"1cf7c40a1ff2452da5bb857d210bb5ba517ce968890eaac026bcb489975f3ddfc7998e1d77962e5dfe2626371fd2f526abfb000832c3ca283d1791a1242f3fec","ssdeep":"","tlshash":"60118c0817a3283b40b736975adbdb89316640236158c8303f6ce9494f26b36e5ac7f8","size":1001,"data":"","first_seen":"2026-09-10T19:38:57.255884Z","last_seen":"2026-09-20T10:24:20.76256Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gorvulikent-app.com/js/deferred-lead.js","fqdn":"gorvulikent-app.com","domain":"gorvulikent-app.com","tld":"com"},"ip":{"addr":"104.21.30.124","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"bd675982f54e64aecf7a479a4cab3841","sha1":"29adb12d9736abe8183cb875e82f99515f227568","sha256":"43cbae002c6824f86a83bc17cf4554c679863745c38aac1bc3084d2cc2c2f5af","sha512":"b460dc5851b73369290a9999b3b93a65aa71db28c4994894c6843f898b0c3230319adabb4093ae960e3d01cd492acb07d0d89ff0b82b183b7d930b6b04fdf1d9","ssdeep":"","tlshash":"a111331d4d41d825853123bbaab7c16dffb919532121d19239adc008ff70aee5a20ee8","size":1033,"data":"","first_seen":"2026-09-10T19:38:57.232982Z","last_seen":"2026-09-20T10:24:20.746991Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"gorvulikent-app.com/img/flags/4x3/fr.svg","fqdn":"gorvulikent-app.com","domain":"gorvulikent-app.com","tld":"com"},"ip":{"addr":"104.21.30.124","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gorvulikent-app.com/","date":"2026-09-10T19:38:17.212Z","timestamp":1789069097212,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gorvulikent-app.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 30 Aug 2026 13:49:24 GMT","end":"Sat, 28 Nov 2026 14:46:50 GMT"},"fingerprint":{"sha1":"D6:8F:CF:75:84:67:58:CE:BF:D5:E8:1B:5C:B1:98:B7:F3:B4:9B:C4","sha256":"F9:31:B6:E7:A0:7A:77:18:EF:DE:83:C6:D0:AE:C2:F2:E1:CE:90:67:36:57:25:8F:52:5F:79:09:93:87:E9:F8"}}},"request":{"raw":"GET /img/flags/4x3/fr.svg HTTP/1.1\r\nHost: gorvulikent-app.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gorvulikent-app.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 10 Sep 2026 19:38:17 GMT\r\ncontent-type: image/svg+xml\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Thu, 02 Jul 2026 13:51:30 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xA5LNUTEQtIRWcXI6CONGYMd%2FdaDS1LLELod%2FnO%2FCGnITm70xLuOwFzGBSEsWj6MIfu8MSJ7Mg3gMgQk2A%2B%2FX5ALUDVdtkW2WEyPPPFOfoIQFb7e97xxOPLvBofgUlEzJQr%2B637L\"}]}\r\npriority: u=4,i\r\ncache-control: max-age=31536000\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\netag: W/\"6a466ce2-e7\"\r\ncf-ray: a390e461a9a5a15f-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":231,"size_decoded":844,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"bf4cae9b80cd98ef576670139bdb167d","sha1":"a761902c65cfdca4058ce0c9d5f8eac667cd6118","sha256":"8cdacc8d79bcf210cdca2777a2c0de1f9e5862526877bd3026c9d59ecdcd4578","sha512":"bb6b5de936dfdb7f7aea85e15d22ef5a15bbf020dd055d9d0423cd59972ab6aef642db2c522435b14cf92535432fa9ea1f7c31ee4eb5f01543dcda89d4292d83","ssdeep":"","tlshash":"5cd0a7a9d32da410c74447200a7c75c254a5f0c9a48411cbe890049522190f69cc39a5","first_seen":"2023-12-06T12:02:13Z","last_seen":"2026-09-20T10:24:20.753068Z","times_seen":2578,"resource_available":false,"data":null}},"time_used":331,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":331,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"gorvulikent-app.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-10","alert":"Phishing Block","trigger":"gorvulikent-app.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"gorvulikent-app.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"gorvulikent-app.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"gorvulikent-app.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hetrsir.info/js/k.min.js","fqdn":"hetrsir.info","domain":"hetrsir.info","tld":"info"},"ip":{"addr":"104.21.70.229","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gorvulikent-app.com/","date":"2026-09-10T19:38:17.861Z","timestamp":1789069097861,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hetrsir.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 31 Jul 2026 21:14:14 GMT","end":"Thu, 29 Oct 2026 22:13:00 GMT"},"fingerprint":{"sha1":"79:A8:AF:BB:36:A8:4A:55:3F:B5:00:6D:D9:BE:E9:A7:5D:8C:54:F2","sha256":"6C:37:CE:DF:98:AD:6F:6D:89:EC:17:59:1D:DA:F7:88:C6:3D:33:40:B3:2E:18:C6:76:E2:DA:CD:32:06:30:ED"}}},"request":{"raw":"GET /js/k.min.js HTTP/1.1\r\nHost: hetrsir.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gorvulikent-app.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 10 Sep 2026 19:38:23 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 19 May 2025 02:02:37 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Mj3s82ucxnzy8n0k8qZC9YVzTD0Cb9yfyANN7Sas3tTg1%2Bo%2BND%2FXcIMop%2BSAhk4AjHPe%2BzJDDpM5uvd8RzxjrkCZ0Suz6GbLIdHa0DfgndKKaQQ%2B8SdC611ZfKVcBIw%3D\"}]}\r\npriority: u=3,i=?0\r\netag: W/\"682a913d-1ad0\"\r\nexpires: Sun, 20 Sep 2026 19:38:22 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a390e4665b223ea3-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6864,"size_decoded":2998,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1030)","md5":"1b04cf07b5f3feff818eb63dd6f351d2","sha1":"6e9f127c3e13fedfbf40e9c459c159c1ce63c59d","sha256":"99e99b3f49fc92d97a1bddd1ac43923d99bf51bff48c316a94dcd039218daff6","sha512":"525d8eacec0212c1df9d8d6b3d34dafc8527768a093a0eff2564f56c31cc043dbe6b95666e2e5ef2cc9bc5b1359f253fe7ae72f7f778c547d2dab3daf0326356","ssdeep":"192:kXGi1dfVz97mZBcmVPjnxiycVpByuMygKp:kWmdZfmVPjnxiByZyg8","tlshash":"18e175602540dcbd98e285361cafe52d7b679e2b3449450d7c58eec22f2ce07096bb79","first_seen":"2023-03-08T02:35:14Z","last_seen":"2026-09-20T10:24:20.749368Z","times_seen":305,"resource_available":true,"data":null}},"time_used":5150,"timings":{"blocked":-1,"dns":68,"connect":32,"send":0,"wait":5050,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"hetrsir.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gorvulikent-app.com/img/favicon-16x16.png","fqdn":"gorvulikent-app.com","domain":"gorvulikent-app.com","tld":"com"},"ip":{"addr":"104.21.30.124","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gorvulikent-app.com/","date":"2026-09-10T19:38:18.247Z","timestamp":1789069098247,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gorvulikent-app.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 30 Aug 2026 13:49:24 GMT","end":"Sat, 28 Nov 2026 14:46:50 GMT"},"fingerprint":{"sha1":"D6:8F:CF:75:84:67:58:CE:BF:D5:E8:1B:5C:B1:98:B7:F3:B4:9B:C4","sha256":"F9:31:B6:E7:A0:7A:77:18:EF:DE:83:C6:D0:AE:C2:F2:E1:CE:90:67:36:57:25:8F:52:5F:79:09:93:87:E9:F8"}}},"request":{"raw":"GET /img/favicon-16x16.png HTTP/1.1\r\nHost: gorvulikent-app.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gorvulikent-app.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 10 Sep 2026 19:38:18 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Thu, 02 Jul 2026 14:33:49 GMT\r\netag: \"6a4676cd-214\"\r\naccept-ranges: bytes\r\ncache-control: max-age=31536000\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vIEOO6XjH1ssYRw6a7II3BE8BL9%2BZhgVuCjJDCMF4QqwJd3AWYaaBabFZdjN4%2BxgTPp58PAXGmEtASW1TliLmDKDhlWUuG0dpsO%2BzZsIIJQvenwq4bjFR%2BjAuGcogkwzDLUuWfSb\"}]}\r\ncf-ray: a390e4681a5ea15f-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 532\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":532,"size_decoded":1228,"mime_type":"image/png","magic":"PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced","md5":"dcd5b584009e2b3d7740b3818e1dbd94","sha1":"541095d25de2fc0b980159274f70cf2305a3d8e9","sha256":"54d97015378ddad29ba21427bf92e74fe9fe0275c53c1bce17740d266bcf3e6e","sha512":"7d15c0fbcf4c3858b212b0eca291cfec4b82894ec056080b43fd7640c70b5b61793149f62fda3df99d6cfc67c7780848d2d415923ea9cc2c33628c6d2a7976e9","ssdeep":"","tlshash":"f7f020fab222596adc0824a3db0173d18aa3e34a4340f4305305d22c2c48ef4be961aa","first_seen":"2026-09-10T19:38:57.213117Z","last_seen":"2026-09-10T19:38:57.213117Z","times_seen":1,"resource_available":false,"data":null}},"time_used":348,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":348,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"gorvulikent-app.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"gorvulikent-app.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"gorvulikent-app.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"gorvulikent-app.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-10","alert":"Phishing Block","trigger":"gorvulikent-app.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gorvulikent-app.com/css/tw.min.css","fqdn":"gorvulikent-app.com","domain":"gorvulikent-app.com","tld":"com"},"ip":{"addr":"104.21.30.124","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://gorvulikent-app.com/","date":"2026-09-10T19:38:22.654Z","timestamp":1789069102654,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gorvulikent-app.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 30 Aug 2026 13:49:24 GMT","end":"Sat, 28 Nov 2026 14:46:50 GMT"},"fingerprint":{"sha1":"D6:8F:CF:75:84:67:58:CE:BF:D5:E8:1B:5C:B1:98:B7:F3:B4:9B:C4","sha256":"F9:31:B6:E7:A0:7A:77:18:EF:DE:83:C6:D0:AE:C2:F2:E1:CE:90:67:36:57:25:8F:52:5F:79:09:93:87:E9:F8"}}},"request":{"raw":"GET /css/tw.min.css HTTP/1.1\r\nHost: gorvulikent-app.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gorvulikent-app.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 10 Sep 2026 19:38:23 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 02 Jul 2026 13:51:30 GMT\r\netag: W/\"6a466ce2-6669\"\r\ncontent-encoding: gzip\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=31536000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nxIrE7b4vXMDlSm%2FJDhaj2V6PH%2B3n87xu3OKdkubOp30EXpyOs0sqnJh%2BwRVZK1fbsJcNpLHEQgl1hMs%2FDo3ZkCIeEQTeEfjzUgq0cskd%2FoRJzIEwSn3f5fsL0UbYiGaUYeIm%2F1c\"}]}\r\npriority: u=2,i=?0\r\nvary: accept-encoding\r\ncf-ray: a390e483ad90a15f-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":26217,"size_decoded":7356,"mime_type":"text/css","magic":"ASCII text, with very long lines (26217), with no line terminators","md5":"00fb1af74892aa1f2b54b0b5653c2806","sha1":"5158194e77a5c2d388c02ca559d220290649b070","sha256":"ed466b58a528053b0184420072bf1d3f888d77f6b00e57160c4cb0c6342a4310","sha512":"f3ecf4ab1e44fcfb9295fe544a716bdd4b0473e27c5690486147071dcf9bb738790e7130c0332ec60e3fb861022d6cb51cbf6485ab4b2d5fb8449b6be9bfb47b","ssdeep":"384:GHL7Gba+WdP36Gja5LkIN2fQmUgFE/0/tZN8/N:GHGba/36CfQ6ZNEN","tlshash":"5cc2975e6b61013fbc1790e5d6e8ba9cf41af0c2de3a53faae8211016fe23f61c56504","first_seen":"2026-09-10T19:38:57.215834Z","last_seen":"2026-09-20T10:24:20.75898Z","times_seen":5,"resource_available":true,"data":null}},"time_used":406,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":406,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"gorvulikent-app.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"gorvulikent-app.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"gorvulikent-app.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"gorvulikent-app.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-10","alert":"Phishing Block","trigger":"gorvulikent-app.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gorvulikent-app.com/js/send.js?v=3.3.13","fqdn":"gorvulikent-app.com","domain":"gorvulikent-app.com","tld":"com"},"ip":{"addr":"104.21.30.124","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gorvulikent-app.com/","date":"2026-09-10T19:38:18.479Z","timestamp":1789069098479,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gorvulikent-app.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 30 Aug 2026 13:49:24 GMT","end":"Sat, 28 Nov 2026 14:46:50 GMT"},"fingerprint":{"sha1":"D6:8F:CF:75:84:67:58:CE:BF:D5:E8:1B:5C:B1:98:B7:F3:B4:9B:C4","sha256":"F9:31:B6:E7:A0:7A:77:18:EF:DE:83:C6:D0:AE:C2:F2:E1:CE:90:67:36:57:25:8F:52:5F:79:09:93:87:E9:F8"}}},"request":{"raw":"GET /js/send.js?v=3.3.13 HTTP/1.1\r\nHost: gorvulikent-app.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gorvulikent-app.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 10 Sep 2026 19:38:18 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Wed, 29 Jul 2026 14:32:05 GMT\r\netag: W/\"6a6a0ee5-3a8c\"\r\ncontent-encoding: gzip\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=31536000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Z2rCTpxT9NJjuSRMipmOdkeBITupUi%2BTD%2FO4%2FsGOf2WUszvaCZ2%2BaYDFAZ8gtT4l8CSVnmnohH%2FhLapKL7QaSq4UKbatO2ikHEU96jQzqwWITnqt327zpLDerEmHVsrzZ5bqpAAm\"}]}\r\npriority: u=3,i=?0\r\nvary: accept-encoding\r\ncf-ray: a390e4698a8da15f-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14988,"size_decoded":4946,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text","md5":"94672d7eadb211f0da36dc7fa88c515c","sha1":"531221f77086d3b53891ffb2453d2e02fadf38ac","sha256":"4a333d4231adb1e2113681eb8453a2dfbf737edaf919258d30132748306c145d","sha512":"31c518502b441fda6a89161419392b4d5bcc7ea893c87bfecdff2be8786d8ab2aa9b043ca1fb39a76a1aab7e893392d9d6b61620b1d8e1d112f1d7638825dcbb","ssdeep":"192:zKO0ZOYYb3YodG0axlK+b/SCMIUY7q/JafR2qyCHCmRUMhCNm/:zKva1naeCMUv0juhOm/","tlshash":"d862a4adacf321b95a77b1bd8bdf9509326560130408c9207d1c5a15efe8dbc6eb0bd8","first_seen":"2026-09-10T19:38:57.218779Z","last_seen":"2026-09-20T10:24:20.750275Z","times_seen":5,"resource_available":true,"data":null}},"time_used":445,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":445,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"gorvulikent-app.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-10","alert":"Phishing Block","trigger":"gorvulikent-app.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"gorvulikent-app.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"gorvulikent-app.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"gorvulikent-app.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gorvulikent-app.com/img/gorvulikent.webp","fqdn":"gorvulikent-app.com","domain":"gorvulikent-app.com","tld":"com"},"ip":{"addr":"104.21.30.124","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gorvulikent-app.com/","date":"2026-09-10T19:38:17.209Z","timestamp":1789069097209,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gorvulikent-app.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 30 Aug 2026 13:49:24 GMT","end":"Sat, 28 Nov 2026 14:46:50 GMT"},"fingerprint":{"sha1":"D6:8F:CF:75:84:67:58:CE:BF:D5:E8:1B:5C:B1:98:B7:F3:B4:9B:C4","sha256":"F9:31:B6:E7:A0:7A:77:18:EF:DE:83:C6:D0:AE:C2:F2:E1:CE:90:67:36:57:25:8F:52:5F:79:09:93:87:E9:F8"}}},"request":{"raw":"GET /img/gorvulikent.webp HTTP/1.1\r\nHost: gorvulikent-app.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gorvulikent-app.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 10 Sep 2026 19:38:17 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Thu, 02 Jul 2026 14:33:49 GMT\r\netag: \"6a4676cd-22cc\"\r\naccept-ranges: bytes\r\ncache-control: max-age=31536000\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=twjHtRI2HrnXZmYM3DRwsOPQERSiAwVMh3J7nXw05HvBgI0yQsIII%2FkR%2BsV9eQUwZ5YhO2Ldp7GTpzJyA%2BPRRI5%2BdS9oj3SwcicCErueVnmn85z3%2B%2F5uYWwxm0yQya8vgmg0fYdR\"}]}\r\ncf-ray: a390e46199a3a15f-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 8908\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8908,"size_decoded":9608,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 512x512, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"485d22a60af8c90b4fd764062dac1a7f","sha1":"8ffa2d814c5258c954e67dabb1580746d201b30c","sha256":"6601d8099bca810e1455706dd3f312cac85c414136c59bbddb354ba86116f7b9","sha512":"2e770f78531ed3a12c500af4967cf3c68124d497bfd2b93126db3d5fe8b65d2b9d3dcc24ad2bbcc4de32a0ede75dce3760dcf80105eefb2691eeec4dc05fd69b","ssdeep":"192:hGqZhPp3syYhAFHi8mDG5b6GAwdW//VfRI5QqgLAGSXZv:7RShWhmevaXVfa5+Sl","tlshash":"7d029ec2f05e28d77a423739b7bd4247220f71fe602aaf15bada634241f5e8499d6c80","first_seen":"2026-09-10T19:38:57.222677Z","last_seen":"2026-09-10T19:38:57.222677Z","times_seen":1,"resource_available":false,"data":null}},"time_used":419,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":419,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"gorvulikent-app.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"gorvulikent-app.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"gorvulikent-app.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-10","alert":"Phishing Block","trigger":"gorvulikent-app.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"gorvulikent-app.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gorvulikent-app.com/js/intlTelInput-utils.js","fqdn":"gorvulikent-app.com","domain":"gorvulikent-app.com","tld":"com"},"ip":{"addr":"104.21.30.124","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gorvulikent-app.com/","date":"2026-09-10T19:38:18.045Z","timestamp":1789069098045,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gorvulikent-app.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 30 Aug 2026 13:49:24 GMT","end":"Sat, 28 Nov 2026 14:46:50 GMT"},"fingerprint":{"sha1":"D6:8F:CF:75:84:67:58:CE:BF:D5:E8:1B:5C:B1:98:B7:F3:B4:9B:C4","sha256":"F9:31:B6:E7:A0:7A:77:18:EF:DE:83:C6:D0:AE:C2:F2:E1:CE:90:67:36:57:25:8F:52:5F:79:09:93:87:E9:F8"}}},"request":{"raw":"GET /js/intlTelInput-utils.js HTTP/1.1\r\nHost: gorvulikent-app.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gorvulikent-app.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 10 Sep 2026 19:38:18 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Thu, 02 Jul 2026 13:51:30 GMT\r\netag: W/\"6a466ce2-3edab\"\r\ncontent-encoding: gzip\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=31536000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ncYDkdhUkNLI%2FSdygGvQGbgVJh39gt7iio1AGE%2FfFX4bsLNKJ8kM3eJ7vrgWgqQoEr8SI9cJtNgABY%2B%2FQvs80DI1BGoB2Fu%2B%2B7zGDTJ8imSB%2B1eK06MSv2MJE7uFAQahtcsn3NXY\"}]}\r\npriority: u=3,i=?0\r\nvary: accept-encoding\r\ncf-ray: a390e466da39a15f-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":257451,"size_decoded":77597,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (1454)","md5":"9ca8f21908a2aad7182bad4a10cce478","sha1":"89170581c7099479bc6659554c767298738c4ec5","sha256":"c3e86718e42d1424af1544109482ff4ba7443cfc1349106485a2853ab7040b69","sha512":"57bf31817e106ec9d330eb9f279e245b362919ba6bbaa4355939187062a4fa70cb79567bc8075b9958960fe82c48a4d937a05a2509645b7d81205a78ac0f1cc3","ssdeep":"3072:hHS30w8yAJjFs3OwPss3MwPgmAu9I2xVM8Mq8WXnWcBpUsA56kmLNTg/QKWVk/tA:hHS3qzBwfxVM8Mq88uA","tlshash":"7e44e1ebd63c9737a1d97b35968eb3cd5a8cbca3c848567826c3b54f52788e0706c205","first_seen":"2024-01-30T04:35:53Z","last_seen":"2026-09-20T10:24:20.754423Z","times_seen":314,"resource_available":true,"data":null}},"time_used":410,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":366,"receive":44,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"gorvulikent-app.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"gorvulikent-app.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-10","alert":"Phishing Block","trigger":"gorvulikent-app.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"gorvulikent-app.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"gorvulikent-app.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hetrsir.info/55SKkh3Q?return=jsonp\u0026\u0026se_referrer=\u0026default_keyword=Gorvulikent%20-%20Plateforme%20de%20Trading%20%7C%20Site%20Officiel%20%26%20Avis%20client\u0026landing_url=gorvulikent-app.com%2F","fqdn":"hetrsir.info","domain":"hetrsir.info","tld":"info"},"ip":{"addr":"104.21.70.229","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gorvulikent-app.com/","date":"2026-09-10T19:38:23.106Z","timestamp":1789069103106,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hetrsir.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 31 Jul 2026 21:14:14 GMT","end":"Thu, 29 Oct 2026 22:13:00 GMT"},"fingerprint":{"sha1":"79:A8:AF:BB:36:A8:4A:55:3F:B5:00:6D:D9:BE:E9:A7:5D:8C:54:F2","sha256":"6C:37:CE:DF:98:AD:6F:6D:89:EC:17:59:1D:DA:F7:88:C6:3D:33:40:B3:2E:18:C6:76:E2:DA:CD:32:06:30:ED"}}},"request":{"raw":"GET /55SKkh3Q?return=jsonp\u0026\u0026se_referrer=\u0026default_keyword=Gorvulikent%20-%20Plateforme%20de%20Trading%20%7C%20Site%20Officiel%20%26%20Avis%20client\u0026landing_url=gorvulikent-app.com%2F HTTP/1.1\r\nHost: hetrsir.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gorvulikent-app.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 10 Sep 2026 19:38:26 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncache-control: no-cache, no-store, must-revalidate\r\nexpires: Thu, 10 Sep 2026 19:38:25 GMT\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=u6biimqgHhhgMPrpQVuTKY1tbCjci3GzT6AvhFKCVjDmiHosFKxvwERGDPn%2FlcckAdxzrFvdLxEohJnjcWoCk98YZ7Pa8oXYd44M90JyDZJmHI1SGCqJCWT6BqCESrM%3D\"}]}\r\ncontent-encoding: zstd\r\ncf-ray: a390e4867f083ea3-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":60,"size_decoded":811,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"3d6cc7dcfb8aa273af870652d1f220b1","sha1":"5f909aa34ab2db2bdad00a0f3289b5584c10f194","sha256":"d39bd1bf8a72f1fde2ea3b326b1fa4b220022d3a14b822492172a362d11fc74f","sha512":"0419f15962c951eeac693c0224bff0d42d75023157435e051c0229bfbfcfe0414c5a693d365439a14579fba2fd1d9281bd3dd91752feb1bb293017d92f33361a","ssdeep":"","tlshash":"15a0020444d10654578059e28c88d9c6179f416bcb91493b16051ed91ace13087211e6","first_seen":"2026-09-10T19:38:57.226778Z","last_seen":"2026-09-10T19:38:57.226778Z","times_seen":1,"resource_available":true,"data":null}},"time_used":3045,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3045,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"hetrsir.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gorvulikent-app.com/","fqdn":"gorvulikent-app.com","domain":"gorvulikent-app.com","tld":"com"},"ip":{"addr":"104.21.30.124","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-10T19:38:16.527Z","timestamp":1789069096527,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gorvulikent-app.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 30 Aug 2026 13:49:24 GMT","end":"Sat, 28 Nov 2026 14:46:50 GMT"},"fingerprint":{"sha1":"D6:8F:CF:75:84:67:58:CE:BF:D5:E8:1B:5C:B1:98:B7:F3:B4:9B:C4","sha256":"F9:31:B6:E7:A0:7A:77:18:EF:DE:83:C6:D0:AE:C2:F2:E1:CE:90:67:36:57:25:8F:52:5F:79:09:93:87:E9:F8"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: gorvulikent-app.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 10 Sep 2026 19:38:16 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nx-powered-by: PHP/8.3.17\r\nvary: Accept-Encoding\r\npriority: u=0,i\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=u4r2evrYZAs1oIlUsnvfpsuFPDI8EMltbC5XvksBSCBKUv%2FIvk%2BQaKS7dJAInb202C8Bmp9EUhlixMzrFi%2F2nkmAbFE2jntCRgm4fImr6xhwuD47uIK4HBbL5EDQwATiE%2FfysrZD\"}]}\r\ncontent-encoding: zstd\r\ncf-ray: a390e45dc93ea15f-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP:8.3.17","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":144197,"size_decoded":31495,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1939), with CRLF, LF line terminators","md5":"b85a712cbceef9cc94ea223e932403fa","sha1":"98327a36dd57e50219b6d0dc0ec245d38b296d06","sha256":"27a8ca9945b6d002479fe31036f66c968c791408a734e687bcede8fc6836a23f","sha512":"9613375b14c8800714cb83ca12da5f4c8d1ebf65017fff69f76dddd970369708836cef815432fc43480bbdee813ae44ab110f4d30a9fd95692e24bb0c840c173","ssdeep":"768:MQyBDv2uN3Pp8HYtcx8qZNBL8vR8rPYnq9mfLvLsc1ZwhUkVq1Ahsk2Yl1Quy2Dc:M5Pp8HcKksSvsc1ZsIrJkJ2/7thnCK","tlshash":"62e3e615a0f2157e404391f4bba6ab1aa978c207d50bca2cb6dc82911fc7fe5dd973c8","first_seen":"2026-09-10T19:38:57.229235Z","last_seen":"2026-09-10T19:38:57.229235Z","times_seen":1,"resource_available":true,"data":null}},"time_used":510,"timings":{"blocked":-1,"dns":22,"connect":37,"send":0,"wait":410,"receive":41,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"gorvulikent-app.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"gorvulikent-app.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"gorvulikent-app.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-10","alert":"Phishing Block","trigger":"gorvulikent-app.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"gorvulikent-app.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gorvulikent-app.com/js/deferred-lead.js","fqdn":"gorvulikent-app.com","domain":"gorvulikent-app.com","tld":"com"},"ip":{"addr":"104.21.30.124","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gorvulikent-app.com/","date":"2026-09-10T19:38:17.204Z","timestamp":1789069097204,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gorvulikent-app.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 30 Aug 2026 13:49:24 GMT","end":"Sat, 28 Nov 2026 14:46:50 GMT"},"fingerprint":{"sha1":"D6:8F:CF:75:84:67:58:CE:BF:D5:E8:1B:5C:B1:98:B7:F3:B4:9B:C4","sha256":"F9:31:B6:E7:A0:7A:77:18:EF:DE:83:C6:D0:AE:C2:F2:E1:CE:90:67:36:57:25:8F:52:5F:79:09:93:87:E9:F8"}}},"request":{"raw":"GET /js/deferred-lead.js HTTP/1.1\r\nHost: gorvulikent-app.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gorvulikent-app.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 10 Sep 2026 19:38:17 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Wed, 29 Jul 2026 14:32:05 GMT\r\netag: W/\"6a6a0ee5-409\"\r\ncontent-encoding: gzip\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=31536000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WsgJHmt4yeCk9X2NvziA%2F8EU8HZ5h3ZfhLGiGhVBNAAzOvrc5aaBRMLLTEtL1ABO6nEq4K0P1Za6eMK%2BBDw45JASnvoKdurOuS%2BsafFY%2BQyhI%2BnilqC0hNSFjyMY5cV%2FLoNarKPb\"}]}\r\npriority: u=3,i=?0\r\nvary: accept-encoding\r\ncf-ray: a390e46199a1a15f-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1033,"size_decoded":1224,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"bd675982f54e64aecf7a479a4cab3841","sha1":"29adb12d9736abe8183cb875e82f99515f227568","sha256":"43cbae002c6824f86a83bc17cf4554c679863745c38aac1bc3084d2cc2c2f5af","sha512":"b460dc5851b73369290a9999b3b93a65aa71db28c4994894c6843f898b0c3230319adabb4093ae960e3d01cd492acb07d0d89ff0b82b183b7d930b6b04fdf1d9","ssdeep":"","tlshash":"a111331d4d41d825853123bbaab7c16dffb919532121d19239adc008ff70aee5a20ee8","first_seen":"2026-09-10T19:38:57.232982Z","last_seen":"2026-09-20T10:24:20.746991Z","times_seen":5,"resource_available":true,"data":null}},"time_used":423,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":423,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"gorvulikent-app.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"gorvulikent-app.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"gorvulikent-app.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"gorvulikent-app.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-10","alert":"Phishing Block","trigger":"gorvulikent-app.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gorvulikent-app.com/js/intlTelInput.min.js","fqdn":"gorvulikent-app.com","domain":"gorvulikent-app.com","tld":"com"},"ip":{"addr":"104.21.30.124","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gorvulikent-app.com/","date":"2026-09-10T19:38:17.635Z","timestamp":1789069097635,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gorvulikent-app.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 30 Aug 2026 13:49:24 GMT","end":"Sat, 28 Nov 2026 14:46:50 GMT"},"fingerprint":{"sha1":"D6:8F:CF:75:84:67:58:CE:BF:D5:E8:1B:5C:B1:98:B7:F3:B4:9B:C4","sha256":"F9:31:B6:E7:A0:7A:77:18:EF:DE:83:C6:D0:AE:C2:F2:E1:CE:90:67:36:57:25:8F:52:5F:79:09:93:87:E9:F8"}}},"request":{"raw":"GET /js/intlTelInput.min.js HTTP/1.1\r\nHost: gorvulikent-app.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gorvulikent-app.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 10 Sep 2026 19:38:18 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Thu, 02 Jul 2026 13:51:30 GMT\r\netag: W/\"6a466ce2-80b7\"\r\ncontent-encoding: gzip\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=31536000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cKV6dLlJBNJu8AJ7%2Bkutx8iRkX5cQu0rnS8Q94zsB%2FhSIVP%2BnNfKNyYgxG2NIEruNplaSEQKV5XA79rpGPvXruzCJ4FI5xZMOWg3Y%2BcNHCTh5srC8K81iropXujZ1XJQtD5osb8W\"}]}\r\npriority: u=3,i=?0\r\nvary: accept-encoding\r\ncf-ray: a390e4644a07a15f-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":32951,"size_decoded":13428,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (27816)","md5":"6eb09b87575184fbf793b6c76b0b3b5a","sha1":"8449eed53e8d70da2dc33f361fdb93275062233a","sha256":"31a653d3eef4fee8a0f663943e6da108d433da1103312e7ecca6fabea7dc7048","sha512":"b50af2b637df4d7184d2178cae587fadff4bf1d3fde94e54ee5ad90c31a8dc397143e3763910374388b5facee882bc5db06ca15f18b8049c2fbc9804a4730a5d","ssdeep":"768:LCg3rXNC+I4SAGFdGcUNm//OjJqLRIyH16v4rEIr32Cq+R:Bk3GcL//LL1TEIrGCZ","tlshash":"58e208edb3516633acad91b164bb12476ebf34005684989c787dcdc81eecec960b6b34","first_seen":"2024-02-27T18:01:35Z","last_seen":"2026-09-20T10:24:20.753788Z","times_seen":113,"resource_available":true,"data":null}},"time_used":400,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":400,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"gorvulikent-app.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-10","alert":"Phishing Block","trigger":"gorvulikent-app.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"gorvulikent-app.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"gorvulikent-app.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"gorvulikent-app.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gorvulikent-app.com/img/apple-touch-icon.png","fqdn":"gorvulikent-app.com","domain":"gorvulikent-app.com","tld":"com"},"ip":{"addr":"104.21.30.124","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gorvulikent-app.com/","date":"2026-09-10T19:38:18.245Z","timestamp":1789069098245,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gorvulikent-app.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 30 Aug 2026 13:49:24 GMT","end":"Sat, 28 Nov 2026 14:46:50 GMT"},"fingerprint":{"sha1":"D6:8F:CF:75:84:67:58:CE:BF:D5:E8:1B:5C:B1:98:B7:F3:B4:9B:C4","sha256":"F9:31:B6:E7:A0:7A:77:18:EF:DE:83:C6:D0:AE:C2:F2:E1:CE:90:67:36:57:25:8F:52:5F:79:09:93:87:E9:F8"}}},"request":{"raw":"GET /img/apple-touch-icon.png HTTP/1.1\r\nHost: gorvulikent-app.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gorvulikent-app.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 10 Sep 2026 19:38:18 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 02 Jul 2026 14:33:49 GMT\r\netag: W/\"6a4676cd-620b\"\r\ncontent-encoding: gzip\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=31536000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6pweAYSk0%2FfSdU8SOv%2F%2B%2F81S30sMnMno2337sc%2BjXFU17XID%2BJ5QdxAGGX9GfeZKKRpLkdKxEhn8sjFdMt2rh1InU%2B6t9z%2BjuVFrEH%2BcrCAYwkTJE9wmbr3T4HL2mpExIM9EQCjD\"}]}\r\npriority: u=6,i=?0\r\nvary: accept-encoding\r\ncf-ray: a390e4681a5da15f-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":25099,"size_decoded":25840,"mime_type":"image/png","magic":"PNG image data, 180 x 180, 8-bit/color RGBA, non-interlaced","md5":"0987ebb84b05937167a06d7fa8683f62","sha1":"70122ecc0d4a897b67e37d7cb4a97a280a8f98b5","sha256":"8115e8cd72f9ba8a07198a22b19c6be9774e12198a4dcf94a1cc6473c7301559","sha512":"bf66389ea751306fc186a86adab927f539fb2ffa88e71790ae2fbb51a59ea563734097057a6afc55b9306b4a678c43a0b7db88fc56643c328674fd8c8e7d33d5","ssdeep":"384:1PiNVy1AJqkPUK3B+LNt+mBqWdDQvWplaFjP+CjsNwxBCYFlthbotuh7:qVDzPRB5mBnEK+CCINABlFNh7","tlshash":"4db2e07e0e9ab036e98eff94c854c927101f2cfbd9d9960466cca79676033a76015cb3","first_seen":"2026-09-10T19:38:57.236727Z","last_seen":"2026-09-10T19:38:57.236727Z","times_seen":1,"resource_available":false,"data":null}},"time_used":510,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":509,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"gorvulikent-app.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"gorvulikent-app.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-10","alert":"Phishing Block","trigger":"gorvulikent-app.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"gorvulikent-app.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"gorvulikent-app.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gorvulikent-app.com/js/deferred-load.js","fqdn":"gorvulikent-app.com","domain":"gorvulikent-app.com","tld":"com"},"ip":{"addr":"104.21.30.124","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gorvulikent-app.com/","date":"2026-09-10T19:38:22.189Z","timestamp":1789069102189,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gorvulikent-app.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 30 Aug 2026 13:49:24 GMT","end":"Sat, 28 Nov 2026 14:46:50 GMT"},"fingerprint":{"sha1":"D6:8F:CF:75:84:67:58:CE:BF:D5:E8:1B:5C:B1:98:B7:F3:B4:9B:C4","sha256":"F9:31:B6:E7:A0:7A:77:18:EF:DE:83:C6:D0:AE:C2:F2:E1:CE:90:67:36:57:25:8F:52:5F:79:09:93:87:E9:F8"}}},"request":{"raw":"GET /js/deferred-load.js HTTP/1.1\r\nHost: gorvulikent-app.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gorvulikent-app.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 10 Sep 2026 19:38:22 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Thu, 02 Jul 2026 13:51:30 GMT\r\netag: W/\"6a466ce2-4e9\"\r\ncontent-encoding: gzip\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=31536000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ILOkk6KSDbjWap57WuBD1X9iET1xQEPL9pafFTf3zJXVClPz8InndEwIUY75FU87qZO1q4KnpP0B3wWSDysguqvSdvwm%2Bmr%2Bn8EJ%2BXWCK7QcAXppJDPyTwk0jwRBs91dEPBXmdwK\"}]}\r\npriority: u=3,i=?0\r\nvary: accept-encoding\r\ncf-ray: a390e480bd44a15f-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1257,"size_decoded":1300,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text","md5":"5242ff08228efcadaa301f204bd01d05","sha1":"733e6c4522b5b226b8dd223a3f145839e0e6301e","sha256":"c19363a73ff87d9a57b82a88439777c2bd520b16663194062a2d181cab8b9386","sha512":"cdb83c0b50f7f2fb48ee4180380bcb429d90e232ae6440c477cf47c428c42fc5950fd034f769d6ea150b75665d7798ab920f6ea7ea2886eb29ab639875c95594","ssdeep":"","tlshash":"bc21ad0c0dd2d475861320bb6a7bd398b6b154132015dc56389dca58ef20ffe99baed8","first_seen":"2026-09-10T19:38:57.240011Z","last_seen":"2026-09-20T10:24:20.75822Z","times_seen":5,"resource_available":true,"data":null}},"time_used":459,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":459,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"gorvulikent-app.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"gorvulikent-app.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"gorvulikent-app.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-10","alert":"Phishing Block","trigger":"gorvulikent-app.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"gorvulikent-app.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gorvulikent-app.com/js/lucide-deferred.js","fqdn":"gorvulikent-app.com","domain":"gorvulikent-app.com","tld":"com"},"ip":{"addr":"104.21.30.124","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gorvulikent-app.com/","date":"2026-09-10T19:38:22.656Z","timestamp":1789069102656,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gorvulikent-app.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 30 Aug 2026 13:49:24 GMT","end":"Sat, 28 Nov 2026 14:46:50 GMT"},"fingerprint":{"sha1":"D6:8F:CF:75:84:67:58:CE:BF:D5:E8:1B:5C:B1:98:B7:F3:B4:9B:C4","sha256":"F9:31:B6:E7:A0:7A:77:18:EF:DE:83:C6:D0:AE:C2:F2:E1:CE:90:67:36:57:25:8F:52:5F:79:09:93:87:E9:F8"}}},"request":{"raw":"GET /js/lucide-deferred.js HTTP/1.1\r\nHost: gorvulikent-app.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gorvulikent-app.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 10 Sep 2026 19:38:22 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Thu, 02 Jul 2026 13:51:30 GMT\r\netag: W/\"6a466ce2-2297\"\r\ncontent-encoding: gzip\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=31536000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tTN%2FU3AfxkVsRwg2SxhbYwloSK%2F7ZIkNRnAAAmYIMYEIoLWe5cDVZApMmVnC6pf%2Bl20XYJYz3GdWdZRePr4PlNcZCcnScnVCBpPsjF%2F6mSTrlSkRAuj1EbB6bf2pp5QMbDDyjyXf\"}]}\r\npriority: u=3,i=?0\r\nvary: accept-encoding\r\ncf-ray: a390e483ad91a15f-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8855,"size_decoded":4128,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (604)","md5":"47718b2fbcf880a3da6417b3053801b6","sha1":"b177ef96f53bd3732d6bf99c6419aea273479019","sha256":"9a66ae28bcb027ba34c6653dc31494ceba3eea91c3dce3bc7af89e64530e0e2e","sha512":"18f733a9de8f9aeafff10bfe848f54d29f4a5259fd82bc549903f35e680c327ca54cc3a1fd4c60bddd495ba80b196979cc1ad15933d9313f856aa41de26519e0","ssdeep":"192:r90jbQLxahKNSKBirKJMIX5MK15I2UfbMFaCq15R4Lo3:ra//rSXyeQbXC4L","tlshash":"e902bc3d8f8e226e8913e24dca17f0415f2c52b1b7caf81274edc572cb9642dc567aa4","first_seen":"2026-09-10T19:38:57.242624Z","last_seen":"2026-09-20T10:24:20.745669Z","times_seen":5,"resource_available":true,"data":null}},"time_used":141,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":141,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"gorvulikent-app.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"gorvulikent-app.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"gorvulikent-app.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"gorvulikent-app.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-10","alert":"Phishing Block","trigger":"gorvulikent-app.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hetrsir.info/55SKkh3Q?_update_tokens=1\u0026sub_id=19h2eob15imk2\u0026sub_id_1=form\u0026sub_id_15=https%3A%2F%2Fgorvulikent-app.com%2F\u0026sub_id_16=Gorvulikent","fqdn":"hetrsir.info","domain":"hetrsir.info","tld":"info"},"ip":{"addr":"104.21.70.229","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gorvulikent-app.com/","date":"2026-09-10T19:38:26.160Z","timestamp":1789069106160,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hetrsir.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 31 Jul 2026 21:14:14 GMT","end":"Thu, 29 Oct 2026 22:13:00 GMT"},"fingerprint":{"sha1":"79:A8:AF:BB:36:A8:4A:55:3F:B5:00:6D:D9:BE:E9:A7:5D:8C:54:F2","sha256":"6C:37:CE:DF:98:AD:6F:6D:89:EC:17:59:1D:DA:F7:88:C6:3D:33:40:B3:2E:18:C6:76:E2:DA:CD:32:06:30:ED"}}},"request":{"raw":"GET /55SKkh3Q?_update_tokens=1\u0026sub_id=19h2eob15imk2\u0026sub_id_1=form\u0026sub_id_15=https%3A%2F%2Fgorvulikent-app.com%2F\u0026sub_id_16=Gorvulikent HTTP/1.1\r\nHost: hetrsir.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gorvulikent-app.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 10 Sep 2026 19:38:27 GMT\r\nserver-timing: cfExtPri\r\npriority: u=3,i=?0\r\ncache-control: no-cache, no-store, must-revalidate\r\nexpires: Thu, 10 Sep 2026 19:38:26 GMT\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=eQBfyM1EDjFLqUyTqpLh7HsAo8o3lKAhB1oRkM%2Fpygd2NHdRjYmaF2dxiEC1vTUfTIK%2BYyTbhqNxgUjj1R3X830uQo7iHtzQSTcvFf8EWMt%2FpRNu757%2FNxOLA6Twz60%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a390e499d9243ea3-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":690,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-20T13:41:55.768983Z","times_seen":18568611,"resource_available":true,"data":null}},"time_used":1070,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":1070,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"hetrsir.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gorvulikent-app.com/js/keitaro-tracker.js","fqdn":"gorvulikent-app.com","domain":"gorvulikent-app.com","tld":"com"},"ip":{"addr":"104.21.30.124","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gorvulikent-app.com/","date":"2026-09-10T19:38:17.202Z","timestamp":1789069097202,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gorvulikent-app.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 30 Aug 2026 13:49:24 GMT","end":"Sat, 28 Nov 2026 14:46:50 GMT"},"fingerprint":{"sha1":"D6:8F:CF:75:84:67:58:CE:BF:D5:E8:1B:5C:B1:98:B7:F3:B4:9B:C4","sha256":"F9:31:B6:E7:A0:7A:77:18:EF:DE:83:C6:D0:AE:C2:F2:E1:CE:90:67:36:57:25:8F:52:5F:79:09:93:87:E9:F8"}}},"request":{"raw":"GET /js/keitaro-tracker.js HTTP/1.1\r\nHost: gorvulikent-app.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gorvulikent-app.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 10 Sep 2026 19:38:17 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Wed, 29 Jul 2026 14:32:05 GMT\r\netag: W/\"6a6a0ee5-2e12\"\r\ncontent-encoding: gzip\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=31536000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wh5F8T4lDW8ynXdRiiBYAXhv2ACZu6oW7%2Ber76Xw1Oswn%2BtYb5sXn%2BBBJwNmpjjzcmmwCCFVcPqso41we6vUZ%2Fu0t32lwbXSjY1TTk3j83uG94kOVWbKZeys46qW87XM5GPdlfvH\"}]}\r\npriority: u=3,i=?0\r\nvary: accept-encoding\r\ncf-ray: a390e46199a0a15f-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11794,"size_decoded":4220,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text","md5":"daf31ec89cec2f4e2ddeaaf36e918033","sha1":"e178d51b5819936af58c8eb174c7afea70fe76e4","sha256":"1f3f087040c9a4b05b177a4abcc97916fc12af45a3c957c42dccb4fafa34139e","sha512":"125d9d3490151394342010f2c3e45f3303b02a85972fb1cf8b7c976af0f65e63be7f45f3c95e3c9866f79178a96adedb11b7a163170f915f8b26add73f3815d6","ssdeep":"192:cmpxQlI3qZ0VbPaLuEkM1DwE2Xg+MQCyNItQCw79tyH+brREpIErWbvpp7dQr95w:vQleWuL0nH4B","tlshash":"7c322d5d3cf3a0b55a23307c8bbf81183a799403200add50bd0db655afa9d6946b6fdc","first_seen":"2026-09-10T19:38:57.246225Z","last_seen":"2026-09-20T10:24:20.755864Z","times_seen":5,"resource_available":true,"data":null}},"time_used":466,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":466,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"gorvulikent-app.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"gorvulikent-app.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"gorvulikent-app.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"gorvulikent-app.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-10","alert":"Phishing Block","trigger":"gorvulikent-app.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gorvulikent-app.com/img/logo-header.webp","fqdn":"gorvulikent-app.com","domain":"gorvulikent-app.com","tld":"com"},"ip":{"addr":"104.21.30.124","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gorvulikent-app.com/","date":"2026-09-10T19:38:17.207Z","timestamp":1789069097207,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gorvulikent-app.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 30 Aug 2026 13:49:24 GMT","end":"Sat, 28 Nov 2026 14:46:50 GMT"},"fingerprint":{"sha1":"D6:8F:CF:75:84:67:58:CE:BF:D5:E8:1B:5C:B1:98:B7:F3:B4:9B:C4","sha256":"F9:31:B6:E7:A0:7A:77:18:EF:DE:83:C6:D0:AE:C2:F2:E1:CE:90:67:36:57:25:8F:52:5F:79:09:93:87:E9:F8"}}},"request":{"raw":"GET /img/logo-header.webp HTTP/1.1\r\nHost: gorvulikent-app.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gorvulikent-app.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 10 Sep 2026 19:38:17 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Thu, 02 Jul 2026 14:33:48 GMT\r\netag: \"6a4676cc-466\"\r\naccept-ranges: bytes\r\ncache-control: max-age=31536000\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PlTssgSzgms0GGT8K%2FJmLI%2FVlDorQdAq%2BdgW2LjjsYNSz%2BWFT9YrK%2BjbVJvBSVLEGmTIRqigjVARRjzB4apgPmIPz34Owrs08hJIFK5pT280frNqBiNe9SSvcJQvYbtFrAlidiJ%2F\"}]}\r\ncf-ray: a390e46199a2a15f-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1126\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1126,"size_decoded":1825,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 80x80, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"a7675ecb37d4e7cdf32822fb9200f01e","sha1":"c40490eb7b3255ef89a3052d3c9c86fd5bc80ab6","sha256":"31eeb1e2a24fb1bd89fbed7155fa731a43f82d2d182dae75d562c29dcbf5f5e3","sha512":"37609ba76a954c11f84465ce92db315d73a4c22a578295063aea904714e2c915d4b0e0a143da77096863ff05ed221331c6253378d470ccec48d3056b095852b4","ssdeep":"","tlshash":"ab21b93f60d4b9db2e99f0ffc5424714e2595dc0bd61941a14b65cd332398d339c625b","first_seen":"2026-09-10T19:38:57.248461Z","last_seen":"2026-09-10T19:38:57.248461Z","times_seen":1,"resource_available":false,"data":null}},"time_used":467,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":467,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-10","alert":"Phishing Block","trigger":"gorvulikent-app.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"gorvulikent-app.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"gorvulikent-app.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"gorvulikent-app.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"gorvulikent-app.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}