{"report_id":"6f189dad-e312-4135-a86f-ff16d400409c","version":6,"status":"done","tags":[],"date":"2025-11-19T22:25:26Z","url":{"schema":"http","addr":"sslsecureproxy.com/","fqdn":"sslsecureproxy.com","domain":"sslsecureproxy.com","tld":"com"},"ip":{"addr":"198.251.90.20","port":0,"asn":53667,"as":"PONYNET","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"www.sslsecureproxy.com/","fqdn":"www.sslsecureproxy.com","domain":"sslsecureproxy.com","tld":"com"},"title":"SSL Proxy | Secure Proxy - SSLSecureProxy.com","dom":{"size":34719,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (34718), with no line terminators","md5":"6f0fe4d33ce1ac61843e870b3a2a54c3","sha1":"f3a7ecd8a68c6a5654c4e1ebc4228c07aaf3e28e","sha256":"e8f6ddaf0a9fafc4d35323c0db07b64ab4d1c768ab3ebfb01fc49acf864ef764","sha512":"89fe8358d1133c1a015d1af06126baf20381049a235e156b9797ddec7c2d5522e217d910bc244c24724aa9a2e41447292e620b948dd4bb981710b4e5843c5dcd","ssdeep":"384:ZoJg4FrHasHAIptCGrgO38xJAnezVcHmSK24IMCcdOM:yh7CGr5AOM","tlshash":"d5f261227d00c5a142db59de1632666922b6c30cd95346c8f9f5c3f81bfecacea33a55","dom_hash":"domhash359407574201b881a0efdf4d392ad871","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"sslsecureproxy.com/","fqdn":"sslsecureproxy.com","domain":"sslsecureproxy.com","tld":"com"},"ip":{"addr":"198.251.90.20","port":0,"asn":53667,"as":"PONYNET","country":"United States","country_code":"US"},"tags":null,"meta":null,"user":{"country_code":"zz"}},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-12-24T22:25:26Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":5}},"detection":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-11-19","alert":"Sinkholed","trigger":"www.serveuk7.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-19","alert":"Sinkholed","trigger":"www.serveuk7.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-19","alert":"Sinkholed","trigger":"www.serveuk7.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-11-19","alert":"Sinkholed","trigger":"sslsecureproxy.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-11-19","alert":"Sinkholed","trigger":"www.sslsecureproxy.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null},"summary":[{"fqdn":"fonts.gstatic.com","ip":{"addr":"216.58.207.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2025-11-16T22:13:25.550079Z","alert_count":0,"request_count":4,"received_data":147967,"sent_data":2198,"comment":"","tags":null,"fingerprints":null},{"fqdn":"www.serveuk7.com","ip":{"addr":"172.67.150.201","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2013-02-05","domain_rank":0,"first_seen":"2016-06-28T03:40:32Z","last_seen":"2025-11-16T07:00:57.863015Z","alert_count":96,"request_count":32,"received_data":1510738,"sent_data":15548,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"sslsecureproxy.com","ip":{"addr":"198.251.90.20","port":443,"asn":53667,"as":"PONYNET","country":"United States","country_code":"US"},"domain_registered":"unknown","domain_rank":4210622,"first_seen":"2014-12-06T12:01:34Z","last_seen":"2023-03-03T03:38:31Z","alert_count":1,"request_count":1,"received_data":34701,"sent_data":487,"comment":"","tags":null,"fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"www.googletagmanager.com","ip":{"addr":"142.250.74.136","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2011-11-11","domain_rank":283,"first_seen":"2012-10-04T01:07:32Z","last_seen":"2025-11-16T22:16:03.162694Z","alert_count":0,"request_count":2,"received_data":699931,"sent_data":903,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.251.38.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2025-11-16T22:13:25.532985Z","alert_count":0,"request_count":2,"received_data":53318,"sent_data":972,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"www.sslsecureproxy.com","ip":{"addr":"198.251.90.20","port":443,"asn":53667,"as":"PONYNET","country":"United States","country_code":"US"},"domain_registered":"2012-03-06","domain_rank":0,"first_seen":"2016-04-17T20:12:36Z","last_seen":"2025-06-02T08:03:19.546343Z","alert_count":1,"request_count":1,"received_data":34930,"sent_data":491,"comment":"","tags":null,"fingerprints":[{"name":"Modernizr","description":"Modernizr is a JavaScript library that detects the features available in a user's browser.","website":"https://modernizr.com","common_platform_enumeration":"","icon":"Modernizr.svg","categories":["JavaScript libraries"]},{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"OWL Carousel","description":"OWL Carousel is an enabled jQuery plugin that lets you create responsive carousel sliders.","website":"https://owlcarousel2.github.io/OwlCarousel2/","common_platform_enumeration":"","icon":"OWL Carousel.png","categories":["JavaScript libraries"]},{"name":"Slick","description":"","website":"https://kenwheeler.github.io/slick","common_platform_enumeration":"","icon":"Slick.svg","categories":["JavaScript libraries"]},{"name":"PHP:7.2.24","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Google AdSense","description":"Google AdSense is a program run by Google through which website publishers serve advertisements that are targeted to the site content and audience.","website":"https://www.google.com/adsense/start/","common_platform_enumeration":"","icon":"Google AdSense.svg","categories":["Advertising"]},{"name":"AddThis","description":"AddThis is a social bookmarking service that can be integrated into a website with the use of a web widget.","website":"https://www.addthis.com","common_platform_enumeration":"","icon":"AddThis.svg","categories":["Widgets"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":null}],"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"www.serveuk7.com/themes/sslsecureproxy/js/owl.carousel.js","fqdn":"www.serveuk7.com","domain":"serveuk7.com","tld":"com"},"ip":{"addr":"172.67.150.201","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"a7f535ea24c4c9cf5f01ac9322634f58","sha1":"7b1383e0e4312c46280ddf91931e32f6e9f8de1c","sha256":"b0f20d9d73e83de106d02ab1f37b13aefaac746104a9c03eb604907c23bd435e","sha512":"8c80965bfc46f1d255d857b3c5028f3cefb393379ef2449eb7e531584d6adbb20c24068f9602519b9d71b2ced2740e82ecf6ff8de31c99b61e0f068349577119","ssdeep":"1536:WELorUUOZZ/Afrx0APP+5FkrhKt1+Ky46c+J0BDZg:WrOZZg0+PcFX+Z3clZg","tlshash":"817383c1f36c221b422a31b85e9e63cd723d416ae5115c6fbca9a9d838d146c437efb4","size":79152,"data":"","first_seen":"2023-03-07T01:18:13Z","last_seen":"2026-04-02T06:43:44.051635Z","times_seen":1024,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pagead2.googlesyndication.com/pagead/js/adsbygoogle.js","fqdn":"pagead2.googlesyndication.com","domain":"googlesyndication.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"2e9e391ad98fbe1b2de0b7b4fa9ca904","sha1":"21d7771223e8286a06ad878af425094a40de32b5","sha256":"1468d954f25ab75355f3c0f42cd9c84efd64a67922c47d3b69bdb6d0eb399e69","sha512":"defa1ba5ce4193014a4657fe394734634087d66c9db8024778ea2c3a59be02e38e0077725c7d000ff7046bea23070594f8942446c6068b4032d329d0716532b0","ssdeep":"","tlshash":"7731650e547cd5f601109cd6e52a3e24a036246b6e1930acf248e2246f3e04ff0ffae9","size":1648,"data":"","first_seen":"2023-05-06T01:21:43Z","last_seen":"2026-04-03T18:30:42.500367Z","times_seen":64700,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-6595789CR3\u0026cx=c\u0026gtm=4e5bi1","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.136","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"6f5b3a9af029d6790123a7341871a5d7","sha1":"6dbc423b918b67a2e69f4e27a515e045553d3198","sha256":"071534f5a5d8d2156ca617c94324f8db8d30975ac92bfd14614bd39588a7f217","sha512":"883a617806d820a0a32fd4b05897648fe85932e7c66f5a6727bd14fddfd42944e8c441adef8b14f644534410169c5dd8a17abcb7ed8aec3563647bd5e3755c12","ssdeep":"6144:zMBUKitJeUI2XVUULUVWo6O7GQEO7o1URoOr+i9:cDi2UnVUUtO7r","tlshash":"c68419ce73d670665392b478503f018ba57b68a2f44cc895f18acde52e70a9a4277f3c","size":380272,"data":"","first_seen":"2025-11-19T22:25:33.553945Z","last_seen":"2025-11-19T22:25:33.553945Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pagead2.googlesyndication.com/pagead/js/adsbygoogle.js","fqdn":"pagead2.googlesyndication.com","domain":"googlesyndication.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"2e9e391ad98fbe1b2de0b7b4fa9ca904","sha1":"21d7771223e8286a06ad878af425094a40de32b5","sha256":"1468d954f25ab75355f3c0f42cd9c84efd64a67922c47d3b69bdb6d0eb399e69","sha512":"defa1ba5ce4193014a4657fe394734634087d66c9db8024778ea2c3a59be02e38e0077725c7d000ff7046bea23070594f8942446c6068b4032d329d0716532b0","ssdeep":"","tlshash":"7731650e547cd5f601109cd6e52a3e24a036246b6e1930acf248e2246f3e04ff0ffae9","size":1648,"data":"","first_seen":"2023-05-06T01:21:43Z","last_seen":"2026-04-03T18:30:42.500367Z","times_seen":64700,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.sslsecureproxy.com/sandbox%20eval%20code","fqdn":"www.sslsecureproxy.com","domain":"sslsecureproxy.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"","is_inline":false,"md5":"23c336606ee3a6d444b305153fa0e2e2","sha1":"473a2111970ae2a94b373e656d20c4bd4184d703","sha256":"305375d5052f6a14434d2d338f852f0f4f04fb26495f88a5d62b6afde2e2cc60","sha512":"ab0470885483545a0306733fa3a067239e299e0b47d35f9769a763f65ba5e9d928ee364a66f9e577499ab0c452f34dc7a3a48a774ce3d09e56fd88d1989e84ba","ssdeep":"","tlshash":"d1b09b13a650156d3f1166b1b951a003a1d977055fb75501f006005b1440ea559dc194","size":128,"data":"","first_seen":"2023-05-06T01:21:43Z","last_seen":"2026-04-03T18:30:42.516675Z","times_seen":66344,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.sslsecureproxy.com/sandbox%20eval%20code","fqdn":"www.sslsecureproxy.com","domain":"sslsecureproxy.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"","is_inline":false,"md5":"23c336606ee3a6d444b305153fa0e2e2","sha1":"473a2111970ae2a94b373e656d20c4bd4184d703","sha256":"305375d5052f6a14434d2d338f852f0f4f04fb26495f88a5d62b6afde2e2cc60","sha512":"ab0470885483545a0306733fa3a067239e299e0b47d35f9769a763f65ba5e9d928ee364a66f9e577499ab0c452f34dc7a3a48a774ce3d09e56fd88d1989e84ba","ssdeep":"","tlshash":"d1b09b13a650156d3f1166b1b951a003a1d977055fb75501f006005b1440ea559dc194","size":128,"data":"","first_seen":"2023-05-06T01:21:43Z","last_seen":"2026-04-03T18:30:42.516675Z","times_seen":66344,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.sslsecureproxy.com/","fqdn":"www.sslsecureproxy.com","domain":"sslsecureproxy.com","tld":"com"},"ip":{"addr":"198.251.90.20","port":443,"asn":53667,"as":"PONYNET","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"dc2df9e336ed613d0d2d37ded8404636","sha1":"979d1838f012dad0c2b2c45ed82a2634d878cc95","sha256":"00da7765002160939677154753afbe82119c4759640ac9c5de4d8a8649a78098","sha512":"5c26d4b639fdf75ac92ff4b19dace951715521bacb8182d8a4eb3ba9d522bdb6d5b227b873fccd17c7b4c9870acafdafe6b605497543549626d2f1d5f6461a8d","ssdeep":"","tlshash":"acc02b98214b0cb595d72b000b1ff204b003210098b12c31080523049d30d0ba75cc40","size":145,"data":"","first_seen":"2025-09-23T03:34:32.883465Z","last_seen":"2026-02-28T15:23:31.066933Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.sslsecureproxy.com/","fqdn":"www.sslsecureproxy.com","domain":"sslsecureproxy.com","tld":"com"},"ip":{"addr":"198.251.90.20","port":443,"asn":53667,"as":"PONYNET","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"9087b9e0dbc5ee2423a37007eddc7cf1","sha1":"6f9255b4c428d318fcce548f8c72f5529aa89731","sha256":"f193038a376367ae58699e44cb354b8569ebd7ee2fd4ff22039b4c609633cad5","sha512":"3c9cb4f8b57171a242cb7d3e1d76633bf6657155c3cfc9176f747dee51771234d67f07433b7e28ce30b450cba5fa0fda29733b99ff9372398a62d2416ff32aee","ssdeep":"","tlshash":"1fb092b3f1a6a83b9122a38c2569fa187892002896a17831a3441938957f50a9a49488","size":126,"data":"","first_seen":"2025-09-23T03:34:32.8881Z","last_seen":"2026-02-28T15:23:31.067584Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.serveuk7.com/themes/sslsecureproxy/js/jquery.dlmenu.js","fqdn":"www.serveuk7.com","domain":"serveuk7.com","tld":"com"},"ip":{"addr":"172.67.150.201","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"631e96de0fc88f972f86c6ae225e6b22","sha1":"9c48e0e93d7aae8dadec47a97e75a36451606609","sha256":"9050447b6bc6fb9234a230d3b7c88d2e1aad7003fb4360f0d60c4794806519b3","sha512":"289267abcb374579e69303f525b243ea5704527ccf8fa1588be0c52249f89722498a6f71f642494ebca28cc597eb4e4b7919a71dbfe307970ec17a6cec4a4ec3","ssdeep":"96:9tn2p7MlA0QZvcG15leGeONSkCn1DFwtus3VEFiT1fZ99kWgIezUTHjmiNyqcSuH:IgfUkYPePOATHE+WS89NxcSu1Z","tlshash":"0be130c4e74d276292bb7330989e208a763e8972b40d1c6e7cba21d9189606d43d3f7c","size":7002,"data":"","first_seen":"2023-03-07T12:27:37Z","last_seen":"2026-04-02T04:05:29.658277Z","times_seen":687,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.serveuk7.com/themes/sslsecureproxy/js/custom.js","fqdn":"www.serveuk7.com","domain":"serveuk7.com","tld":"com"},"ip":{"addr":"172.67.150.201","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"c676d0f71c2985514d0387484928d00c","sha1":"36abf16f11d5cd2e745f5f52b3f534d9b76f2b97","sha256":"5b57769f319b8b482b3c82702ea0b34a15ffec1ec61af025500974d68db598dd","sha512":"3d3f56a5a36e21250fdbe96298c8de58fe82c45e6c5bfed92af7d649e69de512aa4eb705e8458a77a1e229de91997bef58f12f65d8ffdac09eacff08fa8128f8","ssdeep":"96:jzYG68ldEC/BhmvdiYoABhmvd1OvtvP+c0RjGkIzkH9yLUtTyTnBaM:9hmvdZhmvdovtvP+c0RjZTyTnz","tlshash":"53d112019b2c60a1b15e515e4a7e9306d97d9527ec80f8a2b09d09257f4cb0f23fafe0","size":6547,"data":"","first_seen":"2025-11-19T22:25:33.535985Z","last_seen":"2026-02-07T11:14:06.766127Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.serveuk7.com/themes/sslsecureproxy/js/jquery.js","fqdn":"www.serveuk7.com","domain":"serveuk7.com","tld":"com"},"ip":{"addr":"172.67.150.201","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ce1a30a47df8b7d8be918a728c0ffa56","sha1":"260a8a5255e986a6174cda19e4d7123f1b774ba4","sha256":"005d80a82d6a031aad284f35ad4bb7ade4767e4f35bad68ab044169d967f9ec6","sha512":"f41dffcd80061133adb15646f42fd190c724590031c88643e5e8c90e782084dd29106e5bf67b2768d175e272dbf3c9b6e68c8846f3a01029f2599f0c0fe26f38","ssdeep":"1536:SP10iSi65U/dXXeyhzeBuG+HYE0mdkuJO1z6Oy4sh3J1A72BjmN7TwpDKba98HrR:N+414Jiz6fh6lTqya98HrR","tlshash":"6c83d6d9b2c67062977734b851bf510bb17a98dab40c8c60f0a4d8e47eb4a8d517bf2c","size":84327,"data":"","first_seen":"2025-11-19T22:25:33.588426Z","last_seen":"2026-02-07T11:14:06.796956Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=UA-29423781-1","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.136","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"61ddebb2da54dcd3af32c98a7fd6ec1f","sha1":"a5a93630d6d2158adce163caeda371c86f220e10","sha256":"fa1d41793fa4fd0ffe78654bb4a34d99871a925fa6b3dba964cb5f5849fedd41","sha512":"d830b95dbbaabb68cc0a5b99fecebda8959cc864c045e4ec1dabbc425679f8c575e43c81adcf895b2021b418a3c16e2fabfc2e291ffb7889e8e8a37441ff4c30","ssdeep":"6144:bBUft+eUI2X6u0IVWo6O7GQUO7eYgU87m:lEVUn6ugO7ik","tlshash":"526407cd73da742283a3a474503f008ba17b69d2f84cc895f186d9d52e70aaa4277f7d","size":318425,"data":"","first_seen":"2025-11-19T22:25:33.533455Z","last_seen":"2025-11-19T22:25:33.533455Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.sslsecureproxy.com/","fqdn":"www.sslsecureproxy.com","domain":"sslsecureproxy.com","tld":"com"},"ip":{"addr":"198.251.90.20","port":443,"asn":53667,"as":"PONYNET","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"633e294fa254d4ceedcd066c7a12d4d4","sha1":"ad7a4cfb8bc3689a49946dbcc037ee20992082d8","sha256":"8f3256401fbb00f993c11e0098473961a7e56444af934728edee238b087d0cc1","sha512":"f62e39fb1454694698c2e2ab68b2c6e4b8a97851cf5f39d7a31d0fda2bd5a2d7efe923d6d4aef8f34507c1478dc99bcba00ea88c047958afdd4c7f94ddf3d59f","ssdeep":"","tlshash":"6f900273f0c18c7e4021b04421693508b543011c8290502066010830953705b95080c4","size":52,"data":"","first_seen":"2023-03-07T01:10:08Z","last_seen":"2026-04-03T07:58:57.331105Z","times_seen":2624,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.sslsecureproxy.com/sandbox%20eval%20code","fqdn":"www.sslsecureproxy.com","domain":"sslsecureproxy.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"","is_inline":false,"md5":"92b651082ce234f66bb544e678befda3","sha1":"14c21c55ddce43b6f677caadf51d4ab98c6a3df8","sha256":"25d57d1d97abeb84531d3d3e5754dd5cb19a2c115edfa7cfc7af8247084faded","sha512":"b4fcbc037e0a3d91db2a624921e96b878e9e18dd998ad5649d77d7d053faf28b09c8725a0542aef702310bf85f3037b70985c274db8acabd021efb171d41f361","ssdeep":"","tlshash":"34c08ca3e74026ae2a1166b2b810e003a2866b015aa78402b00a003b1441fe21aaa1a8","size":147,"data":"","first_seen":"2023-04-11T21:07:53Z","last_seen":"2026-04-03T18:31:01.216471Z","times_seen":770188,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.sslsecureproxy.com/sandbox%20eval%20code","fqdn":"www.sslsecureproxy.com","domain":"sslsecureproxy.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"","is_inline":false,"md5":"23c336606ee3a6d444b305153fa0e2e2","sha1":"473a2111970ae2a94b373e656d20c4bd4184d703","sha256":"305375d5052f6a14434d2d338f852f0f4f04fb26495f88a5d62b6afde2e2cc60","sha512":"ab0470885483545a0306733fa3a067239e299e0b47d35f9769a763f65ba5e9d928ee364a66f9e577499ab0c452f34dc7a3a48a774ce3d09e56fd88d1989e84ba","ssdeep":"","tlshash":"d1b09b13a650156d3f1166b1b951a003a1d977055fb75501f006005b1440ea559dc194","size":128,"data":"","first_seen":"2023-05-06T01:21:43Z","last_seen":"2026-04-03T18:30:42.516675Z","times_seen":66344,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.sslsecureproxy.com/","fqdn":"www.sslsecureproxy.com","domain":"sslsecureproxy.com","tld":"com"},"ip":{"addr":"198.251.90.20","port":443,"asn":53667,"as":"PONYNET","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"633e294fa254d4ceedcd066c7a12d4d4","sha1":"ad7a4cfb8bc3689a49946dbcc037ee20992082d8","sha256":"8f3256401fbb00f993c11e0098473961a7e56444af934728edee238b087d0cc1","sha512":"f62e39fb1454694698c2e2ab68b2c6e4b8a97851cf5f39d7a31d0fda2bd5a2d7efe923d6d4aef8f34507c1478dc99bcba00ea88c047958afdd4c7f94ddf3d59f","ssdeep":"","tlshash":"6f900273f0c18c7e4021b04421693508b543011c8290502066010830953705b95080c4","size":52,"data":"","first_seen":"2023-03-07T01:10:08Z","last_seen":"2026-04-03T07:58:57.331105Z","times_seen":2624,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.serveuk7.com/themes/sslsecureproxy/js/modernizr.custom.js","fqdn":"www.serveuk7.com","domain":"serveuk7.com","tld":"com"},"ip":{"addr":"172.67.150.201","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"3ad7bc528408307bbba6f4c01a1ca04d","sha1":"def18f2d7d0282415f7af9637864038753bc14a3","sha256":"5bed074367042548e1f1ce7d18ba273b797a7a142899b5fdafabf24aa17bb645","sha512":"13d5033f3f08c2f5da8c5d1d4939e4f74e7de53245484d03e4b4e89cdf0181582bd716028a77428532e3a047124ef747fc5e259ec3185dabd51f74ba27b7fcc7","ssdeep":"192:0la+K8nnsnK6h7aSJJJkSeIUHV4kLDDhWwpy8b7z:ga+K8nt6h7akrwHV5Hh1pz","tlshash":"bc12c6c97242f216879761b6507f420bf239e86af8184c50e059d9ecbd709f8067bf2e","size":9174,"data":"","first_seen":"2023-03-07T12:12:14Z","last_seen":"2026-04-03T17:58:54.424366Z","times_seen":1823,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.serveuk7.com/themes/sslsecureproxy/js/waypoints-min.js","fqdn":"www.serveuk7.com","domain":"serveuk7.com","tld":"com"},"ip":{"addr":"172.67.150.201","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"7a6ee4f476dcd0f1b6d33be6f1cdcb12","sha1":"abe7597be68454c71534784997e27a9788c0ff0c","sha256":"fa02853c839ec44854a5abe53027ee7e7f4e63e0a51118dd4d3453e27f3f962c","sha512":"b65ad96c5f6ca2500cc293adc33ea074f1c8095563c2f019f8f44c681703faf2dcc866edb3d5dd1b39f1bc68ad0eb525d87fb4e0c41935c628ab21586ada2f28","ssdeep":"192:MjUfqSLPRWCkOeSDVrORoH+1DUJDJ5CDZ7MhjU7:UUfqtPnBX1ufCDYU7","tlshash":"a71232d9b5c3b4572baba079d53f520ab33b7d9820088464f0d494c53eb4a3db263b38","size":9360,"data":"","first_seen":"2023-03-07T14:54:19Z","last_seen":"2026-04-02T22:33:26.644011Z","times_seen":116,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google-analytics.com/analytics.js","fqdn":"www.google-analytics.com","domain":"google-analytics.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"f24128d0c9cba7be2916c693427a3483","sha1":"1b6397d496ea896ebc2018b01b995cee4f166029","sha256":"58173de4697da1a218f04c3a783a733bab4e769ceabc37cd42da9dc3e036a7e8","sha512":"c4950733b44e258bbc817ce6396f002caec1e11a6413fd0038c9baef2d5f1d992b1fd0ec52515aba52faedb52c28b996a7fc063f28a0f45f3aab5e2f91bf5be5","ssdeep":"96:A1VdZYqhPnjpWx4/eTe8qSMbqaQd6VL2Jyt9LdJoyayCVPVD5wdBfQPfCHiUr3:AXdZYqNjpU4yPqSMbqaQGL2QfdDayCZC","tlshash":"a6a1dc9939fb50210233b1bd1bafa918b23895236208dd61b98c9364bf94437d7f1fc9","size":4691,"data":"","first_seen":"2023-04-11T21:07:53Z","last_seen":"2026-04-03T18:31:01.223924Z","times_seen":768645,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.sslsecureproxy.com/","fqdn":"www.sslsecureproxy.com","domain":"sslsecureproxy.com","tld":"com"},"ip":{"addr":"198.251.90.20","port":443,"asn":53667,"as":"PONYNET","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"2065757fa131e3875c4dada88af41c1c","sha1":"97e48e477acc7ec1f7bf6c0a6c741a3c00cc16f5","sha256":"241d33976a0b11ec467bb147a694da5ae39c55bc5b53e78c1db6a347caf65f1f","sha512":"23f0cb9938eef673b7bdee9bb3267d2e28c48acf6ccd297f68846104bfebd52e8dd64bccf96b7a3317da143e3c7a6ae3a5d510c3b6daf5c1d5d1d15a5e1c8d14","ssdeep":"96:/wUTbgIJUTbgfwU0bgvwU0bgSwU0bgK7goxyaKgtxrrgb0Qa1w0EIg9g8nWa6:jcBckcUcJcK8YVEbzHa88","tlshash":"173266003e55c6c047df19de1832543820f9c358e5a396d9fd6693f51aae83ce737a1a","size":11155,"data":"","first_seen":"2025-11-19T22:25:33.598082Z","last_seen":"2026-02-28T15:23:31.070496Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.sslsecureproxy.com/","fqdn":"www.sslsecureproxy.com","domain":"sslsecureproxy.com","tld":"com"},"ip":{"addr":"198.251.90.20","port":443,"asn":53667,"as":"PONYNET","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"633e294fa254d4ceedcd066c7a12d4d4","sha1":"ad7a4cfb8bc3689a49946dbcc037ee20992082d8","sha256":"8f3256401fbb00f993c11e0098473961a7e56444af934728edee238b087d0cc1","sha512":"f62e39fb1454694698c2e2ab68b2c6e4b8a97851cf5f39d7a31d0fda2bd5a2d7efe923d6d4aef8f34507c1478dc99bcba00ea88c047958afdd4c7f94ddf3d59f","ssdeep":"","tlshash":"6f900273f0c18c7e4021b04421693508b543011c8290502066010830953705b95080c4","size":52,"data":"","first_seen":"2023-03-07T01:10:08Z","last_seen":"2026-04-03T07:58:57.331105Z","times_seen":2624,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.serveuk7.com/themes/sslsecureproxy/js/bootstrap.min.js","fqdn":"www.serveuk7.com","domain":"serveuk7.com","tld":"com"},"ip":{"addr":"172.67.150.201","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"14d449eb8876fa55e1ef3c2cc52b0c17","sha1":"a9545831803b1359cfeed47e3b4d6bae68e40e99","sha256":"e7ed36ceee5450b4243bbc35188afabdfb4280c7c57597001de0ed167299b01b","sha512":"00d9069b9bd29ad0daa0503f341d67549cce28e888e1affd1a2a45b64a4c1bc460d81cfc4751857f991f2f4fb3d2572fd97fca651ba0c2b0255530209b182f22","ssdeep":"768:9VG5R15WbHVKZrycEHSYro34CrSLB6WU/6DqBf4l1B:9VIRuo53XiwWTvl1B","tlshash":"7523c84a7254b4a202dfa476913f450bb73b389aa60bc16cb95994ed1d7cd8c3227f3c","size":48944,"data":"","first_seen":"2023-03-07T01:02:44Z","last_seen":"2026-04-03T18:27:40.347315Z","times_seen":103133,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.serveuk7.com/themes/sslsecureproxy/js/slick.min.js","fqdn":"www.serveuk7.com","domain":"serveuk7.com","tld":"com"},"ip":{"addr":"172.67.150.201","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d5a61c749e44e47159af8a6579dda121","sha1":"3b41b3bc956685015a347a2238e71db29dfa0dbb","sha256":"0c7178cc6ca34fb18e30f070a5e7a1c287b2d7ccfcba2cfdf06e0f46eda55740","sha512":"5ed98cb4311c373da3ede92bb47bce551e22c30683ea8fc55097baf99abe1e0702b24de48f8b9241047cc1e4364158f5a343e4e8fc182e8866db4e99ccd7ee6e","ssdeep":"768:4rkkX123A5YHi6pWzYdlNWYcx16nnYdXRRMd2KYCQCsPShb1ez7RFmYH:EPrYdlNixEePiYH","tlshash":"e513a549d205276285d721e62105c40eb3f7fb3cba22c0e475c9d3ea646ec4896d7bfa","size":42863,"data":"","first_seen":"2023-03-07T01:06:34Z","last_seen":"2026-04-03T18:30:36.402493Z","times_seen":77034,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pagead2.googlesyndication.com/pagead/js/adsbygoogle.js","fqdn":"pagead2.googlesyndication.com","domain":"googlesyndication.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"2e9e391ad98fbe1b2de0b7b4fa9ca904","sha1":"21d7771223e8286a06ad878af425094a40de32b5","sha256":"1468d954f25ab75355f3c0f42cd9c84efd64a67922c47d3b69bdb6d0eb399e69","sha512":"defa1ba5ce4193014a4657fe394734634087d66c9db8024778ea2c3a59be02e38e0077725c7d000ff7046bea23070594f8942446c6068b4032d329d0716532b0","ssdeep":"","tlshash":"7731650e547cd5f601109cd6e52a3e24a036246b6e1930acf248e2246f3e04ff0ffae9","size":1648,"data":"","first_seen":"2023-05-06T01:21:43Z","last_seen":"2026-04-03T18:30:42.500367Z","times_seen":64700,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pagead2.googlesyndication.com/pagead/js/adsbygoogle.js","fqdn":"pagead2.googlesyndication.com","domain":"googlesyndication.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"2e9e391ad98fbe1b2de0b7b4fa9ca904","sha1":"21d7771223e8286a06ad878af425094a40de32b5","sha256":"1468d954f25ab75355f3c0f42cd9c84efd64a67922c47d3b69bdb6d0eb399e69","sha512":"defa1ba5ce4193014a4657fe394734634087d66c9db8024778ea2c3a59be02e38e0077725c7d000ff7046bea23070594f8942446c6068b4032d329d0716532b0","ssdeep":"","tlshash":"7731650e547cd5f601109cd6e52a3e24a036246b6e1930acf248e2246f3e04ff0ffae9","size":1648,"data":"","first_seen":"2023-05-06T01:21:43Z","last_seen":"2026-04-03T18:30:42.500367Z","times_seen":64700,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.sslsecureproxy.com/sandbox%20eval%20code","fqdn":"www.sslsecureproxy.com","domain":"sslsecureproxy.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"","is_inline":false,"md5":"23c336606ee3a6d444b305153fa0e2e2","sha1":"473a2111970ae2a94b373e656d20c4bd4184d703","sha256":"305375d5052f6a14434d2d338f852f0f4f04fb26495f88a5d62b6afde2e2cc60","sha512":"ab0470885483545a0306733fa3a067239e299e0b47d35f9769a763f65ba5e9d928ee364a66f9e577499ab0c452f34dc7a3a48a774ce3d09e56fd88d1989e84ba","ssdeep":"","tlshash":"d1b09b13a650156d3f1166b1b951a003a1d977055fb75501f006005b1440ea559dc194","size":128,"data":"","first_seen":"2023-05-06T01:21:43Z","last_seen":"2026-04-03T18:30:42.516675Z","times_seen":66344,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.serveuk7.com/public/cache/55137343e0b1d13f5684f69d24969ded.js","fqdn":"www.serveuk7.com","domain":"serveuk7.com","tld":"com"},"ip":{"addr":"172.67.150.201","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"7da7b42ecf2d8b494fbf7aed471aeeb4","sha1":"2ac94625e618cd3fff89aaa6ac2247460c0054e9","sha256":"cc7ce2678586a779f599b34b5883f485d074bc08e7bc9dc8a1b115f52b30a69f","sha512":"3e99fd4a0bd799406eab79408db80f7be94bc1f674e81fa3744fd86e334d547dd9f191bf71383b024ded787fb1351be6cebb325f49afa6ff51efc7dcad09d695","ssdeep":"","tlshash":"cd01dc2a75922dd386fe69930b9f0d07903e9202588d06e8f003438586a8ec0827bfcb","size":793,"data":"","first_seen":"2025-09-23T03:34:32.862594Z","last_seen":"2026-02-28T15:23:31.061157Z","times_seen":13,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.sslsecureproxy.com/","fqdn":"www.sslsecureproxy.com","domain":"sslsecureproxy.com","tld":"com"},"ip":{"addr":"198.251.90.20","port":443,"asn":53667,"as":"PONYNET","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"3e75de259efed0766d9c6c79cce2bf3a","sha1":"23eba16147ce0efa829e2e5bf565a0fd55f453a0","sha256":"19c4b928406e4296e3d4bdf7b645ac63b0e24ed093a1b108a78b2dd752766d59","sha512":"7211a29699613f95555459ffa8edae39053aab215bae941e015a4e1bc3fd3134322013c64d1f2fea66f6019030031b8cada0b9f924cdb7c4865f64e69e2554d2","ssdeep":"","tlshash":"3a01847fac3610f18337b2fca1e7a7ccba356b146c429096d11ca8520558db9811ef4c","size":693,"data":"","first_seen":"2025-11-19T22:25:33.599731Z","last_seen":"2026-02-07T11:14:06.827615Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null},"http":[{"url":{"schema":"https","addr":"fonts.gstatic.com/s/lato/v25/S6uyw4BMUTPHjx4wXg.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"216.58.207.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.sslsecureproxy.com/","date":"2025-11-19T22:25:04.136Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 27 Oct 2025 08:34:57 GMT","end":"Mon, 19 Jan 2026 08:34:56 GMT"},"fingerprint":{"sha1":"A9:72:6E:D8:AB:26:CE:26:35:A4:39:55:24:08:04:0F:24:56:E8:8C","sha256":"65:84:7B:FE:24:02:CE:3E:DB:6E:1C:6B:B8:FC:99:F5:A5:65:83:F1:66:75:ED:20:20:63:06:ED:27:8A:82:FE"}}},"request":{"raw":"GET /s/lato/v25/S6uyw4BMUTPHjx4wXg.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://www.sslsecureproxy.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 23580\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 19 Nov 2025 12:31:08 GMT\r\nexpires: Thu, 19 Nov 2026 12:31:08 GMT\r\ncache-control: public, max-age=31536000\r\nage: 35636\r\nlast-modified: Mon, 15 Sep 2025 17:09:41 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":23580,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 23580, version 1.0","md5":"e1b3b5908c9cf23dfb2b9c52b9a023ab","sha1":"fcd4136085f2a03481d9958cc6793a5ed98e714c","sha256":"918b7dc3e2e2d015c16ce08b57bcb64d2253bafc1707658f361e72865498e537","sha512":"b2da7ef768385707afed62ca1f178efc6aa14519762e3f270129b3afee4d3782cb991e6fa66b3b08a2f81ff7caba0b4c34c726d952198b2ac4a784b36eb2a828","ssdeep":"384:dRkIAJ8pVwWTW5VVjdVn8+2yvAMdriCEOY0kfW9GkAPqpPHi2vUuUSzB8:dKIAJ8pVHTZ+riY9oCpPHiodUeK","tlshash":"91b2e1ce5d546e3a8028213785c17b488273572e9edf42c6dd83a6263a7092cfd3d96e","first_seen":"2023-04-05T13:28:45Z","last_seen":"2026-04-03T18:30:42.421348Z","times_seen":183602,"resource_available":false,"data":null}},"time_used":183,"timings":{"blocked":84,"dns":3,"connect":9,"send":0,"wait":8,"receive":7,"ssl":62},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.serveuk7.com/themes/sslsecureproxy/css/global.css","fqdn":"www.serveuk7.com","domain":"serveuk7.com","tld":"com"},"ip":{"addr":"172.67.150.201","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.sslsecureproxy.com/","date":"2025-11-19T22:25:03.824Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"serveuk7.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 12 Oct 2025 14:06:22 GMT","end":"Sat, 10 Jan 2026 15:03:56 GMT"},"fingerprint":{"sha1":"E4:49:1E:88:99:5C:2F:19:59:DE:89:9D:42:51:1C:2F:1C:A8:B1:EC","sha256":"30:F9:55:49:E7:12:42:F1:1A:74:15:36:2D:F7:5E:5C:BC:24:05:4F:07:66:97:CC:BE:35:00:40:52:8C:9F:0C"}}},"request":{"raw":"GET /themes/sslsecureproxy/css/global.css HTTP/1.1\r\nHost: www.serveuk7.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.serveuk7.com/themes/sslsecureproxy/css/style.css\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 19 Nov 2025 22:25:03 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nlast-modified: Sun, 02 Feb 2025 01:15:19 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BaAAHpiA7IfS8CzvOEgPmWbdUb3Hp3gRG6om7cFNXqoXNfcn6ZPDWOphVPuUWhdI0pp%2Fy6zprrynUPqHm1Q1zx5qV3UignEtyhiI0%2FRB\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nvary: accept-encoding\r\naccess-control-allow-origin: *\r\ncontent-encoding: br\r\ncontent-type: text/css\r\nage: 221\r\ncache-control: max-age=2678400\r\ncf-cache-status: HIT\r\netag: W/\"23f5-62d1e8258a046\"\r\ncf-ray: 9a131f0edffdb51b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":9205,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"c418ff8bc1427289d062ab451727f780","sha1":"69187912625a78527daeffed779b6f6e9a47e3e3","sha256":"c8f21e3ad586bf1bbb95b91e20fce99031c320f06fd07e066db1e4ae00fb928e","sha512":"85eab7f669726932b25aff7fe1dbe6b90971c0b947fccbad4baf3a6fe72b1600a6b4ca0ad9212532e5a427c96fdc0004c867fe1bbfefceb6561393ce53598d69","ssdeep":"192:ULr84+4VxLLrXVZ6jRu24gL/p+XNCSH/kRLJjwqVjl6OH:/424gL/p+XNCSH/kRVsqVjlh","tlshash":"6212cc53bb911c8ca21fb0e0cfaa16a0930e58935fdf75d6ba00315ec9c17de827715a","first_seen":"2025-11-19T22:25:33.521109Z","last_seen":"2026-02-07T11:14:06.776229Z","times_seen":3,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-11-19","alert":"Sinkholed","trigger":"www.serveuk7.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-19","alert":"Sinkholed","trigger":"www.serveuk7.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-19","alert":"Sinkholed","trigger":"www.serveuk7.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sslsecureproxy.com/","fqdn":"sslsecureproxy.com","domain":"sslsecureproxy.com","tld":"com"},"ip":{"addr":"198.251.90.20","port":443,"asn":53667,"as":"PONYNET","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-11-19T22:25:02.646Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.4everproxy.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Oct 2025 06:22:08 GMT","end":"Sun, 25 Jan 2026 06:22:07 GMT"},"fingerprint":{"sha1":"17:30:83:6B:9E:3C:4D:29:15:FA:2B:24:24:3F:1D:BB:2F:9F:D8:9F","sha256":"62:ED:78:56:81:7C:1C:90:CD:AC:15:A9:BC:C2:F7:AE:64:AA:76:9D:4E:64:66:57:97:9C:96:B4:AA:1B:0B:4E"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: sslsecureproxy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 301 Moved Permanently\r\nDate: Wed, 19 Nov 2025 22:25:02 GMT\r\nServer: Apache\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains; preload\r\nLocation: https://www.sslsecureproxy.com/\r\nContent-Length: 239\r\nKeep-Alive: timeout=1, max=100\r\nConnection: Keep-Alive\r\nContent-Type: text/html; charset=iso-8859-1\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":34376,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-03T18:31:03.533086Z","times_seen":13299059,"resource_available":true,"data":null}},"time_used":504,"timings":{"blocked":237,"dns":162,"connect":32,"send":0,"wait":31,"receive":0,"ssl":39},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-11-19","alert":"Sinkholed","trigger":"sslsecureproxy.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.serveuk7.com/themes/sslsecureproxy/js/modernizr.custom.js","fqdn":"www.serveuk7.com","domain":"serveuk7.com","tld":"com"},"ip":{"addr":"172.67.150.201","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.sslsecureproxy.com/","date":"2025-11-19T22:25:03.587Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"serveuk7.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 12 Oct 2025 14:06:22 GMT","end":"Sat, 10 Jan 2026 15:03:56 GMT"},"fingerprint":{"sha1":"E4:49:1E:88:99:5C:2F:19:59:DE:89:9D:42:51:1C:2F:1C:A8:B1:EC","sha256":"30:F9:55:49:E7:12:42:F1:1A:74:15:36:2D:F7:5E:5C:BC:24:05:4F:07:66:97:CC:BE:35:00:40:52:8C:9F:0C"}}},"request":{"raw":"GET /themes/sslsecureproxy/js/modernizr.custom.js HTTP/1.1\r\nHost: www.serveuk7.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.sslsecureproxy.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 19 Nov 2025 22:25:04 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nlast-modified: Sun, 02 Feb 2025 01:15:19 GMT\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5gU14iJ%2FN2gd05Gxpj6mugtl2mnsERVXbgSbZcwaKRb8bhw8fm%2B%2Fq00xs%2B3%2Fc6ePrkkOD8RY3oi8zyJkQrNws78xDuAa%2BQEwHGHprt7K\"}]}\r\ncache-control: max-age=2678400\r\ncf-cache-status: REVALIDATED\r\netag: W/\"23d6-62d1e8258f636\"\r\ncontent-encoding: br\r\ncf-ray: 9a131f0dbf6cb512-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":9174,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (8963)","md5":"3ad7bc528408307bbba6f4c01a1ca04d","sha1":"def18f2d7d0282415f7af9637864038753bc14a3","sha256":"5bed074367042548e1f1ce7d18ba273b797a7a142899b5fdafabf24aa17bb645","sha512":"13d5033f3f08c2f5da8c5d1d4939e4f74e7de53245484d03e4b4e89cdf0181582bd716028a77428532e3a047124ef747fc5e259ec3185dabd51f74ba27b7fcc7","ssdeep":"192:0la+K8nnsnK6h7aSJJJkSeIUHV4kLDDhWwpy8b7z:ga+K8nt6h7akrwHV5Hh1pz","tlshash":"bc12c6c97242f216879761b6507f420bf239e86af8184c50e059d9ecbd709f8067bf2e","first_seen":"2023-03-07T12:12:14Z","last_seen":"2026-04-03T17:58:54.424366Z","times_seen":1823,"resource_available":true,"data":null}},"time_used":514,"timings":{"blocked":47,"dns":0,"connect":0,"send":0,"wait":467,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-11-19","alert":"Sinkholed","trigger":"www.serveuk7.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-19","alert":"Sinkholed","trigger":"www.serveuk7.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-19","alert":"Sinkholed","trigger":"www.serveuk7.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.serveuk7.com/themes/sslsecureproxy/css/component.css","fqdn":"www.serveuk7.com","domain":"serveuk7.com","tld":"com"},"ip":{"addr":"172.67.150.201","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.sslsecureproxy.com/","date":"2025-11-19T22:25:03.815Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"serveuk7.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 12 Oct 2025 14:06:22 GMT","end":"Sat, 10 Jan 2026 15:03:56 GMT"},"fingerprint":{"sha1":"E4:49:1E:88:99:5C:2F:19:59:DE:89:9D:42:51:1C:2F:1C:A8:B1:EC","sha256":"30:F9:55:49:E7:12:42:F1:1A:74:15:36:2D:F7:5E:5C:BC:24:05:4F:07:66:97:CC:BE:35:00:40:52:8C:9F:0C"}}},"request":{"raw":"GET /themes/sslsecureproxy/css/component.css HTTP/1.1\r\nHost: www.serveuk7.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.serveuk7.com/themes/sslsecureproxy/css/style.css\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 19 Nov 2025 22:25:03 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nlast-modified: Sun, 02 Feb 2025 01:15:19 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RoDs4B6WS1cXks%2FyrxMmF43zvPm4aLjW7eTv6T0GJoY8wdjimdisx1J1e4u617IoYACnoxsC9hqzRlaMZdOy3SzJmK6L08%2BWJe1cOfsx\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nvary: accept-encoding\r\naccess-control-allow-origin: *\r\ncontent-encoding: br\r\ncontent-type: text/css\r\nage: 221\r\ncache-control: max-age=2678400\r\ncf-cache-status: HIT\r\netag: W/\"3b00-62d1e82589c5e\"\r\ncf-ray: 9a131f0ecff9b51b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":15104,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"5993cbd958fa8cb7d4b19e949e5ab28a","sha1":"e201fa6ccfbc3056334f7ec72e84c901adaa9f82","sha256":"e1d2338c0ab49d4f03c9935449d82fd04cd66f7b1f07ea090587ef3feff8e7a2","sha512":"cf3b050e20a34421af28dae4f045b8689d3fca98d343a421ba51695885b9cb9647a5ba3529644766a8f7a1b0835aa916db3f676bee77dd4e330d549d89b73e31","ssdeep":"384:4YkPgwBw0+Jv6K9deH4FTHcjplrgVOWCwRwZluqCQORuFjb:aPPW0a1lmNb","tlshash":"9e628ce917e125449a55885c9fed5b688f3ca4635a384cef73c12d8feb01a8c22d9f13","first_seen":"2025-11-19T22:25:33.526414Z","last_seen":"2026-02-07T11:14:06.790541Z","times_seen":3,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-11-19","alert":"Sinkholed","trigger":"www.serveuk7.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-19","alert":"Sinkholed","trigger":"www.serveuk7.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-19","alert":"Sinkholed","trigger":"www.serveuk7.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.serveuk7.com/themes/sslsecureproxy/css/widget.css","fqdn":"www.serveuk7.com","domain":"serveuk7.com","tld":"com"},"ip":{"addr":"172.67.150.201","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.sslsecureproxy.com/","date":"2025-11-19T22:25:03.820Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"serveuk7.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 12 Oct 2025 14:06:22 GMT","end":"Sat, 10 Jan 2026 15:03:56 GMT"},"fingerprint":{"sha1":"E4:49:1E:88:99:5C:2F:19:59:DE:89:9D:42:51:1C:2F:1C:A8:B1:EC","sha256":"30:F9:55:49:E7:12:42:F1:1A:74:15:36:2D:F7:5E:5C:BC:24:05:4F:07:66:97:CC:BE:35:00:40:52:8C:9F:0C"}}},"request":{"raw":"GET /themes/sslsecureproxy/css/widget.css HTTP/1.1\r\nHost: www.serveuk7.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.serveuk7.com/themes/sslsecureproxy/css/style.css\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 19 Nov 2025 22:25:03 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nlast-modified: Sun, 02 Feb 2025 01:15:19 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ptVNLz0hfFHYjWQLTIw437V%2BrZ%2F5mNDCtoXiPEiM%2BhnlM6hfcII6AV3P4PYIR7UWqlU%2FVvp0cP0VUFe8c%2BELe8K5wtSD49%2BwgOFVl1Sn\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nvary: accept-encoding\r\naccess-control-allow-origin: *\r\ncontent-encoding: br\r\ncontent-type: text/css\r\nage: 221\r\ncache-control: max-age=2678400\r\ncf-cache-status: HIT\r\netag: W/\"16f3-62d1e8258a046\"\r\ncf-ray: 9a131f0ecffbb51b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5875,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"1670f0e4d58e778eaf7a75e6820f7123","sha1":"ab538d5c9d9bfda6698632b549a942b82513940a","sha256":"4583d94761a1e5bd7ba5205f6d6950f19b153679887cd9b90925414f173cf2a8","sha512":"bc4c6efaaf17832ae06054d3ef0b86f9bd68f9a07a92d96d2ca6edac1dd021846149d9bdc084f7b340cc183b85f9257ee01fa3625bb6c65323f294579afae832","ssdeep":"96:u2vSpHhFFUeGJmOMgdMBNptfNAr5U6/teWbw/Ss:BvSpHhFOeGQfPBNpor5U6Q","tlshash":"88c1a7c2111d2c84a74678eeea0a7a58638fd1226d0c1df5be5d1098c3c63d9e6e27dd","first_seen":"2025-11-19T22:25:33.528974Z","last_seen":"2026-02-07T11:14:06.802575Z","times_seen":3,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-11-19","alert":"Sinkholed","trigger":"www.serveuk7.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-19","alert":"Sinkholed","trigger":"www.serveuk7.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-19","alert":"Sinkholed","trigger":"www.serveuk7.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.serveuk7.com/themes/sslsecureproxy/fonts/fa-brands-400.html","fqdn":"www.serveuk7.com","domain":"serveuk7.com","tld":"com"},"ip":{"addr":"172.67.150.201","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.sslsecureproxy.com/","date":"2025-11-19T22:25:04.175Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"serveuk7.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 12 Oct 2025 14:06:22 GMT","end":"Sat, 10 Jan 2026 15:03:56 GMT"},"fingerprint":{"sha1":"E4:49:1E:88:99:5C:2F:19:59:DE:89:9D:42:51:1C:2F:1C:A8:B1:EC","sha256":"30:F9:55:49:E7:12:42:F1:1A:74:15:36:2D:F7:5E:5C:BC:24:05:4F:07:66:97:CC:BE:35:00:40:52:8C:9F:0C"}}},"request":{"raw":"GET /themes/sslsecureproxy/fonts/fa-brands-400.html HTTP/1.1\r\nHost: www.serveuk7.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://www.sslsecureproxy.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.serveuk7.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 19 Nov 2025 22:25:04 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nlast-modified: Sun, 02 Feb 2025 01:15:19 GMT\r\netag: \"d55d-62d1e8258bb9e\"\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\ncontent-length: 54621\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: text/html; charset=UTF-8\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CRIF9MjpWrq8wJYPh%2FcJaxK3kCA3VWXHycC6ag%2BoXuxUakGc4yA%2BMkFNr%2BoziheR4KGDoQ7PvaQ8nKD%2B893E7y6JbCvr9F7qc2h0aFI4\"}]}\r\ncf-ray: 9a131f112815b51b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7820,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"Web Open Font Format (Version 2), TrueType, length 50068, version 195.-27584","md5":"3ab50a3d7bf14327c3f0380062d38566","sha1":"ff563e42f58f4b41edba77a16fc3890b39c5e335","sha256":"8d55bf310d7536c39ad6734fa3465fe654c0317041f23daa2268fdfc9a3483d4","sha512":"6cb5ecb7556c71b9a5baf3259366f00793fac9de1e7693ddb456d40f61af68e594e659573bd55786dda64578f4343074e6805967d3642494308c6985c7e75d74","ssdeep":"192:VhJiz49cE3h/VocZ+5swkf3L6gbbNTxzGoR7W6IbKDU2+UWUFY9e12tty+CwElE:t/yEToH5spvLd/2oR7Cm+UrFYU14xEO","tlshash":"d432af06c220e3a4f6c3a1b76c8587c592518e6e735cdd04d5ae8290d98f6174b6fee3","first_seen":"2025-11-19T22:25:33.531116Z","last_seen":"2026-02-07T11:14:06.799435Z","times_seen":3,"resource_available":false,"data":null}},"time_used":431,"timings":{"blocked":8,"dns":0,"connect":0,"send":0,"wait":420,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-11-19","alert":"Sinkholed","trigger":"www.serveuk7.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-19","alert":"Sinkholed","trigger":"www.serveuk7.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-19","alert":"Sinkholed","trigger":"www.serveuk7.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=UA-29423781-1","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.136","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.sslsecureproxy.com/","date":"2025-11-19T22:25:03.579Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 27 Oct 2025 08:33:43 GMT","end":"Mon, 19 Jan 2026 08:33:42 GMT"},"fingerprint":{"sha1":"4E:9E:D1:61:E4:7D:C2:8A:B6:AD:D2:31:C7:07:01:E4:DB:A0:A7:A9","sha256":"C5:DD:D4:CA:97:B7:B5:8C:B4:99:E8:56:30:AC:1B:F0:FD:7C:5A:FD:19:ED:13:D0:27:D6:0B:76:C7:C7:A0:66"}}},"request":{"raw":"GET /gtag/js?id=UA-29423781-1 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.sslsecureproxy.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Wed, 19 Nov 2025 22:25:03 GMT\r\nexpires: Wed, 19 Nov 2025 22:25:03 GMT\r\ncache-control: private, max-age=900\r\nlast-modified: Wed, 19 Nov 2025 21:52:40 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 110728\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":318425,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (5911)","md5":"61ddebb2da54dcd3af32c98a7fd6ec1f","sha1":"a5a93630d6d2158adce163caeda371c86f220e10","sha256":"fa1d41793fa4fd0ffe78654bb4a34d99871a925fa6b3dba964cb5f5849fedd41","sha512":"d830b95dbbaabb68cc0a5b99fecebda8959cc864c045e4ec1dabbc425679f8c575e43c81adcf895b2021b418a3c16e2fabfc2e291ffb7889e8e8a37441ff4c30","ssdeep":"6144:bBUft+eUI2X6u0IVWo6O7GQUO7eYgU87m:lEVUn6ugO7ik","tlshash":"526407cd73da742283a3a474503f008ba17b69d2f84cc895f186d9d52e70aaa4277f7d","first_seen":"2025-11-19T22:25:33.533455Z","last_seen":"2025-11-19T22:25:33.533455Z","times_seen":1,"resource_available":true,"data":null}},"time_used":495,"timings":{"blocked":212,"dns":1,"connect":8,"send":0,"wait":32,"receive":23,"ssl":216},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.serveuk7.com/themes/sslsecureproxy/js/custom.js","fqdn":"www.serveuk7.com","domain":"serveuk7.com","tld":"com"},"ip":{"addr":"172.67.150.201","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.sslsecureproxy.com/","date":"2025-11-19T22:25:03.593Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"serveuk7.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 12 Oct 2025 14:06:22 GMT","end":"Sat, 10 Jan 2026 15:03:56 GMT"},"fingerprint":{"sha1":"E4:49:1E:88:99:5C:2F:19:59:DE:89:9D:42:51:1C:2F:1C:A8:B1:EC","sha256":"30:F9:55:49:E7:12:42:F1:1A:74:15:36:2D:F7:5E:5C:BC:24:05:4F:07:66:97:CC:BE:35:00:40:52:8C:9F:0C"}}},"request":{"raw":"GET /themes/sslsecureproxy/js/custom.js HTTP/1.1\r\nHost: www.serveuk7.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.sslsecureproxy.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 19 Nov 2025 22:25:04 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nlast-modified: Sun, 02 Feb 2025 01:15:19 GMT\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=W5boYjI%2FdK3NcqFDQWGUt8ydDk%2BcgNNnHbtZTH9I70oNUzoYD0Rgxi3nZ3B8P2U7LkVHpnIM7fqsuU%2BoNlHtBhP7ormIlcTFoz7mXo14\"}]}\r\ncache-control: max-age=2678400\r\ncf-cache-status: REVALIDATED\r\netag: W/\"1993-62d1e8258f636\"\r\ncontent-encoding: br\r\ncf-ray: 9a131f0dbf74b512-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6547,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"c676d0f71c2985514d0387484928d00c","sha1":"36abf16f11d5cd2e745f5f52b3f534d9b76f2b97","sha256":"5b57769f319b8b482b3c82702ea0b34a15ffec1ec61af025500974d68db598dd","sha512":"3d3f56a5a36e21250fdbe96298c8de58fe82c45e6c5bfed92af7d649e69de512aa4eb705e8458a77a1e229de91997bef58f12f65d8ffdac09eacff08fa8128f8","ssdeep":"96:jzYG68ldEC/BhmvdiYoABhmvd1OvtvP+c0RjGkIzkH9yLUtTyTnBaM:9hmvdZhmvdovtvP+c0RjZTyTnz","tlshash":"53d112019b2c60a1b15e515e4a7e9306d97d9527ec80f8a2b09d09257f4cb0f23fafe0","first_seen":"2025-11-19T22:25:33.535985Z","last_seen":"2026-02-07T11:14:06.766127Z","times_seen":3,"resource_available":true,"data":null}},"time_used":500,"timings":{"blocked":45,"dns":0,"connect":0,"send":0,"wait":455,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-19","alert":"Sinkholed","trigger":"www.serveuk7.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-11-19","alert":"Sinkholed","trigger":"www.serveuk7.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-19","alert":"Sinkholed","trigger":"www.serveuk7.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.serveuk7.com/themes/sslsecureproxy/@img/android-icon-192x192.png","fqdn":"www.serveuk7.com","domain":"serveuk7.com","tld":"com"},"ip":{"addr":"172.67.150.201","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.sslsecureproxy.com/","date":"2025-11-19T22:25:04.625Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"serveuk7.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 12 Oct 2025 14:06:22 GMT","end":"Sat, 10 Jan 2026 15:03:56 GMT"},"fingerprint":{"sha1":"E4:49:1E:88:99:5C:2F:19:59:DE:89:9D:42:51:1C:2F:1C:A8:B1:EC","sha256":"30:F9:55:49:E7:12:42:F1:1A:74:15:36:2D:F7:5E:5C:BC:24:05:4F:07:66:97:CC:BE:35:00:40:52:8C:9F:0C"}}},"request":{"raw":"GET /themes/sslsecureproxy/@img/android-icon-192x192.png HTTP/1.1\r\nHost: www.serveuk7.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.sslsecureproxy.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 19 Nov 2025 22:25:04 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nlast-modified: Sun, 02 Feb 2025 01:15:19 GMT\r\netag: \"3d65-62d1e825890a6\"\r\naccept-ranges: bytes\r\npriority: u=6,i=?0\r\ncontent-length: 15717\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/png\r\ncache-control: max-age=2678400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=N69sIzzc67DLCgcyR7mZMp8G0FUChyWsqICfhlEQ4Kfjg%2BJw5RhcN6tuPZInm4u8QLD5%2BTUr98QXNGcXIrS5tw9rRiRCBPckRzkhrHX7\"}]}\r\nvary: accept-encoding\r\ncf-ray: 9a131f13e828b51b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":15717,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced","md5":"3db0321b19271dfda88a89d8ebb91fbc","sha1":"607c830f857d11e8e0e568c313b43c7a1dd82ed8","sha256":"825069f086aba5693eb0520145ed5b36297b8dd936c2d96d3921adee2cb4a693","sha512":"4be9852f92a0fea53cd7c57203ea4312197a893b0ed253314c8b89785bcb6fccb35c7361aeef7691d68fadc34bc7f560d76444e8580b160d580fc8ce37ee2320","ssdeep":"384:UPQNxZvYujdwxfW6/8OuUZ5rH5uhSKjNX4:UPQvZvLufWVOui5rHkkKR4","tlshash":"0962c16433a53bd56a744f26e0329a3730e5c81f6de4618133161ba8bacb787d73d07a","first_seen":"2025-11-19T22:25:33.538486Z","last_seen":"2026-02-07T11:14:06.777349Z","times_seen":3,"resource_available":false,"data":null}},"time_used":361,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":360,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-11-19","alert":"Sinkholed","trigger":"www.serveuk7.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-19","alert":"Sinkholed","trigger":"www.serveuk7.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-19","alert":"Sinkholed","trigger":"www.serveuk7.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.serveuk7.com/themes/sslsecureproxy/@img/favicon-16x16.png","fqdn":"www.serveuk7.com","domain":"serveuk7.com","tld":"com"},"ip":{"addr":"172.67.150.201","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.sslsecureproxy.com/","date":"2025-11-19T22:25:04.626Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"serveuk7.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 12 Oct 2025 14:06:22 GMT","end":"Sat, 10 Jan 2026 15:03:56 GMT"},"fingerprint":{"sha1":"E4:49:1E:88:99:5C:2F:19:59:DE:89:9D:42:51:1C:2F:1C:A8:B1:EC","sha256":"30:F9:55:49:E7:12:42:F1:1A:74:15:36:2D:F7:5E:5C:BC:24:05:4F:07:66:97:CC:BE:35:00:40:52:8C:9F:0C"}}},"request":{"raw":"GET /themes/sslsecureproxy/@img/favicon-16x16.png HTTP/1.1\r\nHost: www.serveuk7.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.sslsecureproxy.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 19 Nov 2025 22:25:05 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nlast-modified: Sun, 02 Feb 2025 01:15:19 GMT\r\netag: \"217-62d1e8258948e\"\r\naccept-ranges: bytes\r\npriority: u=6,i=?0\r\ncontent-length: 535\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/png\r\ncache-control: max-age=2678400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BgfNbTu2I7Ydfo46i5ANZ4zEwuIiCIAaGnU%2Fdbk7sgo9CP73%2Bi5X%2By781YXH4twyHD1lJK5ckqAvftd4y%2BOOUiLAYZdPNdIRvC9MRL2Q\"}]}\r\nvary: accept-encoding\r\ncf-ray: 9a131f13e829b51b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":535,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced","md5":"4a43e9952d342899b21406f3b635e742","sha1":"95e150dbd464799551ace9b4223ac942eb9c6ffd","sha256":"34458ef203fadfc841f5384aa99baaadaf5a52e2ba35de0cec10d0e8f5b3ddc1","sha512":"69905c68dddbca1d835660db7533f9226619b227cb4c61db2d752703bbf05627f1735f10c41bd34cc1bd14cd4c1e8bcd169a613198686443a6df3f64bfae52b0","ssdeep":"","tlshash":"7ef020e397940078e01600a009ae0849e8162eaf92a1570a362861f684fab1c23d5023","first_seen":"2025-11-19T22:25:33.540654Z","last_seen":"2026-02-07T11:14:06.806261Z","times_seen":3,"resource_available":false,"data":null}},"time_used":425,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":425,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-19","alert":"Sinkholed","trigger":"www.serveuk7.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-11-19","alert":"Sinkholed","trigger":"www.serveuk7.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-19","alert":"Sinkholed","trigger":"www.serveuk7.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.serveuk7.com/themes/sslsecureproxy/css/style.css","fqdn":"www.serveuk7.com","domain":"serveuk7.com","tld":"com"},"ip":{"addr":"172.67.150.201","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.sslsecureproxy.com/","date":"2025-11-19T22:25:03.574Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"serveuk7.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 12 Oct 2025 14:06:22 GMT","end":"Sat, 10 Jan 2026 15:03:56 GMT"},"fingerprint":{"sha1":"E4:49:1E:88:99:5C:2F:19:59:DE:89:9D:42:51:1C:2F:1C:A8:B1:EC","sha256":"30:F9:55:49:E7:12:42:F1:1A:74:15:36:2D:F7:5E:5C:BC:24:05:4F:07:66:97:CC:BE:35:00:40:52:8C:9F:0C"}}},"request":{"raw":"GET /themes/sslsecureproxy/css/style.css HTTP/1.1\r\nHost: www.serveuk7.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.sslsecureproxy.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 19 Nov 2025 22:25:03 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nlast-modified: Sun, 02 Feb 2025 01:15:19 GMT\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8dtTJAkOv4aHEOy5zgrwY9mu267GjNDpmpc3n9cxQfkcX%2FqcLmEaI2oJW%2F78jWrWF8pkOeezsEtIe5d9Hq%2BaMhEXQorr5icJCDMKV9M2\"}]}\r\naccess-control-allow-origin: *\r\nage: 221\r\ncache-control: max-age=2678400\r\ncf-cache-status: HIT\r\netag: W/\"8bf2-62d1e8258a046\"\r\ncontent-encoding: br\r\ncf-ray: 9a131f0dcf87b512-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":35826,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"ad69a86193dc2e35af66c3998eb8f6b3","sha1":"f6e88696507c4977dba8aeb6c795627c2b262d31","sha256":"7c20f76227f09892192daecfacecbcd9c33c39c6f1b01e156784c93574380a03","sha512":"f8e9c8961a452e1c9187a6c9768cb9f2684bd0b9e7b7965ba2be5d6a5a5bd369d529af32750dbb27f1671550b84882f82da37d9d1882ed70052ec7fe7f031d22","ssdeep":"768:vUfqMIc1NZbSCXyf5qf7SBDX38LmTzkefsKxMeEzc55BJVvo:vUSMIc1NZbSCXyf5qf7SBDX38LUzkefa","tlshash":"26f2716ba6090849f217e1acff247b80538e5d07a90c2e76f5ab706c87c43e685e374d","first_seen":"2025-11-19T22:25:33.542827Z","last_seen":"2026-02-07T11:14:06.779711Z","times_seen":3,"resource_available":false,"data":null}},"time_used":170,"timings":{"blocked":74,"dns":20,"connect":1,"send":0,"wait":9,"receive":0,"ssl":58},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-11-19","alert":"Sinkholed","trigger":"www.serveuk7.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-19","alert":"Sinkholed","trigger":"www.serveuk7.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-19","alert":"Sinkholed","trigger":"www.serveuk7.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/lato/v25/S6u8w4BMUTPHjxsAXC-q.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"216.58.207.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.sslsecureproxy.com/","date":"2025-11-19T22:25:04.169Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 27 Oct 2025 08:34:57 GMT","end":"Mon, 19 Jan 2026 08:34:56 GMT"},"fingerprint":{"sha1":"A9:72:6E:D8:AB:26:CE:26:35:A4:39:55:24:08:04:0F:24:56:E8:8C","sha256":"65:84:7B:FE:24:02:CE:3E:DB:6E:1C:6B:B8:FC:99:F5:A5:65:83:F1:66:75:ED:20:20:63:06:ED:27:8A:82:FE"}}},"request":{"raw":"GET /s/lato/v25/S6u8w4BMUTPHjxsAXC-q.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://www.sslsecureproxy.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 24408\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 13 Nov 2025 01:43:45 GMT\r\nexpires: Fri, 13 Nov 2026 01:43:45 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 15 Sep 2025 17:09:43 GMT\r\ncontent-type: font/woff2\r\nage: 592879\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":24408,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 24408, version 1.0","md5":"efee2d080d7bebdd2e0aeb2e030813a0","sha1":"f8d38f9f9584e48c2e469877ebd94232265585f1","sha256":"bca1d88ada544d9c80872d4da27133fab6d347361fa26e932b47ec9559088fd0","sha512":"16c55ad46a26e0af340f2b8a89bd98c1ccad5c976b434aafa7d1d8cd5049b40a58c5350fa42029710c9dd8040e7cea05e57979731b941086ca096239169f4f3c","ssdeep":"384:lwfLHrvMt+iWkciwtprblXNenWbFrqBY34OlZDsnNBvlUg0/qxFul2sOgZl06t2b:6bjU6PflXNHFrZJLDsT+gpx59cS6t2b","tlshash":"55b2e06f8ee485008cd9cc61f39bfa6e96d73d9f437d96c2ce8311360e9a199115424f","first_seen":"2023-04-05T13:28:45Z","last_seen":"2026-04-03T18:42:51.688584Z","times_seen":21273,"resource_available":false,"data":null}},"time_used":157,"timings":{"blocked":80,"dns":2,"connect":20,"send":0,"wait":8,"receive":2,"ssl":40},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.serveuk7.com/themes/sslsecureproxy/fonts/fa-brands-400.woff","fqdn":"www.serveuk7.com","domain":"serveuk7.com","tld":"com"},"ip":{"addr":"172.67.150.201","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.sslsecureproxy.com/","date":"2025-11-19T22:25:04.611Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"serveuk7.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 12 Oct 2025 14:06:22 GMT","end":"Sat, 10 Jan 2026 15:03:56 GMT"},"fingerprint":{"sha1":"E4:49:1E:88:99:5C:2F:19:59:DE:89:9D:42:51:1C:2F:1C:A8:B1:EC","sha256":"30:F9:55:49:E7:12:42:F1:1A:74:15:36:2D:F7:5E:5C:BC:24:05:4F:07:66:97:CC:BE:35:00:40:52:8C:9F:0C"}}},"request":{"raw":"GET /themes/sslsecureproxy/fonts/fa-brands-400.woff HTTP/1.1\r\nHost: www.serveuk7.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://www.sslsecureproxy.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.serveuk7.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 19 Nov 2025 22:25:04 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nlast-modified: Sun, 02 Feb 2025 01:15:19 GMT\r\netag: \"f8e0-62d1e8258c756\"\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\ncontent-length: 63712\r\naccess-control-allow-origin: *\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: font/woff\r\nage: 220\r\ncache-control: max-age=2678400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ipLcY9DxOx2Zp5QMjv7iJ8LwylnEJAQzi2YdRO7r6o%2FGRm%2FwCaec0CZqG2XsU%2FYIt8glt4WhZYjmaCW16t4XmUxiSfv7rxVieqfpYAY3\"}]}\r\nvary: accept-encoding\r\ncf-ray: 9a131f13c827b51b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":63712,"size_decoded":0,"mime_type":"font/woff","magic":"Web Open Font Format, TrueType, length 63712, version 1.0","md5":"b5f5ef6112d693b968ad9d1646eea529","sha1":"0d448123e0d4a29ddf96094269eba52ebae972aa","sha256":"0d9317d5559d4091516c1e240689589122ad9b101f030ef7aee8c01a9fc5a78c","sha512":"0919697420bd86c4fab2434f9eafa2cc8cd327d39209faf5b56d651a79942ae27fb625fb30ba208ee42ecddb80cc626e29d2fcd070728f1b1c3a1eac2c0cceeb","ssdeep":"1536:vNqzzE78eIHIWgcwUjEjG98uLNTN6mYi8b4m8Si02ZuopQLv9H:vA0wIXcwUF8uNN6e8npH9H","tlshash":"985302f1af6357cea2348c69a1b4ade93a0531520417747a32bfb90d4f434a6e4f1f80","first_seen":"2025-02-19T01:00:12.428578Z","last_seen":"2026-03-23T14:08:44.00741Z","times_seen":25,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":9,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-11-19","alert":"Sinkholed","trigger":"www.serveuk7.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-19","alert":"Sinkholed","trigger":"www.serveuk7.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-19","alert":"Sinkholed","trigger":"www.serveuk7.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.serveuk7.com/themes/sslsecureproxy/js/bootstrap.min.js","fqdn":"www.serveuk7.com","domain":"serveuk7.com","tld":"com"},"ip":{"addr":"172.67.150.201","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.sslsecureproxy.com/","date":"2025-11-19T22:25:03.586Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"serveuk7.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 12 Oct 2025 14:06:22 GMT","end":"Sat, 10 Jan 2026 15:03:56 GMT"},"fingerprint":{"sha1":"E4:49:1E:88:99:5C:2F:19:59:DE:89:9D:42:51:1C:2F:1C:A8:B1:EC","sha256":"30:F9:55:49:E7:12:42:F1:1A:74:15:36:2D:F7:5E:5C:BC:24:05:4F:07:66:97:CC:BE:35:00:40:52:8C:9F:0C"}}},"request":{"raw":"GET /themes/sslsecureproxy/js/bootstrap.min.js HTTP/1.1\r\nHost: www.serveuk7.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.sslsecureproxy.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 19 Nov 2025 22:25:03 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nlast-modified: Sun, 02 Feb 2025 01:15:19 GMT\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zEkJNxjnY1ulUTFcYbiOmoT0Tu%2BZ%2FwT1z%2BDOnn8F%2BeHxoXJRUZ5df2ieBsxrPyJDVGlA4i5DsFyyQCyYkBEdAIaOP9vasrR0LfO5VM%2FO\"}]}\r\ncache-control: max-age=2678400\r\ncf-cache-status: REVALIDATED\r\netag: W/\"bf30-62d1e8258f636\"\r\ncontent-encoding: br\r\ncf-ray: 9a131f0dbf6ab512-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":48944,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (48664)","md5":"14d449eb8876fa55e1ef3c2cc52b0c17","sha1":"a9545831803b1359cfeed47e3b4d6bae68e40e99","sha256":"e7ed36ceee5450b4243bbc35188afabdfb4280c7c57597001de0ed167299b01b","sha512":"00d9069b9bd29ad0daa0503f341d67549cce28e888e1affd1a2a45b64a4c1bc460d81cfc4751857f991f2f4fb3d2572fd97fca651ba0c2b0255530209b182f22","ssdeep":"768:9VG5R15WbHVKZrycEHSYro34CrSLB6WU/6DqBf4l1B:9VIRuo53XiwWTvl1B","tlshash":"7523c84a7254b4a202dfa476913f450bb73b389aa60bc16cb95994ed1d7cd8c3227f3c","first_seen":"2023-03-07T01:02:44Z","last_seen":"2026-04-03T18:27:40.347315Z","times_seen":103133,"resource_available":true,"data":null}},"time_used":410,"timings":{"blocked":48,"dns":0,"connect":0,"send":0,"wait":362,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-11-19","alert":"Sinkholed","trigger":"www.serveuk7.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-19","alert":"Sinkholed","trigger":"www.serveuk7.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-19","alert":"Sinkholed","trigger":"www.serveuk7.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.serveuk7.com/themes/sslsecureproxy/js/jquery.dlmenu.js","fqdn":"www.serveuk7.com","domain":"serveuk7.com","tld":"com"},"ip":{"addr":"172.67.150.201","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.sslsecureproxy.com/","date":"2025-11-19T22:25:03.588Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"serveuk7.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 12 Oct 2025 14:06:22 GMT","end":"Sat, 10 Jan 2026 15:03:56 GMT"},"fingerprint":{"sha1":"E4:49:1E:88:99:5C:2F:19:59:DE:89:9D:42:51:1C:2F:1C:A8:B1:EC","sha256":"30:F9:55:49:E7:12:42:F1:1A:74:15:36:2D:F7:5E:5C:BC:24:05:4F:07:66:97:CC:BE:35:00:40:52:8C:9F:0C"}}},"request":{"raw":"GET /themes/sslsecureproxy/js/jquery.dlmenu.js HTTP/1.1\r\nHost: www.serveuk7.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.sslsecureproxy.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 19 Nov 2025 22:25:04 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nlast-modified: Sun, 02 Feb 2025 01:15:19 GMT\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=huJf75GIzNj2EBhd9m1Al0vSDyma8MIzcxX15o4PJ8xRH%2BaYoZBh7o3UFF936zmQn7VgW6295ITwd3FoUvR0ouz7wDG7o%2FlwsDPPp0Ck\"}]}\r\ncache-control: max-age=2678400\r\ncf-cache-status: REVALIDATED\r\netag: W/\"1b5a-62d1e8258f636\"\r\ncontent-encoding: br\r\ncf-ray: 9a131f0dbf6db512-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7002,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"631e96de0fc88f972f86c6ae225e6b22","sha1":"9c48e0e93d7aae8dadec47a97e75a36451606609","sha256":"9050447b6bc6fb9234a230d3b7c88d2e1aad7003fb4360f0d60c4794806519b3","sha512":"289267abcb374579e69303f525b243ea5704527ccf8fa1588be0c52249f89722498a6f71f642494ebca28cc597eb4e4b7919a71dbfe307970ec17a6cec4a4ec3","ssdeep":"96:9tn2p7MlA0QZvcG15leGeONSkCn1DFwtus3VEFiT1fZ99kWgIezUTHjmiNyqcSuH:IgfUkYPePOATHE+WS89NxcSu1Z","tlshash":"0be130c4e74d276292bb7330989e208a763e8972b40d1c6e7cba21d9189606d43d3f7c","first_seen":"2023-03-07T12:27:37Z","last_seen":"2026-04-02T04:05:29.658277Z","times_seen":687,"resource_available":true,"data":null}},"time_used":442,"timings":{"blocked":46,"dns":0,"connect":0,"send":0,"wait":396,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-11-19","alert":"Sinkholed","trigger":"www.serveuk7.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-19","alert":"Sinkholed","trigger":"www.serveuk7.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-19","alert":"Sinkholed","trigger":"www.serveuk7.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-6595789CR3\u0026cx=c\u0026gtm=4e5bi1","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.136","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.sslsecureproxy.com/","date":"2025-11-19T22:25:04.081Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 27 Oct 2025 08:33:43 GMT","end":"Mon, 19 Jan 2026 08:33:42 GMT"},"fingerprint":{"sha1":"4E:9E:D1:61:E4:7D:C2:8A:B6:AD:D2:31:C7:07:01:E4:DB:A0:A7:A9","sha256":"C5:DD:D4:CA:97:B7:B5:8C:B4:99:E8:56:30:AC:1B:F0:FD:7C:5A:FD:19:ED:13:D0:27:D6:0B:76:C7:C7:A0:66"}}},"request":{"raw":"GET /gtag/js?id=G-6595789CR3\u0026cx=c\u0026gtm=4e5bi1 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.sslsecureproxy.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Wed, 19 Nov 2025 22:25:04 GMT\r\nexpires: Wed, 19 Nov 2025 22:25:04 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 131710\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":380272,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (6031)","md5":"6f5b3a9af029d6790123a7341871a5d7","sha1":"6dbc423b918b67a2e69f4e27a515e045553d3198","sha256":"071534f5a5d8d2156ca617c94324f8db8d30975ac92bfd14614bd39588a7f217","sha512":"883a617806d820a0a32fd4b05897648fe85932e7c66f5a6727bd14fddfd42944e8c441adef8b14f644534410169c5dd8a17abcb7ed8aec3563647bd5e3755c12","ssdeep":"6144:zMBUKitJeUI2XVUULUVWo6O7GQEO7o1URoOr+i9:cDi2UnVUUtO7r","tlshash":"c68419ce73d670665392b478503f018ba57b68a2f44cc895f18acde52e70a9a4277f3c","first_seen":"2025-11-19T22:25:33.553945Z","last_seen":"2025-11-19T22:25:33.553945Z","times_seen":1,"resource_available":true,"data":null}},"time_used":57,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":32,"receive":25,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.serveuk7.com/themes/sslsecureproxy/fonts/Flaticon.html","fqdn":"www.serveuk7.com","domain":"serveuk7.com","tld":"com"},"ip":{"addr":"172.67.150.201","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.sslsecureproxy.com/","date":"2025-11-19T22:25:04.161Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"serveuk7.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 12 Oct 2025 14:06:22 GMT","end":"Sat, 10 Jan 2026 15:03:56 GMT"},"fingerprint":{"sha1":"E4:49:1E:88:99:5C:2F:19:59:DE:89:9D:42:51:1C:2F:1C:A8:B1:EC","sha256":"30:F9:55:49:E7:12:42:F1:1A:74:15:36:2D:F7:5E:5C:BC:24:05:4F:07:66:97:CC:BE:35:00:40:52:8C:9F:0C"}}},"request":{"raw":"GET /themes/sslsecureproxy/fonts/Flaticon.html HTTP/1.1\r\nHost: www.serveuk7.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://www.sslsecureproxy.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.serveuk7.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 19 Nov 2025 22:25:04 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nlast-modified: Sun, 02 Feb 2025 01:15:19 GMT\r\netag: \"130a-62d1e8258b7b6\"\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\ncontent-length: 4874\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: text/html; charset=UTF-8\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=B3RBVHDYyTS6pfqVO%2FlvLTrQj4CkCleXeUPhBUCnrNIDC7XIXe8lArJyFimHpXhuDK1WznrKcdG3chBZEwvBI%2FLqzIlJtmct4lU8yV6V\"}]}\r\ncf-ray: 9a131f110813b51b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4874,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"Web Open Font Format (Version 2), TrueType, length 4803, version -15713.1","md5":"628fdb7bff1b0a2d81dbccbdcae5584f","sha1":"60a966d7ea0e615f67a78a40bd3fccf06af062bc","sha256":"86ea2a2d24f31f8a7cf33b98cc70b8e2a41b93619fddc95969f00f256f4ad24e","sha512":"651cdf8fe6172587e4789f538046f08632713996c2d356e5199b84b934587b324f00d131fcfd27a3bdf605f800f16b0fa0d7db6c1ee7c0677e8829c96e1376e3","ssdeep":"192:hcMNvlb3IT8gAniEUOKOJusoo3k0rPlKD813Qv1be:iMll7ITNAniEmce+PwwQvo","tlshash":"f2e17d0120a47394d28db0b1d24b26cb9661aeec55fdbdd5ea10f2eb83c553b861e611","first_seen":"2025-11-19T22:25:33.557196Z","last_seen":"2026-02-07T11:14:06.783984Z","times_seen":3,"resource_available":false,"data":null}},"time_used":387,"timings":{"blocked":3,"dns":0,"connect":0,"send":0,"wait":384,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-11-19","alert":"Sinkholed","trigger":"www.serveuk7.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-19","alert":"Sinkholed","trigger":"www.serveuk7.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-19","alert":"Sinkholed","trigger":"www.serveuk7.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.serveuk7.com/themes/sslsecureproxy/fonts/Flaticon.woff","fqdn":"www.serveuk7.com","domain":"serveuk7.com","tld":"com"},"ip":{"addr":"172.67.150.201","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.sslsecureproxy.com/","date":"2025-11-19T22:25:04.555Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"serveuk7.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 12 Oct 2025 14:06:22 GMT","end":"Sat, 10 Jan 2026 15:03:56 GMT"},"fingerprint":{"sha1":"E4:49:1E:88:99:5C:2F:19:59:DE:89:9D:42:51:1C:2F:1C:A8:B1:EC","sha256":"30:F9:55:49:E7:12:42:F1:1A:74:15:36:2D:F7:5E:5C:BC:24:05:4F:07:66:97:CC:BE:35:00:40:52:8C:9F:0C"}}},"request":{"raw":"GET /themes/sslsecureproxy/fonts/Flaticon.woff HTTP/1.1\r\nHost: www.serveuk7.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://www.sslsecureproxy.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.serveuk7.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 19 Nov 2025 22:25:04 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nlast-modified: Sun, 02 Feb 2025 01:15:19 GMT\r\netag: \"15ac-62d1e8258b7b6\"\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\ncontent-length: 5548\r\naccess-control-allow-origin: *\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: font/woff\r\nage: 219\r\ncache-control: max-age=2678400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=I3BbblfbWFPkPTxH5SI9PnWhBIhcyUhLptWUJdT3p%2BoUFo0%2FaJyXGqG11iWhUKo0Eh%2FyrDDqkfPbQjaIMbuMShpVQo9xvkn%2BbGN8onDJ\"}]}\r\nvary: accept-encoding\r\ncf-ray: 9a131f137821b51b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5548,"size_decoded":0,"mime_type":"font/woff","magic":"Web Open Font Format, TrueType, length 5548, version 0.0","md5":"e7807cc2d1e1878b758145bf5b683dbe","sha1":"d87959cb1c30fecd79f203f58d65bb1fc27adaeb","sha256":"9e05eb7e45d735e4b309d937aef12c6d482fc2e7734a40f7efe4cf064a1c844d","sha512":"c50ea42e94a747de6a5caf1d065ef259a16be733547c9e0be86f3c623ff5c357f28ee44f4923e64be250f926883fb8273552bad461ae9ded516ecef168bf4600","ssdeep":"96:mj3LUoO7f4ipHqwTnpYX3FqQe52WWe9V5M5T2D2gyCR8kds5sUNPEqMd901PFc9Q:ibUouf4ipHD0ne52F8HMFm5yks5sUNTb","tlshash":"dbb18db471772a18f997437a2e9ae3cc83d4f18756920dfe9b34e2774d349b81920c52","first_seen":"2025-11-19T22:25:33.560202Z","last_seen":"2026-02-07T11:14:06.804852Z","times_seen":3,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":9,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-11-19","alert":"Sinkholed","trigger":"www.serveuk7.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-19","alert":"Sinkholed","trigger":"www.serveuk7.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-19","alert":"Sinkholed","trigger":"www.serveuk7.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.serveuk7.com/themes/sslsecureproxy/css/flaticon.css","fqdn":"www.serveuk7.com","domain":"serveuk7.com","tld":"com"},"ip":{"addr":"172.67.150.201","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.sslsecureproxy.com/","date":"2025-11-19T22:25:03.825Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"serveuk7.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 12 Oct 2025 14:06:22 GMT","end":"Sat, 10 Jan 2026 15:03:56 GMT"},"fingerprint":{"sha1":"E4:49:1E:88:99:5C:2F:19:59:DE:89:9D:42:51:1C:2F:1C:A8:B1:EC","sha256":"30:F9:55:49:E7:12:42:F1:1A:74:15:36:2D:F7:5E:5C:BC:24:05:4F:07:66:97:CC:BE:35:00:40:52:8C:9F:0C"}}},"request":{"raw":"GET /themes/sslsecureproxy/css/flaticon.css HTTP/1.1\r\nHost: www.serveuk7.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.serveuk7.com/themes/sslsecureproxy/css/style.css\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 19 Nov 2025 22:25:03 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nlast-modified: Sun, 02 Feb 2025 01:15:19 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5v%2Brkrb3Ie%2FiVCSon54NQUKI%2B7f5GdeEnQATGNyUGUhiSzC2VMazyv243x%2FD16CxQaHS27%2Bb3sMxsCC9gN58OSc7OHrlb%2BGoF1Yzjiac\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nvary: accept-encoding\r\naccess-control-allow-origin: *\r\ncontent-encoding: br\r\ncontent-type: text/css\r\nage: 221\r\ncache-control: max-age=2678400\r\ncf-cache-status: HIT\r\netag: W/\"56c-62d1e82589c5e\"\r\ncf-ray: 9a131f0edffeb51b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1388,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"e58f3e26f8f787b90b887b74eeb2322f","sha1":"e864c5fd46644beb2d386e95cee04631de564ed6","sha256":"7b8f8faf33e56f2d1e364c99506c88b1ed60bd63341dcc79d36a037a2107bf49","sha512":"5d28ccf7ef97149c0e77c7a15b61a121f38d9e9003ff44e3ce8d4d6a71d831563b18e72d1b06791cfc61d51a9de4829f879e9a5bb262f321313796aa65938155","ssdeep":"","tlshash":"3a21d5a5c12e10419702ae4927ef3350af44702ea8d4ec26f25d5e9deff5d38878579c","first_seen":"2025-11-19T22:25:33.562116Z","last_seen":"2026-02-07T11:14:06.792782Z","times_seen":3,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-11-19","alert":"Sinkholed","trigger":"www.serveuk7.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-19","alert":"Sinkholed","trigger":"www.serveuk7.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-19","alert":"Sinkholed","trigger":"www.serveuk7.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Open+Sans:400,400i,600,600i,700,700i,800,800i","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.251.38.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.sslsecureproxy.com/","date":"2025-11-19T22:25:03.911Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 27 Oct 2025 08:34:58 GMT","end":"Mon, 19 Jan 2026 08:34:57 GMT"},"fingerprint":{"sha1":"56:14:7E:EF:FA:D2:CF:DD:3B:30:9C:AE:7A:C9:AD:9E:A7:87:3D:E9","sha256":"72:DD:0F:82:4D:8A:09:2D:BB:5B:E6:1B:6F:09:F8:1E:BD:BD:D3:3E:B8:A4:8C:B9:49:13:4D:DC:D7:EF:EA:77"}}},"request":{"raw":"GET /css?family=Open+Sans:400,400i,600,600i,700,700i,800,800i HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.serveuk7.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Wed, 19 Nov 2025 22:25:03 GMT\r\ndate: Wed, 19 Nov 2025 22:25:03 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":46468,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (1572)","md5":"fc4d1e8341532e72b100662c8d5cd00b","sha1":"9fb1cdb5aa0fbacb008b309cad0c3f15cb77aee3","sha256":"9d0d749d352bfe34562d871e060ad504c4c2e3f26fac903b7c64751eacab220e","sha512":"06a816f0e8acea46f483fdcdb92063c14a95397cbcf94b6df0fc1947de44d364b21f47021e7df34468ca1b4058128d0cc0d8cb36d1b12c21dfe4ac82da175494","ssdeep":"384:+bOjI8t7KvGqY49xn+vROFuGttcvoqY497nMZ6OiFLty5v7qY49Un1AnOPEgtHmN:kiCAgkgHL8OOnL3JbcI/z","tlshash":"57231c910417244066432dd233de3e30ee0fa2607044d076abfd9bdbeedad6a62b535d","first_seen":"2025-09-18T17:37:33.475534Z","last_seen":"2026-04-01T17:53:27.918079Z","times_seen":3545,"resource_available":false,"data":null}},"time_used":162,"timings":{"blocked":70,"dns":0,"connect":7,"send":0,"wait":20,"receive":0,"ssl":60},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.serveuk7.com/themes/sslsecureproxy/css/responsive.css","fqdn":"www.serveuk7.com","domain":"serveuk7.com","tld":"com"},"ip":{"addr":"172.67.150.201","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.sslsecureproxy.com/","date":"2025-11-19T22:25:03.577Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"serveuk7.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 12 Oct 2025 14:06:22 GMT","end":"Sat, 10 Jan 2026 15:03:56 GMT"},"fingerprint":{"sha1":"E4:49:1E:88:99:5C:2F:19:59:DE:89:9D:42:51:1C:2F:1C:A8:B1:EC","sha256":"30:F9:55:49:E7:12:42:F1:1A:74:15:36:2D:F7:5E:5C:BC:24:05:4F:07:66:97:CC:BE:35:00:40:52:8C:9F:0C"}}},"request":{"raw":"GET /themes/sslsecureproxy/css/responsive.css HTTP/1.1\r\nHost: www.serveuk7.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.sslsecureproxy.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 19 Nov 2025 22:25:03 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nlast-modified: Sun, 02 Feb 2025 01:15:19 GMT\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZTzS2iuizX9eQrBUju%2Ffg3iEFXoE6zN3rvnehHIwMNOCSMYNDgoOKcB8P58qTwdNQlHaFjTbj0ZNa6UWncSSBgz2%2F0plfkzW32UxJ%2Fmb\"}]}\r\naccess-control-allow-origin: *\r\nage: 221\r\ncache-control: max-age=2678400\r\ncf-cache-status: HIT\r\netag: W/\"e8c-62d1e8258a046\"\r\ncontent-encoding: br\r\ncf-ray: 9a131f0dcf98b512-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3724,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"a6fdbabef3b708e0ed62d239e025bb7b","sha1":"c01bc750808e2cda5edcfa62c6e72036e4b0367a","sha256":"639529cd2e6357e743576a02ee1967dac0027eb150b56c9060ffa15fd7b3dd1c","sha512":"d4be0dcc8d568313c9b051a6658feb4148fbe1152fb6ffc9fec6c0be12cdb42f2587fe9d2b6847cd36f168d64585b12d9661b0b490fde39d3bf749b353cd3927","ssdeep":"","tlshash":"dc71e042d946100fe146b17bfb73135d33655f17a7066ee280b02439eb8b39d31e6ba5","first_seen":"2025-11-19T22:25:33.564916Z","last_seen":"2026-02-07T11:14:06.78833Z","times_seen":3,"resource_available":false,"data":null}},"time_used":174,"timings":{"blocked":75,"dns":19,"connect":3,"send":0,"wait":9,"receive":0,"ssl":55},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-11-19","alert":"Sinkholed","trigger":"www.serveuk7.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-19","alert":"Sinkholed","trigger":"www.serveuk7.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-19","alert":"Sinkholed","trigger":"www.serveuk7.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.serveuk7.com/themes/sslsecureproxy/js/owl.carousel.js","fqdn":"www.serveuk7.com","domain":"serveuk7.com","tld":"com"},"ip":{"addr":"172.67.150.201","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.sslsecureproxy.com/","date":"2025-11-19T22:25:03.590Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"serveuk7.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 12 Oct 2025 14:06:22 GMT","end":"Sat, 10 Jan 2026 15:03:56 GMT"},"fingerprint":{"sha1":"E4:49:1E:88:99:5C:2F:19:59:DE:89:9D:42:51:1C:2F:1C:A8:B1:EC","sha256":"30:F9:55:49:E7:12:42:F1:1A:74:15:36:2D:F7:5E:5C:BC:24:05:4F:07:66:97:CC:BE:35:00:40:52:8C:9F:0C"}}},"request":{"raw":"GET /themes/sslsecureproxy/js/owl.carousel.js HTTP/1.1\r\nHost: www.serveuk7.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.sslsecureproxy.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 19 Nov 2025 22:25:04 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nlast-modified: Sun, 02 Feb 2025 01:15:19 GMT\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pGy6NVH5%2B5e4OJh3a9thbNbXy%2F9e1%2BblXw9L1A%2BO52vZCpJ5ykylqTtqwksx4qVzgI6T0ty4r4lbvSkgWSIP4XYC6Hg2FJp3PMSo0o8k\"}]}\r\ncache-control: max-age=2678400\r\ncf-cache-status: REVALIDATED\r\netag: W/\"13530-62d1e8258fa1e\"\r\ncontent-encoding: br\r\ncf-ray: 9a131f0dbf6fb512-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":79152,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"a7f535ea24c4c9cf5f01ac9322634f58","sha1":"7b1383e0e4312c46280ddf91931e32f6e9f8de1c","sha256":"b0f20d9d73e83de106d02ab1f37b13aefaac746104a9c03eb604907c23bd435e","sha512":"8c80965bfc46f1d255d857b3c5028f3cefb393379ef2449eb7e531584d6adbb20c24068f9602519b9d71b2ced2740e82ecf6ff8de31c99b61e0f068349577119","ssdeep":"1536:WELorUUOZZ/Afrx0APP+5FkrhKt1+Ky46c+J0BDZg:WrOZZg0+PcFX+Z3clZg","tlshash":"817383c1f36c221b422a31b85e9e63cd723d416ae5115c6fbca9a9d838d146c437efb4","first_seen":"2023-03-07T01:18:13Z","last_seen":"2026-04-02T06:43:44.051635Z","times_seen":1024,"resource_available":true,"data":null}},"time_used":497,"timings":{"blocked":45,"dns":0,"connect":0,"send":0,"wait":452,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-11-19","alert":"Sinkholed","trigger":"www.serveuk7.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-19","alert":"Sinkholed","trigger":"www.serveuk7.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-19","alert":"Sinkholed","trigger":"www.serveuk7.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.serveuk7.com/themes/sslsecureproxy/js/waypoints-min.js","fqdn":"www.serveuk7.com","domain":"serveuk7.com","tld":"com"},"ip":{"addr":"172.67.150.201","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.sslsecureproxy.com/","date":"2025-11-19T22:25:03.591Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"serveuk7.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 12 Oct 2025 14:06:22 GMT","end":"Sat, 10 Jan 2026 15:03:56 GMT"},"fingerprint":{"sha1":"E4:49:1E:88:99:5C:2F:19:59:DE:89:9D:42:51:1C:2F:1C:A8:B1:EC","sha256":"30:F9:55:49:E7:12:42:F1:1A:74:15:36:2D:F7:5E:5C:BC:24:05:4F:07:66:97:CC:BE:35:00:40:52:8C:9F:0C"}}},"request":{"raw":"GET /themes/sslsecureproxy/js/waypoints-min.js HTTP/1.1\r\nHost: www.serveuk7.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.sslsecureproxy.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 19 Nov 2025 22:25:04 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nlast-modified: Sun, 02 Feb 2025 01:15:19 GMT\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VBJSdoQXWXs4VgPkcmwYRSPN%2By7rzKnyO%2BwvZrmeEYl9us4J0lsKrpRUJ%2BxJcrzNm15Im%2FiHIqUSAvJiCEq4L8GJHxwJpU8Jf60C6SQJ\"}]}\r\ncache-control: max-age=2678400\r\ncf-cache-status: REVALIDATED\r\netag: W/\"2490-62d1e8258fa1e\"\r\ncontent-encoding: br\r\ncf-ray: 9a131f0dbf70b512-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9360,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (9360), with no line terminators","md5":"7a6ee4f476dcd0f1b6d33be6f1cdcb12","sha1":"abe7597be68454c71534784997e27a9788c0ff0c","sha256":"fa02853c839ec44854a5abe53027ee7e7f4e63e0a51118dd4d3453e27f3f962c","sha512":"b65ad96c5f6ca2500cc293adc33ea074f1c8095563c2f019f8f44c681703faf2dcc866edb3d5dd1b39f1bc68ad0eb525d87fb4e0c41935c628ab21586ada2f28","ssdeep":"192:MjUfqSLPRWCkOeSDVrORoH+1DUJDJ5CDZ7MhjU7:UUfqtPnBX1ufCDYU7","tlshash":"a71232d9b5c3b4572baba079d53f520ab33b7d9820088464f0d494c53eb4a3db263b38","first_seen":"2023-03-07T14:54:19Z","last_seen":"2026-04-02T22:33:26.644011Z","times_seen":116,"resource_available":true,"data":null}},"time_used":509,"timings":{"blocked":44,"dns":0,"connect":0,"send":0,"wait":465,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-11-19","alert":"Sinkholed","trigger":"www.serveuk7.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-19","alert":"Sinkholed","trigger":"www.serveuk7.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-19","alert":"Sinkholed","trigger":"www.serveuk7.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.serveuk7.com/themes/sslsecureproxy/css/typography.css","fqdn":"www.serveuk7.com","domain":"serveuk7.com","tld":"com"},"ip":{"addr":"172.67.150.201","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.sslsecureproxy.com/","date":"2025-11-19T22:25:03.822Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"serveuk7.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 12 Oct 2025 14:06:22 GMT","end":"Sat, 10 Jan 2026 15:03:56 GMT"},"fingerprint":{"sha1":"E4:49:1E:88:99:5C:2F:19:59:DE:89:9D:42:51:1C:2F:1C:A8:B1:EC","sha256":"30:F9:55:49:E7:12:42:F1:1A:74:15:36:2D:F7:5E:5C:BC:24:05:4F:07:66:97:CC:BE:35:00:40:52:8C:9F:0C"}}},"request":{"raw":"GET /themes/sslsecureproxy/css/typography.css HTTP/1.1\r\nHost: www.serveuk7.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.serveuk7.com/themes/sslsecureproxy/css/style.css\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 19 Nov 2025 22:25:03 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nlast-modified: Sun, 02 Feb 2025 01:15:19 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rG9SVv4VkOOfRGCZJUE8h7Wlx1HknaZ%2BCZRHuEBkpZX8TE9v2udtO3D45JnBHNbwfQAiRlRinxhkpqqxQxNezZRCpzehLaACgYBZw143\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nvary: accept-encoding\r\naccess-control-allow-origin: *\r\ncontent-encoding: br\r\ncontent-type: text/css\r\nage: 221\r\ncache-control: max-age=2678400\r\ncf-cache-status: HIT\r\netag: W/\"a48-62d1e8258a046\"\r\ncf-ray: 9a131f0edffcb51b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2632,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (335)","md5":"6ab448ea1802f8f1b630c63cbd06323c","sha1":"67b8173677ee741194e2e09a10be9fb98b64f1c5","sha256":"9e3f58f2b4891ddbabca2851f90f5f01e5668dd9c145ad4b401bb6af71be4105","sha512":"cebc625596df6081350f97f9ff2385d1d8de5a79d792f18fb618a285b4370755cb828e6550592642f5da86e57dec803689dc8f8743260290732fe22578eaceca","ssdeep":"","tlshash":"d251ee5743eb1241611248e8335bff50272d82a2480fbeb96b8148b4df59944a630fdf","first_seen":"2025-11-19T22:25:33.571746Z","last_seen":"2026-02-07T11:14:06.77533Z","times_seen":3,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-11-19","alert":"Sinkholed","trigger":"www.serveuk7.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-19","alert":"Sinkholed","trigger":"www.serveuk7.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-19","alert":"Sinkholed","trigger":"www.serveuk7.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.serveuk7.com/themes/sslsecureproxy/fonts/fa-solid-900.html","fqdn":"www.serveuk7.com","domain":"serveuk7.com","tld":"com"},"ip":{"addr":"172.67.150.201","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.sslsecureproxy.com/","date":"2025-11-19T22:25:04.152Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"serveuk7.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 12 Oct 2025 14:06:22 GMT","end":"Sat, 10 Jan 2026 15:03:56 GMT"},"fingerprint":{"sha1":"E4:49:1E:88:99:5C:2F:19:59:DE:89:9D:42:51:1C:2F:1C:A8:B1:EC","sha256":"30:F9:55:49:E7:12:42:F1:1A:74:15:36:2D:F7:5E:5C:BC:24:05:4F:07:66:97:CC:BE:35:00:40:52:8C:9F:0C"}}},"request":{"raw":"GET /themes/sslsecureproxy/fonts/fa-solid-900.html HTTP/1.1\r\nHost: www.serveuk7.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://www.sslsecureproxy.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.serveuk7.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 19 Nov 2025 22:25:04 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nlast-modified: Sun, 02 Feb 2025 01:15:19 GMT\r\netag: \"9826-62d1e8258cf26\"\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\ncontent-length: 38950\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: text/html; charset=UTF-8\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KerobYXa03f3TvNWUTf0xOXvkfWpANiO9Trc0ckSmMmOXz6JIHE9DBecz8iv5pRBhrzium0oY58wplbXDup5wtj3%2FnfRg%2BQ%2B837MSY%2F7\"}]}\r\ncf-ray: 9a131f110812b51b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7820,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"Web Open Font Format (Version 2), TrueType, length 49815, version 194.-26833","md5":"76906414bb0fd5e5d85b4500487918fc","sha1":"fcb2ab7502c104864900b964963980af86ca0a4c","sha256":"851b3ab1f1dc6f95a67ebcb220db90eb3ad740bbdc44f820502b999cc46e84e0","sha512":"6ffa96148247f7fac1b1ad9c5eec21c91d378e3cafb8f650f24fcb55dd994417f2897ea1948b57e0f4df3e198774b5e4c7dfb42c44a065ef88f4e5fff0ef213b","ssdeep":"192:ZJNZuJ2csJVOgC7XBikq0Qa0Mlre/PshscCFG8pc9GRyLwKAlScCELYMOQtWi6vh:HqJ2csJV47XIkqXelrdGFG8pirWvTtW9","tlshash":"2932b0077010e3306a3618b6f1995df873046b45af8c7e10d9a8aa112e6e3257b6dcde","first_seen":"2025-11-19T22:25:33.572905Z","last_seen":"2026-02-07T11:14:06.803619Z","times_seen":3,"resource_available":false,"data":null}},"time_used":357,"timings":{"blocked":11,"dns":0,"connect":0,"send":0,"wait":342,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-11-19","alert":"Sinkholed","trigger":"www.serveuk7.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-19","alert":"Sinkholed","trigger":"www.serveuk7.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-19","alert":"Sinkholed","trigger":"www.serveuk7.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.sslsecureproxy.com/","fqdn":"www.sslsecureproxy.com","domain":"sslsecureproxy.com","tld":"com"},"ip":{"addr":"198.251.90.20","port":443,"asn":53667,"as":"PONYNET","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-11-19T22:25:02.919Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.4everproxy.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Oct 2025 06:22:08 GMT","end":"Sun, 25 Jan 2026 06:22:07 GMT"},"fingerprint":{"sha1":"17:30:83:6B:9E:3C:4D:29:15:FA:2B:24:24:3F:1D:BB:2F:9F:D8:9F","sha256":"62:ED:78:56:81:7C:1C:90:CD:AC:15:A9:BC:C2:F7:AE:64:AA:76:9D:4E:64:66:57:97:9C:96:B4:AA:1B:0B:4E"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: www.sslsecureproxy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 19 Nov 2025 22:25:03 GMT\r\nServer: Apache\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains; preload\r\nX-Powered-By: PHP/7.2.24\r\nSet-Cookie: 4everproxy=8drd7eif001ooub7oms4ikbu8o; path=/; domain=sslsecureproxy.com\r\nExpires: Thu, 19 Nov 1981 08:52:00 GMT\r\nPragma: no-cache\r\nCache-Control: no-store, no-cache, must-revalidate, no-cache\r\nContent-Encoding: gzip\r\nVary: Accept-Encoding\r\nConnection: keep-alive, Keep-Alive\r\nContent-Length: 6052\r\nKeep-Alive: timeout=1, max=100\r\nContent-Type: text/html; charset=UTF-8\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Modernizr","description":"Modernizr is a JavaScript library that detects the features available in a user's browser.","website":"https://modernizr.com","common_platform_enumeration":"","icon":"Modernizr.svg","categories":["JavaScript libraries"]},{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"OWL Carousel","description":"OWL Carousel is an enabled jQuery plugin that lets you create responsive carousel sliders.","website":"https://owlcarousel2.github.io/OwlCarousel2/","common_platform_enumeration":"","icon":"OWL Carousel.png","categories":["JavaScript libraries"]},{"name":"Slick","description":"","website":"https://kenwheeler.github.io/slick","common_platform_enumeration":"","icon":"Slick.svg","categories":["JavaScript libraries"]},{"name":"PHP:7.2.24","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Google AdSense","description":"Google AdSense is a program run by Google through which website publishers serve advertisements that are targeted to the site content and audience.","website":"https://www.google.com/adsense/start/","common_platform_enumeration":"","icon":"Google AdSense.svg","categories":["Advertising"]},{"name":"AddThis","description":"AddThis is a social bookmarking service that can be integrated into a website with the use of a web widget.","website":"https://www.addthis.com","common_platform_enumeration":"","icon":"AddThis.svg","categories":["Widgets"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}],"data":{"size":34376,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (34375), with no line terminators","md5":"75dde2beef0bedd3aede058610eeeb4a","sha1":"ebc39c8f0a9487aca04af654314cb192c79462ed","sha256":"875fed30398fe6894838ce265a572b507119f987d2c69fd7ba4aceec81b41f84","sha512":"3c3f6b97ae9e74b4df8f884eb74597366949fc353c3828d6dac10c60d346be8d40d2c045d2c24d1db6acbd958ad05ecc07cb9de1d8471ba3aa45999594debc76","ssdeep":"384:iIXszqM/DsHAIptCOdeO38xJAnezVcHmSK24IMCcKO6:B3/COdDDO6","tlshash":"a1f261227c00c5a142db59de1a32666922b6c30cd95346c8f9f5c3f81bfec6cea37a55","first_seen":"2025-11-19T22:25:33.574077Z","last_seen":"2025-11-24T06:10:59.751588Z","times_seen":2,"resource_available":false,"data":null}},"time_used":548,"timings":{"blocked":155,"dns":82,"connect":32,"send":0,"wait":237,"receive":1,"ssl":39},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-11-19","alert":"Sinkholed","trigger":"www.sslsecureproxy.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.serveuk7.com/themes/sslsecureproxy/css/fontawesome.css","fqdn":"www.serveuk7.com","domain":"serveuk7.com","tld":"com"},"ip":{"addr":"172.67.150.201","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.sslsecureproxy.com/","date":"2025-11-19T22:25:03.817Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"serveuk7.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 12 Oct 2025 14:06:22 GMT","end":"Sat, 10 Jan 2026 15:03:56 GMT"},"fingerprint":{"sha1":"E4:49:1E:88:99:5C:2F:19:59:DE:89:9D:42:51:1C:2F:1C:A8:B1:EC","sha256":"30:F9:55:49:E7:12:42:F1:1A:74:15:36:2D:F7:5E:5C:BC:24:05:4F:07:66:97:CC:BE:35:00:40:52:8C:9F:0C"}}},"request":{"raw":"GET /themes/sslsecureproxy/css/fontawesome.css HTTP/1.1\r\nHost: www.serveuk7.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.serveuk7.com/themes/sslsecureproxy/css/style.css\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 19 Nov 2025 22:25:03 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nlast-modified: Sun, 02 Feb 2025 01:15:19 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Vv9MAgBxJT2jV300oj2aUYXM%2Bq8ba5RM%2BZv2Z41VouDLuldGH5C2TVURgZeiiqSq9maqo88vryKALMoXeRDwgY0bVURGQG798VB9qY8j\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nvary: accept-encoding\r\naccess-control-allow-origin: *\r\ncontent-encoding: br\r\ncontent-type: text/css\r\nage: 221\r\ncache-control: max-age=2678400\r\ncf-cache-status: HIT\r\netag: W/\"90f8-62d1e8258a046\"\r\ncf-ray: 9a131f0ecffab51b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":37112,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (35053)","md5":"387f9f70b31745ef8784a8aebe113721","sha1":"d4289d7f280cd2436f6ca03e42b1e7439ebfdb4c","sha256":"ca067581aff55038f3aece6e5d40403d5e4b06fd6c23c0bbedd9e4455ea4cfd2","sha512":"87acfe5f880fcf0ba54f4721bec93c1633e542121b969c428fa5c7500105342b06ccf14e744b3881f0409a1bf04961400fa64e68c2c9e4a6ce8ccdac38fdbb72","ssdeep":"384:M++rB31vxojTQ6m4TotMam317fKZII9kQCY/BGMI993BXMl3oPGEo/fw:Q31vxoXQ6vWU9KJkdY/kME93KaFo/4","tlshash":"29f22db8e50c01d6a731c44bff82b3ac62bafb3cd5854d95f00e691c2ad16a911c5fb9","first_seen":"2025-11-19T22:25:33.5763Z","last_seen":"2026-02-07T11:14:06.773975Z","times_seen":3,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-19","alert":"Sinkholed","trigger":"www.serveuk7.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-11-19","alert":"Sinkholed","trigger":"www.serveuk7.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-19","alert":"Sinkholed","trigger":"www.serveuk7.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.serveuk7.com/themes/sslsecureproxy/css/color.css","fqdn":"www.serveuk7.com","domain":"serveuk7.com","tld":"com"},"ip":{"addr":"172.67.150.201","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.sslsecureproxy.com/","date":"2025-11-19T22:25:03.575Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"serveuk7.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 12 Oct 2025 14:06:22 GMT","end":"Sat, 10 Jan 2026 15:03:56 GMT"},"fingerprint":{"sha1":"E4:49:1E:88:99:5C:2F:19:59:DE:89:9D:42:51:1C:2F:1C:A8:B1:EC","sha256":"30:F9:55:49:E7:12:42:F1:1A:74:15:36:2D:F7:5E:5C:BC:24:05:4F:07:66:97:CC:BE:35:00:40:52:8C:9F:0C"}}},"request":{"raw":"GET /themes/sslsecureproxy/css/color.css HTTP/1.1\r\nHost: www.serveuk7.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.sslsecureproxy.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 19 Nov 2025 22:25:03 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nlast-modified: Sun, 02 Feb 2025 01:15:19 GMT\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZVb0mJ8DXhSgqLfJp6fHCodn0%2Fdrk8locByfFGwgmYXgJ7S86J2a%2FN16clr3W2SbWkBaIwuqwAmx0EKde78RDbKcxnoFtdrmil60Rmsx\"}]}\r\naccess-control-allow-origin: *\r\nage: 221\r\ncache-control: max-age=2678400\r\ncf-cache-status: HIT\r\netag: W/\"1562-62d1e82589c5e\"\r\ncontent-encoding: br\r\ncf-ray: 9a131f0dbf79b512-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5474,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"7b8aa8766b6a79074bd670df26a7a000","sha1":"cdf68a306204f9b360dd73010ea2fcf2f276beef","sha256":"9d6a5b4fc4a21e9fdd45a11bb796d72da0b3481658bf4624d3f029c91c6813db","sha512":"df813207af8ceb719f5ff6db2fa8f291c3e5c44f35395595579d2bdc0faac60f8b22491e7b357e173af33001daba4176108307c68fd824697d124b053d511098","ssdeep":"48:ulEvAc+/79AwerGxI5XFsF2vKSFleFwFwXQXisTPH/ZXFZRbZRY:u2vZgCGxIxFsF2CoeFwFlvL/ff0","tlshash":"c9b163d422042951f173c72c63ca6a141b7f9e6bfa200c9ef26b457607c239897e7b97","first_seen":"2025-11-19T22:25:33.578035Z","last_seen":"2026-02-07T11:14:06.772361Z","times_seen":3,"resource_available":false,"data":null}},"time_used":157,"timings":{"blocked":67,"dns":18,"connect":3,"send":0,"wait":11,"receive":0,"ssl":44},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-19","alert":"Sinkholed","trigger":"www.serveuk7.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-11-19","alert":"Sinkholed","trigger":"www.serveuk7.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-19","alert":"Sinkholed","trigger":"www.serveuk7.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.serveuk7.com/themes/sslsecureproxy/extra-images/price_plan_bg_01.jpg","fqdn":"www.serveuk7.com","domain":"serveuk7.com","tld":"com"},"ip":{"addr":"172.67.150.201","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.sslsecureproxy.com/","date":"2025-11-19T22:25:04.129Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"serveuk7.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 12 Oct 2025 14:06:22 GMT","end":"Sat, 10 Jan 2026 15:03:56 GMT"},"fingerprint":{"sha1":"E4:49:1E:88:99:5C:2F:19:59:DE:89:9D:42:51:1C:2F:1C:A8:B1:EC","sha256":"30:F9:55:49:E7:12:42:F1:1A:74:15:36:2D:F7:5E:5C:BC:24:05:4F:07:66:97:CC:BE:35:00:40:52:8C:9F:0C"}}},"request":{"raw":"GET /themes/sslsecureproxy/extra-images/price_plan_bg_01.jpg HTTP/1.1\r\nHost: www.serveuk7.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.serveuk7.com/themes/sslsecureproxy/css/style.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 19 Nov 2025 22:25:04 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nlast-modified: Sun, 02 Feb 2025 01:15:19 GMT\r\netag: \"323e1-62d1e8258b7b6\"\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\ncontent-length: 205793\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/jpeg\r\nage: 220\r\ncache-control: max-age=2678400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2Fzem6E%2FV9NVQGrK0dXwyKaWZEVCYVUFSoaX9CASCTonChbFNq1L6wdBjgZR1KiNTP1O5tL9in8yFeQCD04hAhxOP3COLhG5v%2BWxTkq7m\"}]}\r\nvary: accept-encoding\r\ncf-ray: 9a131f10c810b51b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":205793,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], progressive, precision 8, 1920x1035, components 3","md5":"4ff38b484f821f29938e2ffbaf256b0f","sha1":"52fd2d05120c32d70bbb5720df7872ad990678f9","sha256":"be004bec62af0253af43f5be575e255f4be544ab720718604926582a14e288e1","sha512":"6a3038e877c6b94de5f211eed047b6326dc19937bf9de7136c282d53b0fc508e423045723429673e0050c14281c869adbb1c7b83d8e27c37b24e36d530549c21","ssdeep":"3072:5r2mSqjbqig5NsTm54fu3/zlp6uh1D7ZDmlZA6JMr2hWAnI3PA0uNcV:12mSqI5enM/6ur7JmlZIyRI3PA7No","tlshash":"8a14126bd75f9821ddf843b390f767224736cea41862c487aa89b8176922311fc5872b","first_seen":"2025-11-19T22:25:33.579943Z","last_seen":"2026-02-07T11:14:06.770053Z","times_seen":3,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":17,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-11-19","alert":"Sinkholed","trigger":"www.serveuk7.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-19","alert":"Sinkholed","trigger":"www.serveuk7.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-19","alert":"Sinkholed","trigger":"www.serveuk7.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/opensans/v44/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"216.58.207.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.sslsecureproxy.com/","date":"2025-11-19T22:25:04.172Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 27 Oct 2025 08:34:57 GMT","end":"Mon, 19 Jan 2026 08:34:56 GMT"},"fingerprint":{"sha1":"A9:72:6E:D8:AB:26:CE:26:35:A4:39:55:24:08:04:0F:24:56:E8:8C","sha256":"65:84:7B:FE:24:02:CE:3E:DB:6E:1C:6B:B8:FC:99:F5:A5:65:83:F1:66:75:ED:20:20:63:06:ED:27:8A:82:FE"}}},"request":{"raw":"GET /s/opensans/v44/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://www.sslsecureproxy.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48320\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 13 Nov 2025 09:55:49 GMT\r\nexpires: Fri, 13 Nov 2026 09:55:49 GMT\r\ncache-control: public, max-age=31536000\r\nage: 563355\r\nlast-modified: Mon, 15 Sep 2025 16:30:41 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48320,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48320, version 1.0","md5":"dcf31ebe107435bd68e0164d59e19b87","sha1":"b68160c9333af833fe483928b3ef7128c07a56a0","sha256":"d8e4fe0452aa2076429a9bb5d8757d00a994dd95986cf950e9a1a371b9a072a0","sha512":"130cd52c3cccc36a7029bf92b2ddb363b8b36d206454aacc246739919552fccec5cacbad615ba4ac3817da3e83239371fe51324bdadd08357e3495087f62cb08","ssdeep":"768:Jzqdwl5YV7FVmpudK5a8dF8D8Z7J78VGnNFZEKh02dmSTPe9UiallHcOEi2c0NC1:9q+SYuMaVwZ7oGRNh02dd6UialBcOEpE","tlshash":"1623f218f29471f7edecd4d500a18c72baa528d442f116ed07b8d53ca36ca817a729fb","first_seen":"2025-09-17T00:07:53.723302Z","last_seen":"2026-04-03T18:31:28.864105Z","times_seen":198313,"resource_available":false,"data":null}},"time_used":167,"timings":{"blocked":78,"dns":3,"connect":24,"send":0,"wait":9,"receive":10,"ssl":37},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.serveuk7.com/themes/sslsecureproxy/fonts/fa-solid-900.woff","fqdn":"www.serveuk7.com","domain":"serveuk7.com","tld":"com"},"ip":{"addr":"172.67.150.201","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.sslsecureproxy.com/","date":"2025-11-19T22:25:04.515Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"serveuk7.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 12 Oct 2025 14:06:22 GMT","end":"Sat, 10 Jan 2026 15:03:56 GMT"},"fingerprint":{"sha1":"E4:49:1E:88:99:5C:2F:19:59:DE:89:9D:42:51:1C:2F:1C:A8:B1:EC","sha256":"30:F9:55:49:E7:12:42:F1:1A:74:15:36:2D:F7:5E:5C:BC:24:05:4F:07:66:97:CC:BE:35:00:40:52:8C:9F:0C"}}},"request":{"raw":"GET /themes/sslsecureproxy/fonts/fa-solid-900.woff HTTP/1.1\r\nHost: www.serveuk7.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://www.sslsecureproxy.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.serveuk7.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 19 Nov 2025 22:25:04 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nlast-modified: Sun, 02 Feb 2025 01:15:19 GMT\r\netag: \"be40-62d1e8258d6f6\"\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\ncontent-length: 48704\r\naccess-control-allow-origin: *\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: font/woff\r\nage: 220\r\ncache-control: max-age=2678400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ti2p6txVF29lnlt7UjFpu0efHQYDobAI8SrnmX6jbFkMxR66blB4kOhq6odq97NzCBNt1ZDIUmvCTyx1dlO5x1%2F4IMJR%2FeqvDMYIpkOi\"}]}\r\nvary: accept-encoding\r\ncf-ray: 9a131f13381eb51b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":48704,"size_decoded":0,"mime_type":"font/woff","magic":"Web Open Font Format, TrueType, length 48704, version 1.0","md5":"c9a328cc89d13b8959e710d82b4b40d1","sha1":"11bfdbfdc598ac2adf2cfed69ce4a133dbbbf450","sha256":"6f43ff9f2fb98cc65e18f73ee16951bacfb055f76e68e06f7d91989fd770fa71","sha512":"7a26e900c026f6abec93b53a5300a8ea0a3690e682f28d2dd125a10f2de72c56416102363e9c3c91d25337cae4d8580021fa4d4c81e1b2f303c0613d95a0fa88","ssdeep":"768:v5LZuu/NIpo+7BinZGkjusm8wo4ZatWsx9OiImkQO25ezH6uHS:lsMq5BqZ/244ctgQO6ezH2","tlshash":"ca23020f1863a217b5db4c771304d6cf7a304b4a5baa69c8c8c55f6717a424672abf0b","first_seen":"2023-05-09T14:30:06Z","last_seen":"2026-03-25T18:09:05.374728Z","times_seen":56,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":7,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-11-19","alert":"Sinkholed","trigger":"www.serveuk7.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-19","alert":"Sinkholed","trigger":"www.serveuk7.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-19","alert":"Sinkholed","trigger":"www.serveuk7.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.serveuk7.com/themes/sslsecureproxy/css/owl.carousel.css","fqdn":"www.serveuk7.com","domain":"serveuk7.com","tld":"com"},"ip":{"addr":"172.67.150.201","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.sslsecureproxy.com/","date":"2025-11-19T22:25:03.571Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"serveuk7.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 12 Oct 2025 14:06:22 GMT","end":"Sat, 10 Jan 2026 15:03:56 GMT"},"fingerprint":{"sha1":"E4:49:1E:88:99:5C:2F:19:59:DE:89:9D:42:51:1C:2F:1C:A8:B1:EC","sha256":"30:F9:55:49:E7:12:42:F1:1A:74:15:36:2D:F7:5E:5C:BC:24:05:4F:07:66:97:CC:BE:35:00:40:52:8C:9F:0C"}}},"request":{"raw":"GET /themes/sslsecureproxy/css/owl.carousel.css HTTP/1.1\r\nHost: www.serveuk7.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.sslsecureproxy.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 19 Nov 2025 22:25:03 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nlast-modified: Sun, 02 Feb 2025 01:15:19 GMT\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mCqMw1r3NhzUfJY7ZuVgIZZFpqMOJrfBbDyk4SDacNAg1sMPOO3amCG9BdcHn8%2Bv1AxwQhC5tdUl21%2FYVBIccwyKmjOuBE91o5GHhcsp\"}]}\r\naccess-control-allow-origin: *\r\nage: 221\r\ncache-control: max-age=2678400\r\ncf-cache-status: HIT\r\netag: W/\"1053-62d1e8258a046\"\r\ncontent-encoding: br\r\ncf-ray: 9a131f0dbf64b512-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4179,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"b9bba310ecc8397f666670cbda836e5b","sha1":"1c996dc1f7fa595d1d3208fc51fa95c3cb0ffcfb","sha256":"49a8852dfb27a64c7bbac5822bffab225c2ef51d5c30eb5752c3e4117ed14c7c","sha512":"9921f46d2b6de4929b9cf1277b6ee7973a2778da169c0ba7aa89f0cab04a0122d49a41bd28178773236fb22c0287a6ff6e6d29ce6d11450e2dfb795119460178","ssdeep":"96:umBgfPUAlbCtztZYXbhlemlEkDTywKjetFDYRUPOjDMWFfiJntJeWQdqXu:G3l5lasYau","tlshash":"7181bef81667150d741f87a81a9cab223a3dc491f919c81876f76a11cf8ef48102ff5a","first_seen":"2025-11-19T22:25:33.58259Z","last_seen":"2026-02-07T11:14:06.795532Z","times_seen":3,"resource_available":false,"data":null}},"time_used":153,"timings":{"blocked":63,"dns":21,"connect":1,"send":0,"wait":16,"receive":0,"ssl":49},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-11-19","alert":"Sinkholed","trigger":"www.serveuk7.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-19","alert":"Sinkholed","trigger":"www.serveuk7.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-19","alert":"Sinkholed","trigger":"www.serveuk7.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.serveuk7.com/themes/sslsecureproxy/images/logo_01.png","fqdn":"www.serveuk7.com","domain":"serveuk7.com","tld":"com"},"ip":{"addr":"172.67.150.201","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.sslsecureproxy.com/","date":"2025-11-19T22:25:03.584Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"serveuk7.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 12 Oct 2025 14:06:22 GMT","end":"Sat, 10 Jan 2026 15:03:56 GMT"},"fingerprint":{"sha1":"E4:49:1E:88:99:5C:2F:19:59:DE:89:9D:42:51:1C:2F:1C:A8:B1:EC","sha256":"30:F9:55:49:E7:12:42:F1:1A:74:15:36:2D:F7:5E:5C:BC:24:05:4F:07:66:97:CC:BE:35:00:40:52:8C:9F:0C"}}},"request":{"raw":"GET /themes/sslsecureproxy/images/logo_01.png HTTP/1.1\r\nHost: www.serveuk7.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.sslsecureproxy.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 19 Nov 2025 22:25:03 GMT\r\ncontent-type: image/png\r\ncontent-length: 7452\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nlast-modified: Sun, 02 Feb 2025 01:15:19 GMT\r\netag: \"1d1c-62d1e8258f24e\"\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wRa7CtrH7zu24n0iCDkU3rWMZt%2BVNEaR3Sw1%2FjfirUNmOobTkJX7RQzapkN32RopeuQ64Lo66sgSBit631WEdDYfa%2BzsgZRHXYXuAood\"}]}\r\nage: 221\r\ncache-control: max-age=2678400\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\ncf-ray: 9a131f0dbf75b512-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7452,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 260 x 40, 8-bit/color RGBA, non-interlaced","md5":"442ed6f3342d5b9ffd8972aff19864f9","sha1":"a4a89704d960f398619390464b20d3692a939069","sha256":"b0027fbfc52047edcf59a4dd699a6323ec32d5424702847d75a0e34beb642d00","sha512":"1da3cc6198e03d01a9cb8b41de9db4e7998901a6eba001e0ebcae88680940e2fbaec6b9c02645e0a924f7cb75de7e285fc8f017bd038a0b382d013145d1a599c","ssdeep":"192:GSDS0tKg9E05TaIMvxTGxn1FVaLVeS/ijFb9fuOGE:pJXE05enZTyqUSaJ1l","tlshash":"0af1ae9bccb81d9fd4b578b3648cc256b3e73f1c042c262595802dea01a6c66eb21938","first_seen":"2025-11-19T22:25:33.583611Z","last_seen":"2026-02-07T11:14:06.782384Z","times_seen":3,"resource_available":false,"data":null}},"time_used":67,"timings":{"blocked":56,"dns":0,"connect":0,"send":0,"wait":10,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-11-19","alert":"Sinkholed","trigger":"www.serveuk7.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-19","alert":"Sinkholed","trigger":"www.serveuk7.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-19","alert":"Sinkholed","trigger":"www.serveuk7.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.serveuk7.com/themes/sslsecureproxy/js/slick.min.js","fqdn":"www.serveuk7.com","domain":"serveuk7.com","tld":"com"},"ip":{"addr":"172.67.150.201","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.sslsecureproxy.com/","date":"2025-11-19T22:25:03.592Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"serveuk7.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 12 Oct 2025 14:06:22 GMT","end":"Sat, 10 Jan 2026 15:03:56 GMT"},"fingerprint":{"sha1":"E4:49:1E:88:99:5C:2F:19:59:DE:89:9D:42:51:1C:2F:1C:A8:B1:EC","sha256":"30:F9:55:49:E7:12:42:F1:1A:74:15:36:2D:F7:5E:5C:BC:24:05:4F:07:66:97:CC:BE:35:00:40:52:8C:9F:0C"}}},"request":{"raw":"GET /themes/sslsecureproxy/js/slick.min.js HTTP/1.1\r\nHost: www.serveuk7.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.sslsecureproxy.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 19 Nov 2025 22:25:04 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nlast-modified: Sun, 02 Feb 2025 01:15:19 GMT\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nom3hlOs5sVLUKoduudsYz5ukIrV%2BvhC7K2vdVW9yo0M8yjbQojjyCsl3zL2seMZFbM%2F2DgXIRuJ%2BDWF7ba5ajGRIlzdLn917VuttPiE\"}]}\r\ncache-control: max-age=2678400\r\ncf-cache-status: REVALIDATED\r\netag: W/\"a76f-62d1e8258fa1e\"\r\ncontent-encoding: br\r\ncf-ray: 9a131f0dbf73b512-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":42863,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (42862)","md5":"d5a61c749e44e47159af8a6579dda121","sha1":"3b41b3bc956685015a347a2238e71db29dfa0dbb","sha256":"0c7178cc6ca34fb18e30f070a5e7a1c287b2d7ccfcba2cfdf06e0f46eda55740","sha512":"5ed98cb4311c373da3ede92bb47bce551e22c30683ea8fc55097baf99abe1e0702b24de48f8b9241047cc1e4364158f5a343e4e8fc182e8866db4e99ccd7ee6e","ssdeep":"768:4rkkX123A5YHi6pWzYdlNWYcx16nnYdXRRMd2KYCQCsPShb1ez7RFmYH:EPrYdlNixEePiYH","tlshash":"e513a549d205276285d721e62105c40eb3f7fb3cba22c0e475c9d3ea646ec4896d7bfa","first_seen":"2023-03-07T01:06:34Z","last_seen":"2026-04-03T18:30:36.402493Z","times_seen":77034,"resource_available":true,"data":null}},"time_used":454,"timings":{"blocked":46,"dns":0,"connect":0,"send":0,"wait":408,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-11-19","alert":"Sinkholed","trigger":"www.serveuk7.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-19","alert":"Sinkholed","trigger":"www.serveuk7.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-19","alert":"Sinkholed","trigger":"www.serveuk7.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.serveuk7.com/themes/sslsecureproxy/extra-images/faqs_bg_02.jpg","fqdn":"www.serveuk7.com","domain":"serveuk7.com","tld":"com"},"ip":{"addr":"172.67.150.201","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.sslsecureproxy.com/","date":"2025-11-19T22:25:04.131Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"serveuk7.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 12 Oct 2025 14:06:22 GMT","end":"Sat, 10 Jan 2026 15:03:56 GMT"},"fingerprint":{"sha1":"E4:49:1E:88:99:5C:2F:19:59:DE:89:9D:42:51:1C:2F:1C:A8:B1:EC","sha256":"30:F9:55:49:E7:12:42:F1:1A:74:15:36:2D:F7:5E:5C:BC:24:05:4F:07:66:97:CC:BE:35:00:40:52:8C:9F:0C"}}},"request":{"raw":"GET /themes/sslsecureproxy/extra-images/faqs_bg_02.jpg HTTP/1.1\r\nHost: www.serveuk7.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.serveuk7.com/themes/sslsecureproxy/css/style.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 19 Nov 2025 22:25:04 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nlast-modified: Sun, 02 Feb 2025 01:15:19 GMT\r\netag: \"8971a-62d1e8258afe6\"\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\ncontent-length: 562970\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/jpeg\r\nage: 220\r\ncache-control: max-age=2678400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IqIeF1HlWhdGUxaZs6i1y%2FhRrw1CRcG3O9InUbYPZ5jadD589Dvk66g9cD4zSeYQ5lHXG2d8lEPDCf9Ndf5JBkn3b7UJVkCHuRua%2BvuQ\"}]}\r\nvary: accept-encoding\r\ncf-ray: 9a131f10c811b51b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":562970,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], progressive, precision 8, 1920x748, components 3","md5":"2bbb4ae76751467831ed9fbd50b32f78","sha1":"fcc18aeac72c9166a20e18476d0b0f34772760e3","sha256":"3efcc3248efbe34f483477c6fcbf6cf8fdbb7003a87e508bc090a52170bd1905","sha512":"41ce2b1168a35595c2e4e61853afef150f085c281324c1e86645826c7cd84bcbb95ab291fd97b5b813683415838036451799ddd1082421741490b1a5729d5169","ssdeep":"12288:iml7owDRj1K6cALXeErpvjjmq+CH5wFXIA9fH1HzORr6:FrDRJYALOErhjjmqZH5r8K+","tlshash":"bac42367cb648ea3ccda0d39417ad57b3f02b3862ffba2c10ed97b494901486552877e","first_seen":"2025-11-19T22:25:33.5853Z","last_seen":"2026-02-07T11:14:06.794055Z","times_seen":3,"resource_available":false,"data":null}},"time_used":50,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":39,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-11-19","alert":"Sinkholed","trigger":"www.serveuk7.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-19","alert":"Sinkholed","trigger":"www.serveuk7.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-19","alert":"Sinkholed","trigger":"www.serveuk7.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/opensans/v44/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"216.58.207.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.sslsecureproxy.com/","date":"2025-11-19T22:25:04.137Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 27 Oct 2025 08:34:57 GMT","end":"Mon, 19 Jan 2026 08:34:56 GMT"},"fingerprint":{"sha1":"A9:72:6E:D8:AB:26:CE:26:35:A4:39:55:24:08:04:0F:24:56:E8:8C","sha256":"65:84:7B:FE:24:02:CE:3E:DB:6E:1C:6B:B8:FC:99:F5:A5:65:83:F1:66:75:ED:20:20:63:06:ED:27:8A:82:FE"}}},"request":{"raw":"GET /s/opensans/v44/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://www.sslsecureproxy.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48320\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 13 Nov 2025 09:55:49 GMT\r\nexpires: Fri, 13 Nov 2026 09:55:49 GMT\r\ncache-control: public, max-age=31536000\r\nage: 563355\r\nlast-modified: Mon, 15 Sep 2025 16:30:41 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48320,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48320, version 1.0","md5":"dcf31ebe107435bd68e0164d59e19b87","sha1":"b68160c9333af833fe483928b3ef7128c07a56a0","sha256":"d8e4fe0452aa2076429a9bb5d8757d00a994dd95986cf950e9a1a371b9a072a0","sha512":"130cd52c3cccc36a7029bf92b2ddb363b8b36d206454aacc246739919552fccec5cacbad615ba4ac3817da3e83239371fe51324bdadd08357e3495087f62cb08","ssdeep":"768:Jzqdwl5YV7FVmpudK5a8dF8D8Z7J78VGnNFZEKh02dmSTPe9UiallHcOEi2c0NC1:9q+SYuMaVwZ7oGRNh02dd6UialBcOEpE","tlshash":"1623f218f29471f7edecd4d500a18c72baa528d442f116ed07b8d53ca36ca817a729fb","first_seen":"2025-09-17T00:07:53.723302Z","last_seen":"2026-04-03T18:31:28.864105Z","times_seen":198313,"resource_available":false,"data":null}},"time_used":279,"timings":{"blocked":134,"dns":2,"connect":25,"send":0,"wait":8,"receive":3,"ssl":103},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.serveuk7.com/themes/sslsecureproxy/css/slick.css","fqdn":"www.serveuk7.com","domain":"serveuk7.com","tld":"com"},"ip":{"addr":"172.67.150.201","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.sslsecureproxy.com/","date":"2025-11-19T22:25:03.573Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"serveuk7.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 12 Oct 2025 14:06:22 GMT","end":"Sat, 10 Jan 2026 15:03:56 GMT"},"fingerprint":{"sha1":"E4:49:1E:88:99:5C:2F:19:59:DE:89:9D:42:51:1C:2F:1C:A8:B1:EC","sha256":"30:F9:55:49:E7:12:42:F1:1A:74:15:36:2D:F7:5E:5C:BC:24:05:4F:07:66:97:CC:BE:35:00:40:52:8C:9F:0C"}}},"request":{"raw":"GET /themes/sslsecureproxy/css/slick.css HTTP/1.1\r\nHost: www.serveuk7.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.sslsecureproxy.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 19 Nov 2025 22:25:03 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nlast-modified: Sun, 02 Feb 2025 01:15:19 GMT\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=y6WPGtL%2BBg6gTTrInPQhnHXO4V54tJiRLqy8n21%2F7V4QhrxkOWsEQeMKXKxIdd00G2ySS7zfKqHV%2F4u0YM1R2HJzYeH%2ByHWL9FzqxZcx\"}]}\r\naccess-control-allow-origin: *\r\nage: 221\r\ncache-control: max-age=2678400\r\ncf-cache-status: HIT\r\netag: W/\"6f0-62d1e8258a046\"\r\ncontent-encoding: br\r\ncf-ray: 9a131f0dbf7db512-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1776,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"f38b2db10e01b1572732a3191d538707","sha1":"a94a059b3178b4adec09e3281ace2819a30095a4","sha256":"de1e399b07289f3b0a8d35142e363e128124a1185770e214e25e58030dad48e5","sha512":"c11e283612c11dfeec9a3cb42b8a2acdd5ae99dfabe7ffba40efef0dd6bbe8c5b98ae8383d3eeff3a168124c922097eddd703401ee9ac6122f1ebab09bbf7737","ssdeep":"","tlshash":"c931294845b389468416808d5fd7ca6d2bfff0130829e199ba8d1306cfce7d8a9c26b2","first_seen":"2023-04-05T08:37:21Z","last_seen":"2026-04-03T18:22:24.156253Z","times_seen":52077,"resource_available":false,"data":null}},"time_used":160,"timings":{"blocked":69,"dns":20,"connect":0,"send":0,"wait":10,"receive":0,"ssl":55},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-11-19","alert":"Sinkholed","trigger":"www.serveuk7.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-19","alert":"Sinkholed","trigger":"www.serveuk7.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-19","alert":"Sinkholed","trigger":"www.serveuk7.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.serveuk7.com/public/cache/55137343e0b1d13f5684f69d24969ded.js","fqdn":"www.serveuk7.com","domain":"serveuk7.com","tld":"com"},"ip":{"addr":"172.67.150.201","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.sslsecureproxy.com/","date":"2025-11-19T22:25:03.583Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"serveuk7.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 12 Oct 2025 14:06:22 GMT","end":"Sat, 10 Jan 2026 15:03:56 GMT"},"fingerprint":{"sha1":"E4:49:1E:88:99:5C:2F:19:59:DE:89:9D:42:51:1C:2F:1C:A8:B1:EC","sha256":"30:F9:55:49:E7:12:42:F1:1A:74:15:36:2D:F7:5E:5C:BC:24:05:4F:07:66:97:CC:BE:35:00:40:52:8C:9F:0C"}}},"request":{"raw":"GET /public/cache/55137343e0b1d13f5684f69d24969ded.js HTTP/1.1\r\nHost: www.serveuk7.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.sslsecureproxy.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 19 Nov 2025 22:25:04 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nlast-modified: Thu, 18 Sep 2025 04:47:28 GMT\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uNJiT2hMQcMpy3GmJs%2BVXGZCRc2h1yzcoxo8thtBpu5Yh6IO3rOO0ocK7j%2B%2F%2B9SrbPTFlVBYpWZUM7kCqIOHEVvLRRaJGzCkM%2F6DiltH\"}]}\r\ncache-control: max-age=2678400\r\ncf-cache-status: REVALIDATED\r\netag: W/\"319-63f0c0ce04053\"\r\ncontent-encoding: br\r\ncf-ray: 9a131f0dbf77b512-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":793,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (615)","md5":"7da7b42ecf2d8b494fbf7aed471aeeb4","sha1":"2ac94625e618cd3fff89aaa6ac2247460c0054e9","sha256":"cc7ce2678586a779f599b34b5883f485d074bc08e7bc9dc8a1b115f52b30a69f","sha512":"3e99fd4a0bd799406eab79408db80f7be94bc1f674e81fa3744fd86e334d547dd9f191bf71383b024ded787fb1351be6cebb325f49afa6ff51efc7dcad09d695","ssdeep":"","tlshash":"cd01dc2a75922dd386fe69930b9f0d07903e9202588d06e8f003438586a8ec0827bfcb","first_seen":"2025-09-23T03:34:32.862594Z","last_seen":"2026-02-28T15:23:31.061157Z","times_seen":13,"resource_available":true,"data":null}},"time_used":489,"timings":{"blocked":-1,"dns":14,"connect":3,"send":0,"wait":415,"receive":0,"ssl":48},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-11-19","alert":"Sinkholed","trigger":"www.serveuk7.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-19","alert":"Sinkholed","trigger":"www.serveuk7.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-19","alert":"Sinkholed","trigger":"www.serveuk7.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.serveuk7.com/themes/sslsecureproxy/js/jquery.js","fqdn":"www.serveuk7.com","domain":"serveuk7.com","tld":"com"},"ip":{"addr":"172.67.150.201","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.sslsecureproxy.com/","date":"2025-11-19T22:25:03.585Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"serveuk7.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 12 Oct 2025 14:06:22 GMT","end":"Sat, 10 Jan 2026 15:03:56 GMT"},"fingerprint":{"sha1":"E4:49:1E:88:99:5C:2F:19:59:DE:89:9D:42:51:1C:2F:1C:A8:B1:EC","sha256":"30:F9:55:49:E7:12:42:F1:1A:74:15:36:2D:F7:5E:5C:BC:24:05:4F:07:66:97:CC:BE:35:00:40:52:8C:9F:0C"}}},"request":{"raw":"GET /themes/sslsecureproxy/js/jquery.js HTTP/1.1\r\nHost: www.serveuk7.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.sslsecureproxy.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 19 Nov 2025 22:25:04 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nlast-modified: Sun, 02 Feb 2025 01:15:19 GMT\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=p8C%2Bvcox8o31XVtWhjltrwk1HAtArHvXS7UdGig4zWdE87wxTKNReRBMaDVl1yWZpwUmZ2BjcwoEoxKc%2FzYGgNmHhraD43UFjV7I16Gz\"}]}\r\ncache-control: max-age=2678400\r\ncf-cache-status: REVALIDATED\r\netag: W/\"14967-62d1e8258f636\"\r\ncontent-encoding: br\r\ncf-ray: 9a131f0dbf69b512-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":84327,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (32025)","md5":"ce1a30a47df8b7d8be918a728c0ffa56","sha1":"260a8a5255e986a6174cda19e4d7123f1b774ba4","sha256":"005d80a82d6a031aad284f35ad4bb7ade4767e4f35bad68ab044169d967f9ec6","sha512":"f41dffcd80061133adb15646f42fd190c724590031c88643e5e8c90e782084dd29106e5bf67b2768d175e272dbf3c9b6e68c8846f3a01029f2599f0c0fe26f38","ssdeep":"1536:SP10iSi65U/dXXeyhzeBuG+HYE0mdkuJO1z6Oy4sh3J1A72BjmN7TwpDKba98HrR:N+414Jiz6fh6lTqya98HrR","tlshash":"6c83d6d9b2c67062977734b851bf510bb17a98dab40c8c60f0a4d8e47eb4a8d517bf2c","first_seen":"2025-11-19T22:25:33.588426Z","last_seen":"2026-02-07T11:14:06.796956Z","times_seen":3,"resource_available":true,"data":null}},"time_used":486,"timings":{"blocked":49,"dns":0,"connect":0,"send":0,"wait":437,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-11-19","alert":"Sinkholed","trigger":"www.serveuk7.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-19","alert":"Sinkholed","trigger":"www.serveuk7.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-19","alert":"Sinkholed","trigger":"www.serveuk7.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.serveuk7.com/themes/sslsecureproxy/css/bootstrap.min.css","fqdn":"www.serveuk7.com","domain":"serveuk7.com","tld":"com"},"ip":{"addr":"172.67.150.201","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.sslsecureproxy.com/","date":"2025-11-19T22:25:03.812Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"serveuk7.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 12 Oct 2025 14:06:22 GMT","end":"Sat, 10 Jan 2026 15:03:56 GMT"},"fingerprint":{"sha1":"E4:49:1E:88:99:5C:2F:19:59:DE:89:9D:42:51:1C:2F:1C:A8:B1:EC","sha256":"30:F9:55:49:E7:12:42:F1:1A:74:15:36:2D:F7:5E:5C:BC:24:05:4F:07:66:97:CC:BE:35:00:40:52:8C:9F:0C"}}},"request":{"raw":"GET /themes/sslsecureproxy/css/bootstrap.min.css HTTP/1.1\r\nHost: www.serveuk7.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.serveuk7.com/themes/sslsecureproxy/css/style.css\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 19 Nov 2025 22:25:03 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nlast-modified: Sun, 02 Feb 2025 01:15:19 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jgrIe4UniCga3tOg9fqC9cxO%2Fur0Wm0qRRGvZmedKgzX%2FGWlM7iBPdcmY8MEJFoa2K32fh0z3gbYoREUqwDasJ4kYZdPLSmQ3dB8obAp\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nvary: accept-encoding\r\naccess-control-allow-origin: *\r\ncontent-encoding: br\r\ncontent-type: text/css\r\nage: 221\r\ncache-control: max-age=2678400\r\ncf-cache-status: HIT\r\netag: W/\"235f3-62d1e82589c5e\"\r\ncf-ray: 9a131f0ecff8b51b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":144883,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65325)","md5":"033d5bbf08e5a5c2e7789b9ea6f4472d","sha1":"fe4e6df136ad89e983eadbb3b91117517359e9a3","sha256":"be003eac2ea96421ee2421cd6109914fb0e41215c7c4fbd5b76b3db3f0ffcc39","sha512":"605645a433dbde3389039e9977e58ebedc0f8e9df3faab9eb17f51a880ec3ceb923ace3bd14ca4225ddb4d09472249db858c13be6145cfa91fa33d9f56d7cf71","ssdeep":"1536:GcmcwrUPyDHU7c7TcDEBi82NcuSELL4d/+oENM6HN26Q:VmZgPard2oENM6HN26Q","tlshash":"5be37667f591322da097ca1851c0bbfa466f8156d6221ffbf4273b604b8a6c70a73d0d","first_seen":"2025-11-19T22:25:33.589716Z","last_seen":"2026-02-07T11:14:06.767542Z","times_seen":3,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-11-19","alert":"Sinkholed","trigger":"www.serveuk7.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-19","alert":"Sinkholed","trigger":"www.serveuk7.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-19","alert":"Sinkholed","trigger":"www.serveuk7.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Lato:300i,400,400i,700,700i,900,900i\u0026amp;subset=latin-ext","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.251.38.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.sslsecureproxy.com/","date":"2025-11-19T22:25:03.912Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 27 Oct 2025 08:34:58 GMT","end":"Mon, 19 Jan 2026 08:34:57 GMT"},"fingerprint":{"sha1":"56:14:7E:EF:FA:D2:CF:DD:3B:30:9C:AE:7A:C9:AD:9E:A7:87:3D:E9","sha256":"72:DD:0F:82:4D:8A:09:2D:BB:5B:E6:1B:6F:09:F8:1E:BD:BD:D3:3E:B8:A4:8C:B9:49:13:4D:DC:D7:EF:EA:77"}}},"request":{"raw":"GET /css?family=Lato:300i,400,400i,700,700i,900,900i\u0026amp;subset=latin-ext HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.serveuk7.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Wed, 19 Nov 2025 22:25:04 GMT\r\ndate: Wed, 19 Nov 2025 22:25:04 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5478,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"c18568ae2f010d2ccde9ec5ef5368c96","sha1":"5b3e56da0659296132dc43a20754ed94dde39f09","sha256":"76002f63b31c88d5c8c2560e30c0d2fa02594d053db417745345c533bee6eeeb","sha512":"f6ae9e281142c4daeb6764ba29d0a1abc7a26f08ae6f048f32adb1a39d49bae0a004fc0c87e709b497f4d04c03e1bd685538ceeaf30a55449f6d7fb266ce2a6c","ssdeep":"96:HYgW/pJc+u7YgW/jNKYgLUJc+u7YgLeNKYgC/KJc+u7YgC/gNKYgM/cJc+u7YgMQ:4l/J3l/lkw3kip/i3p/UT/o3T/w7nx5p","tlshash":"4db1b092096fb518db931dc212da7d32ef0fa25064459931eeff14d8bc93d6a9361b0c","first_seen":"2025-09-22T14:26:30.741228Z","last_seen":"2026-04-03T17:38:35.585782Z","times_seen":188,"resource_available":false,"data":null}},"time_used":205,"timings":{"blocked":91,"dns":0,"connect":8,"send":0,"wait":19,"receive":0,"ssl":79},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}