{"report_id":"66fe0d81-9671-485b-a7a9-69fb21155627","version":0,"status":"done","tags":[],"date":"2026-06-20T20:34:45Z","url":{"schema":"https","addr":"dwdwddwdweeweweddd1223348493.xyz/","fqdn":"dwdwddwdweeweweddd1223348493.xyz","domain":"dwdwddwdweeweweddd1223348493.xyz","tld":"xyz"},"ip":{"addr":"172.67.195.113","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"dwdwddwdweeweweddd1223348493.xyz/","fqdn":"dwdwddwdweeweweddd1223348493.xyz","domain":"dwdwddwdweeweweddd1223348493.xyz","tld":"xyz"},"title":"dwdwddwdweeweweddd1223348493.xyz","dom":{"size":7322,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"1868cb35341437de1c7fa386a9bc6290","sha1":"1f4cb5eae76952ad2fb3927fadac6f51f8ef93de","sha256":"8ff013361e0d19ef159603259d569a6ddef583b31fbd47634119501d7b024514","sha512":"6024421dc88f3482c813b00ceaebd238e0cd4cd4e418b583d3b6fe2f407c53db3745ebee596c7a253811ba1bbd417374ca1eb820e3eb46f6d4ce560045c0e1fd","ssdeep":"192:3ykJiTHhVxd+kH9bJ3YI27UapLvyaHngFej:3+T7xIyVII2jD","tlshash":"44e1a78e5abb6d6e62a930ab3fa6b5883475490b3700ccf4fcdc66615fc094589d27c8","dom_hash":"domhash3f73dac1f99ae7aa54417f0f30346ffa","first_seen":"2026-06-20T20:13:38.054822Z","last_seen":"2026-06-20T20:34:47.850014Z","times_seen":2,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"dwdwddwdweeweweddd1223348493.xyz/","fqdn":"dwdwddwdweeweweddd1223348493.xyz","domain":"dwdwddwdweeweweddd1223348493.xyz","tld":"xyz"},"ip":{"addr":"172.67.195.113","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-07-25T20:34:45Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-20","alert":"Sinkholed","trigger":"www.dotvipad.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-20","alert":"Phishing Block","trigger":"www.dotvipad.cfd","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null},"summary":[{"fqdn":"www.dotvipad.cfd","ip":{"addr":"104.26.11.238","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-03-12","domain_rank":0,"first_seen":"2026-06-11T17:14:52.140817Z","last_seen":"2026-06-20T20:13:34.829877Z","alert_count":48,"request_count":24,"received_data":1932098,"sent_data":14460,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"dwdwddwdweeweweddd1223348493.xyz","ip":{"addr":"104.21.84.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-06-16","domain_rank":0,"first_seen":"2026-06-20T20:13:34.23275Z","last_seen":"2026-06-20T20:13:34.23275Z","alert_count":0,"request_count":3,"received_data":13672,"sent_data":3049,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"dwdwddwdweeweweddd1223348493.xyz/","fqdn":"dwdwddwdweeweweddd1223348493.xyz","domain":"dwdwddwdweeweweddd1223348493.xyz","tld":"xyz"},"ip":{"addr":"104.21.84.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"af2a89db93dbb83c7cecf29cefbdebd2","sha1":"23b4f0527a03f05130d414626b99e8ab9e88b77a","sha256":"a988b8a18db205642259a35b44be723a6ba0c6dc46bf18c652680df19aec0755","sha512":"4184e5719bb0249525a584cbc1fc345b11bbe08671ef61dfdc5d962d092c4c0396ce1f94b7a6cadef8494eac3ab64253cbc3f584dfaea60c2f2ff66d5a6ff4e5","ssdeep":"","tlshash":"86f0eb7fc8f90c70732350b2369b36403a11804631058930f2dd026a8fd098255617af","size":546,"data":"","first_seen":"2026-06-20T20:13:38.077525Z","last_seen":"2026-06-20T20:34:47.886424Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dwdwddwdweeweweddd1223348493.xyz/","fqdn":"dwdwddwdweeweweddd1223348493.xyz","domain":"dwdwddwdweeweweddd1223348493.xyz","tld":"xyz"},"ip":{"addr":"104.21.84.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"af2a89db93dbb83c7cecf29cefbdebd2","sha1":"23b4f0527a03f05130d414626b99e8ab9e88b77a","sha256":"a988b8a18db205642259a35b44be723a6ba0c6dc46bf18c652680df19aec0755","sha512":"4184e5719bb0249525a584cbc1fc345b11bbe08671ef61dfdc5d962d092c4c0396ce1f94b7a6cadef8494eac3ab64253cbc3f584dfaea60c2f2ff66d5a6ff4e5","ssdeep":"","tlshash":"86f0eb7fc8f90c70732350b2369b36403a11804631058930f2dd026a8fd098255617af","size":546,"data":"","first_seen":"2026-06-20T20:13:38.077525Z","last_seen":"2026-06-20T20:34:47.886424Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dwdwddwdweeweweddd1223348493.xyz/","fqdn":"dwdwddwdweeweweddd1223348493.xyz","domain":"dwdwddwdweeweweddd1223348493.xyz","tld":"xyz"},"ip":{"addr":"104.21.84.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"af2a89db93dbb83c7cecf29cefbdebd2","sha1":"23b4f0527a03f05130d414626b99e8ab9e88b77a","sha256":"a988b8a18db205642259a35b44be723a6ba0c6dc46bf18c652680df19aec0755","sha512":"4184e5719bb0249525a584cbc1fc345b11bbe08671ef61dfdc5d962d092c4c0396ce1f94b7a6cadef8494eac3ab64253cbc3f584dfaea60c2f2ff66d5a6ff4e5","ssdeep":"","tlshash":"86f0eb7fc8f90c70732350b2369b36403a11804631058930f2dd026a8fd098255617af","size":546,"data":"","first_seen":"2026-06-20T20:13:38.077525Z","last_seen":"2026-06-20T20:34:47.886424Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dwdwddwdweeweweddd1223348493.xyz/","fqdn":"dwdwddwdweeweweddd1223348493.xyz","domain":"dwdwddwdweeweweddd1223348493.xyz","tld":"xyz"},"ip":{"addr":"104.21.84.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"af2a89db93dbb83c7cecf29cefbdebd2","sha1":"23b4f0527a03f05130d414626b99e8ab9e88b77a","sha256":"a988b8a18db205642259a35b44be723a6ba0c6dc46bf18c652680df19aec0755","sha512":"4184e5719bb0249525a584cbc1fc345b11bbe08671ef61dfdc5d962d092c4c0396ce1f94b7a6cadef8494eac3ab64253cbc3f584dfaea60c2f2ff66d5a6ff4e5","ssdeep":"","tlshash":"86f0eb7fc8f90c70732350b2369b36403a11804631058930f2dd026a8fd098255617af","size":546,"data":"","first_seen":"2026-06-20T20:13:38.077525Z","last_seen":"2026-06-20T20:34:47.886424Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dwdwddwdweeweweddd1223348493.xyz/book/56","fqdn":"dwdwddwdweeweweddd1223348493.xyz","domain":"dwdwddwdweeweweddd1223348493.xyz","tld":"xyz"},"ip":{"addr":"104.21.84.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"62ea803a4ed733c24eecfa2d5997676c","sha1":"d1ae50ec55df51141cfeaccce0fa33a0b8bfbc12","sha256":"02754631ef705d454b3706935d34ea23183e4177c7d1d22c7f2afd7adbb1cf55","sha512":"06933ddb51b06afb1c66d2c62edb788fd2bc6b920fc05b826b4e3be3df0aa41f5e5307d6c01b34992525ed0b7cbf031d22f3604a465d1d18765a643afcb177f4","ssdeep":"","tlshash":"b7419da92ab36020a1ab209f1b5f6208347053173304dd647d4ceb74afd1d566ae6f98","size":1911,"data":"","first_seen":"2026-06-20T20:13:38.079351Z","last_seen":"2026-06-20T20:34:47.886944Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.dotvipad.cfd/chat/runtime.ce51e0d5.js","fqdn":"www.dotvipad.cfd","domain":"dotvipad.cfd","tld":"cfd"},"ip":{"addr":"104.26.11.238","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"dd0267b889f522b4b0ec9cf9b9746aa3","sha1":"2c1a3fad0b1f3205d05dff5adc87fcbd6d4124b1","sha256":"b70cb9db555f34d517952b58f88192b24331cad25b1c8212b64235c18757b264","sha512":"d96217cfbef8fded1e5d77da1c4b27c9ede2d332ea98f0592fd6d18733122d36a235e5ffd48621b1d4743021539ac41b9769e4ebfb4d604e1ab50826c31727fb","ssdeep":"96:sM4DUqZUCjOpeBVRVDlo501kIjCnU5R4xNYc9W:sJgqzOpqbNlKMCU5RKW","tlshash":"5ba193ed7399b5b16663b470443fd50b713b2572280e58b1e70be8a7bd388895017fd8","size":4656,"data":"","first_seen":"2026-06-17T23:14:52.688078Z","last_seen":"2026-07-13T22:30:05.369247Z","times_seen":29,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.dotvipad.cfd/chat/preload_helper.674b2ac2.js","fqdn":"www.dotvipad.cfd","domain":"dotvipad.cfd","tld":"cfd"},"ip":{"addr":"104.26.11.238","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"59df994e508d36d2b04ab0e4ebccfe37","sha1":"da2d730b17ed7ec340f33946360aefa0adea51b3","sha256":"a88a06edac50d4d5405a15d2d795e0adcbea4376e108b43661ea4746fc1dfda7","sha512":"8779aa3230660b50e3d5ddb8cd2da00a94a55fed4d608183ac7972fe84c3d3b43706d5cfdf445d5ea7e2162f6a6897a88ccad4b825f22cd830deac77417b32ac","ssdeep":"","tlshash":"5b31766e76115c68aea52859800f1282717f1b832f05c475706bd8d80e39fc87723d2f","size":1492,"data":"","first_seen":"2026-06-17T23:14:52.674448Z","last_seen":"2026-07-13T22:30:05.329745Z","times_seen":29,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.dotvipad.cfd/chat/zlzajfss83f.js","fqdn":"www.dotvipad.cfd","domain":"dotvipad.cfd","tld":"cfd"},"ip":{"addr":"104.26.11.238","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"b7876d0ab7dde46612a4b720973e46c0","sha1":"ee1c2cb1d1cd35d06c64b10c68682f7513e679ee","sha256":"f7b18818be99dd228f1306819a8457d5c0f27ab504ce16f9a7304e28bcfdab71","sha512":"7a150dc86672465f9eee41a421c267930205105b9aa2e8d5df6cdb660764c1e5d91da03acdbb7deb59d37192a2ab4d293cd51cb9f7c4ace4a170c011ddc83a2e","ssdeep":"6144:1UtvO/LpPn4MWzEkEhlcG2oGsFOeOZ+PjZcekEUPQcgCZcBdWMSuOTLzmBw56l/H:N4iNhuqZOZycDq5WMk/Uw5cjpdUe","tlshash":"5a5539ccb2e670954a9221a0cc3f580fb9366e55800cd835e7bee8eabd745099177b3d","size":1336150,"data":"","first_seen":"2026-06-17T23:14:52.696979Z","last_seen":"2026-07-13T22:30:05.423783Z","times_seen":28,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dwdwddwdweeweweddd1223348493.xyz/","fqdn":"dwdwddwdweeweweddd1223348493.xyz","domain":"dwdwddwdweeweweddd1223348493.xyz","tld":"xyz"},"ip":{"addr":"104.21.84.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"af2a89db93dbb83c7cecf29cefbdebd2","sha1":"23b4f0527a03f05130d414626b99e8ab9e88b77a","sha256":"a988b8a18db205642259a35b44be723a6ba0c6dc46bf18c652680df19aec0755","sha512":"4184e5719bb0249525a584cbc1fc345b11bbe08671ef61dfdc5d962d092c4c0396ce1f94b7a6cadef8494eac3ab64253cbc3f584dfaea60c2f2ff66d5a6ff4e5","ssdeep":"","tlshash":"86f0eb7fc8f90c70732350b2369b36403a11804631058930f2dd026a8fd098255617af","size":546,"data":"","first_seen":"2026-06-20T20:13:38.077525Z","last_seen":"2026-06-20T20:34:47.886424Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.dotvipad.cfd/chat/dummy_0fe6675a139bf4178277a0e2b2bbe5e0.INDqO5TE.js","fqdn":"www.dotvipad.cfd","domain":"dotvipad.cfd","tld":"cfd"},"ip":{"addr":"104.26.11.238","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"162dc3232064e37c9ff63cd1fcf0533f","sha1":"dee090aefb5d3dbc7e7c00622b8d76438d0a70b4","sha256":"775cd91cf280dd10c31e7dac45bc16069226c2542013495757324ae3399b1da1","sha512":"f14ca3d797b81481356b39131dcb067687a595f79c9765fbd45c1067a123273c788aad080cd1747dbd1684735c8bd7cf9721416045046e5db46d9dc3ebe146e6","ssdeep":"","tlshash":"45d02e26f1f0204c038a90a6886f0226e0236d800d7e8180822e86180e3828b8101c8b","size":242,"data":"","first_seen":"2026-06-17T23:14:52.661152Z","last_seen":"2026-07-13T22:30:05.387547Z","times_seen":29,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.dotvipad.cfd/chat/dummy_5d3f0a53b9bd6940adb2b9539c5d7d6e.L08RzbJv.js","fqdn":"www.dotvipad.cfd","domain":"dotvipad.cfd","tld":"cfd"},"ip":{"addr":"104.26.11.238","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"e60032e6beb9ce09115585747452d979","sha1":"ebef60981c0b0449ceabfa851d8a217db4bac688","sha256":"db26d6ba37f1ec5c088768eb769288d9cef1801b37aace30df6069bfdafd5676","sha512":"9ad9bc81c1a799761a154e7d977054d66cfad0bf4ad528cf089eb19191cc6d76950516ecae5d213fa19c0c35f447407a54fca4e184a9fdf8a3c51ebfdd36decf","ssdeep":"","tlshash":"e6d05b1973761948cb2e509605cd3117b0b389cccc6ac1c5116d95f1052b1cfc9d3c8f","size":272,"data":"","first_seen":"2026-06-17T23:14:52.64168Z","last_seen":"2026-07-13T22:30:05.377295Z","times_seen":29,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.dotvipad.cfd/chat/IYSEMY2tiIUM.cd5d738e.js","fqdn":"www.dotvipad.cfd","domain":"dotvipad.cfd","tld":"cfd"},"ip":{"addr":"104.26.11.238","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"f8067aceb9507f908e49ff939be93035","sha1":"fbbe444eaaeb6041b7a86828f5d52a288d401b93","sha256":"aba689fa775c95f9d0bb811f783c18a94594102de671cb7e09e643779c17cc9b","sha512":"b3a7cb19195e2558d26b39cc784886924fcbb1d61855cef9cb26570f188170cd58f81ab7be8a2b193b3a58657758802ed9fbfdcfd3f188690903632a50fda5ea","ssdeep":"384:BHrFImCa4S2yw4P2CGRARHI9fOZJ3wkxSo7zyBiO61Fr+N6a:BLFx4S2n4eFApAOZJ3wronyBit1t+NH","tlshash":"9242a6b470d2f051877710f5c03f500ae23a38b6785c91a0a2aadce939f555dc677aae","size":12873,"data":"","first_seen":"2026-06-17T23:14:52.661988Z","last_seen":"2026-07-13T22:30:05.339523Z","times_seen":28,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.dotvipad.cfd/chat/IYSEMY2tiIUM.c5d7cfef.js","fqdn":"www.dotvipad.cfd","domain":"dotvipad.cfd","tld":"cfd"},"ip":{"addr":"104.26.11.238","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"8bf5cb6d9c29c2c76e350762330767e8","sha1":"2527fe9b4d3181c2ea9696e8e55fd78f8e02145a","sha256":"8b3e72120bd162cb455a52bd9bdc60c9db1f149d47652a1636b7904f52973b7a","sha512":"95d09ad9e8f7686a01cf1f3bbe7ff45a56fc66b683a721f3a1f1bda177cc9e6e1a2b8a7da8b411c96aa194ffac8bd6b507dcb2718f15c38f2309c7f959d499b1","ssdeep":"3072:/ihmq4OdTCp/SMSgVx4jSDwgPHDXez+F4SQ:/ihmq4Cu/SMSgVx4joBDez4Q","tlshash":"e8c30b8cb3957ca93d2fe4a50a2f008e712f6ec4a40d8560f177e8972658dd4f217be9","size":123272,"data":"","first_seen":"2026-06-17T23:14:52.662938Z","last_seen":"2026-07-13T22:30:05.388174Z","times_seen":28,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.dotvipad.cfd/chat/IYSEMY2tiIUM.2a5affd2.js","fqdn":"www.dotvipad.cfd","domain":"dotvipad.cfd","tld":"cfd"},"ip":{"addr":"104.26.11.238","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"5edd5fbbd5c81cc271b81eb8bc416afc","sha1":"4c96b21bcb5ddcdcbaeeafe5d18b17e21bd96620","sha256":"baef72d5d1e0df4431e93d77d4d5ea00eb6ae51aed44b8aa5500f6388e5bb199","sha512":"6223498ea547ad382ebad824c54bcb6691ba1515420c00f4c72ef9f7494b0fe2ff43b463111e9e7b1daf6166b750ddb1abe4017beefa3ffbcabe79f06e867791","ssdeep":"768:fSFqLO7OLsi4fmxY+DAOAilRInRkl0dhJO3RDdCwT5+NEZHypwOXd+sgBOrfiBTf:fSFCTtAs+vIdT+6+xPg2fiTM76","tlshash":"32430afe53689bac7c834a79ef37a475a31fa1a539914690207eca7012d31dcf24bd80","size":56170,"data":"","first_seen":"2026-06-17T23:14:52.692589Z","last_seen":"2026-07-13T22:30:05.415467Z","times_seen":28,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":[{"level":"log","text":"urlParamsmap[actor:server1.conn0.watcher16.process8//obj24 class:Object extensible:true frozen:false isError:false ownPropertyLength:2 preview:map[kind:Object ownProperties:map[channelid:map[configurable:true enumerable:true value:c73ee4eae3f741259c2dd381f1408f69 writable:true] isback:map[configurable:true enumerable:true value:true writable:true]] ownPropertiesLength:2] sealed:false type:object]","filename":"https://www.dotvipad.cfd/chat/zlzajfss83f.js","line_number":0,"column_number":0},{"level":"log","text":"startSessionmap[actor:server1.conn0.watcher16.process8//obj25 class:Object extensible:true frozen:false isError:false ownPropertyLength:2 preview:map[kind:Object ownProperties:map[channelid:map[configurable:true enumerable:true value:c73ee4eae3f741259c2dd381f1408f69 writable:true] isback:map[configurable:true enumerable:true value:true writable:true]] ownPropertiesLength:2] sealed:false type:object]","filename":"https://www.dotvipad.cfd/chat/zlzajfss83f.js","line_number":0,"column_number":0},{"level":"log","text":"pollingEventMsgs:map[actor:server1.conn0.watcher16.process8//obj33 class:Object extensible:true frozen:false isError:false ownPropertyLength:2 preview:map[kind:Object ownProperties:map[interval:map[configurable:true enumerable:true value:5000 writable:true] signal:map[configurable:true enumerable:true value:true writable:true]] ownPropertiesLength:2] sealed:false type:object]","filename":"https://www.dotvipad.cfd/chat/zlzajfss83f.js","line_number":0,"column_number":0},{"level":"log","text":"transferAgent,chatStatus=0map[actor:server1.conn0.watcher16.process8//obj34 class:Object extensible:true frozen:false isError:false ownPropertyLength:1 preview:map[kind:Object ownProperties:map[auto:map[configurable:true enumerable:true value:true writable:true]] ownPropertiesLength:1] sealed:false type:object]","filename":"https://www.dotvipad.cfd/chat/zlzajfss83f.js","line_number":0,"column_number":0},{"level":"log","text":"sessionidmap[actor:server1.conn0.watcher16.process8//obj35 class:Object extensible:true frozen:false isError:false ownPropertyLength:2 preview:map[kind:Object ownProperties:map[sessionid:map[configurable:true enumerable:true value:map[type:undefined] writable:true] userid:map[configurable:true enumerable:true value:map[type:undefined] writable:true]] ownPropertiesLength:2] sealed:false type:object]","filename":"https://www.dotvipad.cfd/chat/IYSEMY2tiIUM.c5d7cfef.js","line_number":0,"column_number":0},{"level":"log","text":"pollingEventMsgs:map[actor:server1.conn0.watcher16.process8//obj36 class:Object extensible:true frozen:false isError:false ownPropertyLength:2 preview:map[kind:Object ownProperties:map[interval:map[configurable:true enumerable:true value:2000 writable:true] signal:map[configurable:true enumerable:true value:true writable:true]] ownPropertiesLength:2] sealed:false type:object]","filename":"https://www.dotvipad.cfd/chat/zlzajfss83f.js","line_number":0,"column_number":0}]},"http":[{"url":{"schema":"https","addr":"www.dotvipad.cfd/chat/IYSEMY2tiIUM.2a5affd2.js","fqdn":"www.dotvipad.cfd","domain":"dotvipad.cfd","tld":"cfd"},"ip":{"addr":"104.26.11.238","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.dotvipad.cfd/chat/index?channelId=c73ee4eae3f741259c2dd381f1408f69\u0026isBack=true","date":"2026-06-20T20:34:22.301Z","timestamp":1781987662301,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.dotvipad.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 10 Jun 2026 23:06:11 GMT","end":"Wed, 09 Sep 2026 00:06:03 GMT"},"fingerprint":{"sha1":"14:75:94:53:B4:08:7C:4B:32:F5:CF:5A:6B:94:79:36:BB:4C:A6:B9","sha256":"70:B6:18:4A:DF:89:7A:56:D5:80:CD:06:88:40:18:DB:C1:3B:D6:0F:2A:A0:25:21:10:D4:22:5C:91:ED:FE:F8"}}},"request":{"raw":"GET /chat/IYSEMY2tiIUM.2a5affd2.js HTTP/1.1\r\nHost: www.dotvipad.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.dotvipad.cfd/chat/index?channelId=c73ee4eae3f741259c2dd381f1408f69\u0026isBack=true\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sat, 20 Jun 2026 20:34:22 GMT\r\ncontent-type: application/javascript; charset=utf8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\nlast-modified: Wed, 17 Jun 2026 01:27:22 GMT\r\netag: \"6a31f7fa-db6a\"\r\nx-frame-options: ALLOWALL\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\nage: 1272\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AEfrt3dGD4ZiYdBpMcLO%2F3y%2BN3yU46Vka02mKlW64ovk%2F5EcWLeNbMI2pI6Dprud1sRa%2BOLrs5EAoHp1wfMAaG12Lo9fv90tHIS7sw%2BZyK1hhWQ1F8KUooP0DWtUYddhasg%3D\"}]}\r\ncf-ray: a0ed8dc96d09b4ff-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":56170,"size_decoded":21426,"mime_type":"application/javascript; charset=utf8","magic":"JavaScript source, ASCII text, with very long lines (56169)","md5":"5edd5fbbd5c81cc271b81eb8bc416afc","sha1":"4c96b21bcb5ddcdcbaeeafe5d18b17e21bd96620","sha256":"baef72d5d1e0df4431e93d77d4d5ea00eb6ae51aed44b8aa5500f6388e5bb199","sha512":"6223498ea547ad382ebad824c54bcb6691ba1515420c00f4c72ef9f7494b0fe2ff43b463111e9e7b1daf6166b750ddb1abe4017beefa3ffbcabe79f06e867791","ssdeep":"768:fSFqLO7OLsi4fmxY+DAOAilRInRkl0dhJO3RDdCwT5+NEZHypwOXd+sgBOrfiBTf:fSFCTtAs+vIdT+6+xPg2fiTM76","tlshash":"32430afe53689bac7c834a79ef37a475a31fa1a539914690207eca7012d31dcf24bd80","first_seen":"2026-06-17T23:14:52.692589Z","last_seen":"2026-07-13T22:30:05.415467Z","times_seen":28,"resource_available":true,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-20","alert":"Sinkholed","trigger":"www.dotvipad.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-20","alert":"Phishing Block","trigger":"www.dotvipad.cfd","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dwdwddwdweeweweddd1223348493.xyz/","fqdn":"dwdwddwdweeweweddd1223348493.xyz","domain":"dwdwddwdweeweweddd1223348493.xyz","tld":"xyz"},"ip":{"addr":"104.21.84.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-06-20T20:34:20.199Z","timestamp":1781987660199,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dwdwddwdweeweweddd1223348493.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 16 Jun 2026 09:40:59 GMT","end":"Mon, 14 Sep 2026 10:39:35 GMT"},"fingerprint":{"sha1":"9E:0B:0D:36:A3:3D:39:08:9E:21:BA:B4:0E:19:8D:35:56:F1:FE:28","sha256":"54:2C:01:34:BD:83:53:A3:DE:C6:AE:23:35:53:21:03:DF:20:46:14:DC:6C:00:1A:9C:5F:A0:17:67:14:F0:87"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: dwdwddwdweeweweddd1223348493.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ncontent-type: text/html; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=0,i\r\nvary: Accept-Encoding\r\ncache-control: no-cache, private\r\ndate: Sat, 20 Jun 2026 20:34:20 GMT\r\nset-cookie: XSRF-TOKEN=eyJpdiI6InpHSC9xQ3JMUUxEc0RGc1FSUXZQRnc9PSIsInZhbHVlIjoiRkpmNXA0MEtaZm5zeXpuQW5Od2t6ZER0ck4ySzRpUEtLNE1kQjdzNzhuN1JrUWswOUdlRlQ1L1JaTlk0a2pvc0tXdnc2dXM1QUlMN2FvR0wzQUZ0UENOeGdMVW8yczdLa245YzNOQk8xWjk5dUpXcnBGWmVUVVgyNFZLZnBnVFkiLCJtYWMiOiJiYWFlZmYyNzQ5NGY2OTEwZDMyOGI2NDFmNjg1OWQ4NDJiYzI2ZjczNGNmZjhjMmIwZmQ2OWRkYzdhMTU1ZWJmIiwidGFnIjoiIn0%3D; expires=Sat, 20 Jun 2026 22:34:20 GMT; Max-Age=7200; path=/; samesite=lax\nlaravel_session=eyJpdiI6IjZMNm5DUHJYT2x5dXZLZ2wrYWFvd1E9PSIsInZhbHVlIjoib0M3QUVXQWszUU94R1AxMVBIU3dOd1lvelU5bnNWcGxIaStWNWFWYjdNY2VuRVZnaTg2NWJFWldObjJQcHF0WDdvcnhPZ3FwbGZOVnJmTjBlblZqYjdYa3ZlK25TTmpaSGFhdElUdjdyY09RYkNPTFdielhOTTVBQ2RCckowbG4iLCJtYWMiOiI4MjAzMjZjNTI3ZWU0YjE3ZTJmNDBhZjg2NmE2NTFkM2I0NWEwZTE5ODliNGFiZWM4MTA4YTlkZTk4YmQ5MTVjIiwidGFnIjoiIn0%3D; expires=Sat, 20 Jun 2026 22:34:20 GMT; Max-Age=7200; path=/; httponly; samesite=lax\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=v2zaTiYBEjDPAcyxT1KnAk72J26X6J3MMpsb73Ztq7ijfAu86HcshbE%2BIiXsAKGnpXTwL1lL4MVzIsIECkRk%2Bg%2F44rlLwXyoHJTkZL%2Fj1Kw7iDy3mkf4cjd%2BhpBuN3EOEFTt7VyRBiQYIuYn77npFkT3Iw%3D%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: zstd\r\ncf-ray: a0ed8dbc98e156c4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7509,"size_decoded":4555,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with CRLF, LF line terminators","md5":"645b9cb070ecb70abbbf8eb1d95b59ee","sha1":"d03335995c387c94f25e74f4fc303621edd75c42","sha256":"42be03168604a4a386dfb359dddc2420dc252d970885109ed1b68dbf69d873c7","sha512":"3d98b156f287a56a42b0ddc4ce8c2afa1a124e6e07aa13ca6478132410a18255050b5dcd19028e5325d1e72c7661a63f65ee38728010585944606d97fc1505d0","ssdeep":"96:DOCXcc0qmVjc5LqMu5q2l5tsf08lMU5tN9h8NvqhHtoumyTMI2CCUbDI9r1LvyaM:Zn0qmV8LYWJ/T3YI27UapLvyaHn2j","tlshash":"d7f1a689397b2d1e66b931e73bb2f584b835891b3300c5f4f8dc65625fa09458ad2bcc","first_seen":"2026-06-20T20:13:38.062342Z","last_seen":"2026-06-20T20:34:47.852438Z","times_seen":3,"resource_available":false,"data":null}},"time_used":604,"timings":{"blocked":-1,"dns":32,"connect":16,"send":0,"wait":556,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dwdwddwdweeweweddd1223348493.xyz/book/56","fqdn":"dwdwddwdweeweweddd1223348493.xyz","domain":"dwdwddwdweeweweddd1223348493.xyz","tld":"xyz"},"ip":{"addr":"104.21.84.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://dwdwddwdweeweweddd1223348493.xyz/","date":"2026-06-20T20:34:20.991Z","timestamp":1781987660991,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dwdwddwdweeweweddd1223348493.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 16 Jun 2026 09:40:59 GMT","end":"Mon, 14 Sep 2026 10:39:35 GMT"},"fingerprint":{"sha1":"9E:0B:0D:36:A3:3D:39:08:9E:21:BA:B4:0E:19:8D:35:56:F1:FE:28","sha256":"54:2C:01:34:BD:83:53:A3:DE:C6:AE:23:35:53:21:03:DF:20:46:14:DC:6C:00:1A:9C:5F:A0:17:67:14:F0:87"}}},"request":{"raw":"GET /book/56 HTTP/1.1\r\nHost: dwdwddwdweeweweddd1223348493.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://dwdwddwdweeweweddd1223348493.xyz/\r\nCookie: XSRF-TOKEN=eyJpdiI6InpHSC9xQ3JMUUxEc0RGc1FSUXZQRnc9PSIsInZhbHVlIjoiRkpmNXA0MEtaZm5zeXpuQW5Od2t6ZER0ck4ySzRpUEtLNE1kQjdzNzhuN1JrUWswOUdlRlQ1L1JaTlk0a2pvc0tXdnc2dXM1QUlMN2FvR0wzQUZ0UENOeGdMVW8yczdLa245YzNOQk8xWjk5dUpXcnBGWmVUVVgyNFZLZnBnVFkiLCJtYWMiOiJiYWFlZmYyNzQ5NGY2OTEwZDMyOGI2NDFmNjg1OWQ4NDJiYzI2ZjczNGNmZjhjMmIwZmQ2OWRkYzdhMTU1ZWJmIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IjZMNm5DUHJYT2x5dXZLZ2wrYWFvd1E9PSIsInZhbHVlIjoib0M3QUVXQWszUU94R1AxMVBIU3dOd1lvelU5bnNWcGxIaStWNWFWYjdNY2VuRVZnaTg2NWJFWldObjJQcHF0WDdvcnhPZ3FwbGZOVnJmTjBlblZqYjdYa3ZlK25TTmpaSGFhdElUdjdyY09RYkNPTFdielhOTTVBQ2RCckowbG4iLCJtYWMiOiI4MjAzMjZjNTI3ZWU0YjE3ZTJmNDBhZjg2NmE2NTFkM2I0NWEwZTE5ODliNGFiZWM4MTA4YTlkZTk4YmQ5MTVjIiwidGFnIjoiIn0%3D\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ncontent-type: text/html; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\ncache-control: no-cache, private\r\ndate: Sat, 20 Jun 2026 20:34:21 GMT\r\nset-cookie: XSRF-TOKEN=eyJpdiI6IkhINWdyVDdWd3c5YlpkMkVNV0h2RHc9PSIsInZhbHVlIjoiUHB6bTJmb2NPTzRqSUI5STJ5UE9LUXd2WjFhV1lJZFdvVGVzZjBYRm4xd0pKd3QxWG9PU3lQdmgxcitvU1JVNmJ4bUV6YlVHaHF6TmdzbUxHQXR5aGg1YUZxZGIrY1dFMGxmcEpydlNBZmZtWjZpcGJQZTZQbnRZNDB6aWo0a3UiLCJtYWMiOiJlMTBjMWYwNjc0MmU5Mjg2NmZhMzc2MTUwNWEwOTQ3MTc0MGRmMjhhNTcyNTAzZWY4ZDY0MDJjNWFlYWMwZTk2IiwidGFnIjoiIn0%3D; expires=Sat, 20 Jun 2026 22:34:21 GMT; Max-Age=7200; path=/; samesite=lax\nlaravel_session=eyJpdiI6ImdmZXY4NlZrNWFnMXFqcDNaQ01xbHc9PSIsInZhbHVlIjoiSVM0Mm45anE0ZFBuOTNhY1JRZkNqYXEzL3MxVEQ5OHl3ZHFXUkhENVQxOGtmdkFpVW5TVHlNNWtXSUtHa1FUZkxKOHdaV3dWY1ArZzA3Z0FQSnNsTm8xdVZJVzRHRU0yRENRSU5TV1NDWDNheW11a0JNVE05Y1dlWGRjRGd2ZTIiLCJtYWMiOiIzMTcxNzhiYzY2N2Y4NDUzMjgxOGY5MGFjZDIxZTkyZmQxNTc4NDk2YzUzOWJhYWRiMmM3MzMyOWI4YjUzMDA4IiwidGFnIjoiIn0%3D; expires=Sat, 20 Jun 2026 22:34:21 GMT; Max-Age=7200; path=/; httponly; samesite=lax\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZUUSbI%2BkTpisXYKjLZ444kHrOOwn7xKxBichcnlqi3%2BaMBDyE0wIZTPNf5iXK7h7I7NcE5y1J3%2Fh4cRQyn%2FQ5HVKp1V%2BX0Yr2Pnp6oZVIurbomVyxWSXmYjWTH2LTM28Spw8ZohlTy%2B7rXhEWEhkviqleg%3D%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: zstd\r\ncf-ray: a0ed8dc1391c56c4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2329,"size_decoded":2590,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"45d66e02b197ab0f789da904a1dade88","sha1":"2db16bb0fcade38b705228f60d87871e6defdffb","sha256":"a3bb2b2ede9be73f9722edf0bf6336cc0b1ec7ca0108731fab13a5f434ca8ab9","sha512":"c64054e011d7a785cc19c74033dfb4d715d5f2a97bec2527044cd3abca92c8c89026b149886bf63f711215a8890a6f641e8b389974360999179ad29017b3ec7c","ssdeep":"","tlshash":"c841efa92ab36010d1a711af4bafb20c356053573304cd647d8cfa74afd1e959ae2fd8","first_seen":"2026-06-20T20:13:38.066603Z","last_seen":"2026-06-20T20:34:47.854465Z","times_seen":3,"resource_available":false,"data":null}},"time_used":330,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":330,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.dotvipad.cfd/chat/runtime.ce51e0d5.js","fqdn":"www.dotvipad.cfd","domain":"dotvipad.cfd","tld":"cfd"},"ip":{"addr":"104.26.11.238","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.dotvipad.cfd/chat/index?channelId=c73ee4eae3f741259c2dd381f1408f69\u0026isBack=true","date":"2026-06-20T20:34:22.221Z","timestamp":1781987662221,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.dotvipad.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 10 Jun 2026 23:06:11 GMT","end":"Wed, 09 Sep 2026 00:06:03 GMT"},"fingerprint":{"sha1":"14:75:94:53:B4:08:7C:4B:32:F5:CF:5A:6B:94:79:36:BB:4C:A6:B9","sha256":"70:B6:18:4A:DF:89:7A:56:D5:80:CD:06:88:40:18:DB:C1:3B:D6:0F:2A:A0:25:21:10:D4:22:5C:91:ED:FE:F8"}}},"request":{"raw":"GET /chat/runtime.ce51e0d5.js HTTP/1.1\r\nHost: www.dotvipad.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.dotvipad.cfd/chat/index?channelId=c73ee4eae3f741259c2dd381f1408f69\u0026isBack=true\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sat, 20 Jun 2026 20:34:22 GMT\r\ncontent-type: application/javascript; charset=utf8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\nlast-modified: Wed, 17 Jun 2026 01:27:21 GMT\r\netag: \"6a31f7f9-1230\"\r\nx-frame-options: ALLOWALL\r\ncontent-encoding: br\r\nage: 1273\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=L6REtJmvwMSAPobx8mxGhvgjXiJkN8cp4ts3eLDWbdIYdn4ZyLumEQ%2F1N5Ai3FqW4M99GBv3FcYDeTZZxFPaY0E5JSc3HRRzXrOWaNiJwbjdz5qdGbLrOsAETxX9YbuC5Z8%3D\"}]}\r\ncf-ray: a0ed8dc90c9cb4ff-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4656,"size_decoded":2852,"mime_type":"application/javascript; charset=utf8","magic":"JavaScript source, ASCII text, with very long lines (2938)","md5":"dd0267b889f522b4b0ec9cf9b9746aa3","sha1":"2c1a3fad0b1f3205d05dff5adc87fcbd6d4124b1","sha256":"b70cb9db555f34d517952b58f88192b24331cad25b1c8212b64235c18757b264","sha512":"d96217cfbef8fded1e5d77da1c4b27c9ede2d332ea98f0592fd6d18733122d36a235e5ffd48621b1d4743021539ac41b9769e4ebfb4d604e1ab50826c31727fb","ssdeep":"96:sM4DUqZUCjOpeBVRVDlo501kIjCnU5R4xNYc9W:sJgqzOpqbNlKMCU5RKW","tlshash":"5ba193ed7399b5b16663b470443fd50b713b2572280e58b1e70be8a7bd388895017fd8","first_seen":"2026-06-17T23:14:52.688078Z","last_seen":"2026-07-13T22:30:05.369247Z","times_seen":29,"resource_available":true,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":21,"connect":2,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-20","alert":"Phishing Block","trigger":"www.dotvipad.cfd","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-20","alert":"Sinkholed","trigger":"www.dotvipad.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.dotvipad.cfd/chat/IYSEMY2tiIUM.cd5d738e.js","fqdn":"www.dotvipad.cfd","domain":"dotvipad.cfd","tld":"cfd"},"ip":{"addr":"104.26.11.238","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.dotvipad.cfd/chat/index?channelId=c73ee4eae3f741259c2dd381f1408f69\u0026isBack=true","date":"2026-06-20T20:34:22.292Z","timestamp":1781987662292,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.dotvipad.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 10 Jun 2026 23:06:11 GMT","end":"Wed, 09 Sep 2026 00:06:03 GMT"},"fingerprint":{"sha1":"14:75:94:53:B4:08:7C:4B:32:F5:CF:5A:6B:94:79:36:BB:4C:A6:B9","sha256":"70:B6:18:4A:DF:89:7A:56:D5:80:CD:06:88:40:18:DB:C1:3B:D6:0F:2A:A0:25:21:10:D4:22:5C:91:ED:FE:F8"}}},"request":{"raw":"GET /chat/IYSEMY2tiIUM.cd5d738e.js HTTP/1.1\r\nHost: www.dotvipad.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.dotvipad.cfd/chat/index?channelId=c73ee4eae3f741259c2dd381f1408f69\u0026isBack=true\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sat, 20 Jun 2026 20:34:22 GMT\r\ncontent-type: application/javascript; charset=utf8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\nlast-modified: Wed, 17 Jun 2026 01:27:22 GMT\r\netag: \"6a31f7fa-3249\"\r\nx-frame-options: ALLOWALL\r\ncontent-encoding: br\r\nage: 1272\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2F2179%2F4%2FhLWCxL6PmO1goQAObjOSufxFt5gqEXt%2B%2FDbwsDIl99pz6ewY0A5gn869Ysw4cQLblfy%2FOv1gqbdZ9DUaz86%2FLxhKp8lAldI6mbVWWI4ZVrq1lWzvGjV10JOs9XY%3D\"}]}\r\ncf-ray: a0ed8dc95cf9b4ff-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12873,"size_decoded":5721,"mime_type":"application/javascript; charset=utf8","magic":"JavaScript source, ASCII text, with very long lines (11064)","md5":"f8067aceb9507f908e49ff939be93035","sha1":"fbbe444eaaeb6041b7a86828f5d52a288d401b93","sha256":"aba689fa775c95f9d0bb811f783c18a94594102de671cb7e09e643779c17cc9b","sha512":"b3a7cb19195e2558d26b39cc784886924fcbb1d61855cef9cb26570f188170cd58f81ab7be8a2b193b3a58657758802ed9fbfdcfd3f188690903632a50fda5ea","ssdeep":"384:BHrFImCa4S2yw4P2CGRARHI9fOZJ3wkxSo7zyBiO61Fr+N6a:BLFx4S2n4eFApAOZJ3wronyBit1t+NH","tlshash":"9242a6b470d2f051877710f5c03f500ae23a38b6785c91a0a2aadce939f555dc677aae","first_seen":"2026-06-17T23:14:52.661988Z","last_seen":"2026-07-13T22:30:05.339523Z","times_seen":28,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-20","alert":"Phishing Block","trigger":"www.dotvipad.cfd","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-20","alert":"Sinkholed","trigger":"www.dotvipad.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.dotvipad.cfd/chat/p__app.60ee96b0.chunk.css","fqdn":"www.dotvipad.cfd","domain":"dotvipad.cfd","tld":"cfd"},"ip":{"addr":"104.26.11.238","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.dotvipad.cfd/chat/index?channelId=c73ee4eae3f741259c2dd381f1408f69\u0026isBack=true","date":"2026-06-20T20:34:22.294Z","timestamp":1781987662294,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.dotvipad.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 10 Jun 2026 23:06:11 GMT","end":"Wed, 09 Sep 2026 00:06:03 GMT"},"fingerprint":{"sha1":"14:75:94:53:B4:08:7C:4B:32:F5:CF:5A:6B:94:79:36:BB:4C:A6:B9","sha256":"70:B6:18:4A:DF:89:7A:56:D5:80:CD:06:88:40:18:DB:C1:3B:D6:0F:2A:A0:25:21:10:D4:22:5C:91:ED:FE:F8"}}},"request":{"raw":"GET /chat/p__app.60ee96b0.chunk.css HTTP/1.1\r\nHost: www.dotvipad.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.dotvipad.cfd/chat/index?channelId=c73ee4eae3f741259c2dd381f1408f69\u0026isBack=true\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=0\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sat, 20 Jun 2026 20:34:22 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\nlast-modified: Wed, 17 Jun 2026 01:27:21 GMT\r\netag: \"6a31f7f9-ab9d\"\r\nx-frame-options: ALLOWALL\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\nage: 1272\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FYTdGoBvbdOiJzvT3coQ9oDtwcKGSWqe2SwR5U0%2FNI9EPxycxcTJTq9XUavLA05wIIICuJbxrLIEfi5Rkt2MxxzoufBVFs8%2FvFRUkSpIkK37SuFZTygeeRe3MwZg36jCLu0%3D\"}]}\r\ncf-ray: a0ed8dc95cfdb4ff-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":43933,"size_decoded":12138,"mime_type":"text/css","magic":"ASCII text, with very long lines (43932)","md5":"c0fe51690f8161137f8f9f13bf41cf3f","sha1":"2e66234450532ef823933fbf6faa4e9634aaab85","sha256":"05dddfbd7266899d90bab0f75df2f90cc56540f6a465642d4289209c545c6bf6","sha512":"1b073b13f2dadbb6a290d26832be4e4d98ec39536749a42da9f1556c73ff79366e05d48afac0a6f78a9a05d0aa3facf0241f3b5e94e698517428dabfd75b8a10","ssdeep":"384:qWKfxV04XGqa0s/N+RFKz/NPlyoOr3OJCSFV5RRrTL0FIj6T9RS/DQyyepHONIlA:42rrTEYHpd1O2abBjk/fo4b4","tlshash":"28130975190e213cf2a3413f35cc938c8526e552d9262abae107a2e3eac67d337b5f45","first_seen":"2026-06-17T23:14:52.691608Z","last_seen":"2026-07-13T22:30:05.377846Z","times_seen":28,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-20","alert":"Sinkholed","trigger":"www.dotvipad.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-20","alert":"Phishing Block","trigger":"www.dotvipad.cfd","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.dotvipad.cfd/chat/static/robot.6654b3dc.png","fqdn":"www.dotvipad.cfd","domain":"dotvipad.cfd","tld":"cfd"},"ip":{"addr":"104.26.11.238","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.dotvipad.cfd/chat/index?channelId=c73ee4eae3f741259c2dd381f1408f69\u0026isBack=true","date":"2026-06-20T20:34:23.535Z","timestamp":1781987663535,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.dotvipad.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 10 Jun 2026 23:06:11 GMT","end":"Wed, 09 Sep 2026 00:06:03 GMT"},"fingerprint":{"sha1":"14:75:94:53:B4:08:7C:4B:32:F5:CF:5A:6B:94:79:36:BB:4C:A6:B9","sha256":"70:B6:18:4A:DF:89:7A:56:D5:80:CD:06:88:40:18:DB:C1:3B:D6:0F:2A:A0:25:21:10:D4:22:5C:91:ED:FE:F8"}}},"request":{"raw":"GET /chat/static/robot.6654b3dc.png HTTP/1.1\r\nHost: www.dotvipad.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.dotvipad.cfd/chat/index?channelId=c73ee4eae3f741259c2dd381f1408f69\u0026isBack=true\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sat, 20 Jun 2026 20:34:23 GMT\r\ncontent-type: image/png\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\nlast-modified: Wed, 17 Jun 2026 01:27:21 GMT\r\netag: \"6a31f7f9-dfe3\"\r\nx-frame-options: ALLOWALL\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\nage: 1272\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7Aq4lHtb1XnzckbkrbDx0js75JUCEVkZ25unLoiIkbgsloZbc4tzC0L5zyOYh3DGZ2Dnk672DJ5svW6sHqBjCfAMpUWdQYwR688hxYAhT8EeQD3c9dg5oX4kgipcJNimBSo%3D\"}]}\r\ncf-ray: a0ed8dd11dd9b4ff-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":57315,"size_decoded":52160,"mime_type":"image/png","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1024x1024, components 3","md5":"6add20d4caaed4e2bcccdcfad65d19fc","sha1":"8e320a1cd98638409a3b9d03807df45a5f9acc1b","sha256":"d7233cd4089bde7822ec6c3dec368a1dfd52669df749a7a7a48bda19e08cd4e6","sha512":"688c8e858ad8302321d5c67d813b4e5284e2acc2e5f81d2ba36f10244b6fddbc5ea4affff75c94671b61f3d74a1078d196d7bfeedc4c8e7e633b3dd4ee8e2b8a","ssdeep":"1536:6tdZZwH2+MYT6ws0R0qx3aTrtWe6U8dn72dI:6LZZqPFfs0Zq0e6Nn72dI","tlshash":"6b437d13cc188746e55986e4bd0b8d9d6e4a1b1ce4863afe756f9ecb3f602311c4e06e","first_seen":"2025-12-03T22:48:55.742713Z","last_seen":"2026-08-20T14:53:19.333225Z","times_seen":193,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-20","alert":"Sinkholed","trigger":"www.dotvipad.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-20","alert":"Phishing Block","trigger":"www.dotvipad.cfd","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.dotvipad.cfd/api/chat/visitor/sysMsg","fqdn":"www.dotvipad.cfd","domain":"dotvipad.cfd","tld":"cfd"},"ip":{"addr":"104.26.11.238","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.dotvipad.cfd/chat/index?channelId=c73ee4eae3f741259c2dd381f1408f69\u0026isBack=true","date":"2026-06-20T20:34:24.858Z","timestamp":1781987664858,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.dotvipad.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 10 Jun 2026 23:06:11 GMT","end":"Wed, 09 Sep 2026 00:06:03 GMT"},"fingerprint":{"sha1":"14:75:94:53:B4:08:7C:4B:32:F5:CF:5A:6B:94:79:36:BB:4C:A6:B9","sha256":"70:B6:18:4A:DF:89:7A:56:D5:80:CD:06:88:40:18:DB:C1:3B:D6:0F:2A:A0:25:21:10:D4:22:5C:91:ED:FE:F8"}}},"request":{"raw":"POST /api/chat/visitor/sysMsg HTTP/1.1\r\nHost: www.dotvipad.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://www.dotvipad.cfd/chat/index?channelId=c73ee4eae3f741259c2dd381f1408f69\u0026isBack=true\r\nContent-Type: application/json;charset=UTF-8\r\nContent-Length: 199\r\nOrigin: https://www.dotvipad.cfd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 \r\ndate: Sat, 20 Jun 2026 20:34:25 GMT\r\ncontent-type: application/json\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rPr2E7jxezUtSze3shbBzOjNeQNmVza2cNy6v1GKlZDFPVzbgGaxo%2FQc0b%2BLNXc68tSiO4vVRMO8nO52T0qLio01aYsRWeMtGkPs3mOPZCL80roVgv54t16YcoSa4jCNQpE%3D\"}]}\r\ncf-ray: a0ed8dd95fa4b4ff-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":44,"size_decoded":595,"mime_type":"application/json","magic":"JSON text data","md5":"d87a9529c2bf5a85a4b0f833ee6c8d3a","sha1":"d81eaac99abd78540f5be85476659bf720520d72","sha256":"a837e433e88bfed4bc75359b8f1b07f80407376becc34957e3e27f2b0c6f28cf","sha512":"006af561fef28ef98fd4d3733b87897a5e414089ef89a63035599b1cdb40edeeff8e8fb1b605eadc4a3691da1eed2ed55b35c995c0a34dc712c3a5f6d6a070c3","ssdeep":"","tlshash":"259002506d1498242a034141210e550405a8205649402555089897256580a30d012924","first_seen":"2025-06-13T09:53:09.573276Z","last_seen":"2026-08-11T09:08:26.53039Z","times_seen":31,"resource_available":false,"data":null}},"time_used":286,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":286,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-20","alert":"Phishing Block","trigger":"www.dotvipad.cfd","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-20","alert":"Sinkholed","trigger":"www.dotvipad.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.dotvipad.cfd/chat/index?channelId=c73ee4eae3f741259c2dd381f1408f69\u0026isBack=true","fqdn":"www.dotvipad.cfd","domain":"dotvipad.cfd","tld":"cfd"},"ip":{"addr":"104.26.11.238","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://dwdwddwdweeweweddd1223348493.xyz/book/56","date":"2026-06-20T20:34:21.541Z","timestamp":1781987661541,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.dotvipad.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 10 Jun 2026 23:06:11 GMT","end":"Wed, 09 Sep 2026 00:06:03 GMT"},"fingerprint":{"sha1":"14:75:94:53:B4:08:7C:4B:32:F5:CF:5A:6B:94:79:36:BB:4C:A6:B9","sha256":"70:B6:18:4A:DF:89:7A:56:D5:80:CD:06:88:40:18:DB:C1:3B:D6:0F:2A:A0:25:21:10:D4:22:5C:91:ED:FE:F8"}}},"request":{"raw":"GET /chat/index?channelId=c73ee4eae3f741259c2dd381f1408f69\u0026isBack=true HTTP/1.1\r\nHost: www.dotvipad.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://dwdwddwdweeweweddd1223348493.xyz/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sat, 20 Jun 2026 20:34:22 GMT\r\ncontent-type: text/html; charset=utf8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Wed, 17 Jun 2026 01:27:22 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5XTuYUSz31pcsW3xyC0jAgMOfaZLdLTg3GB9SQgnRaSUkR6TX7t2f%2B25X2vG9qI%2F%2FtHnSlKB5s%2FGob%2FFIIG%2BB09TkfMyvGY2gQi5Lm2iF2NOMJegCCa%2FEFAtNLWiiu8vsHQ%3D\"}]}\r\nx-frame-options: ALLOWALL\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: a0ed8dc4cfd5b4ff-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":689,"size_decoded":915,"mime_type":"text/html; charset=utf8","magic":"HTML document, ASCII text","md5":"3d2e15cb242f9441737480678201ada9","sha1":"8b7c66c04c4087c80d6fd09a08ee8e46e88ea9bf","sha256":"3710133a54d0ce5fffa5c78e86710deb676cb0d55d7ddb891f5f180f59030b67","sha512":"f00ca3c6406f407a4921a4ead9a0f7cbf474f8d73ad1f5f7cd328dd34818c01ebc06d20554ba7fbae1efd158a3dd0dd3c2f4106740f940c44e5e4443ba611477","ssdeep":"","tlshash":"7b019e83acd9c59d02101d9955f4f10c878b6ecd9a82c8219af4a2774e76fc88c53d28","first_seen":"2026-06-17T23:14:52.635593Z","last_seen":"2026-07-13T22:30:05.419741Z","times_seen":29,"resource_available":false,"data":null}},"time_used":631,"timings":{"blocked":0,"dns":6,"connect":1,"send":0,"wait":610,"receive":0,"ssl":13},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-20","alert":"Phishing Block","trigger":"www.dotvipad.cfd","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-20","alert":"Sinkholed","trigger":"www.dotvipad.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.dotvipad.cfd/chat/preload_helper.674b2ac2.js","fqdn":"www.dotvipad.cfd","domain":"dotvipad.cfd","tld":"cfd"},"ip":{"addr":"104.26.11.238","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.dotvipad.cfd/chat/index?channelId=c73ee4eae3f741259c2dd381f1408f69\u0026isBack=true","date":"2026-06-20T20:34:22.223Z","timestamp":1781987662223,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.dotvipad.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 10 Jun 2026 23:06:11 GMT","end":"Wed, 09 Sep 2026 00:06:03 GMT"},"fingerprint":{"sha1":"14:75:94:53:B4:08:7C:4B:32:F5:CF:5A:6B:94:79:36:BB:4C:A6:B9","sha256":"70:B6:18:4A:DF:89:7A:56:D5:80:CD:06:88:40:18:DB:C1:3B:D6:0F:2A:A0:25:21:10:D4:22:5C:91:ED:FE:F8"}}},"request":{"raw":"GET /chat/preload_helper.674b2ac2.js HTTP/1.1\r\nHost: www.dotvipad.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.dotvipad.cfd/chat/index?channelId=c73ee4eae3f741259c2dd381f1408f69\u0026isBack=true\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sat, 20 Jun 2026 20:34:22 GMT\r\ncontent-type: application/javascript; charset=utf8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\nlast-modified: Wed, 17 Jun 2026 01:27:22 GMT\r\netag: \"6a31f7fa-5d4\"\r\nx-frame-options: ALLOWALL\r\ncontent-encoding: br\r\nage: 1273\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nVP4S70BxItAd0cfmogqudIzjRAAQsp0m4Zk5ZUQnStkT0nZ3RCmOsjpuPoYFTWepYQkA52AMbuUs6hTHIDz5YczzdH4%2Frei5oySK8y8pt75q5eMaEmiuIhY%2F9kz6luLgJs%3D\"}]}\r\ncf-ray: a0ed8dc90c9eb4ff-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1492,"size_decoded":1503,"mime_type":"application/javascript; charset=utf8","magic":"JavaScript source, ASCII text, with very long lines (1492), with no line terminators","md5":"59df994e508d36d2b04ab0e4ebccfe37","sha1":"da2d730b17ed7ec340f33946360aefa0adea51b3","sha256":"a88a06edac50d4d5405a15d2d795e0adcbea4376e108b43661ea4746fc1dfda7","sha512":"8779aa3230660b50e3d5ddb8cd2da00a94a55fed4d608183ac7972fe84c3d3b43706d5cfdf445d5ea7e2162f6a6897a88ccad4b825f22cd830deac77417b32ac","ssdeep":"","tlshash":"5b31766e76115c68aea52859800f1282717f1b832f05c475706bd8d80e39fc87723d2f","first_seen":"2026-06-17T23:14:52.674448Z","last_seen":"2026-07-13T22:30:05.329745Z","times_seen":29,"resource_available":true,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":19,"connect":2,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-20","alert":"Sinkholed","trigger":"www.dotvipad.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-20","alert":"Phishing Block","trigger":"www.dotvipad.cfd","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.dotvipad.cfd/chat/zlzajfss83f.js","fqdn":"www.dotvipad.cfd","domain":"dotvipad.cfd","tld":"cfd"},"ip":{"addr":"104.26.11.238","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.dotvipad.cfd/chat/index?channelId=c73ee4eae3f741259c2dd381f1408f69\u0026isBack=true","date":"2026-06-20T20:34:22.229Z","timestamp":1781987662229,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.dotvipad.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 10 Jun 2026 23:06:11 GMT","end":"Wed, 09 Sep 2026 00:06:03 GMT"},"fingerprint":{"sha1":"14:75:94:53:B4:08:7C:4B:32:F5:CF:5A:6B:94:79:36:BB:4C:A6:B9","sha256":"70:B6:18:4A:DF:89:7A:56:D5:80:CD:06:88:40:18:DB:C1:3B:D6:0F:2A:A0:25:21:10:D4:22:5C:91:ED:FE:F8"}}},"request":{"raw":"GET /chat/zlzajfss83f.js HTTP/1.1\r\nHost: www.dotvipad.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.dotvipad.cfd/chat/index?channelId=c73ee4eae3f741259c2dd381f1408f69\u0026isBack=true\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sat, 20 Jun 2026 20:34:22 GMT\r\ncontent-type: application/javascript; charset=utf8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\nlast-modified: Wed, 17 Jun 2026 01:27:22 GMT\r\netag: \"6a31f7fa-146356\"\r\nx-frame-options: ALLOWALL\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\nage: 1273\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YIe%2BgXxahtM0R2SLwVYHtrvwPHEQiToYuiHe0b8g29xuBGEbV2ZM92qEajKVXc%2Frj2kO%2Fo%2BEbwC8QLhfN3LQThXwd1ndMwkwfhvdGPsnI3zWF6SIBWQXXXykXq1PeYR7oq4%3D\"}]}\r\ncf-ray: a0ed8dc90ca4b4ff-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1336150,"size_decoded":391050,"mime_type":"application/javascript; charset=utf8","magic":"JavaScript source, ASCII text, with very long lines (32186)","md5":"874f43daac04430ace2a76b4c499526f","sha1":"210277ee4624a07a178a26d20826cfe4feeb6e5c","sha256":"8a7053f2a2470fa6e014c252ee54592ce25c79c5125f6b864c76d0d2e9da9b37","sha512":"c523d5fa1fc955dd68e703a320c215a5d877e980dcf7ea73dc919a93b90bb634b2730631e007fe324f3bd8531295ab223fe7f78b5c4703e81b43265f830585de","ssdeep":"6144:1UtvO/LpPn4MWzEkEhlcG2oGsFOeOZ+PjZcekEUPQcgCZcBdWMSuOTLzmBw56lU:N4iNhuqZOZycDq5WMk/Uw5L","tlshash":"2c253bcc72e67056469221a0cc3b290ffd356e54801dd93ae7bde9dabe6440881b7b3d","first_seen":"2026-06-17T23:14:52.646222Z","last_seen":"2026-07-13T22:30:05.340043Z","times_seen":28,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":13,"connect":1,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-20","alert":"Sinkholed","trigger":"www.dotvipad.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-20","alert":"Phishing Block","trigger":"www.dotvipad.cfd","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.dotvipad.cfd/chat/layouts__index.aef6f5da.chunk.css","fqdn":"www.dotvipad.cfd","domain":"dotvipad.cfd","tld":"cfd"},"ip":{"addr":"104.26.11.238","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.dotvipad.cfd/chat/index?channelId=c73ee4eae3f741259c2dd381f1408f69\u0026isBack=true","date":"2026-06-20T20:34:22.298Z","timestamp":1781987662298,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.dotvipad.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 10 Jun 2026 23:06:11 GMT","end":"Wed, 09 Sep 2026 00:06:03 GMT"},"fingerprint":{"sha1":"14:75:94:53:B4:08:7C:4B:32:F5:CF:5A:6B:94:79:36:BB:4C:A6:B9","sha256":"70:B6:18:4A:DF:89:7A:56:D5:80:CD:06:88:40:18:DB:C1:3B:D6:0F:2A:A0:25:21:10:D4:22:5C:91:ED:FE:F8"}}},"request":{"raw":"GET /chat/layouts__index.aef6f5da.chunk.css HTTP/1.1\r\nHost: www.dotvipad.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.dotvipad.cfd/chat/index?channelId=c73ee4eae3f741259c2dd381f1408f69\u0026isBack=true\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=0\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sat, 20 Jun 2026 20:34:22 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\nlast-modified: Wed, 17 Jun 2026 01:27:21 GMT\r\netag: \"6a31f7f9-55a9\"\r\nx-frame-options: ALLOWALL\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\nage: 1272\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lfaVZBVdF16Zwq6k8Or8NwSrrfGQnR5PxFFgW2JLiC3ExE0MZSvFV2eATDuRoWBz4mJ%2BvmiXWQ8gWABG5COTFqWcyVrE3WZ9DX%2BmfeBSjaxt5fwwXQMCChzPz8CKmRpavyI%3D\"}]}\r\ncf-ray: a0ed8dc95d05b4ff-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":21929,"size_decoded":6259,"mime_type":"text/css","magic":"ASCII text, with very long lines (21928)","md5":"1fae21a22d98352131d559dcdf4c462d","sha1":"6d640c783c96a55a4587655a0ec5676dc1cd6ec0","sha256":"bf0e7fd9f1309f91385a0931da81906dbe427b7ccb89905301d70321ad655f6a","sha512":"2b1b24ca45f5ddfa85193391e37852a8b1cebfe52dc2a4c9711d3a27f77375e90df11894b4e1fafa300687fb3d689da3e1b36c527aab9ef3fb774b806b2dcbdc","ssdeep":"384:dUrbc0UUxJW/FsG9wmjW9QbBzuH8NSGQd4gVt2/X8aOVdWoSsggjK4TMcDZ:MbcMKI9Q44gVtdyIDMcF","tlshash":"dfa2e8313d4c6038f66a419e35cc9784a519db93d13799eae182e094ffce3d32b58b49","first_seen":"2026-06-17T23:14:52.64753Z","last_seen":"2026-07-13T22:30:05.391639Z","times_seen":28,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-20","alert":"Phishing Block","trigger":"www.dotvipad.cfd","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-20","alert":"Sinkholed","trigger":"www.dotvipad.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.dotvipad.cfd/chat/static/new-msg.37a9fd9b.mp3","fqdn":"www.dotvipad.cfd","domain":"dotvipad.cfd","tld":"cfd"},"ip":{"addr":"104.26.11.238","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://www.dotvipad.cfd/chat/index?channelId=c73ee4eae3f741259c2dd381f1408f69\u0026isBack=true","date":"2026-06-20T20:34:23.541Z","timestamp":1781987663541,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.dotvipad.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 10 Jun 2026 23:06:11 GMT","end":"Wed, 09 Sep 2026 00:06:03 GMT"},"fingerprint":{"sha1":"14:75:94:53:B4:08:7C:4B:32:F5:CF:5A:6B:94:79:36:BB:4C:A6:B9","sha256":"70:B6:18:4A:DF:89:7A:56:D5:80:CD:06:88:40:18:DB:C1:3B:D6:0F:2A:A0:25:21:10:D4:22:5C:91:ED:FE:F8"}}},"request":{"raw":"GET /chat/static/new-msg.37a9fd9b.mp3 HTTP/1.1\r\nHost: www.dotvipad.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: audio/webm,audio/ogg,audio/wav,audio/*;q=0.9,application/ogg;q=0.7,video/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nRange: bytes=0-\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.dotvipad.cfd/chat/index?channelId=c73ee4eae3f741259c2dd381f1408f69\u0026isBack=true\r\nSec-Fetch-Dest: audio\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sat, 20 Jun 2026 20:34:23 GMT\r\ncontent-type: audio/mpeg\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\nlast-modified: Wed, 17 Jun 2026 01:27:21 GMT\r\nx-frame-options: ALLOWALL\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sFSgeJiLmBCxH8nyq4%2B6vvczFkArhA1OlXf8zK5%2FCYYdBE6TnKklCFtPCMhu9glMN9NNRnUOAO7xzbQcDDT%2B3d3Cl9byRqhbLmA97qOyvBfFqZtRg82gSXkdumPWnO9NV78%3D\"}]}\r\nage: 1272\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\netag: W/\"6a31f7f9-15b1c\"\r\ncf-ray: a0ed8dd12de5b4ff-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":88860,"size_decoded":89516,"mime_type":"audio/mpeg","magic":"Audio file with ID3 version 2.4.0, contains: MPEG ADTS, layer III, v1, 320 kbps, 44.1 kHz, Stereo","md5":"9dc3f81cca1f16a596bafe8ca88ff9a9","sha1":"3c275868badc45723330617e4cafa492c548b13c","sha256":"b41817848525013ae4e71a48b5aeacdf057e46c52a13e12aed04edc975c4f305","sha512":"962e8bbf682ab04160084f101878e6e7ccd88e0fb4a270a88ae2be4c22e67c86ae23228032b0ea3a07d64f6cd1c5ae4e7deeb8c2db746c055c649de67ab68f48","ssdeep":"1536:1Uo2Ky0jDoeMCi7jzX+aMZdPzOCbkrRULKci+mTvKs6vjahXa/gX54:KlZ0jDoqqT+9ZIlz+uys6v6aop4","tlshash":"0b9312bb01e46f3fe58fa9bf0e272fe997b96490855855c8a088933e1cf350317265b4","first_seen":"2025-12-03T22:48:55.742032Z","last_seen":"2026-08-20T14:53:19.342455Z","times_seen":194,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-20","alert":"Sinkholed","trigger":"www.dotvipad.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-20","alert":"Phishing Block","trigger":"www.dotvipad.cfd","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.dotvipad.cfd/chat/static/robot.6654b3dc.png","fqdn":"www.dotvipad.cfd","domain":"dotvipad.cfd","tld":"cfd"},"ip":{"addr":"104.26.11.238","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.dotvipad.cfd/chat/index?channelId=c73ee4eae3f741259c2dd381f1408f69\u0026isBack=true","date":"2026-06-20T20:34:23.593Z","timestamp":1781987663593,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.dotvipad.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 10 Jun 2026 23:06:11 GMT","end":"Wed, 09 Sep 2026 00:06:03 GMT"},"fingerprint":{"sha1":"14:75:94:53:B4:08:7C:4B:32:F5:CF:5A:6B:94:79:36:BB:4C:A6:B9","sha256":"70:B6:18:4A:DF:89:7A:56:D5:80:CD:06:88:40:18:DB:C1:3B:D6:0F:2A:A0:25:21:10:D4:22:5C:91:ED:FE:F8"}}},"request":{"raw":"GET /chat/static/robot.6654b3dc.png HTTP/1.1\r\nHost: www.dotvipad.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.dotvipad.cfd/chat/index?channelId=c73ee4eae3f741259c2dd381f1408f69\u0026isBack=true\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sat, 20 Jun 2026 20:34:23 GMT\r\ncontent-type: image/png\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\nlast-modified: Wed, 17 Jun 2026 01:27:21 GMT\r\netag: \"6a31f7f9-dfe3\"\r\nx-frame-options: ALLOWALL\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\nage: 1272\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7JiF7HFcC6OfGtGHVcpG4cTnVovrk3U4nWofEzfsSrp2qO5F3sIqJP3kPsFBGzTgcGYmUchamK28wgwVKilmnP%2FK4XPWER5BXs2EuKrRLArA%2F2WjYvTrKvBKWPY0w9xbVck%3D\"}]}\r\ncf-ray: a0ed8dd17e43b4ff-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":57315,"size_decoded":52164,"mime_type":"image/png","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1024x1024, components 3","md5":"6add20d4caaed4e2bcccdcfad65d19fc","sha1":"8e320a1cd98638409a3b9d03807df45a5f9acc1b","sha256":"d7233cd4089bde7822ec6c3dec368a1dfd52669df749a7a7a48bda19e08cd4e6","sha512":"688c8e858ad8302321d5c67d813b4e5284e2acc2e5f81d2ba36f10244b6fddbc5ea4affff75c94671b61f3d74a1078d196d7bfeedc4c8e7e633b3dd4ee8e2b8a","ssdeep":"1536:6tdZZwH2+MYT6ws0R0qx3aTrtWe6U8dn72dI:6LZZqPFfs0Zq0e6Nn72dI","tlshash":"6b437d13cc188746e55986e4bd0b8d9d6e4a1b1ce4863afe756f9ecb3f602311c4e06e","first_seen":"2025-12-03T22:48:55.742713Z","last_seen":"2026-08-20T14:53:19.333225Z","times_seen":193,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-20","alert":"Phishing Block","trigger":"www.dotvipad.cfd","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-20","alert":"Sinkholed","trigger":"www.dotvipad.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.dotvipad.cfd/api/chat/visitor/getEventMsgPoll","fqdn":"www.dotvipad.cfd","domain":"dotvipad.cfd","tld":"cfd"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.dotvipad.cfd/chat/index?channelId=c73ee4eae3f741259c2dd381f1408f69\u0026isBack=true","date":"2026-06-20T20:34:23.913Z","timestamp":1781987663913,"http_version":"","security_state":"","security_info":null,"request":{"raw":"POST /api/chat/visitor/getEventMsgPoll HTTP/1.1\r\nHost: www.dotvipad.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://www.dotvipad.cfd/chat/index?channelId=c73ee4eae3f741259c2dd381f1408f69\u0026isBack=true\r\nContent-Type: application/json;charset=UTF-8\r\nContent-Length: 117\r\nOrigin: https://www.dotvipad.cfd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-22T19:26:52.117381Z","times_seen":18040627,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-20","alert":"Phishing Block","trigger":"www.dotvipad.cfd","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-20","alert":"Sinkholed","trigger":"www.dotvipad.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.dotvipad.cfd/data/upload/avatar/20260319/21a5ee1685064a8085ddd72ca8e1f915/7cc37556ccb04567b0021d88e8804224.jpeg","fqdn":"www.dotvipad.cfd","domain":"dotvipad.cfd","tld":"cfd"},"ip":{"addr":"104.26.11.238","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.dotvipad.cfd/chat/index?channelId=c73ee4eae3f741259c2dd381f1408f69\u0026isBack=true","date":"2026-06-20T20:34:24.339Z","timestamp":1781987664339,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.dotvipad.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 10 Jun 2026 23:06:11 GMT","end":"Wed, 09 Sep 2026 00:06:03 GMT"},"fingerprint":{"sha1":"14:75:94:53:B4:08:7C:4B:32:F5:CF:5A:6B:94:79:36:BB:4C:A6:B9","sha256":"70:B6:18:4A:DF:89:7A:56:D5:80:CD:06:88:40:18:DB:C1:3B:D6:0F:2A:A0:25:21:10:D4:22:5C:91:ED:FE:F8"}}},"request":{"raw":"GET /data/upload/avatar/20260319/21a5ee1685064a8085ddd72ca8e1f915/7cc37556ccb04567b0021d88e8804224.jpeg HTTP/1.1\r\nHost: www.dotvipad.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.dotvipad.cfd/chat/index?channelId=c73ee4eae3f741259c2dd381f1408f69\u0026isBack=true\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sat, 20 Jun 2026 20:34:24 GMT\r\ncontent-type: image/jpeg\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\nlast-modified: Thu, 19 Mar 2026 11:08:12 GMT\r\netag: W/\"69bbd91c-2e4a\"\r\ncontent-encoding: br\r\nage: 1272\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=eYVM%2BhgkfstdOpp10PJeFW5XVNx%2B%2Frea3lUIbY2m2lHJfewTI1Ujzp8xk76J579PRG3iH%2BL5TkaHvhHzoijFiIEE9ZXjScCo9E7tJW5OcmZbVx5fkWNIxtp%2BD%2FvOuScwgCo%3D\"}]}\r\ncf-ray: a0ed8dd61b92b4ff-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11850,"size_decoded":12090,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 500x500, components 3","md5":"bb2c8ce0336735fd157ac9d3a41a0a9d","sha1":"f0071833a1298fb44e22036a90d32c662319730a","sha256":"2f541f8870b70ffe71549cf25d40a55aae21383122775dd02d0a6c6dc81a95fa","sha512":"09f90965661755c90f8a0e2adeb622a908a50c8eb170bafe18522c7191479fc09b18f7fe8ad1bbcfbab93ee3ff3628465d18177eb7695cbcf8b9343877c1b268","ssdeep":"192:9wOyf2teqO1q4HNcbqeZKK0nMTpOb4E1//Hie0YshKLOmIiivzH:9wc8qOAuNoiK0nt51//R0BbmkvzH","tlshash":"7e32bf45e1b80ea3d4687b3250c833bd939b15bbb2e3d3077d40524069f6aee8dd9b45","first_seen":"2026-06-20T20:13:38.076016Z","last_seen":"2026-06-20T20:34:47.871159Z","times_seen":3,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-20","alert":"Sinkholed","trigger":"www.dotvipad.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-20","alert":"Phishing Block","trigger":"www.dotvipad.cfd","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dwdwddwdweeweweddd1223348493.xyz/favicon.ico","fqdn":"dwdwddwdweeweweddd1223348493.xyz","domain":"dwdwddwdweeweweddd1223348493.xyz","tld":"xyz"},"ip":{"addr":"104.21.84.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dwdwddwdweeweweddd1223348493.xyz/","date":"2026-06-20T20:34:20.998Z","timestamp":1781987660998,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dwdwddwdweeweweddd1223348493.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 16 Jun 2026 09:40:59 GMT","end":"Mon, 14 Sep 2026 10:39:35 GMT"},"fingerprint":{"sha1":"9E:0B:0D:36:A3:3D:39:08:9E:21:BA:B4:0E:19:8D:35:56:F1:FE:28","sha256":"54:2C:01:34:BD:83:53:A3:DE:C6:AE:23:35:53:21:03:DF:20:46:14:DC:6C:00:1A:9C:5F:A0:17:67:14:F0:87"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: dwdwddwdweeweweddd1223348493.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://dwdwddwdweeweweddd1223348493.xyz/\r\nCookie: XSRF-TOKEN=eyJpdiI6InpHSC9xQ3JMUUxEc0RGc1FSUXZQRnc9PSIsInZhbHVlIjoiRkpmNXA0MEtaZm5zeXpuQW5Od2t6ZER0ck4ySzRpUEtLNE1kQjdzNzhuN1JrUWswOUdlRlQ1L1JaTlk0a2pvc0tXdnc2dXM1QUlMN2FvR0wzQUZ0UENOeGdMVW8yczdLa245YzNOQk8xWjk5dUpXcnBGWmVUVVgyNFZLZnBnVFkiLCJtYWMiOiJiYWFlZmYyNzQ5NGY2OTEwZDMyOGI2NDFmNjg1OWQ4NDJiYzI2ZjczNGNmZjhjMmIwZmQ2OWRkYzdhMTU1ZWJmIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IjZMNm5DUHJYT2x5dXZLZ2wrYWFvd1E9PSIsInZhbHVlIjoib0M3QUVXQWszUU94R1AxMVBIU3dOd1lvelU5bnNWcGxIaStWNWFWYjdNY2VuRVZnaTg2NWJFWldObjJQcHF0WDdvcnhPZ3FwbGZOVnJmTjBlblZqYjdYa3ZlK25TTmpaSGFhdElUdjdyY09RYkNPTFdielhOTTVBQ2RCckowbG4iLCJtYWMiOiI4MjAzMjZjNTI3ZWU0YjE3ZTJmNDBhZjg2NmE2NTFkM2I0NWEwZTE5ODliNGFiZWM4MTA4YTlkZTk4YmQ5MTVjIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 20 Jun 2026 20:34:21 GMT\r\ncontent-type: image/x-icon\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Thu, 24 Jul 2025 21:59:06 GMT\r\npriority: u=6,i=?0\r\netag: \"6882acaa-0\"\r\naccept-ranges: bytes\r\nage: 1273\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EhtNtlO%2BuIGY4Vfnt0K3dW8CqDbFwjEyAPZg3%2FXFiNghLKYfr4l6Z9dEQkAnmOsrXzeFJhSfdB93JrYC7DoDsDkHTnF3KHpBuwuPN9%2BS0dF8vhn10ZC0FYfWQVTQfqA5SwW%2FBu8axjRkYgKan0X3t%2FZhUA%3D%3D\"}]}\r\ncf-ray: a0ed8dc1391d56c4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":709,"mime_type":"image/x-icon","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-22T19:26:52.117381Z","times_seen":18040627,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.dotvipad.cfd/chat/dummy_0fe6675a139bf4178277a0e2b2bbe5e0.INDqO5TE.js","fqdn":"www.dotvipad.cfd","domain":"dotvipad.cfd","tld":"cfd"},"ip":{"addr":"104.26.11.238","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.dotvipad.cfd/chat/index?channelId=c73ee4eae3f741259c2dd381f1408f69\u0026isBack=true","date":"2026-06-20T20:34:22.225Z","timestamp":1781987662225,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.dotvipad.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 10 Jun 2026 23:06:11 GMT","end":"Wed, 09 Sep 2026 00:06:03 GMT"},"fingerprint":{"sha1":"14:75:94:53:B4:08:7C:4B:32:F5:CF:5A:6B:94:79:36:BB:4C:A6:B9","sha256":"70:B6:18:4A:DF:89:7A:56:D5:80:CD:06:88:40:18:DB:C1:3B:D6:0F:2A:A0:25:21:10:D4:22:5C:91:ED:FE:F8"}}},"request":{"raw":"GET /chat/dummy_0fe6675a139bf4178277a0e2b2bbe5e0.INDqO5TE.js HTTP/1.1\r\nHost: www.dotvipad.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.dotvipad.cfd/chat/index?channelId=c73ee4eae3f741259c2dd381f1408f69\u0026isBack=true\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sat, 20 Jun 2026 20:34:22 GMT\r\ncontent-type: application/javascript; charset=utf8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Wed, 17 Jun 2026 01:27:22 GMT\r\nx-frame-options: ALLOWALL\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=h2ts3mMxXIDgXpXENboGW6fRKKYBW%2F1PMjxMm35qJOeJ7Nyfu2JKS%2BHKv2RlefqRdPg4ewVQ5dRPjd9l8doSlS%2BFIdSEt%2BEZSQ6WVvInHli%2FSNpgVbLAjVxSrWoyMFptNQs%3D\"}]}\r\nage: 1273\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\netag: W/\"6a31f7fa-f2\"\r\ncontent-encoding: br\r\ncf-ray: a0ed8dc90ca0b4ff-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":242,"size_decoded":829,"mime_type":"application/javascript; charset=utf8","magic":"ASCII text, with no line terminators","md5":"162dc3232064e37c9ff63cd1fcf0533f","sha1":"dee090aefb5d3dbc7e7c00622b8d76438d0a70b4","sha256":"775cd91cf280dd10c31e7dac45bc16069226c2542013495757324ae3399b1da1","sha512":"f14ca3d797b81481356b39131dcb067687a595f79c9765fbd45c1067a123273c788aad080cd1747dbd1684735c8bd7cf9721416045046e5db46d9dc3ebe146e6","ssdeep":"","tlshash":"45d02e26f1f0204c038a90a6886f0226e0236d800d7e8180822e86180e3828b8101c8b","first_seen":"2026-06-17T23:14:52.661152Z","last_seen":"2026-07-13T22:30:05.387547Z","times_seen":29,"resource_available":true,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":17,"connect":2,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-20","alert":"Phishing Block","trigger":"www.dotvipad.cfd","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-20","alert":"Sinkholed","trigger":"www.dotvipad.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.dotvipad.cfd/chat/dummy_5d3f0a53b9bd6940adb2b9539c5d7d6e.L08RzbJv.js","fqdn":"www.dotvipad.cfd","domain":"dotvipad.cfd","tld":"cfd"},"ip":{"addr":"104.26.11.238","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.dotvipad.cfd/chat/index?channelId=c73ee4eae3f741259c2dd381f1408f69\u0026isBack=true","date":"2026-06-20T20:34:22.228Z","timestamp":1781987662228,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.dotvipad.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 10 Jun 2026 23:06:11 GMT","end":"Wed, 09 Sep 2026 00:06:03 GMT"},"fingerprint":{"sha1":"14:75:94:53:B4:08:7C:4B:32:F5:CF:5A:6B:94:79:36:BB:4C:A6:B9","sha256":"70:B6:18:4A:DF:89:7A:56:D5:80:CD:06:88:40:18:DB:C1:3B:D6:0F:2A:A0:25:21:10:D4:22:5C:91:ED:FE:F8"}}},"request":{"raw":"GET /chat/dummy_5d3f0a53b9bd6940adb2b9539c5d7d6e.L08RzbJv.js HTTP/1.1\r\nHost: www.dotvipad.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.dotvipad.cfd/chat/index?channelId=c73ee4eae3f741259c2dd381f1408f69\u0026isBack=true\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sat, 20 Jun 2026 20:34:22 GMT\r\ncontent-type: application/javascript; charset=utf8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Wed, 17 Jun 2026 01:27:22 GMT\r\nx-frame-options: ALLOWALL\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mJq4yTTEnwtq8eyNtbXNo7IiQp6PKbHejGWytX8tJ9yL8QWwIAy6gfASO9Fu9IZcvY0Z3MrmqvPi9VlRjnLIISKaP2MXRHmgUllsLH5QGYCOO9SgHEA06dUM3kvnGW6LMnI%3D\"}]}\r\nage: 1273\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\netag: W/\"6a31f7fa-110\"\r\ncontent-encoding: br\r\ncf-ray: a0ed8dc90ca2b4ff-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":272,"size_decoded":788,"mime_type":"application/javascript; charset=utf8","magic":"ASCII text, with no line terminators","md5":"e60032e6beb9ce09115585747452d979","sha1":"ebef60981c0b0449ceabfa851d8a217db4bac688","sha256":"db26d6ba37f1ec5c088768eb769288d9cef1801b37aace30df6069bfdafd5676","sha512":"9ad9bc81c1a799761a154e7d977054d66cfad0bf4ad528cf089eb19191cc6d76950516ecae5d213fa19c0c35f447407a54fca4e184a9fdf8a3c51ebfdd36decf","ssdeep":"","tlshash":"e6d05b1973761948cb2e509605cd3117b0b389cccc6ac1c5116d95f1052b1cfc9d3c8f","first_seen":"2026-06-17T23:14:52.64168Z","last_seen":"2026-07-13T22:30:05.377295Z","times_seen":29,"resource_available":true,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":14,"connect":2,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-20","alert":"Sinkholed","trigger":"www.dotvipad.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-20","alert":"Phishing Block","trigger":"www.dotvipad.cfd","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.dotvipad.cfd/api/chat/visitor/chatStart","fqdn":"www.dotvipad.cfd","domain":"dotvipad.cfd","tld":"cfd"},"ip":{"addr":"104.26.11.238","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.dotvipad.cfd/chat/index?channelId=c73ee4eae3f741259c2dd381f1408f69\u0026isBack=true","date":"2026-06-20T20:34:22.862Z","timestamp":1781987662862,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.dotvipad.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 10 Jun 2026 23:06:11 GMT","end":"Wed, 09 Sep 2026 00:06:03 GMT"},"fingerprint":{"sha1":"14:75:94:53:B4:08:7C:4B:32:F5:CF:5A:6B:94:79:36:BB:4C:A6:B9","sha256":"70:B6:18:4A:DF:89:7A:56:D5:80:CD:06:88:40:18:DB:C1:3B:D6:0F:2A:A0:25:21:10:D4:22:5C:91:ED:FE:F8"}}},"request":{"raw":"POST /api/chat/visitor/chatStart HTTP/1.1\r\nHost: www.dotvipad.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://www.dotvipad.cfd/chat/index?channelId=c73ee4eae3f741259c2dd381f1408f69\u0026isBack=true\r\nContent-Type: application/json;charset=UTF-8\r\nContent-Length: 218\r\nOrigin: https://www.dotvipad.cfd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 \r\ndate: Sat, 20 Jun 2026 20:34:23 GMT\r\ncontent-type: application/json\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gNsDEeLHMZUHw2MxApGid1l%2FBTZglD6EffcG7ruzVc9l7e5e2uqfHl9b45GWJOCoh%2FPRY%2BT6ZQJ3GizO7E6L0gS6s8QBO%2FlGRr%2B6%2FQI%2FCfiTZ%2FapjC8Rd7d7jAjiYiDDxMk%3D\"}]}\r\ncf-ray: a0ed8dcce8bab4ff-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":267,"size_decoded":767,"mime_type":"application/json","magic":"JSON text data","md5":"ac1a4861f28241d6c356d67320cdffdb","sha1":"93617a8ebf662be0b630922a4ec83ad23eff4627","sha256":"4f66dd63abcec2c1144cd6badbd284ef7009e73e939e156022b94d46d4e1dcab","sha512":"665d6f8e1b3886f365e13181e0f520aa0e0dfae1c32e2339d0432af35c30804a94869c04aa17a58381e706125cd258bdaa353b262c5c878f90e71c99751335e1","ssdeep":"","tlshash":"0cd09780ee1ee936320664d2044d14615faf14b5ec1c3ce8cbfd4b3ca794e54c880827","first_seen":"2026-06-20T20:34:47.873284Z","last_seen":"2026-06-20T20:34:47.873284Z","times_seen":1,"resource_available":false,"data":null}},"time_used":324,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":324,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-20","alert":"Sinkholed","trigger":"www.dotvipad.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-20","alert":"Phishing Block","trigger":"www.dotvipad.cfd","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.dotvipad.cfd/api/chat/visitor/getSessionMsg","fqdn":"www.dotvipad.cfd","domain":"dotvipad.cfd","tld":"cfd"},"ip":{"addr":"104.26.11.238","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.dotvipad.cfd/chat/index?channelId=c73ee4eae3f741259c2dd381f1408f69\u0026isBack=true","date":"2026-06-20T20:34:23.198Z","timestamp":1781987663198,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.dotvipad.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 10 Jun 2026 23:06:11 GMT","end":"Wed, 09 Sep 2026 00:06:03 GMT"},"fingerprint":{"sha1":"14:75:94:53:B4:08:7C:4B:32:F5:CF:5A:6B:94:79:36:BB:4C:A6:B9","sha256":"70:B6:18:4A:DF:89:7A:56:D5:80:CD:06:88:40:18:DB:C1:3B:D6:0F:2A:A0:25:21:10:D4:22:5C:91:ED:FE:F8"}}},"request":{"raw":"POST /api/chat/visitor/getSessionMsg HTTP/1.1\r\nHost: www.dotvipad.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://www.dotvipad.cfd/chat/index?channelId=c73ee4eae3f741259c2dd381f1408f69\u0026isBack=true\r\nContent-Type: application/json;charset=UTF-8\r\nContent-Length: 92\r\nOrigin: https://www.dotvipad.cfd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 \r\ndate: Sat, 20 Jun 2026 20:34:23 GMT\r\ncontent-type: application/json\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wD28ZDKioSouAd93lS6Vpj%2FE7nGbdWoevO%2FCfFrqn%2FOWgqD8TNekExqkhBAifIcj6zetP7WJziPdtBVEUUJtrwWRFE%2Bgo1FhYKOi%2BPui4anecHjyVYaJckZ4eaHNMUEs3Zk%3D\"}]}\r\ncf-ray: a0ed8dcefb23b4ff-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":42,"size_decoded":599,"mime_type":"application/json","magic":"JSON text data","md5":"90ab6048b40c0aace9c01433a5da002a","sha1":"92e83ee8b816f9acea246e40f0953091e0d3c0bf","sha256":"10321ae3bdb51bde0e06da79bae2083fdb81d9f5700cc68b8f72573227688588","sha512":"5f46dd013ba83a0439888acc007a1e6432a61ecabe4456a4f29bbbd4b61b59f4d167f98cfb30757bf36d62d40e90f018635879ca327f4b6ae756fbf724715b60","ssdeep":"","tlshash":"679002502d14ac242a034045610e954404a4205445502165089892256640a209402924","first_seen":"2026-03-01T01:55:36.673799Z","last_seen":"2026-08-16T02:16:24.77668Z","times_seen":38,"resource_available":false,"data":null}},"time_used":303,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":303,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-20","alert":"Sinkholed","trigger":"www.dotvipad.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-20","alert":"Phishing Block","trigger":"www.dotvipad.cfd","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.dotvipad.cfd/api/chat/visitor/transferAgent","fqdn":"www.dotvipad.cfd","domain":"dotvipad.cfd","tld":"cfd"},"ip":{"addr":"104.26.11.238","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.dotvipad.cfd/chat/index?channelId=c73ee4eae3f741259c2dd381f1408f69\u0026isBack=true","date":"2026-06-20T20:34:23.526Z","timestamp":1781987663526,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.dotvipad.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 10 Jun 2026 23:06:11 GMT","end":"Wed, 09 Sep 2026 00:06:03 GMT"},"fingerprint":{"sha1":"14:75:94:53:B4:08:7C:4B:32:F5:CF:5A:6B:94:79:36:BB:4C:A6:B9","sha256":"70:B6:18:4A:DF:89:7A:56:D5:80:CD:06:88:40:18:DB:C1:3B:D6:0F:2A:A0:25:21:10:D4:22:5C:91:ED:FE:F8"}}},"request":{"raw":"POST /api/chat/visitor/transferAgent HTTP/1.1\r\nHost: www.dotvipad.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://www.dotvipad.cfd/chat/index?channelId=c73ee4eae3f741259c2dd381f1408f69\u0026isBack=true\r\nContent-Type: application/json;charset=UTF-8\r\nContent-Length: 45\r\nOrigin: https://www.dotvipad.cfd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 \r\ndate: Sat, 20 Jun 2026 20:34:24 GMT\r\ncontent-type: application/json\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jsJdWvcpMMRz0tJ2anTP76hIYdUBY2xKMx4i6Uf7fK%2Fw%2BSvF4lbhLsocHbhMdueRczdegHlc86hIr7E0RgfS%2BHAakeEOd%2B8RYZlNYssRY7r40d6%2BIYNycowjyOySsq4FPtI%3D\"}]}\r\ncf-ray: a0ed8dd10dc2b4ff-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":272,"size_decoded":778,"mime_type":"application/json","magic":"JSON text data","md5":"e813b159c377ba5e72a1d3e87af315e6","sha1":"6b8fb6d0b92142ec637c283b093f3ca9d4b6b1e8","sha256":"0401d2c660424df52d3feedba772afdb0e6a8f308f90177a9dc91b56ba0fff73","sha512":"94aa4bb2cbeacc2d42f514f8fe5b29d9ffacfbf2da4d396df4ef849ca2d6615f8de3bceea2362af5a718ee3f34ca54aed32a004ab5943cb6a4d924b717a0c6bf","ssdeep":"","tlshash":"dcd02b407e24e9312855845981066851682899551ca67c7d5c6ec8fd96a24d8cd83434","first_seen":"2026-06-20T20:13:38.065831Z","last_seen":"2026-06-20T20:34:47.87489Z","times_seen":3,"resource_available":false,"data":null}},"time_used":487,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":487,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-20","alert":"Sinkholed","trigger":"www.dotvipad.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-20","alert":"Phishing Block","trigger":"www.dotvipad.cfd","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.dotvipad.cfd/api/chat/visitor/getAdminCard","fqdn":"www.dotvipad.cfd","domain":"dotvipad.cfd","tld":"cfd"},"ip":{"addr":"104.26.11.238","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.dotvipad.cfd/chat/index?channelId=c73ee4eae3f741259c2dd381f1408f69\u0026isBack=true","date":"2026-06-20T20:34:24.031Z","timestamp":1781987664031,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.dotvipad.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 10 Jun 2026 23:06:11 GMT","end":"Wed, 09 Sep 2026 00:06:03 GMT"},"fingerprint":{"sha1":"14:75:94:53:B4:08:7C:4B:32:F5:CF:5A:6B:94:79:36:BB:4C:A6:B9","sha256":"70:B6:18:4A:DF:89:7A:56:D5:80:CD:06:88:40:18:DB:C1:3B:D6:0F:2A:A0:25:21:10:D4:22:5C:91:ED:FE:F8"}}},"request":{"raw":"POST /api/chat/visitor/getAdminCard HTTP/1.1\r\nHost: www.dotvipad.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://www.dotvipad.cfd/chat/index?channelId=c73ee4eae3f741259c2dd381f1408f69\u0026isBack=true\r\nContent-Type: application/json;charset=UTF-8\r\nContent-Length: 45\r\nOrigin: https://www.dotvipad.cfd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 \r\ndate: Sat, 20 Jun 2026 20:34:24 GMT\r\ncontent-type: application/json\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mvq1gs7rssKymYjFqhV6UbhU%2Fk5QZ15CNShNLTUKshQkMNu0TgZNhTthr3po4dRQ4PXNStc5xfT2TBB6itv%2FpUJ4jRO%2FW%2BGIxn1kwC6%2Fp%2Bfqcuj6tO4b0IM093yp7xz7vbY%3D\"}]}\r\ncf-ray: a0ed8dd4395bb4ff-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":479,"size_decoded":893,"mime_type":"application/json","magic":"JSON text data","md5":"9e4a710acfa654593a75a52a0117ff96","sha1":"905787d722d9ed39ff37fb7da781519739f83f8b","sha256":"f779e3e4ae516017e88b8a9a45bb646282a1b994a8b2cf5881012833d5f41068","sha512":"cc362c91d8a5db73de4d29e33eee4e7556b0a44fee1e6c30f5c05e6b257631508da390c244900a2d02ce064abfd98ac7278487d2aa1c4b7fb621505a0f069a24","ssdeep":"","tlshash":"bdf027c03ea89f3220b86cd140047dc9f42c7da37c836d696c565aad52f15b88c46838","first_seen":"2026-06-20T20:13:38.061468Z","last_seen":"2026-06-20T20:34:47.881991Z","times_seen":3,"resource_available":false,"data":null}},"time_used":268,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":268,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-20","alert":"Phishing Block","trigger":"www.dotvipad.cfd","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-20","alert":"Sinkholed","trigger":"www.dotvipad.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.dotvipad.cfd/chat/IYSEMY2tiIUM.c5d7cfef.js","fqdn":"www.dotvipad.cfd","domain":"dotvipad.cfd","tld":"cfd"},"ip":{"addr":"104.26.11.238","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.dotvipad.cfd/chat/index?channelId=c73ee4eae3f741259c2dd381f1408f69\u0026isBack=true","date":"2026-06-20T20:34:22.296Z","timestamp":1781987662296,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.dotvipad.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 10 Jun 2026 23:06:11 GMT","end":"Wed, 09 Sep 2026 00:06:03 GMT"},"fingerprint":{"sha1":"14:75:94:53:B4:08:7C:4B:32:F5:CF:5A:6B:94:79:36:BB:4C:A6:B9","sha256":"70:B6:18:4A:DF:89:7A:56:D5:80:CD:06:88:40:18:DB:C1:3B:D6:0F:2A:A0:25:21:10:D4:22:5C:91:ED:FE:F8"}}},"request":{"raw":"GET /chat/IYSEMY2tiIUM.c5d7cfef.js HTTP/1.1\r\nHost: www.dotvipad.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.dotvipad.cfd/chat/index?channelId=c73ee4eae3f741259c2dd381f1408f69\u0026isBack=true\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sat, 20 Jun 2026 20:34:22 GMT\r\ncontent-type: application/javascript; charset=utf8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\nlast-modified: Wed, 17 Jun 2026 01:27:22 GMT\r\netag: \"6a31f7fa-1e188\"\r\nx-frame-options: ALLOWALL\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\nage: 1272\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LKXQ9gTbduAvTTGVooVYDDbVOKlVAos2ohEZsOYOODKI7mKqJMVPgnRdMB2DD3wYfZiyT7Fvcwiq1aBfFZNvEcP0nRCf2%2F6W4JZjln90le14Q8yBzwyNxnQ8wzOgRJtT8SQ%3D\"}]}\r\ncf-ray: a0ed8dc95d01b4ff-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":123272,"size_decoded":43815,"mime_type":"application/javascript; charset=utf8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"8bf5cb6d9c29c2c76e350762330767e8","sha1":"2527fe9b4d3181c2ea9696e8e55fd78f8e02145a","sha256":"8b3e72120bd162cb455a52bd9bdc60c9db1f149d47652a1636b7904f52973b7a","sha512":"95d09ad9e8f7686a01cf1f3bbe7ff45a56fc66b683a721f3a1f1bda177cc9e6e1a2b8a7da8b411c96aa194ffac8bd6b507dcb2718f15c38f2309c7f959d499b1","ssdeep":"3072:/ihmq4OdTCp/SMSgVx4jSDwgPHDXez+F4SQ:/ihmq4Cu/SMSgVx4joBDez4Q","tlshash":"e8c30b8cb3957ca93d2fe4a50a2f008e712f6ec4a40d8560f177e8972658dd4f217be9","first_seen":"2026-06-17T23:14:52.662938Z","last_seen":"2026-07-13T22:30:05.388174Z","times_seen":28,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-20","alert":"Phishing Block","trigger":"www.dotvipad.cfd","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-20","alert":"Sinkholed","trigger":"www.dotvipad.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.dotvipad.cfd/chat/825.cb3721c9.chunk.css","fqdn":"www.dotvipad.cfd","domain":"dotvipad.cfd","tld":"cfd"},"ip":{"addr":"104.26.11.238","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.dotvipad.cfd/chat/index?channelId=c73ee4eae3f741259c2dd381f1408f69\u0026isBack=true","date":"2026-06-20T20:34:22.302Z","timestamp":1781987662302,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.dotvipad.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 10 Jun 2026 23:06:11 GMT","end":"Wed, 09 Sep 2026 00:06:03 GMT"},"fingerprint":{"sha1":"14:75:94:53:B4:08:7C:4B:32:F5:CF:5A:6B:94:79:36:BB:4C:A6:B9","sha256":"70:B6:18:4A:DF:89:7A:56:D5:80:CD:06:88:40:18:DB:C1:3B:D6:0F:2A:A0:25:21:10:D4:22:5C:91:ED:FE:F8"}}},"request":{"raw":"GET /chat/825.cb3721c9.chunk.css HTTP/1.1\r\nHost: www.dotvipad.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.dotvipad.cfd/chat/index?channelId=c73ee4eae3f741259c2dd381f1408f69\u0026isBack=true\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=0\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sat, 20 Jun 2026 20:34:22 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\nlast-modified: Wed, 17 Jun 2026 01:27:21 GMT\r\netag: \"6a31f7f9-174e7\"\r\nx-frame-options: ALLOWALL\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\nage: 1272\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=n4QkYIlhfwyuPywgmntyo5MMZ55gyPaVs%2FNNFUElcxpJjW%2BafriTf5JvY40h8HXFKz0UEzNn0xd6NpRaqSXoA7txRS%2BSzEn220enLeucKjReT1JaGq791D5lvL1s514ovx4%3D\"}]}\r\ncf-ray: a0ed8dc96d0bb4ff-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":95463,"size_decoded":26456,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"19dcf05b32901271126100bf9ec61fce","sha1":"dacbfd7f9f47bcbf64e3eea190096b1543b33a31","sha256":"92e1c58af458fc2d3add64e72fc824e171a44bac6e57d0046e9e497dfbc45e01","sha512":"18ee1e1fb93d5cba2334eaa52cef9bdf875661918f69ff40b3975fd4d25073293852cb3bbcb0648d80f3b6da9b27d4e650fb83cfe8c1c17c1128c4ff9fc4627a","ssdeep":"1536:Y6uvJIQwdAlHNJqOVZxvR7GGYgAkdJI8ItyFoS:OqwZx5GGYcdJI8It+oS","tlshash":"0493193db90d9174ea27822717ecd7d8c01abf80da225697e04390927dcb7f32799789","first_seen":"2026-06-17T23:14:52.657061Z","last_seen":"2026-07-13T22:30:05.405068Z","times_seen":28,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-20","alert":"Sinkholed","trigger":"www.dotvipad.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-20","alert":"Phishing Block","trigger":"www.dotvipad.cfd","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.dotvipad.cfd/api/chat/visitor/channelInfo","fqdn":"www.dotvipad.cfd","domain":"dotvipad.cfd","tld":"cfd"},"ip":{"addr":"104.26.11.238","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.dotvipad.cfd/chat/index?channelId=c73ee4eae3f741259c2dd381f1408f69\u0026isBack=true","date":"2026-06-20T20:34:22.555Z","timestamp":1781987662555,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.dotvipad.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 10 Jun 2026 23:06:11 GMT","end":"Wed, 09 Sep 2026 00:06:03 GMT"},"fingerprint":{"sha1":"14:75:94:53:B4:08:7C:4B:32:F5:CF:5A:6B:94:79:36:BB:4C:A6:B9","sha256":"70:B6:18:4A:DF:89:7A:56:D5:80:CD:06:88:40:18:DB:C1:3B:D6:0F:2A:A0:25:21:10:D4:22:5C:91:ED:FE:F8"}}},"request":{"raw":"POST /api/chat/visitor/channelInfo HTTP/1.1\r\nHost: www.dotvipad.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://www.dotvipad.cfd/chat/index?channelId=c73ee4eae3f741259c2dd381f1408f69\u0026isBack=true\r\nContent-Type: application/json;charset=UTF-8\r\nContent-Length: 41\r\nOrigin: https://www.dotvipad.cfd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 \r\ndate: Sat, 20 Jun 2026 20:34:22 GMT\r\ncontent-type: application/json\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RAp%2Bj5n2dM05vt7QDnXinn%2FaKPDgZ5VPOXwQd6I%2BkmoXJtLOf0yHOtRCrYlY3yFJnYRetRsLmlCc2XHvRZWvavaNhWiDdoTZdVgnswcK6IAu7RH6tGKLkFED5USpXeakHv8%3D\"}]}\r\ncf-ray: a0ed8dcafeb5b4ff-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3618,"size_decoded":2262,"mime_type":"application/json","magic":"JSON text data","md5":"f95506b15e00a9f669424f8348fd2b77","sha1":"424db0d1351b32805953fbe1df24fd00b1bf7874","sha256":"f087ded09d1ae6f62659871f79fd437b0414d070fb8f4301ffeabd621640dea0","sha512":"7e65e5bbd5471b203819835dd74a69b2e17948f633398ea44a0f5a32b7f0d8f543171af0ca5c28655adc19e155be7aae6c469abb492ed73ef4bd4b37a184c387","ssdeep":"","tlshash":"92713090583d0e272212285341df3c0bd63d93e7ac442fa8e66def6652ee6bc4703e19","first_seen":"2026-06-20T20:13:38.070977Z","last_seen":"2026-06-20T20:34:47.884902Z","times_seen":3,"resource_available":false,"data":null}},"time_used":281,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":281,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-20","alert":"Sinkholed","trigger":"www.dotvipad.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-20","alert":"Phishing Block","trigger":"www.dotvipad.cfd","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.dotvipad.cfd/api/chat/visitor/getEventMsgPoll","fqdn":"www.dotvipad.cfd","domain":"dotvipad.cfd","tld":"cfd"},"ip":{"addr":"104.26.11.238","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.dotvipad.cfd/chat/index?channelId=c73ee4eae3f741259c2dd381f1408f69\u0026isBack=true","date":"2026-06-20T20:34:23.524Z","timestamp":1781987663524,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.dotvipad.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 10 Jun 2026 23:06:11 GMT","end":"Wed, 09 Sep 2026 00:06:03 GMT"},"fingerprint":{"sha1":"14:75:94:53:B4:08:7C:4B:32:F5:CF:5A:6B:94:79:36:BB:4C:A6:B9","sha256":"70:B6:18:4A:DF:89:7A:56:D5:80:CD:06:88:40:18:DB:C1:3B:D6:0F:2A:A0:25:21:10:D4:22:5C:91:ED:FE:F8"}}},"request":{"raw":"POST /api/chat/visitor/getEventMsgPoll HTTP/1.1\r\nHost: www.dotvipad.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://www.dotvipad.cfd/chat/index?channelId=c73ee4eae3f741259c2dd381f1408f69\u0026isBack=true\r\nContent-Type: application/json;charset=UTF-8\r\nContent-Length: 105\r\nOrigin: https://www.dotvipad.cfd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 \r\ndate: Sat, 20 Jun 2026 20:34:23 GMT\r\ncontent-type: application/json\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=klrR%2FYm3WqFYNSQt8BOxK5FxJmsMXt%2FGM6CRgS9R4V19MOaqznG5HXmmN2n9Z077DIlvDFm5qK%2BKPSJzZ6oXLphe1umOdyxBbxyJdSudJqD7hYELK9Lf4Q88VmRWlg%2BH%2Fnw%3D\"}]}\r\ncf-ray: a0ed8dd10dbdb4ff-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":185,"size_decoded":706,"mime_type":"application/json","magic":"JSON text data","md5":"cc4be622b816bebbcce75b4b8fe3f305","sha1":"65759d18af395f6c52d0bdfa9560cfc4ea8f843b","sha256":"9e524009eaf9f4d377c05d6cfd76e27cd9c5917bedd59ce8e1d94487838ec42c","sha512":"727e4d56f2f82962970f6409761c61b7c787c2e03579f24f4bd191253db8617c381ea47029486a8fc3a75e03be0d5fbca4345181eade7d9116693e02af2cf051","ssdeep":"","tlshash":"bcc080d34c64f3251fcbd84d511709405a3435c47c1537f940bd6f2f51d996dd301519","first_seen":"2026-06-20T20:34:47.885452Z","last_seen":"2026-06-20T20:34:47.885452Z","times_seen":1,"resource_available":false,"data":null}},"time_used":282,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":282,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-20","alert":"Phishing Block","trigger":"www.dotvipad.cfd","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-20","alert":"Sinkholed","trigger":"www.dotvipad.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}}]}