{"report_id":"676d53a2-3c32-4870-9817-2e4d5f6d8ee1","version":6,"status":"done","tags":[],"date":"2026-05-30T22:17:07Z","url":{"schema":"https","addr":"tracking-service.live","fqdn":"tracking-service.live","domain":"tracking-service.live","tld":"live"},"ip":{"addr":"163.61.188.9","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"tracking-service.live/","fqdn":"tracking-service.live","domain":"tracking-service.live","tld":"live"},"title":"Western Money Tracker | Global Payment Logistics","dom":{"size":28790,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (669)","md5":"306e3a69a86b5d40c8f6a4147de490b8","sha1":"e64b1295ea7d90ec060ffa8e05afc87c0f37c2a0","sha256":"d92ceee5a1a7a8b6acb23e30615f5e4229d375bf2a630e44cae7f4e32f11e543","sha512":"6e600672625255d7277253ce24afc92899abf4fcc88a26b640fb641b9e72b15ea9b19c2ffabcf3673880034bd7bfe45ad2a03e5832435ffd583faaeb70dad168","ssdeep":"192:Z7JoJBQcGy0amIBqsGXdfv0H4JSI8vg39+gGnzw2VUea43ZnBDVVsWGCKXLy5Tf6:ZFoK2TvgQbn2a3QeDQp+kx/5","tlshash":"fdd25426b0e1113b158340d1a51a7b2eeaede64fc65bd599b3fc83d52fc2cd68c93128","dom_hash":"domhash4e9fa2daef11cd52e9df931b6b9b46c4","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"tracking-service.live","fqdn":"tracking-service.live","domain":"tracking-service.live","tld":"live"},"ip":{"addr":"163.61.188.9","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-07-04T22:17:07Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-30","alert":"Sinkholed","trigger":"tracking-service.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-05-24T22:18:17.447529Z","alert_count":0,"request_count":3,"received_data":148101,"sent_data":1683,"comment":"","tags":null,"fingerprints":null},{"fqdn":"karamelscript.name.ng","ip":{"addr":"172.67.146.236","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":1,"received_data":895,"sent_data":434,"comment":"","tags":null,"fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"64.233.162.95","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-05-24T22:21:07.624228Z","alert_count":0,"request_count":1,"received_data":13321,"sent_data":484,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"tracking-service.live","ip":{"addr":"163.61.188.9","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":27,"request_count":27,"received_data":1319342,"sent_data":31881,"comment":"","tags":null,"fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"jQuery:3.7.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"PHP:8.1.33","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}]},{"fqdn":"unpkg.com","ip":{"addr":"104.18.0.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2016-01-06","domain_rank":1093,"first_seen":"2016-01-07T23:26:01Z","last_seen":"2026-05-25T07:23:13.533444Z","alert_count":0,"request_count":7,"received_data":792046,"sent_data":3313,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Fly.io","description":"Fly is a platform for running full stack apps and databases.","website":"https://fly.io","common_platform_enumeration":"","icon":"Fly.io.png","categories":["PaaS"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"tracking-service.live/themes/softui/front_assets/js/phosphor-icon.js","fqdn":"tracking-service.live","domain":"tracking-service.live","tld":"live"},"ip":{"addr":"163.61.188.9","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"4efd5465ca7bcc7a7a384504c92cfab8","sha1":"bcb946f9be3792ae50a6ba3aef994da1ac30db6c","sha256":"015944145b932205b56cbf0e27eaf916960cbebda3332a212339b4c65031c268","sha512":"37e7fe846b6fedc20676cd460b6914d4946fcbcc65a905f4804389ab518f6d9bca7dbccdf3788cfd33849a0766bf612690379f4d2cafbc1170312fa8bd2f3b8a","ssdeep":"","tlshash":"e9e0262a51f28652aba740c7f4179626f490013da40ded01d1c9c93eee68daa30fa768","size":353,"data":"","first_seen":"2025-10-29T16:32:19.656873Z","last_seen":"2026-05-30T22:17:14.005333Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tracking-service.live/themes/softui/front_assets/js/counter-up.main.js","fqdn":"tracking-service.live","domain":"tracking-service.live","tld":"live"},"ip":{"addr":"163.61.188.9","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ffa1c1c1632e8b1ef25ae00ed94385c0","sha1":"d41504626fcbcd03e5b44b4c8f7d8b02d56ea1af","sha256":"896688d966de7f514e72b6c5b156de3fb6dbfcd61436e6db46ce3b0e4f52426a","sha512":"df18cde2a7c51bbc3bbb1496291cb8977e3e1d565f7316b85b94719fc4017ab3d3edf1e18292d8314b902187e3eac4477f8ff5c585ddb66520fdf7db223696b0","ssdeep":"","tlshash":"1a4172f17e1478f30b6b24aa04390042e9305ab4227364c0ff9ea92614652677dfff39","size":1928,"data":"","first_seen":"2023-03-09T22:10:28Z","last_seen":"2026-06-07T18:15:35.042643Z","times_seen":2440,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tracking-service.live/themes/softui/front_assets/js/SplitText.min.js","fqdn":"tracking-service.live","domain":"tracking-service.live","tld":"live"},"ip":{"addr":"163.61.188.9","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"a154fe1f45d095e1f418f5fdb0fe9958","sha1":"74137608e6a8a64bff9d23b405a1c270201497f5","sha256":"ab6e9e2f7f2905057042654d20be71f458ef4e8391c39940596a3710707d8dff","sha512":"4fd0c74793cd770534e3afed42aa2306b92ef395399e88d16dc27c4b91a37284ccddc9c44f48773c91842709aefd125743f64c96742c296db1571518e0005acf","ssdeep":"384:trEawZ1w8LNjr4lQWszZus4/CaCKgiLE6:7wvRmj+aCKgiLR","tlshash":"5a62a5b010316f216572125789561b1ff0a8490be923da37dbacf0ad7340935ebd7af9","size":15588,"data":"","first_seen":"2025-07-09T14:33:26.481681Z","last_seen":"2026-05-31T22:53:02.709935Z","times_seen":31,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tracking-service.live/themes/softui/front_assets/js/boostrap.bundle.min.js","fqdn":"tracking-service.live","domain":"tracking-service.live","tld":"live"},"ip":{"addr":"163.61.188.9","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"3d7cb18be275bcc1f33324620dca9517","sha1":"cb71df7f175c1b3ee8d642a0efde2e742a142f46","sha256":"c938e1227260834371896291dd5d28e98b5743ec952b721bdf791744ab06810d","sha512":"032d8a984981de805b197e8377aacf6296fc33491b035015d892d13d5922b811dca07ad1eae87f185d28252f0c04a76bcc8acadd508db6f25e8fa0a3b38b886b","ssdeep":"1536:WmwIiEEO+TBR2t4J9RirWDKsVA5y7fy3YJtC/r/45wZbfbXZTb0WU07P:HwORx3YCD45wZbDZTb0gP","tlshash":"3a73c5593244b4730ade85b68037430bf2265998b24b812cb57cadde2a7dcc67277f78","size":80672,"data":"","first_seen":"2024-08-06T22:16:53Z","last_seen":"2026-06-07T16:33:34.592948Z","times_seen":950,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tracking-service.live/themes/softui/front_assets/js/ScrollSmoother.min.js","fqdn":"tracking-service.live","domain":"tracking-service.live","tld":"live"},"ip":{"addr":"163.61.188.9","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"f8bac2d9304f00cd4e0d1917f9ce56b5","sha1":"79966c006a110e37edeafaf7813d5a27076e7cab","sha256":"fe5b1daeeaa988a60746bf2b1dd060f4921cfc20e8b9c939c8162a8d1677ed21","sha512":"bddce9b188be3ccd7f75aad1bf2c980db7f886f584b6c91a6e86c840af85cbdcd537fb17318ef9262cedb07b7b4d1deaafc2ee25b57e268ea582bd39d91b336c","ssdeep":"192:XVcjw7J0A+d6JEh0DATFAT2KACXp40IFwdljI8w89SjL3VbpJqyQ7R1cTPHM:b2QjDWxKAC46M3FBpNQ71","tlshash":"e342c6a93245b0220bdf017ac56f6706737154994a1e4424ea28bcec3c7c62d5bbbfad","size":12059,"data":"","first_seen":"2025-08-07T20:48:21.725654Z","last_seen":"2026-05-30T22:17:13.983468Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tracking-service.live/themes/softui/front_assets/js/main.js","fqdn":"tracking-service.live","domain":"tracking-service.live","tld":"live"},"ip":{"addr":"163.61.188.9","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"c5b644449d73413ce8bc416949990382","sha1":"7d885042eaed894a4efb7c182c1004ee72e44d6c","sha256":"6665ae2c0bd4bf8075ce177c4163e1f5111535c565dbbdc3fe2d389b5939bd97","sha512":"8a5499386f933cc3314e28fe9333b07129074ca8a1b7c891dffaee4af48bee65b178dc519e411a1d09eaeb5d8c41faf285f7aaaaf06d42bc13369b051c6759a2","ssdeep":"192:A0MeXl44kpw9yccWjU9MEiCBKVSHkCkIMMH7oCvxqfjLlcNgPgxSboj0avtaLqXn:A0MeXl44v9z0lAyoloj0WtP","tlshash":"0d923149a4b22071053b753e2f9f9210b576114ba9a9ec303c9d46c94f6d32e42be7fa","size":19896,"data":"","first_seen":"2026-03-18T17:38:17.396534Z","last_seen":"2026-05-30T22:17:13.989507Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tracking-service.live/themes/softui/front_assets/js/marquee-main.js","fqdn":"tracking-service.live","domain":"tracking-service.live","tld":"live"},"ip":{"addr":"163.61.188.9","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"38cf1efd3af828942692f619be330bcd","sha1":"c7836fb3eb61f96e6c8bc0344d77cf5618798315","sha256":"feade23a47f6041e6d1008885642dd7ab7cc4f12d94b0c7191c9cf8ca55df97d","sha512":"24726ffcbe3cb351e8776e22488d2ef5b705fc99548be61ac6588a75b6ac9f0fd4d4ba7dc715a4699dcee4eb903cc915c0e557785905e27e35efaa2e03a3f2dc","ssdeep":"96:v7zVMfcftw6RO0c4xwW5uO/kFzFYejD4CHDvDAFWa3QMy9mtlHxHf2KAHfqWVHfT:vX6fcf5P5tkFz1BaWoROjiSFx/7T","tlshash":"311221d2aa613450c7db13bfd44f46864e349932251e4d7fb472c099ae60b08ab97f3a","size":9029,"data":"","first_seen":"2023-03-07T12:21:25Z","last_seen":"2026-06-07T21:05:16.018086Z","times_seen":3879,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tracking-service.live/themes/softui/front_assets/js/custom-gsap.js","fqdn":"tracking-service.live","domain":"tracking-service.live","tld":"live"},"ip":{"addr":"163.61.188.9","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"93615767ba74b05a037b40602a0ec7d4","sha1":"0cb3dddffb5e90a1b2246f7b19cd8f0166de6257","sha256":"b9a4780ca1b26c1a69a7573336072d1f0c2d71a8975f85ac1ef8fd8f2a5ecb2d","sha512":"8037842f0c202dbe3c465028cc6b78582b8e7fa2d37100059281be7acf9b6a5a5639738eda69b199d62075563fef1ee515827c6077b07d07f24ec4a596bff950","ssdeep":"192:uCQGHZuGvgmzMGh4ZPgcV1td5wGGWZ9gm5:5QzVZT1tjPZx5","tlshash":"ace131ad95fa1c31017b27af0b8f86ca363140475c06ee183e9cbac41f8c7ad51b0a79","size":6914,"data":"","first_seen":"2025-10-29T16:32:19.648996Z","last_seen":"2026-05-30T22:17:13.984798Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tracking-service.live/themes/softui/front_assets/js/gsap.min.js","fqdn":"tracking-service.live","domain":"tracking-service.live","tld":"live"},"ip":{"addr":"163.61.188.9","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"47da594cbece0e34a656e6bf2490b7c3","sha1":"2d26f4c060491ac980d09ca687388d3610256eb7","sha256":"28033e449a31ebcc396e5be8b13b63152bf03094288fb5867034321927bce087","sha512":"ede1d1c1c6d890ae1df60ffab43fe68647fef9ea131f0a4d33dc28071b4f5015a6ebbcde01f142f87adda04d866a729ea1c972fd5c5e2ef22ac2f09d93ba9272","ssdeep":"1536:auJ29KBROpgAEQ9a1tgwA6NSZW3ytdKTdIwEp28Ywz7CDE:f29CakgwdNSQ3yt8eNp28YqCA","tlshash":"d063e8d93292f423039a51a1447f094bf337a958640f0918f269e4ce7d3c9ad52bbe7a","size":72214,"data":"","first_seen":"2024-01-19T15:55:20Z","last_seen":"2026-06-07T21:23:52.52129Z","times_seen":7263,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tracking-service.live/themes/softui/front_assets/js/swiper-bundle.min.js","fqdn":"tracking-service.live","domain":"tracking-service.live","tld":"live"},"ip":{"addr":"163.61.188.9","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"061e66be4bc47fec4cc812c2ea772a61","sha1":"11f0407a8130b2e29a619407a3bd88665c833cf3","sha256":"f9eefa57496549c29678d7b261108c30d3baced7d8ca1320951c62778acd6c54","sha512":"abd03c41d5aabbdeffbd7cdfcab650eca3e33bc4d4616239b015688de38d929c9559acf551a4ced55c57bce8973d621d7213cbc4b018637ad83bd619d8104c45","ssdeep":"1536:OKJqGfGmh0+w8NkvJuBEFUjF3j7Mt0BlxvHeYkEl+VANuRWaGCjmyiBnmYlV/TIF:TJB7dNcZYkEAGHBn7/TI/ichDpi7Up","tlshash":"d4e3e889a221b67646e7169b93e4c211b3b50540b80ac4f470fd4c9f597ec9813feefa","size":154023,"data":"","first_seen":"2025-07-26T00:54:40.162033Z","last_seen":"2026-05-30T22:17:14.008816Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tracking-service.live/themes/softui/front_assets/js/jquery-3.7.1.min.js","fqdn":"tracking-service.live","domain":"tracking-service.live","tld":"live"},"ip":{"addr":"163.61.188.9","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"c9771cc3e90e18f5336eedbd0fffb2cf","sha1":"6ee8aaa3ac1f4e0ae18717a3fd26892e9f0e4cc5","sha256":"3e7501d15c3630e791c8b20392eb9dee31a9f65ce3efdde76cef5c710141ab24","sha512":"c503341fa3a7176fd10bd8cd7a5717c8faf971f87fa0c158f2d94fcd484ae3ed5031f49414dae833fb806b7365b5699c21d2e655376f69adb052b22f6f6982a7","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GK7:sHNwcv9VBQpLl88SMBQ47GK7","tlshash":"8083f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","size":87532,"data":"","first_seen":"2023-10-13T22:05:06Z","last_seen":"2026-06-07T21:44:30.140764Z","times_seen":27476,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tracking-service.live/themes/softui/front_assets/js/aos-animation.js","fqdn":"tracking-service.live","domain":"tracking-service.live","tld":"live"},"ip":{"addr":"163.61.188.9","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"70b4897108480dbe11c443c2ab7679c9","sha1":"70dbfd38a0f1fc3b1a7d9fadab58786484c34f17","sha256":"f268612ba59ead1b24353bb77d66783bcc435aff1c22be5f93c40bac3869968e","sha512":"466084fa711d299e394e96c2260bd8bdf103cf75da8869934c997a19fc884d6ddfa2e92ce253533a4a0c5d627d580e9a40efb7155f1c8c0e9fbd3a2c3a06c2ae","ssdeep":"384:3I2fNaC8QiHbcggNFUWTgMe91sa6XCZy54:42fNaC8QiHbfgNFUWg17slXCZy54","tlshash":"a752e6dc3681f0a617a794f7827f600ff2f14835245e90a0d269c4e27db58ae8673e5e","size":14239,"data":"","first_seen":"2023-03-07T01:14:45Z","last_seen":"2026-06-07T20:29:43.318401Z","times_seen":20049,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tracking-service.live/themes/softui/front_assets/js/ScrollTrigger.min.js","fqdn":"tracking-service.live","domain":"tracking-service.live","tld":"live"},"ip":{"addr":"163.61.188.9","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ba1fa78eb4bb49f8a0eeaf8e61708840","sha1":"489bcf6d9c69f0f29f871e0323510c5197859bf5","sha256":"ad33c2df9ada8a663c2147357828f980d0b7ca731ef33eb3c6e4f327c3b2cda5","sha512":"a2731344a2412b3f0cd539eaa83b86065a30947d28845ccc5d844d79bcfec8e71ce5342bff300ab2d87386ebf4862c942848901105c4ca79d70af3533a4e7476","ssdeep":"768:L+5LHpwfVyb83wG/B/nE306RAHdAIsxmAK31horUp45:apqgo3wKB/nKRAHOIKS3TjK","tlshash":"741309ca3244b03267df627aa52f030a733654d9291e4464f266e4e83c7d5bc873be6d","size":43380,"data":"","first_seen":"2024-01-19T15:55:20Z","last_seen":"2026-06-07T19:37:20.007655Z","times_seen":5927,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tracking-service.live/themes/softui/front_assets/js/magific-popup.js","fqdn":"tracking-service.live","domain":"tracking-service.live","tld":"live"},"ip":{"addr":"163.61.188.9","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"f2e62f10cd0ba575f416aea0838b60e3","sha1":"6aad5fc536a85946ce0dfc5a48d5faaa47e6046f","sha256":"3b5d0c0e27e4834e64f9421e6842188d58b28b7dcc876d629d3624cb782574cd","sha512":"bba675e5346f6e277da3ba3d0dae3001398d90035350344ecd0016d8dd71553f797f443274cbe23d61d062e20ef830bef3a962fdee36fa7d3eedca3b482edb05","ssdeep":"384:8K+Ypwhc1sBEVEtk94tBnKIO46FbUkOK/NF0Sv/lZzZyQtdhTZF5ZFz:8El73MoUkOKv0GMAdXF5n","tlshash":"68922ca4f151b27397e361b8188f382c367a9922cd078412b65498d4adf8fd85137f7d","size":20736,"data":"","first_seen":"2025-07-06T15:02:22.374555Z","last_seen":"2026-05-30T22:17:14.00199Z","times_seen":16,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"tracking-service.live/themes/softui/front_assets/js/gsap.min.js","fqdn":"tracking-service.live","domain":"tracking-service.live","tld":"live"},"ip":{"addr":"163.61.188.9","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://tracking-service.live/","date":"2026-05-30T22:16:46.488Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tracking-service.live","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 30 May 2026 12:29:38 GMT","end":"Fri, 28 Aug 2026 12:29:37 GMT"},"fingerprint":{"sha1":"27:AC:FA:09:BC:AE:22:6C:22:F1:27:68:4D:9E:0D:64:6A:9F:07:E7","sha256":"DD:07:47:8A:3C:E7:01:86:71:B2:5B:94:5C:0D:ED:96:CA:AA:4D:25:49:DA:F4:2E:F2:4B:2E:06:D8:AD:F6:5A"}}},"request":{"raw":"GET /themes/softui/front_assets/js/gsap.min.js HTTP/1.1\r\nHost: tracking-service.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tracking-service.live/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlZYYWc2eFlXMHF3R3JFVTJReWh6bGc9PSIsInZhbHVlIjoiVDhERmg3ME10dnFwQXZ5R1gwcmhidWdsUmtkU2lSdXFSRzJGSDgxRzBXNk04TFhkZG1yN2lNOGo1bXhCQWkrOEU1UktNUHcwNlFteHlTUTgrWkRDUi91Q1ZVclQyVFJLUllLR1RnalpNVmYwR1dZY3FoTndOTmZYNDNOSW11NlkiLCJtYWMiOiI1YzNjN2JlNDRkOWZhNGU4MzQxODYzMjIzMDZlOTA5YmNlMzFjMTNmODNkNmQ2YTcxOGU3ZmM3MzU3MjIxMDZkIiwidGFnIjoiIn0%3D; tracking_services_session=eyJpdiI6Im91d1dxa0VCcGdENzNoQVVXWDFKQ2c9PSIsInZhbHVlIjoiZEZuUlpzbHljV2hPcGlvNjh4SHZPM2pHRjBubzlZWjBZbC9tdzJOVDRsZWJLemtBUzZqeEYxQ0xSR09RVEdEU1JEQzVIQ2Jxa0dwK0EycEpEUzBjUXE0amJJZUNwR2RCUGR1Vlp0VkxXVEhFUVlKZ0ZhZTRXdlFtdm9MdnpDZVkiLCJtYWMiOiI5N2YyYTRhYWFkZGJjOGQzZDYzYjU0OGVkODExZGFlZjA2NDM4Nzc5OTVhYzNjZGZkMzRiZTRhMDk5ZDM4MTRmIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Sun, 17 May 2026 22:32:50 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 27502\r\ndate: Sat, 30 May 2026 22:16:46 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":72214,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65255)","md5":"47da594cbece0e34a656e6bf2490b7c3","sha1":"2d26f4c060491ac980d09ca687388d3610256eb7","sha256":"28033e449a31ebcc396e5be8b13b63152bf03094288fb5867034321927bce087","sha512":"ede1d1c1c6d890ae1df60ffab43fe68647fef9ea131f0a4d33dc28071b4f5015a6ebbcde01f142f87adda04d866a729ea1c972fd5c5e2ef22ac2f09d93ba9272","ssdeep":"1536:auJ29KBROpgAEQ9a1tgwA6NSZW3ytdKTdIwEp28Ywz7CDE:f29CakgwdNSQ3yt8eNp28YqCA","tlshash":"d063e8d93292f423039a51a1447f094bf337a958640f0918f269e4ce7d3c9ad52bbe7a","first_seen":"2024-01-19T15:55:20Z","last_seen":"2026-06-07T21:23:52.52129Z","times_seen":7263,"resource_available":true,"data":null}},"time_used":338,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":251,"receive":87,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-30","alert":"Sinkholed","trigger":"tracking-service.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tracking-service.live/themes/softui/front_assets/js/ScrollSmoother.min.js","fqdn":"tracking-service.live","domain":"tracking-service.live","tld":"live"},"ip":{"addr":"163.61.188.9","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://tracking-service.live/","date":"2026-05-30T22:16:46.494Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tracking-service.live","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 30 May 2026 12:29:38 GMT","end":"Fri, 28 Aug 2026 12:29:37 GMT"},"fingerprint":{"sha1":"27:AC:FA:09:BC:AE:22:6C:22:F1:27:68:4D:9E:0D:64:6A:9F:07:E7","sha256":"DD:07:47:8A:3C:E7:01:86:71:B2:5B:94:5C:0D:ED:96:CA:AA:4D:25:49:DA:F4:2E:F2:4B:2E:06:D8:AD:F6:5A"}}},"request":{"raw":"GET /themes/softui/front_assets/js/ScrollSmoother.min.js HTTP/1.1\r\nHost: tracking-service.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tracking-service.live/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlZYYWc2eFlXMHF3R3JFVTJReWh6bGc9PSIsInZhbHVlIjoiVDhERmg3ME10dnFwQXZ5R1gwcmhidWdsUmtkU2lSdXFSRzJGSDgxRzBXNk04TFhkZG1yN2lNOGo1bXhCQWkrOEU1UktNUHcwNlFteHlTUTgrWkRDUi91Q1ZVclQyVFJLUllLR1RnalpNVmYwR1dZY3FoTndOTmZYNDNOSW11NlkiLCJtYWMiOiI1YzNjN2JlNDRkOWZhNGU4MzQxODYzMjIzMDZlOTA5YmNlMzFjMTNmODNkNmQ2YTcxOGU3ZmM3MzU3MjIxMDZkIiwidGFnIjoiIn0%3D; tracking_services_session=eyJpdiI6Im91d1dxa0VCcGdENzNoQVVXWDFKQ2c9PSIsInZhbHVlIjoiZEZuUlpzbHljV2hPcGlvNjh4SHZPM2pHRjBubzlZWjBZbC9tdzJOVDRsZWJLemtBUzZqeEYxQ0xSR09RVEdEU1JEQzVIQ2Jxa0dwK0EycEpEUzBjUXE0amJJZUNwR2RCUGR1Vlp0VkxXVEhFUVlKZ0ZhZTRXdlFtdm9MdnpDZVkiLCJtYWMiOiI5N2YyYTRhYWFkZGJjOGQzZDYzYjU0OGVkODExZGFlZjA2NDM4Nzc5OTVhYzNjZGZkMzRiZTRhMDk5ZDM4MTRmIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Sun, 17 May 2026 22:32:50 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 4816\r\ndate: Sat, 30 May 2026 22:16:46 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":12059,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (11673)","md5":"f8bac2d9304f00cd4e0d1917f9ce56b5","sha1":"79966c006a110e37edeafaf7813d5a27076e7cab","sha256":"fe5b1daeeaa988a60746bf2b1dd060f4921cfc20e8b9c939c8162a8d1677ed21","sha512":"bddce9b188be3ccd7f75aad1bf2c980db7f886f584b6c91a6e86c840af85cbdcd537fb17318ef9262cedb07b7b4d1deaafc2ee25b57e268ea582bd39d91b336c","ssdeep":"192:XVcjw7J0A+d6JEh0DATFAT2KACXp40IFwdljI8w89SjL3VbpJqyQ7R1cTPHM:b2QjDWxKAC46M3FBpNQ71","tlshash":"e342c6a93245b0220bdf017ac56f6706737154994a1e4424ea28bcec3c7c62d5bbbfad","first_seen":"2025-08-07T20:48:21.725654Z","last_seen":"2026-05-30T22:17:13.983468Z","times_seen":10,"resource_available":true,"data":null}},"time_used":338,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":248,"receive":90,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-30","alert":"Sinkholed","trigger":"tracking-service.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tracking-service.live/themes/softui/front_assets/js/custom-gsap.js","fqdn":"tracking-service.live","domain":"tracking-service.live","tld":"live"},"ip":{"addr":"163.61.188.9","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://tracking-service.live/","date":"2026-05-30T22:16:46.497Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tracking-service.live","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 30 May 2026 12:29:38 GMT","end":"Fri, 28 Aug 2026 12:29:37 GMT"},"fingerprint":{"sha1":"27:AC:FA:09:BC:AE:22:6C:22:F1:27:68:4D:9E:0D:64:6A:9F:07:E7","sha256":"DD:07:47:8A:3C:E7:01:86:71:B2:5B:94:5C:0D:ED:96:CA:AA:4D:25:49:DA:F4:2E:F2:4B:2E:06:D8:AD:F6:5A"}}},"request":{"raw":"GET /themes/softui/front_assets/js/custom-gsap.js HTTP/1.1\r\nHost: tracking-service.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tracking-service.live/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlZYYWc2eFlXMHF3R3JFVTJReWh6bGc9PSIsInZhbHVlIjoiVDhERmg3ME10dnFwQXZ5R1gwcmhidWdsUmtkU2lSdXFSRzJGSDgxRzBXNk04TFhkZG1yN2lNOGo1bXhCQWkrOEU1UktNUHcwNlFteHlTUTgrWkRDUi91Q1ZVclQyVFJLUllLR1RnalpNVmYwR1dZY3FoTndOTmZYNDNOSW11NlkiLCJtYWMiOiI1YzNjN2JlNDRkOWZhNGU4MzQxODYzMjIzMDZlOTA5YmNlMzFjMTNmODNkNmQ2YTcxOGU3ZmM3MzU3MjIxMDZkIiwidGFnIjoiIn0%3D; tracking_services_session=eyJpdiI6Im91d1dxa0VCcGdENzNoQVVXWDFKQ2c9PSIsInZhbHVlIjoiZEZuUlpzbHljV2hPcGlvNjh4SHZPM2pHRjBubzlZWjBZbC9tdzJOVDRsZWJLemtBUzZqeEYxQ0xSR09RVEdEU1JEQzVIQ2Jxa0dwK0EycEpEUzBjUXE0amJJZUNwR2RCUGR1Vlp0VkxXVEhFUVlKZ0ZhZTRXdlFtdm9MdnpDZVkiLCJtYWMiOiI5N2YyYTRhYWFkZGJjOGQzZDYzYjU0OGVkODExZGFlZjA2NDM4Nzc5OTVhYzNjZGZkMzRiZTRhMDk5ZDM4MTRmIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Sun, 17 May 2026 22:32:50 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1582\r\ndate: Sat, 30 May 2026 22:16:46 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":6914,"size_decoded":0,"mime_type":"text/javascript","magic":"C++ source, ASCII text","md5":"93615767ba74b05a037b40602a0ec7d4","sha1":"0cb3dddffb5e90a1b2246f7b19cd8f0166de6257","sha256":"b9a4780ca1b26c1a69a7573336072d1f0c2d71a8975f85ac1ef8fd8f2a5ecb2d","sha512":"8037842f0c202dbe3c465028cc6b78582b8e7fa2d37100059281be7acf9b6a5a5639738eda69b199d62075563fef1ee515827c6077b07d07f24ec4a596bff950","ssdeep":"192:uCQGHZuGvgmzMGh4ZPgcV1td5wGGWZ9gm5:5QzVZT1tjPZx5","tlshash":"ace131ad95fa1c31017b27af0b8f86ca363140475c06ee183e9cbac41f8c7ad51b0a79","first_seen":"2025-10-29T16:32:19.648996Z","last_seen":"2026-05-30T22:17:13.984798Z","times_seen":4,"resource_available":true,"data":null}},"time_used":335,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":246,"receive":89,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-30","alert":"Sinkholed","trigger":"tracking-service.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"unpkg.com/@phosphor-icons/web@2.1.1/src/light/style.css","fqdn":"unpkg.com","domain":"unpkg.com","tld":"com"},"ip":{"addr":"104.18.0.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://tracking-service.live/","date":"2026-05-30T22:16:47.684Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"unpkg.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 13 May 2026 17:38:50 GMT","end":"Tue, 11 Aug 2026 18:38:47 GMT"},"fingerprint":{"sha1":"85:3A:E3:4D:41:9A:40:A5:EA:4D:21:21:BC:8B:AF:E9:9B:B2:27:3A","sha256":"41:2C:5C:27:2E:1B:0A:16:BA:4A:09:22:08:86:E9:EC:B5:B9:C4:CF:94:00:3A:8F:52:77:35:8C:F9:C4:FC:A4"}}},"request":{"raw":"GET /@phosphor-icons/web@2.1.1/src/light/style.css HTTP/1.1\r\nHost: unpkg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tracking-service.live/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 30 May 2026 22:16:47 GMT\r\ncontent-type: text/css\r\ncf-ray: a0411af27aefb28a-OSL\r\ncf-cache-status: HIT\r\nfly-request-id: 01KSAG7BHWRFXVGBDRCFJYVY85-fra\r\naccess-control-allow-origin: *\r\nage: 373777\r\ncache-control: public, max-age=31536000\r\nexpires: Sun, 30 May 2027 22:16:47 GMT\r\nlast-modified: Tue, 26 May 2026 07:00:13 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: accept-encoding\r\nvia: 1.1 fly.io, 1.1 fly.io\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, HEAD, OPTIONS\r\naccess-control-expose-headers: *\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\ncontent-digest: sha256=:8uWWmfqu7ifantuG3Rj17TvVET2z5OOI/dI6/K8wiGU=:\r\ncontent-encoding: gzip\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Fly.io","description":"Fly is a platform for running full stack apps and databases.","website":"https://fly.io","common_platform_enumeration":"","icon":"Fly.io.png","categories":["PaaS"]}],"data":{"size":87359,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"d0c00e94901712da925ed893abcf1908","sha1":"2a36dc2a0a022e6b03855703b2c5380836771e6b","sha256":"f2e59699faaeee27da9edb86dd18f5ed3bd5113db3e4e388fdd23afcaf308865","sha512":"6cb3e110ea54d66ab7585f509c3bbdf019438b816cd78fba031c8bd40e8a013d55d01ab07869a00ddbe614bf348484411bd4cad166e64b6a90677bf6afcd92c6","ssdeep":"768:FxNC9RoWla5NQDGUfrIN1ENW/P40e/z96M8ftPxOPjqgA:FxNC9u1pUkNCo34jp6H","tlshash":"9083dee4f7fe18d09301d1e2a20aa761bb0da3249a462c58ca6379ed71e211dc7cf5dd","first_seen":"2024-04-04T21:10:47Z","last_seen":"2026-06-07T20:35:17.379625Z","times_seen":1474,"resource_available":false,"data":null}},"time_used":151,"timings":{"blocked":64,"dns":1,"connect":4,"send":0,"wait":18,"receive":0,"ssl":56},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"unpkg.com/@phosphor-icons/web@2.1.1/src/fill/Phosphor-Fill.woff2","fqdn":"unpkg.com","domain":"unpkg.com","tld":"com"},"ip":{"addr":"104.18.0.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://tracking-service.live/","date":"2026-05-30T22:16:47.978Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"unpkg.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 13 May 2026 17:38:50 GMT","end":"Tue, 11 Aug 2026 18:38:47 GMT"},"fingerprint":{"sha1":"85:3A:E3:4D:41:9A:40:A5:EA:4D:21:21:BC:8B:AF:E9:9B:B2:27:3A","sha256":"41:2C:5C:27:2E:1B:0A:16:BA:4A:09:22:08:86:E9:EC:B5:B9:C4:CF:94:00:3A:8F:52:77:35:8C:F9:C4:FC:A4"}}},"request":{"raw":"GET /@phosphor-icons/web@2.1.1/src/fill/Phosphor-Fill.woff2 HTTP/1.1\r\nHost: unpkg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://tracking-service.live\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://unpkg.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 30 May 2026 22:16:48 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 131744\r\ncf-ray: a0411af3fff58deb-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 332891\r\ncache-control: public, max-age=31536000\r\nexpires: Sun, 30 May 2027 22:16:48 GMT\r\nlast-modified: Wed, 27 May 2026 01:48:36 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvia: 1.1 fly.io, 1.1 fly.io\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, HEAD, OPTIONS\r\naccess-control-expose-headers: *\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\ncontent-digest: sha256=:ZgvWBFwODZdWzduLouzjqthV331KFw7yP3scC/URxDA=:\r\nfly-request-id: 01KGJGXC5B18N6D025EQSQGV7D-fra\r\npriority: u=4,i=?0\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Fly.io","description":"Fly is a platform for running full stack apps and databases.","website":"https://fly.io","common_platform_enumeration":"","icon":"Fly.io.png","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":131744,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 131744, version 1.0","md5":"e411caf3fd95535654554603071189e7","sha1":"0a35a97f42227b7d165a309d7961fdf7c98321f2","sha256":"660bd6045c0e0d9756cddb8ba2ece3aad855df7d4a170ef23f7b1c0bf511c430","sha512":"efb61c9f0fa654ac2705bee8ddf5daefb3da78f6c37af6312733023eb7602ba626c62e598f3a88dfd322e8a589aec230a9ce5780d6981defa5e8e025a4591aa3","ssdeep":"3072:XX8DiMh5TQHkmjKqoPgS2IzKyyPpFk8/9hfuWufGa73q:XXJMh56cxP4SzgpFk8/+W8GQa","tlshash":"7ad31210e4f14de7e3bc93aabf40304b61975f9260396cbc3d687d2272d94d56d0b269","first_seen":"2024-08-26T12:03:08Z","last_seen":"2026-06-06T21:29:49.210974Z","times_seen":2909,"resource_available":false,"data":null}},"time_used":65,"timings":{"blocked":14,"dns":1,"connect":0,"send":0,"wait":42,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tracking-service.live/themes/softui/front_assets/images/logo/logo.png","fqdn":"tracking-service.live","domain":"tracking-service.live","tld":"live"},"ip":{"addr":"163.61.188.9","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tracking-service.live/","date":"2026-05-30T22:16:46.478Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tracking-service.live","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 30 May 2026 12:29:38 GMT","end":"Fri, 28 Aug 2026 12:29:37 GMT"},"fingerprint":{"sha1":"27:AC:FA:09:BC:AE:22:6C:22:F1:27:68:4D:9E:0D:64:6A:9F:07:E7","sha256":"DD:07:47:8A:3C:E7:01:86:71:B2:5B:94:5C:0D:ED:96:CA:AA:4D:25:49:DA:F4:2E:F2:4B:2E:06:D8:AD:F6:5A"}}},"request":{"raw":"GET /themes/softui/front_assets/images/logo/logo.png HTTP/1.1\r\nHost: tracking-service.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tracking-service.live/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlZYYWc2eFlXMHF3R3JFVTJReWh6bGc9PSIsInZhbHVlIjoiVDhERmg3ME10dnFwQXZ5R1gwcmhidWdsUmtkU2lSdXFSRzJGSDgxRzBXNk04TFhkZG1yN2lNOGo1bXhCQWkrOEU1UktNUHcwNlFteHlTUTgrWkRDUi91Q1ZVclQyVFJLUllLR1RnalpNVmYwR1dZY3FoTndOTmZYNDNOSW11NlkiLCJtYWMiOiI1YzNjN2JlNDRkOWZhNGU4MzQxODYzMjIzMDZlOTA5YmNlMzFjMTNmODNkNmQ2YTcxOGU3ZmM3MzU3MjIxMDZkIiwidGFnIjoiIn0%3D; tracking_services_session=eyJpdiI6Im91d1dxa0VCcGdENzNoQVVXWDFKQ2c9PSIsInZhbHVlIjoiZEZuUlpzbHljV2hPcGlvNjh4SHZPM2pHRjBubzlZWjBZbC9tdzJOVDRsZWJLemtBUzZqeEYxQ0xSR09RVEdEU1JEQzVIQ2Jxa0dwK0EycEpEUzBjUXE0amJJZUNwR2RCUGR1Vlp0VkxXVEhFUVlKZ0ZhZTRXdlFtdm9MdnpDZVkiLCJtYWMiOiI5N2YyYTRhYWFkZGJjOGQzZDYzYjU0OGVkODExZGFlZjA2NDM4Nzc5OTVhYzNjZGZkMzRiZTRhMDk5ZDM4MTRmIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 06 Jun 2026 22:16:46 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 28 May 2026 10:03:27 GMT\r\naccept-ranges: bytes\r\ncontent-length: 91687\r\ndate: Sat, 30 May 2026 22:16:46 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":91687,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 892 x 183, 8-bit/color RGBA, non-interlaced","md5":"576347dafd1aba9b4510f27803bdbac7","sha1":"259f11d01f88e088bf1bf811bc9f83b0cdeefe2f","sha256":"ed9df26d89c12b5166b87143b0151317a7060f76313e7187395963426e6e613a","sha512":"58257be6d43ac76195b6f04d8512f9407aff6aaad80ef274f10350ad2346dea717b24ea2ae6ca2aa8d262d695100ab334c43ad89a45c92496d4e762a1ae5c276","ssdeep":"1536:KjGem1NBh1SJbLxmD+97bq883A+kNDTOlU36tnEJefNsEOHG3rsMwDXUdXbjrvpc:KPmvBhsLok3qhQ+kNDJOn90H8wDcrjrK","tlshash":"19930161e1e3e434fe13993e55299fdf8bbff66506b60be8b123d9284440ba3149211e","first_seen":"2026-05-30T22:17:13.987065Z","last_seen":"2026-05-30T22:17:13.987065Z","times_seen":1,"resource_available":false,"data":null}},"time_used":432,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":254,"receive":178,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-30","alert":"Sinkholed","trigger":"tracking-service.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tracking-service.live/themes/softui/front_assets/images/shape/circle-shape-img1.png","fqdn":"tracking-service.live","domain":"tracking-service.live","tld":"live"},"ip":{"addr":"163.61.188.9","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tracking-service.live/","date":"2026-05-30T22:16:46.480Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tracking-service.live","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 30 May 2026 12:29:38 GMT","end":"Fri, 28 Aug 2026 12:29:37 GMT"},"fingerprint":{"sha1":"27:AC:FA:09:BC:AE:22:6C:22:F1:27:68:4D:9E:0D:64:6A:9F:07:E7","sha256":"DD:07:47:8A:3C:E7:01:86:71:B2:5B:94:5C:0D:ED:96:CA:AA:4D:25:49:DA:F4:2E:F2:4B:2E:06:D8:AD:F6:5A"}}},"request":{"raw":"GET /themes/softui/front_assets/images/shape/circle-shape-img1.png HTTP/1.1\r\nHost: tracking-service.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tracking-service.live/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlZYYWc2eFlXMHF3R3JFVTJReWh6bGc9PSIsInZhbHVlIjoiVDhERmg3ME10dnFwQXZ5R1gwcmhidWdsUmtkU2lSdXFSRzJGSDgxRzBXNk04TFhkZG1yN2lNOGo1bXhCQWkrOEU1UktNUHcwNlFteHlTUTgrWkRDUi91Q1ZVclQyVFJLUllLR1RnalpNVmYwR1dZY3FoTndOTmZYNDNOSW11NlkiLCJtYWMiOiI1YzNjN2JlNDRkOWZhNGU4MzQxODYzMjIzMDZlOTA5YmNlMzFjMTNmODNkNmQ2YTcxOGU3ZmM3MzU3MjIxMDZkIiwidGFnIjoiIn0%3D; tracking_services_session=eyJpdiI6Im91d1dxa0VCcGdENzNoQVVXWDFKQ2c9PSIsInZhbHVlIjoiZEZuUlpzbHljV2hPcGlvNjh4SHZPM2pHRjBubzlZWjBZbC9tdzJOVDRsZWJLemtBUzZqeEYxQ0xSR09RVEdEU1JEQzVIQ2Jxa0dwK0EycEpEUzBjUXE0amJJZUNwR2RCUGR1Vlp0VkxXVEhFUVlKZ0ZhZTRXdlFtdm9MdnpDZVkiLCJtYWMiOiI5N2YyYTRhYWFkZGJjOGQzZDYzYjU0OGVkODExZGFlZjA2NDM4Nzc5OTVhYzNjZGZkMzRiZTRhMDk5ZDM4MTRmIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 06 Jun 2026 22:16:46 GMT\r\ncontent-type: image/png\r\nlast-modified: Sun, 17 May 2026 22:32:50 GMT\r\naccept-ranges: bytes\r\ncontent-length: 1492\r\ndate: Sat, 30 May 2026 22:16:46 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1492,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 55 x 53, 8-bit/color RGBA, non-interlaced","md5":"7c68a90ee22e56370242c587d33c6470","sha1":"5426dc00237a872d63ff255daa677a9d7a59d016","sha256":"a325ace4325ef1ed7da842f068655d0d8da54aa1b74d216759ad490de6f5f306","sha512":"1b5783416369ff2e81ba4d5dca01fc823ad7f554a7234d81ed70faff4647b5fb029cb0b1d1ea21a5316c1ce4c92684ea681c20c5088d2da6ef0d7e1593672421","ssdeep":"","tlshash":"bb31f9d05bd8340e56df601112eb3cc4c476314ae79633582f54cac209f24307b87f6a","first_seen":"2025-10-29T16:32:19.680028Z","last_seen":"2026-06-06T18:23:48.656671Z","times_seen":5,"resource_available":false,"data":null}},"time_used":431,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":431,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-30","alert":"Sinkholed","trigger":"tracking-service.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tracking-service.live/themes/softui/front_assets/js/boostrap.bundle.min.js","fqdn":"tracking-service.live","domain":"tracking-service.live","tld":"live"},"ip":{"addr":"163.61.188.9","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://tracking-service.live/","date":"2026-05-30T22:16:46.486Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tracking-service.live","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 30 May 2026 12:29:38 GMT","end":"Fri, 28 Aug 2026 12:29:37 GMT"},"fingerprint":{"sha1":"27:AC:FA:09:BC:AE:22:6C:22:F1:27:68:4D:9E:0D:64:6A:9F:07:E7","sha256":"DD:07:47:8A:3C:E7:01:86:71:B2:5B:94:5C:0D:ED:96:CA:AA:4D:25:49:DA:F4:2E:F2:4B:2E:06:D8:AD:F6:5A"}}},"request":{"raw":"GET /themes/softui/front_assets/js/boostrap.bundle.min.js HTTP/1.1\r\nHost: tracking-service.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tracking-service.live/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlZYYWc2eFlXMHF3R3JFVTJReWh6bGc9PSIsInZhbHVlIjoiVDhERmg3ME10dnFwQXZ5R1gwcmhidWdsUmtkU2lSdXFSRzJGSDgxRzBXNk04TFhkZG1yN2lNOGo1bXhCQWkrOEU1UktNUHcwNlFteHlTUTgrWkRDUi91Q1ZVclQyVFJLUllLR1RnalpNVmYwR1dZY3FoTndOTmZYNDNOSW11NlkiLCJtYWMiOiI1YzNjN2JlNDRkOWZhNGU4MzQxODYzMjIzMDZlOTA5YmNlMzFjMTNmODNkNmQ2YTcxOGU3ZmM3MzU3MjIxMDZkIiwidGFnIjoiIn0%3D; tracking_services_session=eyJpdiI6Im91d1dxa0VCcGdENzNoQVVXWDFKQ2c9PSIsInZhbHVlIjoiZEZuUlpzbHljV2hPcGlvNjh4SHZPM2pHRjBubzlZWjBZbC9tdzJOVDRsZWJLemtBUzZqeEYxQ0xSR09RVEdEU1JEQzVIQ2Jxa0dwK0EycEpEUzBjUXE0amJJZUNwR2RCUGR1Vlp0VkxXVEhFUVlKZ0ZhZTRXdlFtdm9MdnpDZVkiLCJtYWMiOiI5N2YyYTRhYWFkZGJjOGQzZDYzYjU0OGVkODExZGFlZjA2NDM4Nzc5OTVhYzNjZGZkMzRiZTRhMDk5ZDM4MTRmIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Sun, 17 May 2026 22:32:50 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 22886\r\ndate: Sat, 30 May 2026 22:16:46 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":80672,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65299)","md5":"3d7cb18be275bcc1f33324620dca9517","sha1":"cb71df7f175c1b3ee8d642a0efde2e742a142f46","sha256":"c938e1227260834371896291dd5d28e98b5743ec952b721bdf791744ab06810d","sha512":"032d8a984981de805b197e8377aacf6296fc33491b035015d892d13d5922b811dca07ad1eae87f185d28252f0c04a76bcc8acadd508db6f25e8fa0a3b38b886b","ssdeep":"1536:WmwIiEEO+TBR2t4J9RirWDKsVA5y7fy3YJtC/r/45wZbfbXZTb0WU07P:HwORx3YCD45wZbDZTb0gP","tlshash":"3a73c5593244b4730ade85b68037430bf2265998b24b812cb57cadde2a7dcc67277f78","first_seen":"2024-08-06T22:16:53Z","last_seen":"2026-06-07T16:33:34.592948Z","times_seen":950,"resource_available":true,"data":null}},"time_used":338,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":251,"receive":87,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-30","alert":"Sinkholed","trigger":"tracking-service.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tracking-service.live/themes/softui/front_assets/js/main.js","fqdn":"tracking-service.live","domain":"tracking-service.live","tld":"live"},"ip":{"addr":"163.61.188.9","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://tracking-service.live/","date":"2026-05-30T22:16:46.501Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tracking-service.live","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 30 May 2026 12:29:38 GMT","end":"Fri, 28 Aug 2026 12:29:37 GMT"},"fingerprint":{"sha1":"27:AC:FA:09:BC:AE:22:6C:22:F1:27:68:4D:9E:0D:64:6A:9F:07:E7","sha256":"DD:07:47:8A:3C:E7:01:86:71:B2:5B:94:5C:0D:ED:96:CA:AA:4D:25:49:DA:F4:2E:F2:4B:2E:06:D8:AD:F6:5A"}}},"request":{"raw":"GET /themes/softui/front_assets/js/main.js HTTP/1.1\r\nHost: tracking-service.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tracking-service.live/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlZYYWc2eFlXMHF3R3JFVTJReWh6bGc9PSIsInZhbHVlIjoiVDhERmg3ME10dnFwQXZ5R1gwcmhidWdsUmtkU2lSdXFSRzJGSDgxRzBXNk04TFhkZG1yN2lNOGo1bXhCQWkrOEU1UktNUHcwNlFteHlTUTgrWkRDUi91Q1ZVclQyVFJLUllLR1RnalpNVmYwR1dZY3FoTndOTmZYNDNOSW11NlkiLCJtYWMiOiI1YzNjN2JlNDRkOWZhNGU4MzQxODYzMjIzMDZlOTA5YmNlMzFjMTNmODNkNmQ2YTcxOGU3ZmM3MzU3MjIxMDZkIiwidGFnIjoiIn0%3D; tracking_services_session=eyJpdiI6Im91d1dxa0VCcGdENzNoQVVXWDFKQ2c9PSIsInZhbHVlIjoiZEZuUlpzbHljV2hPcGlvNjh4SHZPM2pHRjBubzlZWjBZbC9tdzJOVDRsZWJLemtBUzZqeEYxQ0xSR09RVEdEU1JEQzVIQ2Jxa0dwK0EycEpEUzBjUXE0amJJZUNwR2RCUGR1Vlp0VkxXVEhFUVlKZ0ZhZTRXdlFtdm9MdnpDZVkiLCJtYWMiOiI5N2YyYTRhYWFkZGJjOGQzZDYzYjU0OGVkODExZGFlZjA2NDM4Nzc5OTVhYzNjZGZkMzRiZTRhMDk5ZDM4MTRmIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Sun, 17 May 2026 22:32:50 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 3641\r\ndate: Sat, 30 May 2026 22:16:46 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":19896,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text","md5":"c5b644449d73413ce8bc416949990382","sha1":"7d885042eaed894a4efb7c182c1004ee72e44d6c","sha256":"6665ae2c0bd4bf8075ce177c4163e1f5111535c565dbbdc3fe2d389b5939bd97","sha512":"8a5499386f933cc3314e28fe9333b07129074ca8a1b7c891dffaee4af48bee65b178dc519e411a1d09eaeb5d8c41faf285f7aaaaf06d42bc13369b051c6759a2","ssdeep":"192:A0MeXl44kpw9yccWjU9MEiCBKVSHkCkIMMH7oCvxqfjLlcNgPgxSboj0avtaLqXn:A0MeXl44v9z0lAyoloj0WtP","tlshash":"0d923149a4b22071053b753e2f9f9210b576114ba9a9ec303c9d46c94f6d32e42be7fa","first_seen":"2026-03-18T17:38:17.396534Z","last_seen":"2026-05-30T22:17:13.989507Z","times_seen":3,"resource_available":true,"data":null}},"time_used":414,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":243,"receive":171,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-30","alert":"Sinkholed","trigger":"tracking-service.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://tracking-service.live/","date":"2026-05-30T22:16:47.626Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Thu, 07 May 2026 15:53:13 GMT","end":"Thu, 30 Jul 2026 15:53:12 GMT"},"fingerprint":{"sha1":"6C:B9:FE:19:9C:7C:AA:5D:D2:39:3A:16:2C:50:FB:C8:59:C8:CC:A8","sha256":"FC:4C:0C:6E:AB:D1:82:30:1F:A9:46:DF:FA:38:02:9F:06:56:FF:98:E0:8D:AB:9A:26:C3:2A:97:C5:CF:A6:1C"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://tracking-service.live\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 28 May 2026 01:46:26 GMT\r\nexpires: Fri, 28 May 2027 01:46:26 GMT\r\ncache-control: public, max-age=31536000\r\nage: 246621\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48532,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-06-07T21:34:54.625742Z","times_seen":205719,"resource_available":false,"data":null}},"time_used":586,"timings":{"blocked":270,"dns":2,"connect":31,"send":0,"wait":29,"receive":19,"ssl":231},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://tracking-service.live/","date":"2026-05-30T22:16:47.630Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Thu, 07 May 2026 15:53:13 GMT","end":"Thu, 30 Jul 2026 15:53:12 GMT"},"fingerprint":{"sha1":"6C:B9:FE:19:9C:7C:AA:5D:D2:39:3A:16:2C:50:FB:C8:59:C8:CC:A8","sha256":"FC:4C:0C:6E:AB:D1:82:30:1F:A9:46:DF:FA:38:02:9F:06:56:FF:98:E0:8D:AB:9A:26:C3:2A:97:C5:CF:A6:1C"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://tracking-service.live\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 28 May 2026 01:46:26 GMT\r\nexpires: Fri, 28 May 2027 01:46:26 GMT\r\ncache-control: public, max-age=31536000\r\nage: 246621\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48532,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-06-07T21:34:54.625742Z","times_seen":205719,"resource_available":false,"data":null}},"time_used":573,"timings":{"blocked":269,"dns":0,"connect":0,"send":0,"wait":46,"receive":20,"ssl":238},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"unpkg.com/@phosphor-icons/web@2.1.1/src/thin/style.css","fqdn":"unpkg.com","domain":"unpkg.com","tld":"com"},"ip":{"addr":"104.18.0.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://tracking-service.live/","date":"2026-05-30T22:16:47.683Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"unpkg.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 13 May 2026 17:38:50 GMT","end":"Tue, 11 Aug 2026 18:38:47 GMT"},"fingerprint":{"sha1":"85:3A:E3:4D:41:9A:40:A5:EA:4D:21:21:BC:8B:AF:E9:9B:B2:27:3A","sha256":"41:2C:5C:27:2E:1B:0A:16:BA:4A:09:22:08:86:E9:EC:B5:B9:C4:CF:94:00:3A:8F:52:77:35:8C:F9:C4:FC:A4"}}},"request":{"raw":"GET /@phosphor-icons/web@2.1.1/src/thin/style.css HTTP/1.1\r\nHost: unpkg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tracking-service.live/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 30 May 2026 22:16:47 GMT\r\ncontent-type: text/css\r\ncf-ray: a0411af26aeab28a-OSL\r\ncf-cache-status: HIT\r\nfly-request-id: 01KQ3D7BMTR38X6DJGMG7CQV4H-fra\r\naccess-control-allow-origin: *\r\nage: 1100738\r\ncache-control: public, max-age=31536000\r\nexpires: Sun, 30 May 2027 22:16:47 GMT\r\nlast-modified: Sun, 17 May 2026 13:28:06 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: accept-encoding\r\nvia: 1.1 fly.io, 1.1 fly.io\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, HEAD, OPTIONS\r\naccess-control-expose-headers: *\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\ncontent-digest: sha256=:QeDq5RJFfL748BBhCPv7mVlSwks+YA3KOFFpkLRBwq8=:\r\ncontent-encoding: gzip\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Fly.io","description":"Fly is a platform for running full stack apps and databases.","website":"https://fly.io","common_platform_enumeration":"","icon":"Fly.io.png","categories":["PaaS"]}],"data":{"size":85821,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"8da44bea4949cc1139a518660885c864","sha1":"23eace9bee8d4bd6ba795b88615a789962df919b","sha256":"41e0eae512457cbef8f0106108fbfb995952c24b3e600dca38516990b441c2af","sha512":"54f5b87886bf98d90f76074dc83e0617445e0b6e709052ac09012edd1af4d8ffc02014a2e84d2797be11fd249c8e8752ffa907d4ee8f2b94493e32030e278fe2","ssdeep":"768:ziCfRFurGvcZZsAbW/whmSfO7SkYP4gXNLNdUzDtrMzeP:ziCfR4bVbhhfG+kkJNc","tlshash":"7183e0e4f5bf1a901b21d1d0238a1620bb2f922c9a461c5eeb6379cdfdca118c58dddd","first_seen":"2024-04-04T21:10:47Z","last_seen":"2026-06-07T20:35:17.369482Z","times_seen":1428,"resource_available":false,"data":null}},"time_used":149,"timings":{"blocked":63,"dns":1,"connect":4,"send":0,"wait":19,"receive":0,"ssl":56},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tracking-service.live/themes/softui/front_assets/js/counter-up.main.js","fqdn":"tracking-service.live","domain":"tracking-service.live","tld":"live"},"ip":{"addr":"163.61.188.9","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://tracking-service.live/","date":"2026-05-30T22:16:46.496Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tracking-service.live","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 30 May 2026 12:29:38 GMT","end":"Fri, 28 Aug 2026 12:29:37 GMT"},"fingerprint":{"sha1":"27:AC:FA:09:BC:AE:22:6C:22:F1:27:68:4D:9E:0D:64:6A:9F:07:E7","sha256":"DD:07:47:8A:3C:E7:01:86:71:B2:5B:94:5C:0D:ED:96:CA:AA:4D:25:49:DA:F4:2E:F2:4B:2E:06:D8:AD:F6:5A"}}},"request":{"raw":"GET /themes/softui/front_assets/js/counter-up.main.js HTTP/1.1\r\nHost: tracking-service.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tracking-service.live/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlZYYWc2eFlXMHF3R3JFVTJReWh6bGc9PSIsInZhbHVlIjoiVDhERmg3ME10dnFwQXZ5R1gwcmhidWdsUmtkU2lSdXFSRzJGSDgxRzBXNk04TFhkZG1yN2lNOGo1bXhCQWkrOEU1UktNUHcwNlFteHlTUTgrWkRDUi91Q1ZVclQyVFJLUllLR1RnalpNVmYwR1dZY3FoTndOTmZYNDNOSW11NlkiLCJtYWMiOiI1YzNjN2JlNDRkOWZhNGU4MzQxODYzMjIzMDZlOTA5YmNlMzFjMTNmODNkNmQ2YTcxOGU3ZmM3MzU3MjIxMDZkIiwidGFnIjoiIn0%3D; tracking_services_session=eyJpdiI6Im91d1dxa0VCcGdENzNoQVVXWDFKQ2c9PSIsInZhbHVlIjoiZEZuUlpzbHljV2hPcGlvNjh4SHZPM2pHRjBubzlZWjBZbC9tdzJOVDRsZWJLemtBUzZqeEYxQ0xSR09RVEdEU1JEQzVIQ2Jxa0dwK0EycEpEUzBjUXE0amJJZUNwR2RCUGR1Vlp0VkxXVEhFUVlKZ0ZhZTRXdlFtdm9MdnpDZVkiLCJtYWMiOiI5N2YyYTRhYWFkZGJjOGQzZDYzYjU0OGVkODExZGFlZjA2NDM4Nzc5OTVhYzNjZGZkMzRiZTRhMDk5ZDM4MTRmIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Sun, 17 May 2026 22:32:50 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 830\r\ndate: Sat, 30 May 2026 22:16:46 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1928,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (1928), with no line terminators","md5":"ffa1c1c1632e8b1ef25ae00ed94385c0","sha1":"d41504626fcbcd03e5b44b4c8f7d8b02d56ea1af","sha256":"896688d966de7f514e72b6c5b156de3fb6dbfcd61436e6db46ce3b0e4f52426a","sha512":"df18cde2a7c51bbc3bbb1496291cb8977e3e1d565f7316b85b94719fc4017ab3d3edf1e18292d8314b902187e3eac4477f8ff5c585ddb66520fdf7db223696b0","ssdeep":"","tlshash":"1a4172f17e1478f30b6b24aa04390042e9305ab4227364c0ff9ea92614652677dfff39","first_seen":"2023-03-09T22:10:28Z","last_seen":"2026-06-07T18:15:35.042643Z","times_seen":2440,"resource_available":true,"data":null}},"time_used":337,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":247,"receive":90,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-30","alert":"Sinkholed","trigger":"tracking-service.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"karamelscript.name.ng/css2","fqdn":"karamelscript.name.ng","domain":"karamelscript.name.ng","tld":"name.ng"},"ip":{"addr":"172.67.146.236","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://tracking-service.live/","date":"2026-05-30T22:16:46.726Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"karamelscript.name.ng","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 25 May 2026 13:51:07 GMT","end":"Sun, 23 Aug 2026 13:51:06 GMT"},"fingerprint":{"sha1":"F3:B3:99:9B:A0:C7:D6:F4:63:51:40:6E:6B:9A:FD:DA:F1:E5:F6:76","sha256":"27:7C:93:B7:CA:2F:26:CA:81:09:5B:2F:E8:17:C0:45:C7:92:E8:72:16:B4:D5:BA:61:78:5D:41:6F:0F:79:25"}}},"request":{"raw":"GET /css2 HTTP/1.1\r\nHost: karamelscript.name.ng\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tracking-service.live/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ndate: Sat, 30 May 2026 22:16:47 GMT\r\ncontent-type: text/html\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\npragma: no-cache\r\nserver: cloudflare\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: geolocation=(), microphone=(), camera=()\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=11L4OGCO1KZqGAdoPHTUko7KqRXJ1xP4Hk%2BXkgNcBWUotD4%2B3W7u1hq%2FXaQbDVDIh678wKmMMbYXrVdELRHmIGI4yjKGR%2FlZGvBS7PQWvV1dBXKUDITOA7852wOip6FUEjpgBqWCCpQ%3D\"}]}\r\ncontent-encoding: br\r\ncf-ray: a0411aec7e43569d-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-07T21:34:24.355052Z","times_seen":16222068,"resource_available":true,"data":null}},"time_used":908,"timings":{"blocked":68,"dns":46,"connect":2,"send":0,"wait":772,"receive":0,"ssl":15},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://tracking-service.live/","date":"2026-05-30T22:16:47.624Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Thu, 07 May 2026 15:53:13 GMT","end":"Thu, 30 Jul 2026 15:53:12 GMT"},"fingerprint":{"sha1":"6C:B9:FE:19:9C:7C:AA:5D:D2:39:3A:16:2C:50:FB:C8:59:C8:CC:A8","sha256":"FC:4C:0C:6E:AB:D1:82:30:1F:A9:46:DF:FA:38:02:9F:06:56:FF:98:E0:8D:AB:9A:26:C3:2A:97:C5:CF:A6:1C"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://tracking-service.live\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 28 May 2026 01:46:26 GMT\r\nexpires: Fri, 28 May 2027 01:46:26 GMT\r\ncache-control: public, max-age=31536000\r\nage: 246621\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48532,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-06-07T21:34:54.625742Z","times_seen":205719,"resource_available":false,"data":null}},"time_used":479,"timings":{"blocked":205,"dns":1,"connect":28,"send":0,"wait":29,"receive":40,"ssl":172},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"unpkg.com/@phosphor-icons/web@2.1.1/src/bold/style.css","fqdn":"unpkg.com","domain":"unpkg.com","tld":"com"},"ip":{"addr":"104.18.0.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://tracking-service.live/","date":"2026-05-30T22:16:47.687Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"unpkg.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 13 May 2026 17:38:50 GMT","end":"Tue, 11 Aug 2026 18:38:47 GMT"},"fingerprint":{"sha1":"85:3A:E3:4D:41:9A:40:A5:EA:4D:21:21:BC:8B:AF:E9:9B:B2:27:3A","sha256":"41:2C:5C:27:2E:1B:0A:16:BA:4A:09:22:08:86:E9:EC:B5:B9:C4:CF:94:00:3A:8F:52:77:35:8C:F9:C4:FC:A4"}}},"request":{"raw":"GET /@phosphor-icons/web@2.1.1/src/bold/style.css HTTP/1.1\r\nHost: unpkg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tracking-service.live/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 30 May 2026 22:16:47 GMT\r\ncontent-type: text/css\r\ncf-ray: a0411af28b22b28a-OSL\r\ncf-cache-status: HIT\r\nfly-request-id: 01KS14VCPNKHJVD6W8H6KYFXMK-fra\r\naccess-control-allow-origin: *\r\nage: 279118\r\ncache-control: public, max-age=31536000\r\nexpires: Sun, 30 May 2027 22:16:47 GMT\r\nlast-modified: Wed, 27 May 2026 11:51:59 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: accept-encoding\r\nvia: 1.1 fly.io, 1.1 fly.io\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, HEAD, OPTIONS\r\naccess-control-expose-headers: *\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\ncontent-digest: sha256=:yKMt9n+L1X9wxjceFewjLfJd3ro+uQYNeqpoEBps4kA=:\r\ncontent-encoding: gzip\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Fly.io","description":"Fly is a platform for running full stack apps and databases.","website":"https://fly.io","common_platform_enumeration":"","icon":"Fly.io.png","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":85821,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"debe807490c196adde15ebeb37781fba","sha1":"3701767a353d9270181cbc294b822cce5f47d50e","sha256":"c8a32df67f8bd57f70c6371e15ec232df25ddeba3eb9060d7aaa68101a6ce240","sha512":"0e10ab3c302ef9f99ebff03943a574f02a99def68211bc0f4fb0e5219d9e8b98d0633c4e83751e46f7bf2e9cdd50cabfd3718edc432f0460efd2e72c9366fb51","ssdeep":"1536:XeaKqhzERv84EqLCDmu3Oug/mH89BUkr6WfzA3LVUr5T5FX2aIoNlY:XeaKqhzERv84EqLCDmu3Oug/mH89BUkW","tlshash":"dc83bae4f5bf28921301d1d0330b1a61bb0d9324a946ec79c9e37ead61c2999c58e7df","first_seen":"2024-04-04T21:10:47Z","last_seen":"2026-06-07T20:35:17.38199Z","times_seen":1605,"resource_available":false,"data":null}},"time_used":167,"timings":{"blocked":73,"dns":8,"connect":14,"send":0,"wait":17,"receive":0,"ssl":44},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tracking-service.live/themes/softui/front_assets/css/main.css","fqdn":"tracking-service.live","domain":"tracking-service.live","tld":"live"},"ip":{"addr":"163.61.188.9","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://tracking-service.live/","date":"2026-05-30T22:16:46.473Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tracking-service.live","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 30 May 2026 12:29:38 GMT","end":"Fri, 28 Aug 2026 12:29:37 GMT"},"fingerprint":{"sha1":"27:AC:FA:09:BC:AE:22:6C:22:F1:27:68:4D:9E:0D:64:6A:9F:07:E7","sha256":"DD:07:47:8A:3C:E7:01:86:71:B2:5B:94:5C:0D:ED:96:CA:AA:4D:25:49:DA:F4:2E:F2:4B:2E:06:D8:AD:F6:5A"}}},"request":{"raw":"GET /themes/softui/front_assets/css/main.css HTTP/1.1\r\nHost: tracking-service.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tracking-service.live/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlZYYWc2eFlXMHF3R3JFVTJReWh6bGc9PSIsInZhbHVlIjoiVDhERmg3ME10dnFwQXZ5R1gwcmhidWdsUmtkU2lSdXFSRzJGSDgxRzBXNk04TFhkZG1yN2lNOGo1bXhCQWkrOEU1UktNUHcwNlFteHlTUTgrWkRDUi91Q1ZVclQyVFJLUllLR1RnalpNVmYwR1dZY3FoTndOTmZYNDNOSW11NlkiLCJtYWMiOiI1YzNjN2JlNDRkOWZhNGU4MzQxODYzMjIzMDZlOTA5YmNlMzFjMTNmODNkNmQ2YTcxOGU3ZmM3MzU3MjIxMDZkIiwidGFnIjoiIn0%3D; tracking_services_session=eyJpdiI6Im91d1dxa0VCcGdENzNoQVVXWDFKQ2c9PSIsInZhbHVlIjoiZEZuUlpzbHljV2hPcGlvNjh4SHZPM2pHRjBubzlZWjBZbC9tdzJOVDRsZWJLemtBUzZqeEYxQ0xSR09RVEdEU1JEQzVIQ2Jxa0dwK0EycEpEUzBjUXE0amJJZUNwR2RCUGR1Vlp0VkxXVEhFUVlKZ0ZhZTRXdlFtdm9MdnpDZVkiLCJtYWMiOiI5N2YyYTRhYWFkZGJjOGQzZDYzYjU0OGVkODExZGFlZjA2NDM4Nzc5OTVhYzNjZGZkMzRiZTRhMDk5ZDM4MTRmIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 06 Jun 2026 22:16:46 GMT\r\ncontent-type: text/css\r\nlast-modified: Sun, 17 May 2026 22:32:50 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 23609\r\ndate: Sat, 30 May 2026 22:16:46 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":187855,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"d097fa08a63473aa04eff1d1175941db","sha1":"b616fb24caacc0aef01994fb6980625a39de982f","sha256":"017d8ff61caec8229565e7b5ebf2baca340cc5c9afad85571469307b0834ee7b","sha512":"763cdafaf5367c84a34ab466cb439bdfdef1bd46a00014ea8414827df38d5280de162069331be111e10f3b929b8c9c1cac6d0711cfb958d5282af055fe8fa978","ssdeep":"1536:9mwnXVOW/rkrLuEQjyjp7HvnK3oqRiqCquZAIofk+:9xnXY/p7iChZHofk+","tlshash":"ea04434796f318b95d1f92581beed77833ad20934a0d8fa4f788b2544f843fa2522ec5","first_seen":"2026-05-30T22:17:13.99306Z","last_seen":"2026-05-30T22:17:13.99306Z","times_seen":1,"resource_available":false,"data":null}},"time_used":259,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":176,"receive":83,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-30","alert":"Sinkholed","trigger":"tracking-service.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tracking-service.live/themes/softui/front_assets/images/icon/preloder-img2.png","fqdn":"tracking-service.live","domain":"tracking-service.live","tld":"live"},"ip":{"addr":"163.61.188.9","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tracking-service.live/","date":"2026-05-30T22:16:46.477Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tracking-service.live","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 30 May 2026 12:29:38 GMT","end":"Fri, 28 Aug 2026 12:29:37 GMT"},"fingerprint":{"sha1":"27:AC:FA:09:BC:AE:22:6C:22:F1:27:68:4D:9E:0D:64:6A:9F:07:E7","sha256":"DD:07:47:8A:3C:E7:01:86:71:B2:5B:94:5C:0D:ED:96:CA:AA:4D:25:49:DA:F4:2E:F2:4B:2E:06:D8:AD:F6:5A"}}},"request":{"raw":"GET /themes/softui/front_assets/images/icon/preloder-img2.png HTTP/1.1\r\nHost: tracking-service.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tracking-service.live/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlZYYWc2eFlXMHF3R3JFVTJReWh6bGc9PSIsInZhbHVlIjoiVDhERmg3ME10dnFwQXZ5R1gwcmhidWdsUmtkU2lSdXFSRzJGSDgxRzBXNk04TFhkZG1yN2lNOGo1bXhCQWkrOEU1UktNUHcwNlFteHlTUTgrWkRDUi91Q1ZVclQyVFJLUllLR1RnalpNVmYwR1dZY3FoTndOTmZYNDNOSW11NlkiLCJtYWMiOiI1YzNjN2JlNDRkOWZhNGU4MzQxODYzMjIzMDZlOTA5YmNlMzFjMTNmODNkNmQ2YTcxOGU3ZmM3MzU3MjIxMDZkIiwidGFnIjoiIn0%3D; tracking_services_session=eyJpdiI6Im91d1dxa0VCcGdENzNoQVVXWDFKQ2c9PSIsInZhbHVlIjoiZEZuUlpzbHljV2hPcGlvNjh4SHZPM2pHRjBubzlZWjBZbC9tdzJOVDRsZWJLemtBUzZqeEYxQ0xSR09RVEdEU1JEQzVIQ2Jxa0dwK0EycEpEUzBjUXE0amJJZUNwR2RCUGR1Vlp0VkxXVEhFUVlKZ0ZhZTRXdlFtdm9MdnpDZVkiLCJtYWMiOiI5N2YyYTRhYWFkZGJjOGQzZDYzYjU0OGVkODExZGFlZjA2NDM4Nzc5OTVhYzNjZGZkMzRiZTRhMDk5ZDM4MTRmIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 06 Jun 2026 22:16:46 GMT\r\ncontent-type: image/png\r\nlast-modified: Sun, 17 May 2026 22:32:50 GMT\r\naccept-ranges: bytes\r\ncontent-length: 2831\r\ndate: Sat, 30 May 2026 22:16:46 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2831,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 128 x 128, 8-bit colormap, non-interlaced","md5":"024c528723f6f5b4a62b5fbc125b7ab7","sha1":"2cffd5fe2585eada40b75e0afadc812e03cf172a","sha256":"d5ff77e0a8ba696918bc31f64c615ec690b0efab288f06f48641e31d80cd4b32","sha512":"1f56cc447c6b71bf038fbbb8fabb17883d5d98f25edfb7129c654287d71f85b775014bc40f99f82255b6a5e61149ed6049fc93c4f867726ba283399dd2235fb9","ssdeep":"","tlshash":"9d510a6321270ebcc80d3977a2cec557750fa2a1803a05313af9d6e144a2284e8e6757","first_seen":"2025-10-29T16:32:19.683289Z","last_seen":"2026-06-06T18:23:48.711384Z","times_seen":5,"resource_available":false,"data":null}},"time_used":254,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":254,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-30","alert":"Sinkholed","trigger":"tracking-service.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tracking-service.live/themes/softui/front_assets/js/jquery-3.7.1.min.js","fqdn":"tracking-service.live","domain":"tracking-service.live","tld":"live"},"ip":{"addr":"163.61.188.9","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://tracking-service.live/","date":"2026-05-30T22:16:46.484Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tracking-service.live","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 30 May 2026 12:29:38 GMT","end":"Fri, 28 Aug 2026 12:29:37 GMT"},"fingerprint":{"sha1":"27:AC:FA:09:BC:AE:22:6C:22:F1:27:68:4D:9E:0D:64:6A:9F:07:E7","sha256":"DD:07:47:8A:3C:E7:01:86:71:B2:5B:94:5C:0D:ED:96:CA:AA:4D:25:49:DA:F4:2E:F2:4B:2E:06:D8:AD:F6:5A"}}},"request":{"raw":"GET /themes/softui/front_assets/js/jquery-3.7.1.min.js HTTP/1.1\r\nHost: tracking-service.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tracking-service.live/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlZYYWc2eFlXMHF3R3JFVTJReWh6bGc9PSIsInZhbHVlIjoiVDhERmg3ME10dnFwQXZ5R1gwcmhidWdsUmtkU2lSdXFSRzJGSDgxRzBXNk04TFhkZG1yN2lNOGo1bXhCQWkrOEU1UktNUHcwNlFteHlTUTgrWkRDUi91Q1ZVclQyVFJLUllLR1RnalpNVmYwR1dZY3FoTndOTmZYNDNOSW11NlkiLCJtYWMiOiI1YzNjN2JlNDRkOWZhNGU4MzQxODYzMjIzMDZlOTA5YmNlMzFjMTNmODNkNmQ2YTcxOGU3ZmM3MzU3MjIxMDZkIiwidGFnIjoiIn0%3D; tracking_services_session=eyJpdiI6Im91d1dxa0VCcGdENzNoQVVXWDFKQ2c9PSIsInZhbHVlIjoiZEZuUlpzbHljV2hPcGlvNjh4SHZPM2pHRjBubzlZWjBZbC9tdzJOVDRsZWJLemtBUzZqeEYxQ0xSR09RVEdEU1JEQzVIQ2Jxa0dwK0EycEpEUzBjUXE0amJJZUNwR2RCUGR1Vlp0VkxXVEhFUVlKZ0ZhZTRXdlFtdm9MdnpDZVkiLCJtYWMiOiI5N2YyYTRhYWFkZGJjOGQzZDYzYjU0OGVkODExZGFlZjA2NDM4Nzc5OTVhYzNjZGZkMzRiZTRhMDk5ZDM4MTRmIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Sun, 17 May 2026 22:32:50 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 29737\r\ndate: Sat, 30 May 2026 22:16:46 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":87532,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65447)","md5":"c9771cc3e90e18f5336eedbd0fffb2cf","sha1":"6ee8aaa3ac1f4e0ae18717a3fd26892e9f0e4cc5","sha256":"3e7501d15c3630e791c8b20392eb9dee31a9f65ce3efdde76cef5c710141ab24","sha512":"c503341fa3a7176fd10bd8cd7a5717c8faf971f87fa0c158f2d94fcd484ae3ed5031f49414dae833fb806b7365b5699c21d2e655376f69adb052b22f6f6982a7","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GK7:sHNwcv9VBQpLl88SMBQ47GK7","tlshash":"8083f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","first_seen":"2023-10-13T22:05:06Z","last_seen":"2026-06-07T21:44:30.140764Z","times_seen":27476,"resource_available":true,"data":null}},"time_used":337,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":252,"receive":85,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-30","alert":"Sinkholed","trigger":"tracking-service.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tracking-service.live/themes/softui/front_assets/images/logo/favicon.png","fqdn":"tracking-service.live","domain":"tracking-service.live","tld":"live"},"ip":{"addr":"163.61.188.9","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tracking-service.live/","date":"2026-05-30T22:16:48.053Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tracking-service.live","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 30 May 2026 12:29:38 GMT","end":"Fri, 28 Aug 2026 12:29:37 GMT"},"fingerprint":{"sha1":"27:AC:FA:09:BC:AE:22:6C:22:F1:27:68:4D:9E:0D:64:6A:9F:07:E7","sha256":"DD:07:47:8A:3C:E7:01:86:71:B2:5B:94:5C:0D:ED:96:CA:AA:4D:25:49:DA:F4:2E:F2:4B:2E:06:D8:AD:F6:5A"}}},"request":{"raw":"GET /themes/softui/front_assets/images/logo/favicon.png HTTP/1.1\r\nHost: tracking-service.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tracking-service.live/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlZYYWc2eFlXMHF3R3JFVTJReWh6bGc9PSIsInZhbHVlIjoiVDhERmg3ME10dnFwQXZ5R1gwcmhidWdsUmtkU2lSdXFSRzJGSDgxRzBXNk04TFhkZG1yN2lNOGo1bXhCQWkrOEU1UktNUHcwNlFteHlTUTgrWkRDUi91Q1ZVclQyVFJLUllLR1RnalpNVmYwR1dZY3FoTndOTmZYNDNOSW11NlkiLCJtYWMiOiI1YzNjN2JlNDRkOWZhNGU4MzQxODYzMjIzMDZlOTA5YmNlMzFjMTNmODNkNmQ2YTcxOGU3ZmM3MzU3MjIxMDZkIiwidGFnIjoiIn0%3D; tracking_services_session=eyJpdiI6Im91d1dxa0VCcGdENzNoQVVXWDFKQ2c9PSIsInZhbHVlIjoiZEZuUlpzbHljV2hPcGlvNjh4SHZPM2pHRjBubzlZWjBZbC9tdzJOVDRsZWJLemtBUzZqeEYxQ0xSR09RVEdEU1JEQzVIQ2Jxa0dwK0EycEpEUzBjUXE0amJJZUNwR2RCUGR1Vlp0VkxXVEhFUVlKZ0ZhZTRXdlFtdm9MdnpDZVkiLCJtYWMiOiI5N2YyYTRhYWFkZGJjOGQzZDYzYjU0OGVkODExZGFlZjA2NDM4Nzc5OTVhYzNjZGZkMzRiZTRhMDk5ZDM4MTRmIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 06 Jun 2026 22:16:48 GMT\r\ncontent-type: image/png\r\nlast-modified: Sun, 17 May 2026 22:32:50 GMT\r\naccept-ranges: bytes\r\ncontent-length: 839\r\ndate: Sat, 30 May 2026 22:16:48 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":839,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 32 x 40, 8-bit/color RGBA, non-interlaced","md5":"f0614354ce580e87ba06ef65579db6cc","sha1":"fc50ea0029793771adefd1cd41e2010ebea31485","sha256":"fe2ca3b06f267b116793fba21c8f8b7c8cc19553ebd88feda1344069b5199c50","sha512":"34ead07970743ec3a19ab054a57a32ebed0bbe0d5798eb6371b2f76db41087b794ec0b7b710de8f3d85a8aa8289709122583ed9198bb7314f80293d1a79ce5dd","ssdeep":"","tlshash":"6f01868e3d0296e5f48d888b0757001ef09b13f997191268ece411c13f19a212ff93c0","first_seen":"2026-03-18T17:38:17.367095Z","last_seen":"2026-05-30T22:17:13.995415Z","times_seen":3,"resource_available":false,"data":null}},"time_used":88,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":88,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-30","alert":"Sinkholed","trigger":"tracking-service.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tracking-service.live/themes/softui/front_assets/images/thumbs/banner-img1.png","fqdn":"tracking-service.live","domain":"tracking-service.live","tld":"live"},"ip":{"addr":"163.61.188.9","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tracking-service.live/","date":"2026-05-30T22:16:46.481Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tracking-service.live","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 30 May 2026 12:29:38 GMT","end":"Fri, 28 Aug 2026 12:29:37 GMT"},"fingerprint":{"sha1":"27:AC:FA:09:BC:AE:22:6C:22:F1:27:68:4D:9E:0D:64:6A:9F:07:E7","sha256":"DD:07:47:8A:3C:E7:01:86:71:B2:5B:94:5C:0D:ED:96:CA:AA:4D:25:49:DA:F4:2E:F2:4B:2E:06:D8:AD:F6:5A"}}},"request":{"raw":"GET /themes/softui/front_assets/images/thumbs/banner-img1.png HTTP/1.1\r\nHost: tracking-service.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tracking-service.live/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlZYYWc2eFlXMHF3R3JFVTJReWh6bGc9PSIsInZhbHVlIjoiVDhERmg3ME10dnFwQXZ5R1gwcmhidWdsUmtkU2lSdXFSRzJGSDgxRzBXNk04TFhkZG1yN2lNOGo1bXhCQWkrOEU1UktNUHcwNlFteHlTUTgrWkRDUi91Q1ZVclQyVFJLUllLR1RnalpNVmYwR1dZY3FoTndOTmZYNDNOSW11NlkiLCJtYWMiOiI1YzNjN2JlNDRkOWZhNGU4MzQxODYzMjIzMDZlOTA5YmNlMzFjMTNmODNkNmQ2YTcxOGU3ZmM3MzU3MjIxMDZkIiwidGFnIjoiIn0%3D; tracking_services_session=eyJpdiI6Im91d1dxa0VCcGdENzNoQVVXWDFKQ2c9PSIsInZhbHVlIjoiZEZuUlpzbHljV2hPcGlvNjh4SHZPM2pHRjBubzlZWjBZbC9tdzJOVDRsZWJLemtBUzZqeEYxQ0xSR09RVEdEU1JEQzVIQ2Jxa0dwK0EycEpEUzBjUXE0amJJZUNwR2RCUGR1Vlp0VkxXVEhFUVlKZ0ZhZTRXdlFtdm9MdnpDZVkiLCJtYWMiOiI5N2YyYTRhYWFkZGJjOGQzZDYzYjU0OGVkODExZGFlZjA2NDM4Nzc5OTVhYzNjZGZkMzRiZTRhMDk5ZDM4MTRmIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 06 Jun 2026 22:16:46 GMT\r\ncontent-type: image/png\r\nlast-modified: Sun, 17 May 2026 22:32:50 GMT\r\naccept-ranges: bytes\r\ncontent-length: 71871\r\ndate: Sat, 30 May 2026 22:16:46 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":71871,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 544 x 684, 8-bit colormap, non-interlaced","md5":"81974f4a7c369fe4d9934890218f3fbb","sha1":"9d03a8a3c3e5bd42846e0582d1cd7beb3fcc25c1","sha256":"f12d9ab5c7d05979e01a8ef1d84f735ddb219298f87b122d3299193ea52eddbf","sha512":"1cc533fda9320c7004fe4740794a9168aee782d70250a193f87eaa6aec7ba0c301dee790670c88376fef3fe7403aeef22f3b7f1bbb3dd21921afa9f23d08a377","ssdeep":"1536:m6r/MxaQOqqhf7BJPphP5zB0U1TtsMRZP4FC+vD8dTn:m6rIMjBJBhxzDxSMj4FVIRn","tlshash":"8e63024fea8e84d4bbb5c6b3be152f0ddc964c56bbdd4388d1ac6c247970240e637854","first_seen":"2026-03-18T17:38:17.379275Z","last_seen":"2026-06-06T18:23:48.695872Z","times_seen":4,"resource_available":false,"data":null}},"time_used":436,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":431,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-30","alert":"Sinkholed","trigger":"tracking-service.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tracking-service.live/themes/softui/front_assets/js/marquee-main.js","fqdn":"tracking-service.live","domain":"tracking-service.live","tld":"live"},"ip":{"addr":"163.61.188.9","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://tracking-service.live/","date":"2026-05-30T22:16:46.491Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tracking-service.live","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 30 May 2026 12:29:38 GMT","end":"Fri, 28 Aug 2026 12:29:37 GMT"},"fingerprint":{"sha1":"27:AC:FA:09:BC:AE:22:6C:22:F1:27:68:4D:9E:0D:64:6A:9F:07:E7","sha256":"DD:07:47:8A:3C:E7:01:86:71:B2:5B:94:5C:0D:ED:96:CA:AA:4D:25:49:DA:F4:2E:F2:4B:2E:06:D8:AD:F6:5A"}}},"request":{"raw":"GET /themes/softui/front_assets/js/marquee-main.js HTTP/1.1\r\nHost: tracking-service.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tracking-service.live/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlZYYWc2eFlXMHF3R3JFVTJReWh6bGc9PSIsInZhbHVlIjoiVDhERmg3ME10dnFwQXZ5R1gwcmhidWdsUmtkU2lSdXFSRzJGSDgxRzBXNk04TFhkZG1yN2lNOGo1bXhCQWkrOEU1UktNUHcwNlFteHlTUTgrWkRDUi91Q1ZVclQyVFJLUllLR1RnalpNVmYwR1dZY3FoTndOTmZYNDNOSW11NlkiLCJtYWMiOiI1YzNjN2JlNDRkOWZhNGU4MzQxODYzMjIzMDZlOTA5YmNlMzFjMTNmODNkNmQ2YTcxOGU3ZmM3MzU3MjIxMDZkIiwidGFnIjoiIn0%3D; tracking_services_session=eyJpdiI6Im91d1dxa0VCcGdENzNoQVVXWDFKQ2c9PSIsInZhbHVlIjoiZEZuUlpzbHljV2hPcGlvNjh4SHZPM2pHRjBubzlZWjBZbC9tdzJOVDRsZWJLemtBUzZqeEYxQ0xSR09RVEdEU1JEQzVIQ2Jxa0dwK0EycEpEUzBjUXE0amJJZUNwR2RCUGR1Vlp0VkxXVEhFUVlKZ0ZhZTRXdlFtdm9MdnpDZVkiLCJtYWMiOiI5N2YyYTRhYWFkZGJjOGQzZDYzYjU0OGVkODExZGFlZjA2NDM4Nzc5OTVhYzNjZGZkMzRiZTRhMDk5ZDM4MTRmIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Sun, 17 May 2026 22:32:50 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 2160\r\ndate: Sat, 30 May 2026 22:16:46 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":9029,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (9029), with no line terminators","md5":"38cf1efd3af828942692f619be330bcd","sha1":"c7836fb3eb61f96e6c8bc0344d77cf5618798315","sha256":"feade23a47f6041e6d1008885642dd7ab7cc4f12d94b0c7191c9cf8ca55df97d","sha512":"24726ffcbe3cb351e8776e22488d2ef5b705fc99548be61ac6588a75b6ac9f0fd4d4ba7dc715a4699dcee4eb903cc915c0e557785905e27e35efaa2e03a3f2dc","ssdeep":"96:v7zVMfcftw6RO0c4xwW5uO/kFzFYejD4CHDvDAFWa3QMy9mtlHxHf2KAHfqWVHfT:vX6fcf5P5tkFz1BaWoROjiSFx/7T","tlshash":"311221d2aa613450c7db13bfd44f46864e349932251e4d7fb472c099ae60b08ab97f3a","first_seen":"2023-03-07T12:21:25Z","last_seen":"2026-06-07T21:05:16.018086Z","times_seen":3879,"resource_available":true,"data":null}},"time_used":338,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":249,"receive":89,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-30","alert":"Sinkholed","trigger":"tracking-service.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tracking-service.live/themes/softui/front_assets/js/aos-animation.js","fqdn":"tracking-service.live","domain":"tracking-service.live","tld":"live"},"ip":{"addr":"163.61.188.9","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://tracking-service.live/","date":"2026-05-30T22:16:46.495Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tracking-service.live","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 30 May 2026 12:29:38 GMT","end":"Fri, 28 Aug 2026 12:29:37 GMT"},"fingerprint":{"sha1":"27:AC:FA:09:BC:AE:22:6C:22:F1:27:68:4D:9E:0D:64:6A:9F:07:E7","sha256":"DD:07:47:8A:3C:E7:01:86:71:B2:5B:94:5C:0D:ED:96:CA:AA:4D:25:49:DA:F4:2E:F2:4B:2E:06:D8:AD:F6:5A"}}},"request":{"raw":"GET /themes/softui/front_assets/js/aos-animation.js HTTP/1.1\r\nHost: tracking-service.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tracking-service.live/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlZYYWc2eFlXMHF3R3JFVTJReWh6bGc9PSIsInZhbHVlIjoiVDhERmg3ME10dnFwQXZ5R1gwcmhidWdsUmtkU2lSdXFSRzJGSDgxRzBXNk04TFhkZG1yN2lNOGo1bXhCQWkrOEU1UktNUHcwNlFteHlTUTgrWkRDUi91Q1ZVclQyVFJLUllLR1RnalpNVmYwR1dZY3FoTndOTmZYNDNOSW11NlkiLCJtYWMiOiI1YzNjN2JlNDRkOWZhNGU4MzQxODYzMjIzMDZlOTA5YmNlMzFjMTNmODNkNmQ2YTcxOGU3ZmM3MzU3MjIxMDZkIiwidGFnIjoiIn0%3D; tracking_services_session=eyJpdiI6Im91d1dxa0VCcGdENzNoQVVXWDFKQ2c9PSIsInZhbHVlIjoiZEZuUlpzbHljV2hPcGlvNjh4SHZPM2pHRjBubzlZWjBZbC9tdzJOVDRsZWJLemtBUzZqeEYxQ0xSR09RVEdEU1JEQzVIQ2Jxa0dwK0EycEpEUzBjUXE0amJJZUNwR2RCUGR1Vlp0VkxXVEhFUVlKZ0ZhZTRXdlFtdm9MdnpDZVkiLCJtYWMiOiI5N2YyYTRhYWFkZGJjOGQzZDYzYjU0OGVkODExZGFlZjA2NDM4Nzc5OTVhYzNjZGZkMzRiZTRhMDk5ZDM4MTRmIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Sun, 17 May 2026 22:32:50 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 4194\r\ndate: Sat, 30 May 2026 22:16:46 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":14239,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (14239), with no line terminators","md5":"70b4897108480dbe11c443c2ab7679c9","sha1":"70dbfd38a0f1fc3b1a7d9fadab58786484c34f17","sha256":"f268612ba59ead1b24353bb77d66783bcc435aff1c22be5f93c40bac3869968e","sha512":"466084fa711d299e394e96c2260bd8bdf103cf75da8869934c997a19fc884d6ddfa2e92ce253533a4a0c5d627d580e9a40efb7155f1c8c0e9fbd3a2c3a06c2ae","ssdeep":"384:3I2fNaC8QiHbcggNFUWTgMe91sa6XCZy54:42fNaC8QiHbfgNFUWg17slXCZy54","tlshash":"a752e6dc3681f0a617a794f7827f600ff2f14835245e90a0d269c4e27db58ae8673e5e","first_seen":"2023-03-07T01:14:45Z","last_seen":"2026-06-07T20:29:43.318401Z","times_seen":20049,"resource_available":true,"data":null}},"time_used":337,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":247,"receive":90,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-30","alert":"Sinkholed","trigger":"tracking-service.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"unpkg.com/@phosphor-icons/web@2.1.1/src/fill/style.css","fqdn":"unpkg.com","domain":"unpkg.com","tld":"com"},"ip":{"addr":"104.18.0.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://tracking-service.live/","date":"2026-05-30T22:16:47.688Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"unpkg.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 13 May 2026 17:38:50 GMT","end":"Tue, 11 Aug 2026 18:38:47 GMT"},"fingerprint":{"sha1":"85:3A:E3:4D:41:9A:40:A5:EA:4D:21:21:BC:8B:AF:E9:9B:B2:27:3A","sha256":"41:2C:5C:27:2E:1B:0A:16:BA:4A:09:22:08:86:E9:EC:B5:B9:C4:CF:94:00:3A:8F:52:77:35:8C:F9:C4:FC:A4"}}},"request":{"raw":"GET /@phosphor-icons/web@2.1.1/src/fill/style.css HTTP/1.1\r\nHost: unpkg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tracking-service.live/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 30 May 2026 22:16:47 GMT\r\ncontent-type: text/css\r\ncf-ray: a0411af28b24b28a-OSL\r\ncf-cache-status: HIT\r\nfly-request-id: 01KRTBQ8HVJWP18K5ZPT3CYTAY-fra\r\naccess-control-allow-origin: *\r\nage: 336620\r\ncache-control: public, max-age=31536000\r\nexpires: Sun, 30 May 2027 22:16:47 GMT\r\nlast-modified: Wed, 27 May 2026 00:46:26 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: accept-encoding\r\nvia: 1.1 fly.io, 1.1 fly.io\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, HEAD, OPTIONS\r\naccess-control-expose-headers: *\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\ncontent-digest: sha256=:VVmAaDpYLBkQqVRki0rjj1jXbnl/Ar/cLF6BeQHm1Pw=:\r\ncontent-encoding: gzip\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Fly.io","description":"Fly is a platform for running full stack apps and databases.","website":"https://fly.io","common_platform_enumeration":"","icon":"Fly.io.png","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":85821,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"f0561d4b928f3521c1a3a66507052039","sha1":"afb44a713f4dc526e2bffda0535da7bfcfcb44a9","sha256":"555980683a582c1910a954648b4ae38f58d76e797f02bfdc2c5e817901e6d4fc","sha512":"7e1018b04408350683e5913ca90abe30976821b7be2f027af178b9635448d07f975c15965f400092f80c086324ebe51118ded29604a0b70b02fdc13cd0cb2218","ssdeep":"768:Tco1Z16hMNSpfiIxQ3c90yfeLIw89KePvx7N+jLTrWROx:Tco1ZkbRxP9d2cwWFvG","tlshash":"dc83efe8f7be1ad03341d1d0220a1632bb0d9324f986bc59c963798d71ea119d78e5fe","first_seen":"2024-04-04T21:10:48Z","last_seen":"2026-06-07T20:35:17.380539Z","times_seen":1720,"resource_available":false,"data":null}},"time_used":166,"timings":{"blocked":72,"dns":8,"connect":13,"send":0,"wait":19,"receive":0,"ssl":42},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"unpkg.com/@phosphor-icons/web@2.1.1/src/duotone/style.css","fqdn":"unpkg.com","domain":"unpkg.com","tld":"com"},"ip":{"addr":"104.18.0.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://tracking-service.live/","date":"2026-05-30T22:16:47.689Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"unpkg.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 13 May 2026 17:38:50 GMT","end":"Tue, 11 Aug 2026 18:38:47 GMT"},"fingerprint":{"sha1":"85:3A:E3:4D:41:9A:40:A5:EA:4D:21:21:BC:8B:AF:E9:9B:B2:27:3A","sha256":"41:2C:5C:27:2E:1B:0A:16:BA:4A:09:22:08:86:E9:EC:B5:B9:C4:CF:94:00:3A:8F:52:77:35:8C:F9:C4:FC:A4"}}},"request":{"raw":"GET /@phosphor-icons/web@2.1.1/src/duotone/style.css HTTP/1.1\r\nHost: unpkg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tracking-service.live/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 30 May 2026 22:16:47 GMT\r\ncontent-type: text/css\r\ncf-ray: a0411af29b4eb28a-OSL\r\ncf-cache-status: HIT\r\nfly-request-id: 01KM7J16GQYTMSZJJDW0YFNFWA-fra\r\naccess-control-allow-origin: *\r\nage: 1471910\r\ncache-control: public, max-age=31536000\r\nexpires: Sun, 30 May 2027 22:16:47 GMT\r\nlast-modified: Sun, 10 May 2026 18:03:18 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: accept-encoding\r\nvia: 1.1 fly.io, 1.1 fly.io\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, HEAD, OPTIONS\r\naccess-control-expose-headers: *\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\ncontent-digest: sha256=:/G039/D3/9zfcUxUGB/dJ5EZaeRzfTFRuXLUuAblrl0=:\r\ncontent-encoding: gzip\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Fly.io","description":"Fly is a platform for running full stack apps and databases.","website":"https://fly.io","common_platform_enumeration":"","icon":"Fly.io.png","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":231484,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"713bc6f267fdd326c6579d5ff1e1343d","sha1":"a929631f2b12dc83dd638c39506c12f22936f025","sha256":"fc6d37f7f0f7ffdcdf714c54181fdd27911969e4737d3151b972d4b806e5ae5d","sha512":"9648284b6f49de754598e28aab54095a76d48c154b769051cd459dddf512ae1d59e5c114a581da298ff53d14edef1993b5c3c875cd384dadab10fe29c96b8b1d","ssdeep":"3072:b/GP5yanAhPUPQIBR0Js+XlS0/xATy6ZDa5aLGVEaXCt7A3C4jevbqjc4nIZqJ6/:DTsGYoohNBdr","tlshash":"5a3474e4b6bf2851a346f5c3118b9124b34ca21dcd5a9c1986e23cefd6d270dc6af18d","first_seen":"2024-04-04T21:10:48Z","last_seen":"2026-06-07T20:35:17.37084Z","times_seen":1480,"resource_available":false,"data":null}},"time_used":190,"timings":{"blocked":82,"dns":8,"connect":13,"send":0,"wait":22,"receive":0,"ssl":50},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tracking-service.live/themes/softui/front_assets/css/aos-animation.css","fqdn":"tracking-service.live","domain":"tracking-service.live","tld":"live"},"ip":{"addr":"163.61.188.9","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://tracking-service.live/","date":"2026-05-30T22:16:46.469Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tracking-service.live","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 30 May 2026 12:29:38 GMT","end":"Fri, 28 Aug 2026 12:29:37 GMT"},"fingerprint":{"sha1":"27:AC:FA:09:BC:AE:22:6C:22:F1:27:68:4D:9E:0D:64:6A:9F:07:E7","sha256":"DD:07:47:8A:3C:E7:01:86:71:B2:5B:94:5C:0D:ED:96:CA:AA:4D:25:49:DA:F4:2E:F2:4B:2E:06:D8:AD:F6:5A"}}},"request":{"raw":"GET /themes/softui/front_assets/css/aos-animation.css HTTP/1.1\r\nHost: tracking-service.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tracking-service.live/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlZYYWc2eFlXMHF3R3JFVTJReWh6bGc9PSIsInZhbHVlIjoiVDhERmg3ME10dnFwQXZ5R1gwcmhidWdsUmtkU2lSdXFSRzJGSDgxRzBXNk04TFhkZG1yN2lNOGo1bXhCQWkrOEU1UktNUHcwNlFteHlTUTgrWkRDUi91Q1ZVclQyVFJLUllLR1RnalpNVmYwR1dZY3FoTndOTmZYNDNOSW11NlkiLCJtYWMiOiI1YzNjN2JlNDRkOWZhNGU4MzQxODYzMjIzMDZlOTA5YmNlMzFjMTNmODNkNmQ2YTcxOGU3ZmM3MzU3MjIxMDZkIiwidGFnIjoiIn0%3D; tracking_services_session=eyJpdiI6Im91d1dxa0VCcGdENzNoQVVXWDFKQ2c9PSIsInZhbHVlIjoiZEZuUlpzbHljV2hPcGlvNjh4SHZPM2pHRjBubzlZWjBZbC9tdzJOVDRsZWJLemtBUzZqeEYxQ0xSR09RVEdEU1JEQzVIQ2Jxa0dwK0EycEpEUzBjUXE0amJJZUNwR2RCUGR1Vlp0VkxXVEhFUVlKZ0ZhZTRXdlFtdm9MdnpDZVkiLCJtYWMiOiI5N2YyYTRhYWFkZGJjOGQzZDYzYjU0OGVkODExZGFlZjA2NDM4Nzc5OTVhYzNjZGZkMzRiZTRhMDk5ZDM4MTRmIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 06 Jun 2026 22:16:46 GMT\r\ncontent-type: text/css\r\nlast-modified: Sun, 17 May 2026 22:32:50 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1539\r\ndate: Sat, 30 May 2026 22:16:46 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":26053,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (26053), with no line terminators","md5":"847da8fca8060ca1a70f976aab1210b9","sha1":"0557d37454b67f42f2cb101e57e5070fb1193570","sha256":"1aa8845fd06e475aefe733d4e55b36a92fcd487975049c8172341827ac9cc03e","sha512":"d5c2bbf1ad68fa1b7625c696ea0f0e5d8c2aa5ebfdfba1aa3a4cfdc6604df625148489dd2adc7020b19660e4a26ce2a32ec11d8f28d9bd80eafdc67035e6a4d3","ssdeep":"768:CMJihoCcZCOud8G8tKS65wqsZQ1G+dM2cl6iCRotsV84sxIKcv4g01UeEPEQEB4D:CMJihoCcZCOud8G8tKS65wqsZCG+dM25","tlshash":"f0c24b5a7a4cd100bf831b4762df2a0859347588e5301986be3f35ca2cd5ce6b973fa9","first_seen":"2023-04-05T07:18:45Z","last_seen":"2026-06-07T21:19:01.381605Z","times_seen":38217,"resource_available":false,"data":null}},"time_used":90,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":90,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-30","alert":"Sinkholed","trigger":"tracking-service.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Inter:wght@400;500;600;700;800\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"64.233.162.95","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://tracking-service.live/","date":"2026-05-30T22:16:46.474Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Thu, 07 May 2026 15:53:15 GMT","end":"Thu, 30 Jul 2026 15:53:14 GMT"},"fingerprint":{"sha1":"19:42:B0:56:3A:E4:79:BF:8B:69:E2:50:F4:76:BF:1E:A9:D7:7A:49","sha256":"D7:FF:C1:46:95:F3:5F:08:04:B0:E1:A8:FE:14:FC:60:19:58:D6:C7:D3:6E:82:B3:64:07:E9:E1:CB:9A:27:8C"}}},"request":{"raw":"GET /css2?family=Inter:wght@400;500;600;700;800\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tracking-service.live/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sat, 30 May 2026 22:16:46 GMT\r\ndate: Sat, 30 May 2026 22:16:46 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":12635,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"4b1d52c19ccef2398d1de007b3c9a55c","sha1":"c57fa2bcac927a7d60c526cb7ec2b6249019dfe7","sha256":"05f842619ec9f615de0b749034eadaea60e3554d798683fb01ee1eb27abd1e68","sha512":"9dfc4ab3832325eb1438bd85674e15ceb62771b94f06ea8e48a2e286453d571218df3f6727b8df4c1bdfa47218eb5fed0298601da289391a736a76a230d68c3b","ssdeep":"192:9NNIxO34OxDENOPCO3/Nx8NNryfO3iExlONEhYO3RrxGfNx0NO3kCxHx:vXuM0p2+g7r","tlshash":"1e427892002ba400ab971dc233cf7f3aaece50896085d1b95ffd0dc59cead66436876d","first_seen":"2025-09-10T22:54:08.549336Z","last_seen":"2026-06-07T21:12:03.409891Z","times_seen":11291,"resource_available":false,"data":null}},"time_used":263,"timings":{"blocked":103,"dns":1,"connect":27,"send":0,"wait":30,"receive":0,"ssl":99},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tracking-service.live/themes/softui/front_assets/images/icon/preloder-img1.png","fqdn":"tracking-service.live","domain":"tracking-service.live","tld":"live"},"ip":{"addr":"163.61.188.9","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tracking-service.live/","date":"2026-05-30T22:16:46.476Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tracking-service.live","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 30 May 2026 12:29:38 GMT","end":"Fri, 28 Aug 2026 12:29:37 GMT"},"fingerprint":{"sha1":"27:AC:FA:09:BC:AE:22:6C:22:F1:27:68:4D:9E:0D:64:6A:9F:07:E7","sha256":"DD:07:47:8A:3C:E7:01:86:71:B2:5B:94:5C:0D:ED:96:CA:AA:4D:25:49:DA:F4:2E:F2:4B:2E:06:D8:AD:F6:5A"}}},"request":{"raw":"GET /themes/softui/front_assets/images/icon/preloder-img1.png HTTP/1.1\r\nHost: tracking-service.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tracking-service.live/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlZYYWc2eFlXMHF3R3JFVTJReWh6bGc9PSIsInZhbHVlIjoiVDhERmg3ME10dnFwQXZ5R1gwcmhidWdsUmtkU2lSdXFSRzJGSDgxRzBXNk04TFhkZG1yN2lNOGo1bXhCQWkrOEU1UktNUHcwNlFteHlTUTgrWkRDUi91Q1ZVclQyVFJLUllLR1RnalpNVmYwR1dZY3FoTndOTmZYNDNOSW11NlkiLCJtYWMiOiI1YzNjN2JlNDRkOWZhNGU4MzQxODYzMjIzMDZlOTA5YmNlMzFjMTNmODNkNmQ2YTcxOGU3ZmM3MzU3MjIxMDZkIiwidGFnIjoiIn0%3D; tracking_services_session=eyJpdiI6Im91d1dxa0VCcGdENzNoQVVXWDFKQ2c9PSIsInZhbHVlIjoiZEZuUlpzbHljV2hPcGlvNjh4SHZPM2pHRjBubzlZWjBZbC9tdzJOVDRsZWJLemtBUzZqeEYxQ0xSR09RVEdEU1JEQzVIQ2Jxa0dwK0EycEpEUzBjUXE0amJJZUNwR2RCUGR1Vlp0VkxXVEhFUVlKZ0ZhZTRXdlFtdm9MdnpDZVkiLCJtYWMiOiI5N2YyYTRhYWFkZGJjOGQzZDYzYjU0OGVkODExZGFlZjA2NDM4Nzc5OTVhYzNjZGZkMzRiZTRhMDk5ZDM4MTRmIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 06 Jun 2026 22:16:46 GMT\r\ncontent-type: image/png\r\nlast-modified: Sun, 17 May 2026 22:32:50 GMT\r\naccept-ranges: bytes\r\ncontent-length: 1733\r\ndate: Sat, 30 May 2026 22:16:46 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1733,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced","md5":"947e2a8a478fd060f669f683d7be1c08","sha1":"0519cd6a9a2d71a468a4e290967a3124d507fe65","sha256":"c0ed4788b22e893657b942dc1db297a8f4189832ffa354953f9c71fcc92b5984","sha512":"aad578e8df42c1648365805ccd868464387d138f69f8f2894e3b5ca19886c2b61cd5e1a9371a8d3fcc9cd1e0d833eeb1ea89fcd57d896bebe757d896214e230c","ssdeep":"","tlshash":"3a311ae533db804003a27ce279725cd0dd576aa4beb84a209bf9d11a011e6b43dd5bf2","first_seen":"2026-03-18T17:38:17.417405Z","last_seen":"2026-06-06T18:23:48.747811Z","times_seen":4,"resource_available":false,"data":null}},"time_used":255,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":255,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-30","alert":"Sinkholed","trigger":"tracking-service.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tracking-service.live/themes/softui/front_assets/js/ScrollTrigger.min.js","fqdn":"tracking-service.live","domain":"tracking-service.live","tld":"live"},"ip":{"addr":"163.61.188.9","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://tracking-service.live/","date":"2026-05-30T22:16:46.493Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tracking-service.live","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 30 May 2026 12:29:38 GMT","end":"Fri, 28 Aug 2026 12:29:37 GMT"},"fingerprint":{"sha1":"27:AC:FA:09:BC:AE:22:6C:22:F1:27:68:4D:9E:0D:64:6A:9F:07:E7","sha256":"DD:07:47:8A:3C:E7:01:86:71:B2:5B:94:5C:0D:ED:96:CA:AA:4D:25:49:DA:F4:2E:F2:4B:2E:06:D8:AD:F6:5A"}}},"request":{"raw":"GET /themes/softui/front_assets/js/ScrollTrigger.min.js HTTP/1.1\r\nHost: tracking-service.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tracking-service.live/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlZYYWc2eFlXMHF3R3JFVTJReWh6bGc9PSIsInZhbHVlIjoiVDhERmg3ME10dnFwQXZ5R1gwcmhidWdsUmtkU2lSdXFSRzJGSDgxRzBXNk04TFhkZG1yN2lNOGo1bXhCQWkrOEU1UktNUHcwNlFteHlTUTgrWkRDUi91Q1ZVclQyVFJLUllLR1RnalpNVmYwR1dZY3FoTndOTmZYNDNOSW11NlkiLCJtYWMiOiI1YzNjN2JlNDRkOWZhNGU4MzQxODYzMjIzMDZlOTA5YmNlMzFjMTNmODNkNmQ2YTcxOGU3ZmM3MzU3MjIxMDZkIiwidGFnIjoiIn0%3D; tracking_services_session=eyJpdiI6Im91d1dxa0VCcGdENzNoQVVXWDFKQ2c9PSIsInZhbHVlIjoiZEZuUlpzbHljV2hPcGlvNjh4SHZPM2pHRjBubzlZWjBZbC9tdzJOVDRsZWJLemtBUzZqeEYxQ0xSR09RVEdEU1JEQzVIQ2Jxa0dwK0EycEpEUzBjUXE0amJJZUNwR2RCUGR1Vlp0VkxXVEhFUVlKZ0ZhZTRXdlFtdm9MdnpDZVkiLCJtYWMiOiI5N2YyYTRhYWFkZGJjOGQzZDYzYjU0OGVkODExZGFlZjA2NDM4Nzc5OTVhYzNjZGZkMzRiZTRhMDk5ZDM4MTRmIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Sun, 17 May 2026 22:32:50 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 17173\r\ndate: Sat, 30 May 2026 22:16:46 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":43380,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (43088)","md5":"ba1fa78eb4bb49f8a0eeaf8e61708840","sha1":"489bcf6d9c69f0f29f871e0323510c5197859bf5","sha256":"ad33c2df9ada8a663c2147357828f980d0b7ca731ef33eb3c6e4f327c3b2cda5","sha512":"a2731344a2412b3f0cd539eaa83b86065a30947d28845ccc5d844d79bcfec8e71ce5342bff300ab2d87386ebf4862c942848901105c4ca79d70af3533a4e7476","ssdeep":"768:L+5LHpwfVyb83wG/B/nE306RAHdAIsxmAK31horUp45:apqgo3wKB/nKRAHOIKS3TjK","tlshash":"741309ca3244b03267df627aa52f030a733654d9291e4464f266e4e83c7d5bc873be6d","first_seen":"2024-01-19T15:55:20Z","last_seen":"2026-06-07T19:37:20.007655Z","times_seen":5927,"resource_available":true,"data":null}},"time_used":421,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":248,"receive":173,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-30","alert":"Sinkholed","trigger":"tracking-service.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tracking-service.live/themes/softui/front_assets/js/magific-popup.js","fqdn":"tracking-service.live","domain":"tracking-service.live","tld":"live"},"ip":{"addr":"163.61.188.9","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://tracking-service.live/","date":"2026-05-30T22:16:46.499Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tracking-service.live","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 30 May 2026 12:29:38 GMT","end":"Fri, 28 Aug 2026 12:29:37 GMT"},"fingerprint":{"sha1":"27:AC:FA:09:BC:AE:22:6C:22:F1:27:68:4D:9E:0D:64:6A:9F:07:E7","sha256":"DD:07:47:8A:3C:E7:01:86:71:B2:5B:94:5C:0D:ED:96:CA:AA:4D:25:49:DA:F4:2E:F2:4B:2E:06:D8:AD:F6:5A"}}},"request":{"raw":"GET /themes/softui/front_assets/js/magific-popup.js HTTP/1.1\r\nHost: tracking-service.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tracking-service.live/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlZYYWc2eFlXMHF3R3JFVTJReWh6bGc9PSIsInZhbHVlIjoiVDhERmg3ME10dnFwQXZ5R1gwcmhidWdsUmtkU2lSdXFSRzJGSDgxRzBXNk04TFhkZG1yN2lNOGo1bXhCQWkrOEU1UktNUHcwNlFteHlTUTgrWkRDUi91Q1ZVclQyVFJLUllLR1RnalpNVmYwR1dZY3FoTndOTmZYNDNOSW11NlkiLCJtYWMiOiI1YzNjN2JlNDRkOWZhNGU4MzQxODYzMjIzMDZlOTA5YmNlMzFjMTNmODNkNmQ2YTcxOGU3ZmM3MzU3MjIxMDZkIiwidGFnIjoiIn0%3D; tracking_services_session=eyJpdiI6Im91d1dxa0VCcGdENzNoQVVXWDFKQ2c9PSIsInZhbHVlIjoiZEZuUlpzbHljV2hPcGlvNjh4SHZPM2pHRjBubzlZWjBZbC9tdzJOVDRsZWJLemtBUzZqeEYxQ0xSR09RVEdEU1JEQzVIQ2Jxa0dwK0EycEpEUzBjUXE0amJJZUNwR2RCUGR1Vlp0VkxXVEhFUVlKZ0ZhZTRXdlFtdm9MdnpDZVkiLCJtYWMiOiI5N2YyYTRhYWFkZGJjOGQzZDYzYjU0OGVkODExZGFlZjA2NDM4Nzc5OTVhYzNjZGZkMzRiZTRhMDk5ZDM4MTRmIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Sun, 17 May 2026 22:32:50 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 7128\r\ndate: Sat, 30 May 2026 22:16:46 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":20736,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (20736), with no line terminators","md5":"f2e62f10cd0ba575f416aea0838b60e3","sha1":"6aad5fc536a85946ce0dfc5a48d5faaa47e6046f","sha256":"3b5d0c0e27e4834e64f9421e6842188d58b28b7dcc876d629d3624cb782574cd","sha512":"bba675e5346f6e277da3ba3d0dae3001398d90035350344ecd0016d8dd71553f797f443274cbe23d61d062e20ef830bef3a962fdee36fa7d3eedca3b482edb05","ssdeep":"384:8K+Ypwhc1sBEVEtk94tBnKIO46FbUkOK/NF0Sv/lZzZyQtdhTZF5ZFz:8El73MoUkOKv0GMAdXF5n","tlshash":"68922ca4f151b27397e361b8188f382c367a9922cd078412b65498d4adf8fd85137f7d","first_seen":"2025-07-06T15:02:22.374555Z","last_seen":"2026-05-30T22:17:14.00199Z","times_seen":16,"resource_available":true,"data":null}},"time_used":417,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":246,"receive":171,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-30","alert":"Sinkholed","trigger":"tracking-service.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tracking-service.live/","fqdn":"tracking-service.live","domain":"tracking-service.live","tld":"live"},"ip":{"addr":"163.61.188.9","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-05-30T22:16:45.818Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tracking-service.live","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 30 May 2026 12:29:38 GMT","end":"Fri, 28 Aug 2026 12:29:37 GMT"},"fingerprint":{"sha1":"27:AC:FA:09:BC:AE:22:6C:22:F1:27:68:4D:9E:0D:64:6A:9F:07:E7","sha256":"DD:07:47:8A:3C:E7:01:86:71:B2:5B:94:5C:0D:ED:96:CA:AA:4D:25:49:DA:F4:2E:F2:4B:2E:06:D8:AD:F6:5A"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: tracking-service.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-powered-by: PHP/8.1.33\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: no-cache, private\r\nset-cookie: XSRF-TOKEN=eyJpdiI6IlZYYWc2eFlXMHF3R3JFVTJReWh6bGc9PSIsInZhbHVlIjoiVDhERmg3ME10dnFwQXZ5R1gwcmhidWdsUmtkU2lSdXFSRzJGSDgxRzBXNk04TFhkZG1yN2lNOGo1bXhCQWkrOEU1UktNUHcwNlFteHlTUTgrWkRDUi91Q1ZVclQyVFJLUllLR1RnalpNVmYwR1dZY3FoTndOTmZYNDNOSW11NlkiLCJtYWMiOiI1YzNjN2JlNDRkOWZhNGU4MzQxODYzMjIzMDZlOTA5YmNlMzFjMTNmODNkNmQ2YTcxOGU3ZmM3MzU3MjIxMDZkIiwidGFnIjoiIn0%3D; expires=Sun, 31-May-2026 00:16:46 GMT; Max-Age=7200; path=/; samesite=lax; secure\ntracking_services_session=eyJpdiI6Im91d1dxa0VCcGdENzNoQVVXWDFKQ2c9PSIsInZhbHVlIjoiZEZuUlpzbHljV2hPcGlvNjh4SHZPM2pHRjBubzlZWjBZbC9tdzJOVDRsZWJLemtBUzZqeEYxQ0xSR09RVEdEU1JEQzVIQ2Jxa0dwK0EycEpEUzBjUXE0amJJZUNwR2RCUGR1Vlp0VkxXVEhFUVlKZ0ZhZTRXdlFtdm9MdnpDZVkiLCJtYWMiOiI5N2YyYTRhYWFkZGJjOGQzZDYzYjU0OGVkODExZGFlZjA2NDM4Nzc5OTVhYzNjZGZkMzRiZTRhMDk5ZDM4MTRmIiwidGFnIjoiIn0%3D; path=/; httponly; samesite=lax; secure\r\ncontent-length: 5598\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Sat, 30 May 2026 22:16:46 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"jQuery:3.7.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"PHP:8.1.33","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":27824,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (322)","md5":"a34288c9e7f5aa2cb6ff18ce9c2e3a87","sha1":"4e229237bd9cc849efcf1f49a2911f0774f80be6","sha256":"17a9167bc0b83e6cd0e980b3b9407d70f0d192dba481d18fd6418c205caa2d7d","sha512":"cd256ae1af4ddd176dacd2e054a8258479bf4fc5a92b36c6f107a638180c685957bf5f4b33c258121db8a0881c005a8ef40f1072d2fcc67083be137ef02d22a4","ssdeep":"192:rQJoJBQcGy0amIBqsGXdfv0H4JXL8vg39+gGnzwpKwea48vRL19VsWSCKXLS5hfJ:r0oKD4vgQbnUP3oG5mp+kLu3","tlshash":"54c25526b4f1117b158380d1a9197b2aabfde64bc65bd589b2fc82d51fc3cd68c83128","first_seen":"2026-05-30T22:17:14.002511Z","last_seen":"2026-05-30T22:17:14.002511Z","times_seen":1,"resource_available":true,"data":null}},"time_used":797,"timings":{"blocked":315,"dns":134,"connect":87,"send":0,"wait":163,"receive":0,"ssl":94},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-30","alert":"Sinkholed","trigger":"tracking-service.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tracking-service.live/themes/softui/front_assets/css/bootstrap.min.css","fqdn":"tracking-service.live","domain":"tracking-service.live","tld":"live"},"ip":{"addr":"163.61.188.9","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://tracking-service.live/","date":"2026-05-30T22:16:46.471Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tracking-service.live","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 30 May 2026 12:29:38 GMT","end":"Fri, 28 Aug 2026 12:29:37 GMT"},"fingerprint":{"sha1":"27:AC:FA:09:BC:AE:22:6C:22:F1:27:68:4D:9E:0D:64:6A:9F:07:E7","sha256":"DD:07:47:8A:3C:E7:01:86:71:B2:5B:94:5C:0D:ED:96:CA:AA:4D:25:49:DA:F4:2E:F2:4B:2E:06:D8:AD:F6:5A"}}},"request":{"raw":"GET /themes/softui/front_assets/css/bootstrap.min.css HTTP/1.1\r\nHost: tracking-service.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tracking-service.live/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlZYYWc2eFlXMHF3R3JFVTJReWh6bGc9PSIsInZhbHVlIjoiVDhERmg3ME10dnFwQXZ5R1gwcmhidWdsUmtkU2lSdXFSRzJGSDgxRzBXNk04TFhkZG1yN2lNOGo1bXhCQWkrOEU1UktNUHcwNlFteHlTUTgrWkRDUi91Q1ZVclQyVFJLUllLR1RnalpNVmYwR1dZY3FoTndOTmZYNDNOSW11NlkiLCJtYWMiOiI1YzNjN2JlNDRkOWZhNGU4MzQxODYzMjIzMDZlOTA5YmNlMzFjMTNmODNkNmQ2YTcxOGU3ZmM3MzU3MjIxMDZkIiwidGFnIjoiIn0%3D; tracking_services_session=eyJpdiI6Im91d1dxa0VCcGdENzNoQVVXWDFKQ2c9PSIsInZhbHVlIjoiZEZuUlpzbHljV2hPcGlvNjh4SHZPM2pHRjBubzlZWjBZbC9tdzJOVDRsZWJLemtBUzZqeEYxQ0xSR09RVEdEU1JEQzVIQ2Jxa0dwK0EycEpEUzBjUXE0amJJZUNwR2RCUGR1Vlp0VkxXVEhFUVlKZ0ZhZTRXdlFtdm9MdnpDZVkiLCJtYWMiOiI5N2YyYTRhYWFkZGJjOGQzZDYzYjU0OGVkODExZGFlZjA2NDM4Nzc5OTVhYzNjZGZkMzRiZTRhMDk5ZDM4MTRmIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 06 Jun 2026 22:16:46 GMT\r\ncontent-type: text/css\r\nlast-modified: Sun, 17 May 2026 22:32:50 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 28306\r\ndate: Sat, 30 May 2026 22:16:46 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":232785,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (65343)","md5":"ce2d63034d37345dbc10ac032d4ab47f","sha1":"143db696cc20497d176956224de52537c68e5499","sha256":"16515c84e1fefd627225af0bee6109b47bcec5c4fefe30f4cb3ffce59ed0da5a","sha512":"e1565ccabf50e025910497ae9969cb8c27c115809918c4b93e68723dd697d18936e9793b94b054188013ba54d57cbb07df3fcd6922af971e141b8e42dccec50d","ssdeep":"1536:O9onIWbn98fdRfvO5wlP77D9P3EV98IsYRElV6V6pz600I41A:znIw98f0V986I6V6pz600I41A","tlshash":"ab3482d6f590317d9ca7c1499681fefd896fa985cb120aa6f003776807cabd30962dcc","first_seen":"2026-05-30T22:17:14.003471Z","last_seen":"2026-05-30T22:17:14.003471Z","times_seen":1,"resource_available":false,"data":null}},"time_used":177,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":173,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-30","alert":"Sinkholed","trigger":"tracking-service.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tracking-service.live/themes/softui/front_assets/images/thumbs/our-feature-img1.png","fqdn":"tracking-service.live","domain":"tracking-service.live","tld":"live"},"ip":{"addr":"163.61.188.9","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tracking-service.live/","date":"2026-05-30T22:16:46.482Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tracking-service.live","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 30 May 2026 12:29:38 GMT","end":"Fri, 28 Aug 2026 12:29:37 GMT"},"fingerprint":{"sha1":"27:AC:FA:09:BC:AE:22:6C:22:F1:27:68:4D:9E:0D:64:6A:9F:07:E7","sha256":"DD:07:47:8A:3C:E7:01:86:71:B2:5B:94:5C:0D:ED:96:CA:AA:4D:25:49:DA:F4:2E:F2:4B:2E:06:D8:AD:F6:5A"}}},"request":{"raw":"GET /themes/softui/front_assets/images/thumbs/our-feature-img1.png HTTP/1.1\r\nHost: tracking-service.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tracking-service.live/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlZYYWc2eFlXMHF3R3JFVTJReWh6bGc9PSIsInZhbHVlIjoiVDhERmg3ME10dnFwQXZ5R1gwcmhidWdsUmtkU2lSdXFSRzJGSDgxRzBXNk04TFhkZG1yN2lNOGo1bXhCQWkrOEU1UktNUHcwNlFteHlTUTgrWkRDUi91Q1ZVclQyVFJLUllLR1RnalpNVmYwR1dZY3FoTndOTmZYNDNOSW11NlkiLCJtYWMiOiI1YzNjN2JlNDRkOWZhNGU4MzQxODYzMjIzMDZlOTA5YmNlMzFjMTNmODNkNmQ2YTcxOGU3ZmM3MzU3MjIxMDZkIiwidGFnIjoiIn0%3D; tracking_services_session=eyJpdiI6Im91d1dxa0VCcGdENzNoQVVXWDFKQ2c9PSIsInZhbHVlIjoiZEZuUlpzbHljV2hPcGlvNjh4SHZPM2pHRjBubzlZWjBZbC9tdzJOVDRsZWJLemtBUzZqeEYxQ0xSR09RVEdEU1JEQzVIQ2Jxa0dwK0EycEpEUzBjUXE0amJJZUNwR2RCUGR1Vlp0VkxXVEhFUVlKZ0ZhZTRXdlFtdm9MdnpDZVkiLCJtYWMiOiI5N2YyYTRhYWFkZGJjOGQzZDYzYjU0OGVkODExZGFlZjA2NDM4Nzc5OTVhYzNjZGZkMzRiZTRhMDk5ZDM4MTRmIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 06 Jun 2026 22:16:46 GMT\r\ncontent-type: image/png\r\nlast-modified: Sun, 17 May 2026 22:32:50 GMT\r\naccept-ranges: bytes\r\ncontent-length: 99467\r\ndate: Sat, 30 May 2026 22:16:46 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":99467,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 746 x 705, 8-bit colormap, non-interlaced","md5":"c2f162951dd74b9dbfb260ebb4b0d66c","sha1":"0d15e37dd2d97cc1cb898b0ca329a44ec6827ff3","sha256":"e1967a4a7605cdfbc285da5fda40750934b8817de6d3f5de363d1c801a23426b","sha512":"8d0f57f3d6abfb42ebed7093c63e1e8de3213d3fe926e456de9daf5bbd2ecf9204b036c52c16940d56ea62787ce90a4d585e5441e2a9644b86bfdb38de02cede","ssdeep":"1536:VpgT/PNuOMYhPWumyjYSXYLKeEynaHR7JYCCN6EiwS6myusNIXkEP+/hKju/fiz8:PO/oY8yYT+eErRmCCN5iwSSCX1P/uyz8","tlshash":"74a302457673fc648c042dc2288967ea9963bfbf41cabdd1a552f81a5b30dc2b617306","first_seen":"2026-03-18T17:38:17.370296Z","last_seen":"2026-06-06T18:23:48.72512Z","times_seen":4,"resource_available":false,"data":null}},"time_used":433,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":430,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-30","alert":"Sinkholed","trigger":"tracking-service.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tracking-service.live/themes/softui/front_assets/js/phosphor-icon.js","fqdn":"tracking-service.live","domain":"tracking-service.live","tld":"live"},"ip":{"addr":"163.61.188.9","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://tracking-service.live/","date":"2026-05-30T22:16:46.485Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tracking-service.live","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 30 May 2026 12:29:38 GMT","end":"Fri, 28 Aug 2026 12:29:37 GMT"},"fingerprint":{"sha1":"27:AC:FA:09:BC:AE:22:6C:22:F1:27:68:4D:9E:0D:64:6A:9F:07:E7","sha256":"DD:07:47:8A:3C:E7:01:86:71:B2:5B:94:5C:0D:ED:96:CA:AA:4D:25:49:DA:F4:2E:F2:4B:2E:06:D8:AD:F6:5A"}}},"request":{"raw":"GET /themes/softui/front_assets/js/phosphor-icon.js HTTP/1.1\r\nHost: tracking-service.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tracking-service.live/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlZYYWc2eFlXMHF3R3JFVTJReWh6bGc9PSIsInZhbHVlIjoiVDhERmg3ME10dnFwQXZ5R1gwcmhidWdsUmtkU2lSdXFSRzJGSDgxRzBXNk04TFhkZG1yN2lNOGo1bXhCQWkrOEU1UktNUHcwNlFteHlTUTgrWkRDUi91Q1ZVclQyVFJLUllLR1RnalpNVmYwR1dZY3FoTndOTmZYNDNOSW11NlkiLCJtYWMiOiI1YzNjN2JlNDRkOWZhNGU4MzQxODYzMjIzMDZlOTA5YmNlMzFjMTNmODNkNmQ2YTcxOGU3ZmM3MzU3MjIxMDZkIiwidGFnIjoiIn0%3D; tracking_services_session=eyJpdiI6Im91d1dxa0VCcGdENzNoQVVXWDFKQ2c9PSIsInZhbHVlIjoiZEZuUlpzbHljV2hPcGlvNjh4SHZPM2pHRjBubzlZWjBZbC9tdzJOVDRsZWJLemtBUzZqeEYxQ0xSR09RVEdEU1JEQzVIQ2Jxa0dwK0EycEpEUzBjUXE0amJJZUNwR2RCUGR1Vlp0VkxXVEhFUVlKZ0ZhZTRXdlFtdm9MdnpDZVkiLCJtYWMiOiI5N2YyYTRhYWFkZGJjOGQzZDYzYjU0OGVkODExZGFlZjA2NDM4Nzc5OTVhYzNjZGZkMzRiZTRhMDk5ZDM4MTRmIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Sun, 17 May 2026 22:32:50 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 200\r\ndate: Sat, 30 May 2026 22:16:46 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":353,"size_decoded":0,"mime_type":"text/javascript","magic":"ASCII text","md5":"4efd5465ca7bcc7a7a384504c92cfab8","sha1":"bcb946f9be3792ae50a6ba3aef994da1ac30db6c","sha256":"015944145b932205b56cbf0e27eaf916960cbebda3332a212339b4c65031c268","sha512":"37e7fe846b6fedc20676cd460b6914d4946fcbcc65a905f4804389ab518f6d9bca7dbccdf3788cfd33849a0766bf612690379f4d2cafbc1170312fa8bd2f3b8a","ssdeep":"","tlshash":"e9e0262a51f28652aba740c7f4179626f490013da40ded01d1c9c93eee68daa30fa768","first_seen":"2025-10-29T16:32:19.656873Z","last_seen":"2026-05-30T22:17:14.005333Z","times_seen":9,"resource_available":true,"data":null}},"time_used":337,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":252,"receive":85,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-30","alert":"Sinkholed","trigger":"tracking-service.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"unpkg.com/@phosphor-icons/web@2.1.1/src/regular/style.css","fqdn":"unpkg.com","domain":"unpkg.com","tld":"com"},"ip":{"addr":"104.18.0.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://tracking-service.live/","date":"2026-05-30T22:16:47.679Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"unpkg.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 13 May 2026 17:38:50 GMT","end":"Tue, 11 Aug 2026 18:38:47 GMT"},"fingerprint":{"sha1":"85:3A:E3:4D:41:9A:40:A5:EA:4D:21:21:BC:8B:AF:E9:9B:B2:27:3A","sha256":"41:2C:5C:27:2E:1B:0A:16:BA:4A:09:22:08:86:E9:EC:B5:B9:C4:CF:94:00:3A:8F:52:77:35:8C:F9:C4:FC:A4"}}},"request":{"raw":"GET /@phosphor-icons/web@2.1.1/src/regular/style.css HTTP/1.1\r\nHost: unpkg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tracking-service.live/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 30 May 2026 22:16:47 GMT\r\ncontent-type: text/css\r\ncf-ray: a0411af24a7fb28a-OSL\r\ncf-cache-status: HIT\r\nfly-request-id: 01KRK1J8GF4DKWS282ETV18R8Y-arn\r\naccess-control-allow-origin: *\r\nage: 96364\r\ncache-control: public, max-age=31536000\r\nexpires: Sun, 30 May 2027 22:16:47 GMT\r\nlast-modified: Fri, 15 May 2026 05:52:51 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: accept-encoding\r\nvia: 1.1 fly.io, 1.1 fly.io\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, HEAD, OPTIONS\r\naccess-control-expose-headers: *\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\ncontent-digest: sha256=:hzdhuHERR9xRa2ECk26a0AXzowFTSe/N4aSW8DJvEFE=:\r\ncontent-encoding: gzip\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Fly.io","description":"Fly is a platform for running full stack apps and databases.","website":"https://fly.io","common_platform_enumeration":"","icon":"Fly.io.png","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":78131,"size_decoded":0,"mime_type":"text/css","magic":"troff or preprocessor input, ASCII text","md5":"7fe7108986e8596a197c607b2d989d89","sha1":"9feab57e5c948507134250af34e342e753fc029d","sha256":"873761b8711147dc516b6102936e9ad005f3a3015349efcde1a496f0326f1051","sha512":"73b14fe9422707df4bdfd7fe031a94f3826d8e48e250188f934cfcd61a050c994790f21da68ca1914d87703e4886b71b54817e030c5a6843b480d55144a8dec8","ssdeep":"768:xy23Hzs74dchpGALQhS3cmfGtA6g7i4zzx9/yLR1rkzSX:xy23HIznLj35e66S9ze","tlshash":"8173f0e4f5fd18d05389e1d123072661bf0da329994a2c69cab3bd8df1c2219c78e6dd","first_seen":"2024-04-04T21:10:47Z","last_seen":"2026-06-07T20:35:17.378269Z","times_seen":1910,"resource_available":false,"data":null}},"time_used":117,"timings":{"blocked":43,"dns":1,"connect":1,"send":0,"wait":27,"receive":0,"ssl":41},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tracking-service.live/themes/softui/front_assets/css/swiper-bundle.min.css","fqdn":"tracking-service.live","domain":"tracking-service.live","tld":"live"},"ip":{"addr":"163.61.188.9","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://tracking-service.live/","date":"2026-05-30T22:16:46.464Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tracking-service.live","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 30 May 2026 12:29:38 GMT","end":"Fri, 28 Aug 2026 12:29:37 GMT"},"fingerprint":{"sha1":"27:AC:FA:09:BC:AE:22:6C:22:F1:27:68:4D:9E:0D:64:6A:9F:07:E7","sha256":"DD:07:47:8A:3C:E7:01:86:71:B2:5B:94:5C:0D:ED:96:CA:AA:4D:25:49:DA:F4:2E:F2:4B:2E:06:D8:AD:F6:5A"}}},"request":{"raw":"GET /themes/softui/front_assets/css/swiper-bundle.min.css HTTP/1.1\r\nHost: tracking-service.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tracking-service.live/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlZYYWc2eFlXMHF3R3JFVTJReWh6bGc9PSIsInZhbHVlIjoiVDhERmg3ME10dnFwQXZ5R1gwcmhidWdsUmtkU2lSdXFSRzJGSDgxRzBXNk04TFhkZG1yN2lNOGo1bXhCQWkrOEU1UktNUHcwNlFteHlTUTgrWkRDUi91Q1ZVclQyVFJLUllLR1RnalpNVmYwR1dZY3FoTndOTmZYNDNOSW11NlkiLCJtYWMiOiI1YzNjN2JlNDRkOWZhNGU4MzQxODYzMjIzMDZlOTA5YmNlMzFjMTNmODNkNmQ2YTcxOGU3ZmM3MzU3MjIxMDZkIiwidGFnIjoiIn0%3D; tracking_services_session=eyJpdiI6Im91d1dxa0VCcGdENzNoQVVXWDFKQ2c9PSIsInZhbHVlIjoiZEZuUlpzbHljV2hPcGlvNjh4SHZPM2pHRjBubzlZWjBZbC9tdzJOVDRsZWJLemtBUzZqeEYxQ0xSR09RVEdEU1JEQzVIQ2Jxa0dwK0EycEpEUzBjUXE0amJJZUNwR2RCUGR1Vlp0VkxXVEhFUVlKZ0ZhZTRXdlFtdm9MdnpDZVkiLCJtYWMiOiI5N2YyYTRhYWFkZGJjOGQzZDYzYjU0OGVkODExZGFlZjA2NDM4Nzc5OTVhYzNjZGZkMzRiZTRhMDk5ZDM4MTRmIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 06 Jun 2026 22:16:46 GMT\r\ncontent-type: text/css\r\nlast-modified: Sun, 17 May 2026 22:32:50 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 4500\r\ndate: Sat, 30 May 2026 22:16:46 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":18467,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (18200), with CRLF line terminators","md5":"31f8c58823282e5a8391f0e9ec9ef7f4","sha1":"6c2ae45ba25e48da8c6c59031224bd07a0287b92","sha256":"8bc63be96fd08cdedfb9d8169e9d08097a0ad589a1ea1eee4ad35ea09290f483","sha512":"4235b10310b051ace82ed4e0437d25d0d5ddf1cf24de6d01969a3c1b670fc7834932c71f332d206a017676e46dba5851978abcc84856fd3d6f0ac0c1e42d2e0a","ssdeep":"192:38NmUJbiKne5JTLdKSme+jeF474nQ7p/l2GZb0Q5RfufKDvAYfg5faeesedOJxbw:3dUbe5JndKW+Sa0ni24tnWfz4eNi","tlshash":"158256a45350182753274f374bb1cbb9e97444d20f9389ae91c0ee58d7facb9132f2a9","first_seen":"2025-06-22T15:16:27.177791Z","last_seen":"2026-06-07T15:36:58.179588Z","times_seen":47,"resource_available":false,"data":null}},"time_used":89,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":89,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-30","alert":"Sinkholed","trigger":"tracking-service.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tracking-service.live/themes/softui/front_assets/css/magnific-popup.css","fqdn":"tracking-service.live","domain":"tracking-service.live","tld":"live"},"ip":{"addr":"163.61.188.9","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://tracking-service.live/","date":"2026-05-30T22:16:46.467Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tracking-service.live","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 30 May 2026 12:29:38 GMT","end":"Fri, 28 Aug 2026 12:29:37 GMT"},"fingerprint":{"sha1":"27:AC:FA:09:BC:AE:22:6C:22:F1:27:68:4D:9E:0D:64:6A:9F:07:E7","sha256":"DD:07:47:8A:3C:E7:01:86:71:B2:5B:94:5C:0D:ED:96:CA:AA:4D:25:49:DA:F4:2E:F2:4B:2E:06:D8:AD:F6:5A"}}},"request":{"raw":"GET /themes/softui/front_assets/css/magnific-popup.css HTTP/1.1\r\nHost: tracking-service.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tracking-service.live/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlZYYWc2eFlXMHF3R3JFVTJReWh6bGc9PSIsInZhbHVlIjoiVDhERmg3ME10dnFwQXZ5R1gwcmhidWdsUmtkU2lSdXFSRzJGSDgxRzBXNk04TFhkZG1yN2lNOGo1bXhCQWkrOEU1UktNUHcwNlFteHlTUTgrWkRDUi91Q1ZVclQyVFJLUllLR1RnalpNVmYwR1dZY3FoTndOTmZYNDNOSW11NlkiLCJtYWMiOiI1YzNjN2JlNDRkOWZhNGU4MzQxODYzMjIzMDZlOTA5YmNlMzFjMTNmODNkNmQ2YTcxOGU3ZmM3MzU3MjIxMDZkIiwidGFnIjoiIn0%3D; tracking_services_session=eyJpdiI6Im91d1dxa0VCcGdENzNoQVVXWDFKQ2c9PSIsInZhbHVlIjoiZEZuUlpzbHljV2hPcGlvNjh4SHZPM2pHRjBubzlZWjBZbC9tdzJOVDRsZWJLemtBUzZqeEYxQ0xSR09RVEdEU1JEQzVIQ2Jxa0dwK0EycEpEUzBjUXE0amJJZUNwR2RCUGR1Vlp0VkxXVEhFUVlKZ0ZhZTRXdlFtdm9MdnpDZVkiLCJtYWMiOiI5N2YyYTRhYWFkZGJjOGQzZDYzYjU0OGVkODExZGFlZjA2NDM4Nzc5OTVhYzNjZGZkMzRiZTRhMDk5ZDM4MTRmIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 06 Jun 2026 22:16:46 GMT\r\ncontent-type: text/css\r\nlast-modified: Sun, 17 May 2026 22:32:50 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1919\r\ndate: Sat, 30 May 2026 22:16:46 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":9123,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"8319dd71e045a3ee608f2dc2c0827f79","sha1":"adb03edcf0fd35429cd33946da37c09396153d9e","sha256":"591f0ec177f83fb01d7fd3ef515f5c49ac2ac779079f29dfeb583f7412d7f079","sha512":"fe6a8aee2bd022a770b61cbf73649cf9df056f6417bc261a2aaef89e7c665aaaafeaaca69ba0f600bf02d317d45402378e037ba527e8fd709e469239a0cd985b","ssdeep":"192:FA+yw4Kn4ogbnWnLzM+1iqchs2Xqzqkx83QwUnzMCD9K:ZpV2XL","tlshash":"dc12ee28da103741e176ebb8d7e30b19fa230063e302049bbfd996569fb97584669fd0","first_seen":"2025-07-06T15:02:22.327224Z","last_seen":"2026-05-30T22:17:14.006889Z","times_seen":10,"resource_available":false,"data":null}},"time_used":90,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":90,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-30","alert":"Sinkholed","trigger":"tracking-service.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tracking-service.live/themes/softui/front_assets/js/SplitText.min.js","fqdn":"tracking-service.live","domain":"tracking-service.live","tld":"live"},"ip":{"addr":"163.61.188.9","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://tracking-service.live/","date":"2026-05-30T22:16:46.489Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tracking-service.live","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 30 May 2026 12:29:38 GMT","end":"Fri, 28 Aug 2026 12:29:37 GMT"},"fingerprint":{"sha1":"27:AC:FA:09:BC:AE:22:6C:22:F1:27:68:4D:9E:0D:64:6A:9F:07:E7","sha256":"DD:07:47:8A:3C:E7:01:86:71:B2:5B:94:5C:0D:ED:96:CA:AA:4D:25:49:DA:F4:2E:F2:4B:2E:06:D8:AD:F6:5A"}}},"request":{"raw":"GET /themes/softui/front_assets/js/SplitText.min.js HTTP/1.1\r\nHost: tracking-service.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tracking-service.live/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlZYYWc2eFlXMHF3R3JFVTJReWh6bGc9PSIsInZhbHVlIjoiVDhERmg3ME10dnFwQXZ5R1gwcmhidWdsUmtkU2lSdXFSRzJGSDgxRzBXNk04TFhkZG1yN2lNOGo1bXhCQWkrOEU1UktNUHcwNlFteHlTUTgrWkRDUi91Q1ZVclQyVFJLUllLR1RnalpNVmYwR1dZY3FoTndOTmZYNDNOSW11NlkiLCJtYWMiOiI1YzNjN2JlNDRkOWZhNGU4MzQxODYzMjIzMDZlOTA5YmNlMzFjMTNmODNkNmQ2YTcxOGU3ZmM3MzU3MjIxMDZkIiwidGFnIjoiIn0%3D; tracking_services_session=eyJpdiI6Im91d1dxa0VCcGdENzNoQVVXWDFKQ2c9PSIsInZhbHVlIjoiZEZuUlpzbHljV2hPcGlvNjh4SHZPM2pHRjBubzlZWjBZbC9tdzJOVDRsZWJLemtBUzZqeEYxQ0xSR09RVEdEU1JEQzVIQ2Jxa0dwK0EycEpEUzBjUXE0amJJZUNwR2RCUGR1Vlp0VkxXVEhFUVlKZ0ZhZTRXdlFtdm9MdnpDZVkiLCJtYWMiOiI5N2YyYTRhYWFkZGJjOGQzZDYzYjU0OGVkODExZGFlZjA2NDM4Nzc5OTVhYzNjZGZkMzRiZTRhMDk5ZDM4MTRmIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Sun, 17 May 2026 22:32:50 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 5068\r\ndate: Sat, 30 May 2026 22:16:46 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":15588,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (15208)","md5":"a154fe1f45d095e1f418f5fdb0fe9958","sha1":"74137608e6a8a64bff9d23b405a1c270201497f5","sha256":"ab6e9e2f7f2905057042654d20be71f458ef4e8391c39940596a3710707d8dff","sha512":"4fd0c74793cd770534e3afed42aa2306b92ef395399e88d16dc27c4b91a37284ccddc9c44f48773c91842709aefd125743f64c96742c296db1571518e0005acf","ssdeep":"384:trEawZ1w8LNjr4lQWszZus4/CaCKgiLE6:7wvRmj+aCKgiLR","tlshash":"5a62a5b010316f216572125789561b1ff0a8490be923da37dbacf0ad7340935ebd7af9","first_seen":"2025-07-09T14:33:26.481681Z","last_seen":"2026-05-31T22:53:02.709935Z","times_seen":31,"resource_available":true,"data":null}},"time_used":338,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":250,"receive":88,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-30","alert":"Sinkholed","trigger":"tracking-service.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tracking-service.live/themes/softui/front_assets/js/swiper-bundle.min.js","fqdn":"tracking-service.live","domain":"tracking-service.live","tld":"live"},"ip":{"addr":"163.61.188.9","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://tracking-service.live/","date":"2026-05-30T22:16:46.490Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tracking-service.live","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 30 May 2026 12:29:38 GMT","end":"Fri, 28 Aug 2026 12:29:37 GMT"},"fingerprint":{"sha1":"27:AC:FA:09:BC:AE:22:6C:22:F1:27:68:4D:9E:0D:64:6A:9F:07:E7","sha256":"DD:07:47:8A:3C:E7:01:86:71:B2:5B:94:5C:0D:ED:96:CA:AA:4D:25:49:DA:F4:2E:F2:4B:2E:06:D8:AD:F6:5A"}}},"request":{"raw":"GET /themes/softui/front_assets/js/swiper-bundle.min.js HTTP/1.1\r\nHost: tracking-service.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tracking-service.live/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlZYYWc2eFlXMHF3R3JFVTJReWh6bGc9PSIsInZhbHVlIjoiVDhERmg3ME10dnFwQXZ5R1gwcmhidWdsUmtkU2lSdXFSRzJGSDgxRzBXNk04TFhkZG1yN2lNOGo1bXhCQWkrOEU1UktNUHcwNlFteHlTUTgrWkRDUi91Q1ZVclQyVFJLUllLR1RnalpNVmYwR1dZY3FoTndOTmZYNDNOSW11NlkiLCJtYWMiOiI1YzNjN2JlNDRkOWZhNGU4MzQxODYzMjIzMDZlOTA5YmNlMzFjMTNmODNkNmQ2YTcxOGU3ZmM3MzU3MjIxMDZkIiwidGFnIjoiIn0%3D; tracking_services_session=eyJpdiI6Im91d1dxa0VCcGdENzNoQVVXWDFKQ2c9PSIsInZhbHVlIjoiZEZuUlpzbHljV2hPcGlvNjh4SHZPM2pHRjBubzlZWjBZbC9tdzJOVDRsZWJLemtBUzZqeEYxQ0xSR09RVEdEU1JEQzVIQ2Jxa0dwK0EycEpEUzBjUXE0amJJZUNwR2RCUGR1Vlp0VkxXVEhFUVlKZ0ZhZTRXdlFtdm9MdnpDZVkiLCJtYWMiOiI5N2YyYTRhYWFkZGJjOGQzZDYzYjU0OGVkODExZGFlZjA2NDM4Nzc5OTVhYzNjZGZkMzRiZTRhMDk5ZDM4MTRmIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Sun, 17 May 2026 22:32:50 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 41194\r\ndate: Sat, 30 May 2026 22:16:46 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":154023,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65269), with CRLF line terminators","md5":"061e66be4bc47fec4cc812c2ea772a61","sha1":"11f0407a8130b2e29a619407a3bd88665c833cf3","sha256":"f9eefa57496549c29678d7b261108c30d3baced7d8ca1320951c62778acd6c54","sha512":"abd03c41d5aabbdeffbd7cdfcab650eca3e33bc4d4616239b015688de38d929c9559acf551a4ced55c57bce8973d621d7213cbc4b018637ad83bd619d8104c45","ssdeep":"1536:OKJqGfGmh0+w8NkvJuBEFUjF3j7Mt0BlxvHeYkEl+VANuRWaGCjmyiBnmYlV/TIF:TJB7dNcZYkEAGHBn7/TI/ichDpi7Up","tlshash":"d4e3e889a221b67646e7169b93e4c211b3b50540b80ac4f470fd4c9f597ec9813feefa","first_seen":"2025-07-26T00:54:40.162033Z","last_seen":"2026-05-30T22:17:14.008816Z","times_seen":8,"resource_available":true,"data":null}},"time_used":423,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":250,"receive":173,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-30","alert":"Sinkholed","trigger":"tracking-service.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}
